$ rpki-client -vvf repo-rpki.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/3135372e32302e3235332e302f32342d3234203d3e20313338303839.roa File: 3135372e32302e3235332e302f32342d3234203d3e20313338303839.roa (raw, json) Hash identifier: cVFzdmzLJEI/fSd97t0ozR5701iz99V95s98wkuB7V8= Subject key identifier: 96:D2:EC:F9:33:DC:AA:84:E1:D9:80:EA:37:7A:07:B1:65:28:84:B0 Certificate issuer: /CN=04D3D2E060243AD917D4F682922E4A805EDE3300 Certificate serial: 4063746527894411477A73D5062A0090EE41B221 Authority key identifier: 04:D3:D2:E0:60:24:3A:D9:17:D4:F6:82:92:2E:4A:80:5E:DE:33:00 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/04D3D2E060243AD917D4F682922E4A805EDE3300.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/3135372e32302e3235332e302f32342d3234203d3e20313338303839.roa Signing time: Thu 02 Apr 2026 10:02:40 +0000 ROA not before: Thu 02 Apr 2026 09:57:40 +0000 ROA not after: Thu 01 Apr 2027 10:02:40 +0000 asID: 138089 IP address blocks: 157.20.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/04D3D2E060243AD917D4F682922E4A805EDE3300.crl rsync://repo-rpki.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/04D3D2E060243AD917D4F682922E4A805EDE3300.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/04D3D2E060243AD917D4F682922E4A805EDE3300.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 07:52:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:63:74:65:27:89:44:11:47:7a:73:d5:06:2a:00:90:ee:41:b2:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04D3D2E060243AD917D4F682922E4A805EDE3300 Validity Not Before: Apr 2 09:57:40 2026 GMT Not After : Apr 1 10:02:40 2027 GMT Subject: CN=96D2ECF933DCAA84E1D980EA377A07B1652884B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:5a:94:84:66:2f:2c:82:40:47:dd:d9:43:dc: 8b:6e:15:87:9a:d2:b3:d8:81:ed:5a:fc:bc:45:09: 29:eb:21:81:21:11:7f:03:74:f3:89:6a:aa:1c:68: ea:ba:f3:5b:37:8c:5b:da:41:81:9c:bf:f8:4f:ea: d1:0b:eb:5b:2a:c5:f8:8e:9d:15:4c:cc:a0:d8:fa: a4:33:4a:7f:38:7f:fc:01:91:d9:31:89:b3:f7:f5: c8:6e:da:4c:fd:eb:48:d3:8a:bd:82:02:32:48:e3: 9d:ab:3a:53:59:12:bd:58:39:b3:26:ef:2e:17:fd: b6:e3:f0:ce:45:81:77:9c:8b:90:ac:d4:ad:44:66: d6:cf:a6:c4:4a:1b:80:5e:6a:9a:1f:c1:e5:6b:76: be:93:3d:03:e2:a2:10:9c:b8:9b:8a:d5:fa:92:27: 78:a7:12:30:d7:a9:58:7b:38:58:44:29:13:66:36: db:96:1b:be:f7:1b:44:99:2e:b9:c8:bb:2b:5e:9c: 01:10:fc:a4:62:43:7e:6a:49:16:6b:83:37:5f:34: d5:3c:87:c4:6b:1d:38:d8:43:05:49:82:ce:07:31: 2a:62:87:a9:f8:91:bc:2e:ef:bd:fd:65:ed:dc:c5: fb:6d:a6:c3:7e:5e:54:ed:2c:5d:84:d0:cb:4d:8a: 12:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:D2:EC:F9:33:DC:AA:84:E1:D9:80:EA:37:7A:07:B1:65:28:84:B0 X509v3 Authority Key Identifier: keyid:04:D3:D2:E0:60:24:3A:D9:17:D4:F6:82:92:2E:4A:80:5E:DE:33:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/04D3D2E060243AD917D4F682922E4A805EDE3300.