$ rpki-client -vvf repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/3135302e3130372e3134312e302f32342d3234203d3e203535363835.roa File: 3135302e3130372e3134312e302f32342d3234203d3e203535363835.roa (raw, json) Hash identifier: qol1SeBJdIer98hKzojKcEYwXprYc/V/47UjMXvPRjQ= Subject key identifier: EA:D2:C4:AF:D0:B5:56:18:DB:F4:B3:E2:4C:BA:24:01:4B:28:E8:10 Certificate issuer: /CN=B6F0131510E62F73E5F29246F9C8F691811A704D Certificate serial: 40F95D383410B1D3FC92D53E46BD7953AF7EBFA8 Authority key identifier: B6:F0:13:15:10:E6:2F:73:E5:F2:92:46:F9:C8:F6:91:81:1A:70:4D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F0131510E62F73E5F29246F9C8F691811A704D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/3135302e3130372e3134312e302f32342d3234203d3e203535363835.roa Signing time: Fri 06 Mar 2026 10:00:02 +0000 ROA not before: Fri 06 Mar 2026 09:55:02 +0000 ROA not after: Fri 05 Mar 2027 10:00:02 +0000 asID: 55685 IP address blocks: 150.107.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/B6F0131510E62F73E5F29246F9C8F691811A704D.crl rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/B6F0131510E62F73E5F29246F9C8F691811A704D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F0131510E62F73E5F29246F9C8F691811A704D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 09:17:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:f9:5d:38:34:10:b1:d3:fc:92:d5:3e:46:bd:79:53:af:7e:bf:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B6F0131510E62F73E5F29246F9C8F691811A704D Validity Not Before: Mar 6 09:55:02 2026 GMT Not After : Mar 5 10:00:02 2027 GMT Subject: CN=EAD2C4AFD0B55618DBF4B3E24CBA24014B28E810 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f5:a8:1e:88:a0:d0:7a:65:2b:ad:07:47:d5: 3f:25:14:fb:b2:07:53:fb:a6:74:85:d4:06:cc:b9: 6e:20:7e:13:85:e8:3c:18:67:7c:eb:46:bc:52:ca: ab:2e:91:93:b8:e9:44:15:25:ea:23:d7:64:8c:2a: 2a:52:79:31:fa:fa:79:73:8c:4a:a0:00:35:25:95: a9:1a:7f:86:96:25:bb:a0:a5:5e:7b:94:51:88:df: 62:a0:1a:4d:22:e3:5e:56:38:03:d4:cf:b8:b2:68: 40:67:73:e0:37:12:1f:5e:6b:b3:5d:b4:a1:ed:ea: c2:ff:d6:f0:37:80:c3:f6:6f:cb:e8:d7:5d:74:9b: 35:e0:dd:80:2d:08:38:59:d8:d9:dc:ec:cf:b1:82: 47:03:c7:26:ba:2f:80:1d:30:0f:28:de:71:37:69: 5d:46:08:1a:8d:e3:8a:b6:ce:1a:93:a1:5a:46:01: 24:73:11:7f:f4:03:7b:b4:f3:92:56:c1:de:ab:93: 5f:05:e4:48:bc:c9:0e:0c:14:99:94:e1:ff:04:14: f2:39:62:a0:18:2a:1f:30:d6:1b:8f:ae:e8:cf:19: d5:a8:c1:8f:d7:6b:fb:7b:66:ad:f5:0d:9d:a4:51: 3e:c2:23:11:a1:ce:79:96:86:b8:6c:b8:2b:d8:a5: 72:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:D2:C4:AF:D0:B5:56:18:DB:F4:B3:E2:4C:BA:24:01:4B:28:E8:10 X509v3 Authority Key Identifier: keyid:B6:F0:13:15:10:E6:2F:73:E5:F2:92:46:F9:C8:F6:91:81:1A:70:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/B6F0131510E62F73E5F29246F9C8F691811A704D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F0131510E62F73E5F29246F9C8F691811A704D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/3135302e3130372e3134312e302f32342d3234203d3e203535363835.