$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/0/3135312e3135382e3130362e302f32332d3234203d3e20313534343934.roa File: 3135312e3135382e3130362e302f32332d3234203d3e20313534343934.roa (raw, json) Hash identifier: AZthBup3GN43JmRthTYHXFQog/yv2zTfPqeXiB57+AA= Subject key identifier: 39:B9:EA:0D:2A:37:37:CB:78:B6:34:93:FC:06:3F:A7:39:74:D2:E7 Certificate issuer: /CN=A91862140000/serialNumber=12345F115AC4B62A51F5274C54C81E86463BD0BA Certificate serial: 12B488E1527AD6FCB3716A2C5F852DF77B4DF984 Authority key identifier: 12:34:5F:11:5A:C4:B6:2A:51:F5:27:4C:54:C8:1E:86:46:3B:D0:BA Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/EjRfEVrEtipR9SdMVMgehkY70Lo.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/3135312e3135382e3130362e302f32332d3234203d3e20313534343934.roa Signing time: Thu 26 Mar 2026 03:16:27 +0000 ROA not before: Thu 26 Mar 2026 03:11:27 +0000 ROA not after: Thu 25 Mar 2027 03:16:27 +0000 asID: 154494 IP address blocks: 151.158.106.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/EjRfEVrEtipR9SdMVMgehkY70Lo.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 08:46:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:b4:88:e1:52:7a:d6:fc:b3:71:6a:2c:5f:85:2d:f7:7b:4d:f9:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=12345F115AC4B62A51F5274C54C81E86463BD0BA Validity Not Before: Mar 26 03:11:27 2026 GMT Not After : Mar 25 03:16:27 2027 GMT Subject: CN=39B9EA0D2A3737CB78B63493FC063FA73974D2E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:e5:55:dc:3e:ee:81:b1:eb:99:ac:1d:ad:01: 58:51:a2:14:76:77:cc:73:1f:e4:30:ee:2c:d1:0c: ef:16:1d:4c:fa:88:b0:20:a8:70:4d:e3:96:51:4e: 18:43:d3:cc:64:5b:64:3a:bd:02:1a:70:a8:1c:d0: 04:b7:d8:39:a3:d7:8f:1f:eb:9c:dd:15:f1:36:d1: 91:35:68:6b:fb:54:db:83:37:07:76:e1:06:0a:f1: ac:a5:a2:df:94:fd:1b:eb:11:93:ba:cd:04:20:87: ed:57:a4:b1:bf:1e:e7:9c:b7:27:2f:0f:9f:ef:98: 43:f9:6c:ef:ae:79:b2:a1:c9:3d:14:5f:60:48:d0: a4:df:59:86:38:d1:dd:ea:c4:c8:f3:8e:21:97:46: 3d:56:9a:b7:77:88:1e:fb:86:b6:b1:f2:81:e4:2c: 7b:f9:7c:64:c0:57:4c:8d:2f:2e:be:3c:f2:51:36: 82:f2:a8:80:c8:bd:0c:0c:4c:ab:27:4b:4b:94:00: c8:97:b3:3b:61:e5:30:d6:96:12:aa:6f:68:d1:e6: e4:4a:a4:83:73:5f:4d:aa:2f:f2:27:bb:cd:3f:aa: 9a:5b:b2:64:99:ce:df:1c:ee:85:80:99:21:7b:a9: d7:8c:bb:ac:a1:f9:16:fd:c7:bc:b5:5f:a9:f8:57: 1e:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:B9:EA:0D:2A:37:37:CB:78:B6:34:93:FC:06:3F:A7:39:74:D2:E7 X509v3 Authority Key Identifier: keyid:12:34:5F:11:5A:C4:B6:2A:51:F5:27:4C:54:C8:1E:86:46:3B:D0:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/EjRfEVrEtipR9SdMVMgehkY70Lo.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/3135312e3135382e3130362e302f32332d3234203d3e20313534343934.