$ rpki-client -vvf repo-rpki.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/0/3135372e32302e3230382e302f32332d3233203d3e20313532343136.roa File: 3135372e32302e3230382e302f32332d3233203d3e20313532343136.roa (raw, json) Hash identifier: kFM9XagTLVeF/sGlDUCUZ14HVmzZMiKnu7+2SeflELY= Subject key identifier: 93:0B:F2:A2:7E:BE:07:AA:B9:34:EA:E3:58:B5:F1:1C:6C:F8:0D:FD Certificate issuer: /CN=C453630F1ABE5FF992F948A75DB4587776AD02EC Certificate serial: 4CBB554668D27F487320FFA035AF982707A409CD Authority key identifier: C4:53:63:0F:1A:BE:5F:F9:92:F9:48:A7:5D:B4:58:77:76:AD:02:EC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C453630F1ABE5FF992F948A75DB4587776AD02EC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/0/3135372e32302e3230382e302f32332d3233203d3e20313532343136.roa Signing time: Sun 22 Mar 2026 08:01:32 +0000 ROA not before: Sun 22 Mar 2026 07:56:32 +0000 ROA not after: Sun 21 Mar 2027 08:01:32 +0000 asID: 152416 IP address blocks: 157.20.208.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/0/C453630F1ABE5FF992F948A75DB4587776AD02EC.crl rsync://repo-rpki.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/0/C453630F1ABE5FF992F948A75DB4587776AD02EC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C453630F1ABE5FF992F948A75DB4587776AD02EC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 22:24:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:bb:55:46:68:d2:7f:48:73:20:ff:a0:35:af:98:27:07:a4:09:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C453630F1ABE5FF992F948A75DB4587776AD02EC Validity Not Before: Mar 22 07:56:32 2026 GMT Not After : Mar 21 08:01:32 2027 GMT Subject: CN=930BF2A27EBE07AAB934EAE358B5F11C6CF80DFD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:d9:a1:20:c2:3b:ce:62:3a:a6:2d:54:41:ca: b4:46:e4:ad:26:0b:3a:5d:33:9f:de:0b:e7:4a:fd: de:77:57:26:c2:67:44:61:93:b6:c7:f6:52:f8:7a: e9:66:cc:66:23:38:3f:8f:30:fd:e8:f6:de:67:c4: cc:b7:0e:15:3d:33:aa:60:45:bd:2a:a5:03:d3:9c: 84:4e:4b:ea:e4:f7:61:95:3b:db:19:7f:50:32:26: 4b:7f:25:b6:3b:4c:e3:b8:41:40:21:1b:42:c4:73: 95:6a:7a:d8:ea:82:a3:fb:59:60:b1:b4:f6:f7:24: 9f:70:7f:e7:b4:8d:c4:dc:6f:23:aa:b6:17:c7:6f: 66:36:37:c8:71:63:bc:d2:d7:e9:87:e8:3b:ab:76: 34:df:51:0a:a1:de:9e:c4:ab:c7:cc:7d:7a:f9:3d: 27:82:ce:b3:df:76:90:16:32:1b:57:42:9a:88:77: e4:21:1d:0f:6d:9b:92:f0:85:d0:8f:34:a7:0c:d7: cf:c3:ca:d5:35:6d:47:e5:3d:d6:b0:dd:48:cf:19: 3e:49:ea:0f:d9:9a:dc:0a:1f:77:43:78:b4:f1:e5: 45:1f:7d:58:a6:98:bd:57:1b:62:2a:b5:8e:f3:cc: b8:d6:64:51:bb:f1:f4:a1:75:5a:8d:cc:26:54:63: c1:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:0B:F2:A2:7E:BE:07:AA:B9:34:EA:E3:58:B5:F1:1C:6C:F8:0D:FD X509v3 Authority Key Identifier: keyid:C4:53:63:0F:1A:BE:5F:F9:92:F9:48:A7:5D:B4:58:77:76:AD:02:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/0/C453630F1ABE5FF992F948A75DB4587776AD02EC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C453630F1ABE5FF992F948A75DB4587776AD02EC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/0/3135372e32302e3230382e302f32332d3233203d3e20313532343136.