$ rpki-client -vvf repo-rpki.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/0/3135372e32302e34352e302f32342d3234203d3e20313532333932.roa File: 3135372e32302e34352e302f32342d3234203d3e20313532333932.roa (raw, json) Hash identifier: O5uJEpO5oilAXqiR31tNYgCroCKbL1/bMOK5Er+Qs0U= Subject key identifier: 04:6A:20:6F:15:CD:A5:88:7A:A9:A0:1F:1F:45:FB:78:D3:94:5C:E5 Certificate issuer: /CN=0EAF2A0CD22523DB087375417038E4165075CA3E Certificate serial: 69A70BE24C13B4C8423AAFD7786F9F685EC2D0B5 Authority key identifier: 0E:AF:2A:0C:D2:25:23:DB:08:73:75:41:70:38:E4:16:50:75:CA:3E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0EAF2A0CD22523DB087375417038E4165075CA3E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/0/3135372e32302e34352e302f32342d3234203d3e20313532333932.roa Signing time: Mon 23 Feb 2026 03:55:08 +0000 ROA not before: Mon 23 Feb 2026 03:50:08 +0000 ROA not after: Mon 22 Feb 2027 03:55:08 +0000 asID: 152392 IP address blocks: 157.20.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/0/0EAF2A0CD22523DB087375417038E4165075CA3E.crl rsync://repo-rpki.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/0/0EAF2A0CD22523DB087375417038E4165075CA3E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0EAF2A0CD22523DB087375417038E4165075CA3E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 02:45:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:a7:0b:e2:4c:13:b4:c8:42:3a:af:d7:78:6f:9f:68:5e:c2:d0:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0EAF2A0CD22523DB087375417038E4165075CA3E Validity Not Before: Feb 23 03:50:08 2026 GMT Not After : Feb 22 03:55:08 2027 GMT Subject: CN=046A206F15CDA5887AA9A01F1F45FB78D3945CE5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:c8:1d:e0:24:aa:2b:47:f4:30:3e:9a:e0:1e: 8f:27:0a:6f:e2:67:4f:b3:a3:7f:12:27:9e:97:ca: ac:b1:bc:95:11:ac:c8:aa:8e:a0:08:af:85:72:84: 73:90:7b:b3:b2:a3:24:43:53:5a:3f:ce:36:2d:c3: d7:24:25:5b:b8:83:48:2d:20:94:c5:cd:70:de:24: 43:98:ed:26:e8:5d:5a:3c:79:3f:fc:90:43:bd:94: 92:6b:e6:b9:39:14:14:75:b4:dc:cb:f6:96:9d:77: ba:bd:1d:bf:62:67:c9:03:8c:cc:35:24:44:d8:a7: 7a:cd:54:4d:00:1a:13:ec:90:0b:bb:c5:8a:89:57: d1:a8:46:07:0a:ba:df:fd:ba:ba:99:77:33:29:3a: b7:f4:d6:24:30:2c:b1:fe:1d:1e:cc:f3:7a:ff:bb: 8b:86:9c:85:86:e9:2a:a7:4d:d0:62:48:bc:bc:a7: 53:79:7a:3c:95:37:5a:64:61:65:1a:e3:08:1c:4e: 81:4f:51:c6:2f:93:6d:dc:d9:28:a3:dc:ee:d8:cf: 1a:0b:1e:2b:65:fc:08:81:ed:e2:80:98:77:34:ac: 43:06:54:4d:df:bc:51:e1:3c:06:72:88:62:f9:47: 7e:72:25:4f:a7:41:1c:11:7c:02:9a:30:66:ce:07: 80:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:6A:20:6F:15:CD:A5:88:7A:A9:A0:1F:1F:45:FB:78:D3:94:5C:E5 X509v3 Authority Key Identifier: keyid:0E:AF:2A:0C:D2:25:23:DB:08:73:75:41:70:38:E4:16:50:75:CA:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/0/0EAF2A0CD22523DB087375417038E4165075CA3E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0EAF2A0CD22523DB087375417038E4165075CA3E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/0/3135372e32302e34352e302f32342d3234203d3e20313532333932.