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 150.107.141.0/24 Signature Algorithm: sha256WithRSAEncryption 77:9a:39:dd:a3:f3:db:7d:46:47:50:83:41:9b:bb:90:7e:76: bf:77:58:a0:0a:96:de:19:dd:17:72:3e:06:41:25:29:51:c8: d7:07:36:a8:58:cb:9a:76:a8:de:86:50:ea:8a:7d:7b:6d:3f: 3e:d2:bc:e7:3d:7b:bd:db:b9:87:99:ac:bd:74:3a:5d:cf:9d: fa:d4:15:7b:3f:ea:50:96:36:ae:66:bf:44:cf:87:82:41:25: 6c:45:8a:06:21:6d:76:bc:39:da:83:56:b4:6e:54:6f:e8:eb: 06:1b:a5:8e:5d:d7:6f:8e:d1:6e:1a:3b:bf:bd:aa:1e:0f:00: 6c:df:75:9c:3b:41:a3:a7:26:07:3d:69:b0:a1:ee:ef:4b:fb: a4:64:43:2e:d9:28:d5:d8:66:b5:07:0e:39:a6:11:d8:96:1a: fd:e6:0b:da:56:43:aa:d1:56:80:9e:a7:49:bf:b1:0b:42:96: 42:2c:b6:7f:9f:3a:a2:62:03:96:f6:83:9d:b3:e7:2a:43:4c: 34:27:b4:02:fc:19:b4:81:1a:74:05:49:e7:eb:cd:1f:16:3e: db:7e:55:55:68:09:6d:f3:53:0b:05:83:77:bd:b5:15:87:82: d3:2e:f4:31:07:c3:8a:22:c2:0b:3c:05:6b:a7:59:84:75:7e: 1b:05:08:46 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUQPldODQQsdP8ktU+Rr15U69+v6gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjZGMDEzMTUxMEU2MkY3M0U1RjI5MjQ2RjlDOEY2OTE4 MTFBNzA0RDAeFw0yNjAzMDYwOTU1MDJaFw0yNzAzMDUxMDAwMDJaMDMxMTAvBgNV BAMTKEVBRDJDNEFGRDBCNTU2MThEQkY0QjNFMjRDQkEyNDAxNEIyOEU4MTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/9ageiKDQemUrrQdH1T8lFPuy B1P7pnSF1AbMuW4gfhOF6DwYZ3zrRrxSyqsukZO46UQVJeoj12SMKipSeTH6+nlz jEqgADUllakaf4aWJbugpV57lFGI32KgGk0i415WOAPUz7iyaEBnc+A3Eh9ea7Nd tKHt6sL/1vA3gMP2b8vo1110mzXg3YAtCDhZ2Nnc7M+xgkcDxya6L4AdMA8o3nE3 aV1GCBqN44q2zhqToVpGASRzEX/0A3u085JWwd6rk18F5Ei8yQ4MFJmU4f8EFPI5 YqAYKh8w1huPrujPGdWowY/Xa/t7Zq31DZ2kUT7CIxGhznmWhrhsuCvYpXKLAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU6tLEr9C1Vhjb9LPiTLokAUso6BAwHwYDVR0j BBgwFoAUtvATFRDmL3Pl8pJG+cj2kYEacE0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NWQ4ZGFiNC04YmI2LTRlZDAtOGRhYi01YTQwNjE2N2I5OWQvMC9CNkYwMTMxNTEw RTYyRjczRTVGMjkyNDZGOUM4RjY5MTgxMUE3MDRELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjZGMDEzMTUxMEU2MkY3M0U1RjI5MjQ2RjlDOEY2OTE4MTFB NzA0RC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzg1ZDhkYWI0LThiYjYtNGVkMC04 ZGFiLTVhNDA2MTY3Yjk5ZC8wLzMxMzUzMDJlMzEzMDM3MmUzMTM0MzEyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzNTM1MzYzODM1LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlmuNMA0GCSqG SIb3DQEBCwUAA4IBAQB3mjndo/PbfUZHUINBm7uQfna/d1igCpbeGd0Xcj4GQSUp UcjXBzaoWMuadqjehlDqin17bT8+0rznPXu927mHmay9dDpdz5361BV7P+pQljau Zr9Ez4eCQSVsRYoGIW12vDnag1a0blRv6OsGG6WOXddvjtFuGju/vaoeDwBs33Wc O0GjpyYHPWmwoe7vS/ukZEMu2SjV2Ga1Bw45phHYlhr95gvaVkOq0VaAnqdJv7EL QpZCLLZ/nzqiYgOW9oOds+cqQ0w0J7QC/Bm0gRp0BUnn680fFj7bflVVaAlt81ML BYN3vbUVh4LTLvQxB8OKIsILPAVrp1mEdX4bBQhG -----END CERTIFICATE-----Generated at Thu Mar 26 13:24:26 2026 by rpki-client