$ rpki-client -vvf repo-rpki.idnic.net/repo/dfb466c6-3743-495f-b1a8-2607cc99573f/0/3135372e31352e3132302e302f32342d3234203d3e20313336383436.roa File: 3135372e31352e3132302e302f32342d3234203d3e20313336383436.roa (raw, json) Hash identifier: w9lRGM+KvbJcbB/B7Klf8XUb4JaKXd4lgNIVZ1rwkw4= Subject key identifier: 68:20:FD:63:2B:99:EC:FA:32:C7:44:7E:4D:45:2C:25:8A:DC:EC:08 Certificate issuer: /CN=E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F Certificate serial: 0D22FBAECC010EF86BD1072F21B0E04619AF6CAB Authority key identifier: E9:02:BF:4C:FC:9D:99:7E:36:A9:E1:A3:2F:AA:2E:08:CC:2F:5C:7F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dfb466c6-3743-495f-b1a8-2607cc99573f/0/3135372e31352e3132302e302f32342d3234203d3e20313336383436.roa Signing time: Thu 19 Mar 2026 10:00:00 +0000 ROA not before: Thu 19 Mar 2026 09:55:00 +0000 ROA not after: Thu 18 Mar 2027 10:00:00 +0000 asID: 136846 IP address blocks: 157.15.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dfb466c6-3743-495f-b1a8-2607cc99573f/0/E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F.crl rsync://repo-rpki.idnic.net/repo/dfb466c6-3743-495f-b1a8-2607cc99573f/0/E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 16:09:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:22:fb:ae:cc:01:0e:f8:6b:d1:07:2f:21:b0:e0:46:19:af:6c:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F Validity Not Before: Mar 19 09:55:00 2026 GMT Not After : Mar 18 10:00:00 2027 GMT Subject: CN=6820FD632B99ECFA32C7447E4D452C258ADCEC08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:a1:a4:38:4c:c6:ad:6c:86:01:f4:f8:3f:3c: ee:a8:33:c5:01:17:98:15:d7:03:9b:46:3a:97:9e: c7:5c:72:cf:26:6c:4f:96:cd:ab:fc:c5:9e:0d:80: 98:37:ca:b5:1e:69:66:6c:17:59:60:cf:68:31:c8: ea:60:82:a3:62:2b:fe:f5:df:39:75:0f:e6:5b:7e: 40:fb:72:e9:0b:a7:2a:e0:50:8c:ef:b7:53:89:21: 11:6c:7d:a3:64:bf:db:b9:72:17:e3:ab:19:b4:1a: cf:78:40:28:64:92:53:07:eb:35:47:d1:7d:64:47: f1:8e:48:55:61:51:bd:60:06:a6:18:b6:24:85:00: 1a:1b:3a:c0:3a:b0:92:91:70:b3:be:4e:85:96:b0: 49:ed:e9:2b:b0:4e:75:7e:b5:6b:61:0f:6d:fc:d9: 64:01:59:de:ad:a5:3a:26:3f:f9:95:2a:14:f2:e8: 86:79:0e:36:dd:46:6f:c9:c0:47:21:24:3a:b8:a2: b7:43:5b:13:36:e1:87:52:c1:78:55:80:30:a7:b3: 79:c6:1c:b8:15:38:6e:a6:52:4f:a1:f9:3c:65:c4: fa:0e:36:22:43:42:f8:41:98:19:95:57:e8:0a:10: 62:4c:c0:5c:7e:71:5d:96:e5:3b:a2:34:8e:0c:87: 93:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:20:FD:63:2B:99:EC:FA:32:C7:44:7E:4D:45:2C:25:8A:DC:EC:08 X509v3 Authority Key Identifier: keyid:E9:02:BF:4C:FC:9D:99:7E:36:A9:E1:A3:2F:AA:2E:08:CC:2F:5C:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dfb466c6-3743-495f-b1a8-2607cc99573f/0/E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dfb466c6-3743-495f-b1a8-2607cc99573f/0/3135372e31352e3132302e302f32342d3234203d3e20313336383436.