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.20.45.0/24 Signature Algorithm: sha256WithRSAEncryption 2a:20:ce:1b:a6:a0:c1:51:21:d7:97:af:3f:9c:55:27:0a:c5: 1b:67:0a:91:d1:95:c2:b0:fc:d5:c3:e1:30:97:87:08:da:f6: 1c:70:01:c9:0b:8f:a3:5e:f5:b1:6a:95:d9:e4:83:89:de:d0: 4f:b5:f8:d4:0e:4a:8d:87:49:64:bd:9e:75:09:d2:b9:8c:37: 65:aa:36:cd:da:03:07:89:e1:d1:e8:0c:53:38:a5:00:50:32: 42:93:3b:2e:ac:d0:c5:48:4f:9e:7c:95:5d:cd:a4:2d:ad:c6: 03:6a:9e:65:ac:09:ec:1d:c9:64:b4:bb:cd:e1:b9:2e:7f:c7: d1:20:a0:2b:c6:4c:f6:9d:38:d1:0e:90:44:09:d4:f1:d8:7b: f4:7a:f0:f6:d8:e1:2a:7a:a0:2a:83:0c:4d:ad:58:df:bd:15: ae:25:43:2d:03:06:7c:55:25:9f:81:d1:f4:95:a7:4a:10:6b: a8:e7:6a:48:3c:de:e2:15:36:ff:07:55:10:03:0b:14:e1:96: 48:e0:98:b3:68:0e:22:fd:5c:a4:95:de:bb:a1:81:c6:2a:28: 77:b9:0d:95:84:0c:15:ce:b9:56:6f:fb:dc:d6:9e:69:b6:15: 2a:ea:1c:3e:98:d2:c0:e3:0d:28:83:ef:37:fd:09:d5:5d:33: 31:18:ce:0e -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUaacL4kwTtMhCOq/XeG+faF7C0LUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEVBRjJBMENEMjI1MjNEQjA4NzM3NTQxNzAzOEU0MTY1 MDc1Q0EzRTAeFw0yNjAyMjMwMzUwMDhaFw0yNzAyMjIwMzU1MDhaMDMxMTAvBgNV BAMTKDA0NkEyMDZGMTVDREE1ODg3QUE5QTAxRjFGNDVGQjc4RDM5NDVDRTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDyB3gJKorR/QwPprgHo8nCm/i Z0+zo38SJ56XyqyxvJURrMiqjqAIr4VyhHOQe7OyoyRDU1o/zjYtw9ckJVu4g0gt IJTFzXDeJEOY7SboXVo8eT/8kEO9lJJr5rk5FBR1tNzL9padd7q9Hb9iZ8kDjMw1 JETYp3rNVE0AGhPskAu7xYqJV9GoRgcKut/9urqZdzMpOrf01iQwLLH+HR7M83r/ u4uGnIWG6SqnTdBiSLy8p1N5ejyVN1pkYWUa4wgcToFPUcYvk23c2Sij3O7YzxoL Hitl/AiB7eKAmHc0rEMGVE3fvFHhPAZyiGL5R35yJU+nQRwRfAKaMGbOB4D3AgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUBGogbxXNpYh6qaAfH0X7eNOUXOUwHwYDVR0j BBgwFoAUDq8qDNIlI9sIc3VBcDjkFlB1yj4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NTg4ZGZmNy02YTkyLTQyOTMtODgwMC1iNTNlMmE5MThhY2EvMC8wRUFGMkEwQ0Qy MjUyM0RCMDg3Mzc1NDE3MDM4RTQxNjUwNzVDQTNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMEVBRjJBMENEMjI1MjNEQjA4NzM3NTQxNzAzOEU0MTY1MDc1 Q0EzRS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzA1ODhkZmY3LTZhOTItNDI5My04 ODAwLWI1M2UyYTkxOGFjYS8wLzMxMzUzNzJlMzIzMDJlMzQzNTJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMxMzUzMjMzMzkzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJ0ULTANBgkqhkiG 9w0BAQsFAAOCAQEAKiDOG6agwVEh15evP5xVJwrFG2cKkdGVwrD81cPhMJeHCNr2 HHAByQuPo171sWqV2eSDid7QT7X41A5KjYdJZL2edQnSuYw3Zao2zdoDB4nh0egM UzilAFAyQpM7LqzQxUhPnnyVXc2kLa3GA2qeZawJ7B3JZLS7zeG5Ln/H0SCgK8ZM 9p040Q6QRAnU8dh79Hrw9tjhKnqgKoMMTa1Y370VriVDLQMGfFUln4HR9JWnShBr qOdqSDze4hU2/wdVEAMLFOGWSOCYs2gOIv1cpJXeu6GBxiood7kNlYQMFc65Vm/7 3NaeabYVKuocPpjSwOMNKIPvN/0J1V0zMRjODg== -----END CERTIFICATE-----Generated at Mon Mar 2 15:18:47 2026 by rpki-client