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/04D3D2E060243AD917D4F682922E4A805EDE3300.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/3135372e32302e3235332e302f32342d3234203d3e20313338303839.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.20.253.0/24 Signature Algorithm: sha256WithRSAEncryption 2a:0a:3e:63:3e:67:27:ea:b9:7b:18:77:db:37:13:ef:87:35: 54:60:c1:5e:35:b5:90:a6:37:2e:38:e3:05:19:93:16:ea:08: d0:08:3a:ac:bc:35:c0:ca:c7:43:2f:54:ff:c1:4a:2c:7f:03: 95:70:ad:47:0d:6e:c8:cc:f6:fb:23:55:35:26:86:5a:79:af: 44:64:1f:cf:84:8f:20:04:3e:4b:1f:29:93:7a:af:ec:d5:c6: 50:56:a4:7f:22:0e:8c:cd:de:3d:97:eb:25:e1:61:71:fb:bf: 95:3d:7f:51:c5:43:c9:14:36:b2:ce:33:2b:b4:8a:74:6f:88: c7:3f:a3:6e:4b:ac:c1:46:d4:74:e0:10:90:21:45:b6:07:e9: 55:87:20:c3:50:18:38:6b:32:b1:53:3b:1c:a6:8e:52:2f:d3: a2:59:11:88:a9:73:27:1b:ad:12:1c:c2:68:5c:51:6c:35:ab: 61:cf:57:ba:ac:d4:8c:bb:83:a8:54:98:a6:6c:09:a0:08:7a: 9c:9c:06:0f:d8:a2:4e:45:7a:a4:89:62:05:82:48:6e:98:a3: 54:51:0d:34:87:ff:31:43:22:40:c4:cd:4c:d1:ec:3b:38:e2: ea:6a:0e:f4:4a:f5:b1:fa:81:b7:61:1f:b6:0f:2c:18:ce:94: 0f:11:de:88 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUQGN0ZSeJRBFHenPVBioAkO5BsiEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDREM0QyRTA2MDI0M0FEOTE3RDRGNjgyOTIyRTRBODA1 RURFMzMwMDAeFw0yNjA0MDIwOTU3NDBaFw0yNzA0MDExMDAyNDBaMDMxMTAvBgNV BAMTKDk2RDJFQ0Y5MzNEQ0FBODRFMUQ5ODBFQTM3N0EwN0IxNjUyODg0QjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDWpSEZi8sgkBH3dlD3ItuFYea 0rPYge1a/LxFCSnrIYEhEX8DdPOJaqocaOq681s3jFvaQYGcv/hP6tEL61sqxfiO nRVMzKDY+qQzSn84f/wBkdkxibP39chu2kz960jTir2CAjJI452rOlNZEr1YObMm 7y4X/bbj8M5FgXeci5Cs1K1EZtbPpsRKG4BeapofweVrdr6TPQPiohCcuJuK1fqS J3inEjDXqVh7OFhEKRNmNtuWG773G0SZLrnIuytenAEQ/KRiQ35qSRZrgzdfNNU8 h8RrHTjYQwVJgs4HMSpih6n4kbwu7739Ze3cxfttpsN+XlTtLF2E0MtNihKhAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUltLs+TPcqoTh2YDqN3oHsWUohLAwHwYDVR0j BBgwFoAUBNPS4GAkOtkX1PaCki5KgF7eMwAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZThkNThhOC1lMTk3LTQxNzktYjczYy02MDhlMDQ3ZDA5YTMvMC8wNEQzRDJFMDYw MjQzQUQ5MTdENEY2ODI5MjJFNEE4MDVFREUzMzAwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMDREM0QyRTA2MDI0M0FEOTE3RDRGNjgyOTIyRTRBODA1RURF MzMwMC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzBlOGQ1OGE4LWUxOTctNDE3OS1i NzNjLTYwOGUwNDdkMDlhMy8wLzMxMzUzNzJlMzIzMDJlMzIzNTMzMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzM4MzAzODM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnRT9MA0GCSqG SIb3DQEBCwUAA4IBAQAqCj5jPmcn6rl7GHfbNxPvhzVUYMFeNbWQpjcuOOMFGZMW 6gjQCDqsvDXAysdDL1T/wUosfwOVcK1HDW7IzPb7I1U1JoZaea9EZB/PhI8gBD5L HymTeq/s1cZQVqR/Ig6Mzd49l+sl4WFx+7+VPX9RxUPJFDayzjMrtIp0b4jHP6Nu S6zBRtR04BCQIUW2B+lVhyDDUBg4azKxUzscpo5SL9OiWRGIqXMnG60SHMJoXFFs Nathz1e6rNSMu4OoVJimbAmgCHqcnAYP2KJORXqkiWIFgkhumKNUUQ00h/8xQyJA xM1M0ew7OOLqag70SvWx+oG3YR+2DywYzpQPEd6I -----END CERTIFICATE-----Generated at Fri Apr 17 15:43:55 2026 by rpki-client