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.15.120.0/24 Signature Algorithm: sha256WithRSAEncryption 4c:ca:84:c0:7b:fa:23:32:90:dc:b5:3f:b5:f3:29:2c:99:94: 1c:f8:6f:b1:29:10:9f:cc:38:4e:47:71:f1:6d:c3:c2:6e:50: ea:15:c5:21:ed:7e:74:cc:75:81:4d:c5:72:ca:3f:a0:9a:b7: e8:1b:d9:9f:ef:58:01:be:1f:c0:e8:c3:ef:d7:04:be:de:b1: 6f:92:d2:bc:b0:be:56:11:7d:f8:e7:8c:bb:3f:e2:82:28:ea: 46:9e:7b:a7:7e:53:2b:d6:2d:99:2f:77:a1:d1:29:e0:6b:01: 7e:ab:2a:52:d4:2c:e5:9a:9c:ba:c8:7c:02:c9:d1:cd:97:f7: 43:1c:97:05:28:b9:50:e8:47:ce:75:b8:f8:bb:8d:cf:18:ca: 0a:af:d0:f3:41:0d:dd:ba:d3:00:66:b2:8c:a6:47:d0:9f:5e: eb:17:28:3d:95:9b:fe:86:58:e3:98:b8:2b:ef:15:71:ec:d3: 80:3e:68:ed:c7:22:2a:49:19:ef:cf:92:84:9f:26:33:03:05: c7:a4:d6:0d:a1:13:d1:f3:71:7e:1e:49:ba:73:24:2e:30:b3: 85:ad:b5:1f:ed:9f:d4:6c:7d:e6:b3:65:4d:9c:2d:35:61:a4: c3:1d:47:2c:80:bf:2e:41:bf:ea:25:40:4e:ac:b5:cb:65:c9: c7:e2:db:c0 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUDSL7rswBDvhr0QcvIbDgRhmvbKswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTkwMkJGNENGQzlEOTk3RTM2QTlFMUEzMkZBQTJFMDhD QzJGNUM3RjAeFw0yNjAzMTkwOTU1MDBaFw0yNzAzMTgxMDAwMDBaMDMxMTAvBgNV BAMTKDY4MjBGRDYzMkI5OUVDRkEzMkM3NDQ3RTRENDUyQzI1OEFEQ0VDMDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwoaQ4TMatbIYB9Pg/PO6oM8UB F5gV1wObRjqXnsdccs8mbE+Wzav8xZ4NgJg3yrUeaWZsF1lgz2gxyOpggqNiK/71 3zl1D+ZbfkD7cukLpyrgUIzvt1OJIRFsfaNkv9u5chfjqxm0Gs94QChkklMH6zVH 0X1kR/GOSFVhUb1gBqYYtiSFABobOsA6sJKRcLO+ToWWsEnt6SuwTnV+tWthD238 2WQBWd6tpTomP/mVKhTy6IZ5DjbdRm/JwEchJDq4ordDWxM24YdSwXhVgDCns3nG HLgVOG6mUk+h+TxlxPoONiJDQvhBmBmVV+gKEGJMwFx+cV2W5TuiNI4Mh5P5AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUaCD9YyuZ7Poyx0R+TUUsJYrc7AgwHwYDVR0j BBgwFoAU6QK/TPydmX42qeGjL6ouCMwvXH8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZmI0NjZjNi0zNzQzLTQ5NWYtYjFhOC0yNjA3Y2M5OTU3M2YvMC9FOTAyQkY0Q0ZD OUQ5OTdFMzZBOUUxQTMyRkFBMkUwOENDMkY1QzdGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRTkwMkJGNENGQzlEOTk3RTM2QTlFMUEzMkZBQTJFMDhDQzJG NUM3Ri5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2RmYjQ2NmM2LTM3NDMtNDk1Zi1i MWE4LTI2MDdjYzk5NTczZi8wLzMxMzUzNzJlMzEzNTJlMzEzMjMwMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzM2MzgzNDM2LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnQ94MA0GCSqG SIb3DQEBCwUAA4IBAQBMyoTAe/ojMpDctT+18yksmZQc+G+xKRCfzDhOR3HxbcPC blDqFcUh7X50zHWBTcVyyj+gmrfoG9mf71gBvh/A6MPv1wS+3rFvktK8sL5WEX34 54y7P+KCKOpGnnunflMr1i2ZL3eh0SngawF+qypS1Czlmpy6yHwCydHNl/dDHJcF KLlQ6EfOdbj4u43PGMoKr9DzQQ3dutMAZrKMpkfQn17rFyg9lZv+hljjmLgr7xVx 7NOAPmjtxyIqSRnvz5KEnyYzAwXHpNYNoRPR83F+Hkm6cyQuMLOFrbUf7Z/UbH3m s2VNnC01YaTDHUcsgL8uQb/qJUBOrLXLZcnH4tvA -----END CERTIFICATE-----Generated at Fri Mar 27 00:37:08 2026 by rpki-client