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.158.106.0/23 Signature Algorithm: sha256WithRSAEncryption 53:c1:82:a3:3a:24:07:70:24:a3:e2:d9:98:aa:44:c1:84:d8: 8d:93:d2:23:48:06:df:65:e1:6c:9c:17:e1:4e:5b:6d:74:cc: 35:d4:b6:07:9e:51:df:3f:07:c3:04:cf:07:fa:1c:d9:10:13: ca:71:fa:e8:7d:0a:65:b0:0b:ce:9c:e1:0c:58:72:81:db:ce: 49:c1:1b:21:23:7e:77:b0:76:e5:f7:e4:f0:75:29:1b:d3:ee: ba:58:69:78:28:10:04:8e:8a:ee:b5:99:a0:c6:f4:55:7f:c1: 53:bb:50:9e:cd:26:0c:48:35:ef:f3:f5:a7:d8:da:25:06:d9: 7f:ac:c6:f7:96:da:e4:0a:12:96:87:ca:60:15:b6:5f:fe:e3: 9f:31:5f:2e:01:52:1f:2b:01:df:da:19:42:a4:b5:9b:0e:d1: 35:27:b0:0a:77:91:3e:96:27:56:c3:84:68:e1:14:49:58:f7: f2:82:ee:75:5a:c1:94:13:a9:dd:0e:57:f8:ee:46:55:b7:59: 3a:53:62:a9:05:b8:e6:1a:b3:72:fa:b3:a7:29:cd:a8:4a:5d: ce:e5:ef:7d:51:b9:1c:8d:f4:c1:41:70:47:71:d7:06:70:eb: 75:00:41:11:34:63:dd:94:02:0d:37:ed:75:3f:15:06:62:54: aa:47:87:b6 -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgIUErSI4VJ61vyzcWosX4Ut93tN+YQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEygxMjM0NUYxMTVB QzRCNjJBNTFGNTI3NEM1NEM4MUU4NjQ2M0JEMEJBMB4XDTI2MDMyNjAzMTEyN1oX DTI3MDMyNTAzMTYyN1owMzExMC8GA1UEAxMoMzlCOUVBMEQyQTM3MzdDQjc4QjYz NDkzRkMwNjNGQTczOTc0RDJFNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMzlVdw+7oGx65msHa0BWFGiFHZ3zHMf5DDuLNEM7xYdTPqIsCCocE3jllFO GEPTzGRbZDq9AhpwqBzQBLfYOaPXjx/rnN0V8TbRkTVoa/tU24M3B3bhBgrxrKWi 35T9G+sRk7rNBCCH7Veksb8e55y3Jy8Pn++YQ/ls7655sqHJPRRfYEjQpN9ZhjjR 3erEyPOOIZdGPVaat3eIHvuGtrHygeQse/l8ZMBXTI0vLr488lE2gvKogMi9DAxM qydLS5QAyJezO2HlMNaWEqpvaNHm5Eqkg3NfTaov8ie7zT+qmluyZJnO3xzuhYCZ IXup14y7rKH5Fv3HvLVfqfhXHocCAwEAAaOCAgMwggH/MB0GA1UdDgQWBBQ5ueoN Kjc3y3i2NJP8Bj+nOXTS5zAfBgNVHSMEGDAWgBQSNF8RWsS2KlH1J0xUyB6GRjvQ ujAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMC8xMjM0NUYxMTVBQzRCNjJB NTFGNTI3NEM1NEM4MUU4NjQ2M0JEMEJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CMzIy QTVGNDFENjYxMUUyQTNGMjdGN0M3MkZEMUZGMi9FalJmRVZyRXRpcFI5U2RNVk1n ZWhrWTcwTG8uY2VyMIGGBggrBgEFBQcBCwR6MHgwdgYIKwYBBQUHMAuGanJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL0lETklDLUlELzAvMzEzNTMxMmUz MTM1MzgyZTMxMzAzNjJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDMxMzUzNDM0Mzkz NC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAZeeajANBgkqhkiG9w0BAQsFAAOCAQEAU8GCozokB3Ako+LZ mKpEwYTYjZPSI0gG32XhbJwX4U5bbXTMNdS2B55R3z8HwwTPB/oc2RATynH66H0K ZbALzpzhDFhygdvOScEbISN+d7B25ffk8HUpG9PuulhpeCgQBI6K7rWZoMb0VX/B U7tQns0mDEg17/P1p9jaJQbZf6zG95ba5AoSlofKYBW2X/7jnzFfLgFSHysB39oZ QqS1mw7RNSewCneRPpYnVsOEaOEUSVj38oLudVrBlBOp3Q5X+O5GVbdZOlNiqQW4 5hqzcvqzpynNqEpdzuXvfVG5HI30wUFwR3HXBnDrdQBBETRj3ZQCDTftdT8VBmJU qkeHtg== -----END CERTIFICATE-----Generated at Thu Mar 26 10:59:45 2026 by rpki-client