$ rpki-client -vvf repo-rpki.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/0/3135372e32302e3230382e302f32342d3234203d3e20313532343136.roa File: 3135372e32302e3230382e302f32342d3234203d3e20313532343136.roa (raw, json) Hash identifier: 716vJM2cf1KmVSltZ4kdYkr5L+szjmzfPhlXQuleSzI= Subject key identifier: 58:0A:58:32:F8:48:FD:1C:B4:5F:4D:8A:D4:0F:EA:34:9D:E5:5D:34 Certificate issuer: /CN=C453630F1ABE5FF992F948A75DB4587776AD02EC Certificate serial: 023725BF55C7908248DB431B7B2A4004FFD03D07 Authority key identifier: C4:53:63:0F:1A:BE:5F:F9:92:F9:48:A7:5D:B4:58:77:76:AD:02:EC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C453630F1ABE5FF992F948A75DB4587776AD02EC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/0/3135372e32302e3230382e302f32342d3234203d3e20313532343136.roa Signing time: Sun 22 Mar 2026 08:01:32 +0000 ROA not before: Sun 22 Mar 2026 07:56:32 +0000 ROA not after: Sun 21 Mar 2027 08:01:32 +0000 asID: 152416 IP address blocks: 157.20.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/0/C453630F1ABE5FF992F948A75DB4587776AD02EC.crl rsync://repo-rpki.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/0/C453630F1ABE5FF992F948A75DB4587776AD02EC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C453630F1ABE5FF992F948A75DB4587776AD02EC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 22:24:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:37:25:bf:55:c7:90:82:48:db:43:1b:7b:2a:40:04:ff:d0:3d:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C453630F1ABE5FF992F948A75DB4587776AD02EC Validity Not Before: Mar 22 07:56:32 2026 GMT Not After : Mar 21 08:01:32 2027 GMT Subject: CN=580A5832F848FD1CB45F4D8AD40FEA349DE55D34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:d0:9d:66:fb:54:8f:7a:83:8f:a6:04:72:00: 68:b4:c6:ba:70:1d:36:6e:66:a3:dd:68:c2:4b:a7: f8:13:d6:d2:96:f9:09:8c:5e:1c:7f:a5:eb:1b:90: 4a:be:74:1f:84:fd:a1:0a:13:b9:98:73:58:e1:02: 51:b2:be:7f:08:6f:7c:77:b9:63:d9:3f:fd:33:c5: 23:24:f4:c5:89:1c:e5:a7:d2:9b:f1:4d:36:cb:2f: 97:e9:66:2a:1a:eb:a0:73:58:bf:b6:2d:70:67:8b: 7a:b2:e2:0a:83:40:cc:be:47:9a:6e:b5:2e:2d:c4: 15:d5:72:ef:95:9c:fb:79:01:8e:33:68:54:da:47: 74:56:c9:e6:30:28:13:ae:a6:bd:db:de:42:ae:a6: 4f:cc:cb:25:71:31:00:1b:a4:fc:a6:5d:7e:35:46: 1d:24:43:42:6a:c7:52:fb:c9:e1:aa:ee:6c:0f:bb: b1:a1:47:b9:6b:4d:2d:a2:90:6c:37:3d:9c:fb:d2: 12:46:95:a2:ee:fe:4e:29:4e:db:a5:e6:fd:b5:bb: af:35:cd:c8:2b:bb:6e:92:e3:4c:45:a9:3b:00:1b: b5:85:74:e4:85:5e:f8:0e:0f:ec:44:10:4d:d0:e1: 0e:af:d9:34:7c:35:21:0b:3b:73:2a:d5:bf:30:63: 45:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:0A:58:32:F8:48:FD:1C:B4:5F:4D:8A:D4:0F:EA:34:9D:E5:5D:34 X509v3 Authority Key Identifier: keyid:C4:53:63:0F:1A:BE:5F:F9:92:F9:48:A7:5D:B4:58:77:76:AD:02:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/0/C453630F1ABE5FF992F948A75DB4587776AD02EC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C453630F1ABE5FF992F948A75DB4587776AD02EC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/0/3135372e32302e3230382e302f32342d3234203d3e20313532343136.