$ rpki-client -vvf repo-rpki.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/3137352e3131312e39392e302f32342d3234203d3e20313534343130.roa File: 3137352e3131312e39392e302f32342d3234203d3e20313534343130.roa (raw, json) Hash identifier: A681M7W/Os54i9ou3p8OuHLz8QinEihQYy8uf/E43+0= Subject key identifier: 3D:8C:E5:76:F5:64:3D:D7:29:17:0E:04:5C:CD:3A:CB:A9:A1:5A:EC Certificate issuer: /CN=8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D Certificate serial: 0EDDF4A9DF9417A278A9A9A12D45C09539F7C5C1 Authority key identifier: 86:50:DE:F1:B1:C8:9D:70:1C:2B:B9:9C:A9:07:9E:ED:BC:CC:04:6D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/3137352e3131312e39392e302f32342d3234203d3e20313534343130.roa Signing time: Mon 16 Mar 2026 18:19:10 +0000 ROA not before: Mon 16 Mar 2026 18:14:10 +0000 ROA not after: Mon 15 Mar 2027 18:19:10 +0000 asID: 154410 IP address blocks: 175.111.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.crl rsync://repo-rpki.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:22:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:dd:f4:a9:df:94:17:a2:78:a9:a9:a1:2d:45:c0:95:39:f7:c5:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D Validity Not Before: Mar 16 18:14:10 2026 GMT Not After : Mar 15 18:19:10 2027 GMT Subject: CN=3D8CE576F5643DD729170E045CCD3ACBA9A15AEC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:7b:24:96:db:8d:ad:e9:3c:d9:45:b2:f5:90: 94:af:72:53:55:04:00:16:65:87:6d:6f:e8:b6:8a: bc:d9:46:43:45:fe:d0:81:12:0a:b3:a9:90:31:67: 5b:95:67:1d:70:0f:b5:02:fa:15:2c:e2:43:bd:44: f6:e0:69:75:03:e3:a7:1c:84:00:bc:ab:d1:ee:13: d3:c3:b6:52:0d:7f:26:a1:0b:1c:f6:dc:81:bf:27: 8f:0e:af:d1:3c:b9:93:5e:bd:3d:b7:77:01:8c:f6: ea:e5:8d:15:0a:fb:01:b7:e1:a3:0f:7c:63:70:38: 4f:0d:36:8c:4e:8a:62:4f:98:d0:be:d2:8e:6e:98: 26:85:cd:59:b8:32:0a:f9:b7:6e:7a:9a:24:e5:0b: dd:db:2d:1e:27:8a:d9:76:40:b3:f6:31:97:80:18: ea:d7:40:0e:f0:ea:ca:20:03:a1:dd:42:c5:0e:21: f3:05:b5:7e:35:c6:ed:ce:ce:57:19:b1:4a:b4:06: d9:9f:6c:79:d3:63:76:3a:1b:1f:f5:63:1e:49:2b: dc:54:ee:f9:c7:2b:65:6a:01:b4:20:3f:c4:b8:af: 13:b0:1a:2b:f6:f9:29:ba:72:7a:00:38:16:61:84: 17:89:88:96:d5:d5:b6:04:22:60:9a:f2:63:78:f9: 84:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:8C:E5:76:F5:64:3D:D7:29:17:0E:04:5C:CD:3A:CB:A9:A1:5A:EC X509v3 Authority Key Identifier: keyid:86:50:DE:F1:B1:C8:9D:70:1C:2B:B9:9C:A9:07:9E:ED:BC:CC:04:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/3137352e3131312e39392e302f32342d3234203d3e20313534343130.