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.20.208.0/23 Signature Algorithm: sha256WithRSAEncryption 34:e6:a3:20:f5:97:65:b1:cb:45:28:51:bd:6c:79:67:cf:08: 95:ef:03:f1:f7:ae:54:44:d5:e3:95:e7:5c:c0:ed:9f:a9:05: 79:5e:1f:e0:1e:b1:48:77:b7:17:ae:21:d2:76:c4:6e:b6:d6: d0:d7:e7:fd:e4:11:06:65:26:11:0f:5e:81:c6:08:b7:cc:cd: e1:81:01:28:c9:8f:79:12:4e:36:1d:ed:92:67:84:ff:e8:fe: f8:95:50:b9:33:04:b1:24:5e:65:80:e1:f1:48:49:07:52:eb: 43:c4:37:13:a0:26:d5:6d:9a:86:8b:80:3f:dc:55:f4:e6:8d: 37:7d:a9:95:ee:4e:5d:f2:ab:6f:e5:94:a2:6a:db:00:a4:e9: 59:7a:37:00:1f:1a:d5:bb:bb:55:4c:b8:97:12:03:6c:a5:27: f0:f0:45:87:9e:86:fa:81:b4:61:ab:7b:d8:02:1e:9d:73:1a: 9f:66:aa:25:be:13:f9:82:92:d5:04:d0:ae:68:49:71:cc:c8: 13:59:05:ac:a3:38:a6:de:87:87:8e:38:c9:f8:61:03:db:e4: 3f:91:d5:f8:39:9e:6d:da:84:84:8b:9a:1c:e8:c0:39:8d:bb: 71:e1:5f:07:cf:b8:b6:ae:f3:47:5b:2c:cc:eb:af:1c:5d:5c: 3d:9d:4c:ff -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUTLtVRmjSf0hzIP+gNa+YJwekCc0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzQ1MzYzMEYxQUJFNUZGOTkyRjk0OEE3NURCNDU4Nzc3 NkFEMDJFQzAeFw0yNjAzMjIwNzU2MzJaFw0yNzAzMjEwODAxMzJaMDMxMTAvBgNV BAMTKDkzMEJGMkEyN0VCRTA3QUFCOTM0RUFFMzU4QjVGMTFDNkNGODBERkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr2aEgwjvOYjqmLVRByrRG5K0m CzpdM5/eC+dK/d53VybCZ0Rhk7bH9lL4eulmzGYjOD+PMP3o9t5nxMy3DhU9M6pg Rb0qpQPTnIROS+rk92GVO9sZf1AyJkt/JbY7TOO4QUAhG0LEc5VqetjqgqP7WWCx tPb3JJ9wf+e0jcTcbyOqthfHb2Y2N8hxY7zS1+mH6DurdjTfUQqh3p7Eq8fMfXr5 PSeCzrPfdpAWMhtXQpqId+QhHQ9tm5LwhdCPNKcM18/DytU1bUflPdaw3UjPGT5J 6g/ZmtwKH3dDeLTx5UUffVimmL1XG2IqtY7zzLjWZFG78fShdVqNzCZUY8FXAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUkwvyon6+B6q5NOrjWLXxHGz4Df0wHwYDVR0j BBgwFoAUxFNjDxq+X/mS+UinXbRYd3atAuwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YzQwOTRkMi1lMThkLTQ4NDAtODRmYS1jNTc1N2FmNTgwZjEvMC9DNDUzNjMwRjFB QkU1RkY5OTJGOTQ4QTc1REI0NTg3Nzc2QUQwMkVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQzQ1MzYzMEYxQUJFNUZGOTkyRjk0OEE3NURCNDU4Nzc3NkFE MDJFQy5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2RjNDA5NGQyLWUxOGQtNDg0MC04 NGZhLWM1NzU3YWY1ODBmMS8wLzMxMzUzNzJlMzIzMDJlMzIzMDM4MmUzMDJmMzIz MzJkMzIzMzIwM2QzZTIwMzEzNTMyMzQzMTM2LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnRTQMA0GCSqG SIb3DQEBCwUAA4IBAQA05qMg9ZdlsctFKFG9bHlnzwiV7wPx965URNXjledcwO2f qQV5Xh/gHrFId7cXriHSdsRuttbQ1+f95BEGZSYRD16Bxgi3zM3hgQEoyY95Ek42 He2SZ4T/6P74lVC5MwSxJF5lgOHxSEkHUutDxDcToCbVbZqGi4A/3FX05o03famV 7k5d8qtv5ZSiatsApOlZejcAHxrVu7tVTLiXEgNspSfw8EWHnob6gbRhq3vYAh6d cxqfZqolvhP5gpLVBNCuaElxzMgTWQWsozim3oeHjjjJ+GED2+Q/kdX4OZ5t2oSE i5oc6MA5jbtx4V8Hz7i2rvNHWyzM668cXVw9nUz/ -----END CERTIFICATE-----Generated at Fri Mar 27 03:38:01 2026 by rpki-client