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.20.208.0/24 Signature Algorithm: sha256WithRSAEncryption a4:9c:e5:00:3d:fb:e2:f4:64:56:b0:4c:85:11:d5:ce:d8:bc: a5:14:a2:9d:18:03:b2:d9:0e:c1:5d:0a:ca:32:db:fb:50:4a: cf:39:fd:14:07:66:49:2c:d5:a9:1d:f1:62:a6:49:cf:5e:87: b5:cf:fb:f3:86:39:9e:eb:ed:e4:e9:b8:3b:be:e2:87:5e:2d: 94:48:99:b9:1a:12:18:c2:b0:97:6e:27:74:0f:16:38:38:ab: 5e:52:47:b7:6a:ed:03:71:db:b7:56:37:f7:f3:4a:03:1c:f6: a9:b0:a1:c4:db:5b:51:29:6a:c6:9f:57:fd:96:c9:4f:be:96: 3a:c2:9d:d0:49:22:78:22:44:10:b9:c8:06:d2:ab:17:0b:bc: 65:bb:ab:9a:01:05:df:b3:a7:3e:c7:f1:d5:d0:97:db:b2:45: 05:70:a0:bd:54:1f:9e:21:29:c3:26:28:e2:51:f9:de:f7:d8: 5a:a7:2a:19:30:fb:9f:4f:88:0c:12:c2:74:ad:55:0a:e7:15: bd:60:2d:1f:44:55:54:70:78:91:36:ac:04:ae:56:eb:e0:e5: 3e:c3:cd:92:3e:f8:d3:ae:87:99:5d:19:c6:2c:b4:45:a8:62: ec:4d:d8:30:5b:dd:a8:2f:20:97:c9:02:f9:55:e1:53:b2:2b: 95:58:74:bf -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUAjclv1XHkIJI20MbeypABP/QPQcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzQ1MzYzMEYxQUJFNUZGOTkyRjk0OEE3NURCNDU4Nzc3 NkFEMDJFQzAeFw0yNjAzMjIwNzU2MzJaFw0yNzAzMjEwODAxMzJaMDMxMTAvBgNV BAMTKDU4MEE1ODMyRjg0OEZEMUNCNDVGNEQ4QUQ0MEZFQTM0OURFNTVEMzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC70J1m+1SPeoOPpgRyAGi0xrpw HTZuZqPdaMJLp/gT1tKW+QmMXhx/pesbkEq+dB+E/aEKE7mYc1jhAlGyvn8Ib3x3 uWPZP/0zxSMk9MWJHOWn0pvxTTbLL5fpZioa66BzWL+2LXBni3qy4gqDQMy+R5pu tS4txBXVcu+VnPt5AY4zaFTaR3RWyeYwKBOupr3b3kKupk/MyyVxMQAbpPymXX41 Rh0kQ0Jqx1L7yeGq7mwPu7GhR7lrTS2ikGw3PZz70hJGlaLu/k4pTtul5v21u681 zcgru26S40xFqTsAG7WFdOSFXvgOD+xEEE3Q4Q6v2TR8NSELO3Mq1b8wY0VbAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUWApYMvhI/Ry0X02K1A/qNJ3lXTQwHwYDVR0j BBgwFoAUxFNjDxq+X/mS+UinXbRYd3atAuwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YzQwOTRkMi1lMThkLTQ4NDAtODRmYS1jNTc1N2FmNTgwZjEvMC9DNDUzNjMwRjFB QkU1RkY5OTJGOTQ4QTc1REI0NTg3Nzc2QUQwMkVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQzQ1MzYzMEYxQUJFNUZGOTkyRjk0OEE3NURCNDU4Nzc3NkFE MDJFQy5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2RjNDA5NGQyLWUxOGQtNDg0MC04 NGZhLWM1NzU3YWY1ODBmMS8wLzMxMzUzNzJlMzIzMDJlMzIzMDM4MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNTMyMzQzMTM2LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnRTQMA0GCSqG SIb3DQEBCwUAA4IBAQCknOUAPfvi9GRWsEyFEdXO2LylFKKdGAOy2Q7BXQrKMtv7 UErPOf0UB2ZJLNWpHfFipknPXoe1z/vzhjme6+3k6bg7vuKHXi2USJm5GhIYwrCX bid0DxY4OKteUke3au0Dcdu3Vjf380oDHPapsKHE21tRKWrGn1f9lslPvpY6wp3Q SSJ4IkQQucgG0qsXC7xlu6uaAQXfs6c+x/HV0JfbskUFcKC9VB+eISnDJijiUfne 99hapyoZMPufT4gMEsJ0rVUK5xW9YC0fRFVUcHiRNqwErlbr4OU+w82SPvjTroeZ XRnGLLRFqGLsTdgwW92oLyCXyQL5VeFTsiuVWHS/ -----END CERTIFICATE-----Generated at Fri Mar 27 00:35:53 2026 by rpki-client