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 175.111.99.0/24 Signature Algorithm: sha256WithRSAEncryption 48:42:49:96:7e:bf:ce:ab:80:39:21:a7:21:da:f4:58:3b:07: a4:b7:0d:b1:6a:52:91:2c:72:23:f6:8e:2d:1f:02:e7:a9:21: 26:d4:d3:a1:94:c7:30:88:a5:e6:b2:cb:0a:57:c5:34:e8:3a: 30:b8:0f:4c:11:8e:b9:cf:9d:95:2f:14:a5:36:88:e0:26:1c: 83:96:f8:d4:14:d3:03:ae:5c:2e:0a:32:f6:4f:e4:cb:26:cb: 88:78:a5:f1:21:d0:e1:b7:e1:21:4c:b8:76:60:12:ee:fb:7a: 82:67:9b:af:c8:7f:ab:9e:95:51:77:bf:0d:39:1b:bc:39:a2: 6d:17:34:3e:7d:ce:f1:3b:40:4b:3e:b7:42:37:7d:f9:5d:b9: 5b:1b:38:80:92:09:f3:d4:f2:b5:b1:e7:17:7d:42:fb:4e:97: 37:db:e2:0b:4d:21:14:69:89:fc:a6:ae:a0:80:d2:c1:e2:ba: e6:52:8a:61:46:e4:07:fb:16:a3:48:4c:4e:3e:69:c9:fd:09: ac:73:a2:e7:ad:30:5d:7d:1b:61:9e:52:5d:f3:05:a0:b6:bf: 91:a9:53:da:60:0d:07:ce:6d:da:ee:ff:04:e8:f6:99:de:fa: 06:59:23:8a:42:7b:e4:e9:14:68:a2:a3:12:ad:af:d0:8e:3e: e1:de:71:8f -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUDt30qd+UF6J4qamhLUXAlTn3xcEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODY1MERFRjFCMUM4OUQ3MDFDMkJCOTlDQTkwNzlFRURC Q0NDMDQ2RDAeFw0yNjAzMTYxODE0MTBaFw0yNzAzMTUxODE5MTBaMDMxMTAvBgNV BAMTKDNEOENFNTc2RjU2NDNERDcyOTE3MEUwNDVDQ0QzQUNCQTlBMTVBRUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/eySW242t6TzZRbL1kJSvclNV BAAWZYdtb+i2irzZRkNF/tCBEgqzqZAxZ1uVZx1wD7UC+hUs4kO9RPbgaXUD46cc hAC8q9HuE9PDtlINfyahCxz23IG/J48Or9E8uZNevT23dwGM9urljRUK+wG34aMP fGNwOE8NNoxOimJPmNC+0o5umCaFzVm4Mgr5t256miTlC93bLR4nitl2QLP2MZeA GOrXQA7w6sogA6HdQsUOIfMFtX41xu3OzlcZsUq0BtmfbHnTY3Y6Gx/1Yx5JK9xU 7vnHK2VqAbQgP8S4rxOwGiv2+Sm6cnoAOBZhhBeJiJbV1bYEImCa8mN4+YRhAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUPYzldvVkPdcpFw4EXM06y6mhWuwwHwYDVR0j BBgwFoAUhlDe8bHInXAcK7mcqQee7bzMBG0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YmE4Y2Y2NS1kNDY4LTQzMDktOWYzMC05YjlmMjZkOWNlMmQvMC84NjUwREVGMUIx Qzg5RDcwMUMyQkI5OUNBOTA3OUVFREJDQ0MwNDZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODY1MERFRjFCMUM4OUQ3MDFDMkJCOTlDQTkwNzlFRURCQ0ND MDQ2RC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2FiYThjZjY1LWQ0NjgtNDMwOS05 ZjMwLTliOWYyNmQ5Y2UyZC8wLzMxMzczNTJlMzEzMTMxMmUzOTM5MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNTM0MzQzMTMwLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAr29jMA0GCSqG SIb3DQEBCwUAA4IBAQBIQkmWfr/Oq4A5Iach2vRYOwektw2xalKRLHIj9o4tHwLn qSEm1NOhlMcwiKXmsssKV8U06DowuA9MEY65z52VLxSlNojgJhyDlvjUFNMDrlwu CjL2T+TLJsuIeKXxIdDht+EhTLh2YBLu+3qCZ5uvyH+rnpVRd78NORu8OaJtFzQ+ fc7xO0BLPrdCN335XblbGziAkgnz1PK1secXfUL7Tpc32+ILTSEUaYn8pq6ggNLB 4rrmUophRuQH+xajSExOPmnJ/Qmsc6LnrTBdfRthnlJd8wWgtr+RqVPaYA0Hzm3a 7v8E6PaZ3voGWSOKQnvk6RRooqMSra/Qjj7h3nGP -----END CERTIFICATE-----Generated at Thu Mar 26 17:28:36 2026 by rpki-client