$ rpki-client -vvf repo-rpki.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/3135372e31352e38322e302f32342d3234203d3e20313532333633.roa File: 3135372e31352e38322e302f32342d3234203d3e20313532333633.roa (raw, json) Hash identifier: JLWE6h6NXLY9WSoLd4bmAbVPL3LIXrW+e/qj82i23rA= Subject key identifier: 6A:4D:A6:E7:9E:1E:01:D3:25:9C:4F:21:42:3F:AF:7E:02:E9:6C:D4 Certificate issuer: /CN=FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8 Certificate serial: 7B463AA4BAE00D270C05D18B1D728533D1337309 Authority key identifier: FF:3F:06:6A:5E:9A:B8:F9:88:B8:E1:7C:7A:56:DD:2E:00:A6:6A:D8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/3135372e31352e38322e302f32342d3234203d3e20313532333633.roa Signing time: Fri 17 Apr 2026 15:02:53 +0000 ROA not before: Fri 17 Apr 2026 14:57:53 +0000 ROA not after: Fri 16 Apr 2027 15:02:53 +0000 asID: 152363 IP address blocks: 157.15.82.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.crl rsync://repo-rpki.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 20:12:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:46:3a:a4:ba:e0:0d:27:0c:05:d1:8b:1d:72:85:33:d1:33:73:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8 Validity Not Before: Apr 17 14:57:53 2026 GMT Not After : Apr 16 15:02:53 2027 GMT Subject: CN=6A4DA6E79E1E01D3259C4F21423FAF7E02E96CD4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:33:b4:0f:2c:c4:e2:66:c1:ef:57:61:20:5e: fa:38:fe:70:73:c3:2c:98:32:f3:16:04:34:7c:24: 8d:9f:db:bc:fd:5f:e9:68:b6:61:23:36:79:4c:0b: e3:be:d2:3e:8f:06:b8:81:8b:22:49:83:ad:a3:10: ef:3e:72:29:3c:33:71:5b:9e:b1:5a:53:6a:15:53: 36:d5:dc:7e:59:9d:fe:a8:09:a5:ba:3b:07:68:2b: bc:bc:ba:98:22:2c:72:d7:c1:4b:ff:7c:5f:69:e8: 23:f7:35:6f:5d:20:ee:4c:91:da:29:97:89:ff:10: 0c:09:5c:a5:e9:04:9e:99:52:cd:58:43:81:1c:ce: 40:14:6b:46:16:64:a8:ed:1d:0c:30:48:3c:ed:03: 60:e7:b8:87:7b:d5:c8:bc:34:38:8a:a3:ae:a3:d3: 90:13:6d:59:67:8a:6e:b9:d9:31:44:89:c7:94:27: ad:27:16:10:f7:c5:27:c5:79:ce:47:50:cd:16:d9: 93:02:8a:2c:35:73:43:98:b6:f7:23:3a:ec:80:8f: 41:c9:1b:4e:b8:7f:b8:c6:17:ea:43:a1:5c:53:3d: 7b:89:10:35:b8:ae:24:20:97:66:1e:d0:c8:49:c6: 84:97:5b:af:3d:72:c5:db:cc:14:fe:15:17:95:a6: 5f:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:4D:A6:E7:9E:1E:01:D3:25:9C:4F:21:42:3F:AF:7E:02:E9:6C:D4 X509v3 Authority Key Identifier: keyid:FF:3F:06:6A:5E:9A:B8:F9:88:B8:E1:7C:7A:56:DD:2E:00:A6:6A:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/3135372e31352e38322e302f32342d3234203d3e20313532333633.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.15.82.0/24 Signature Algorithm: sha256WithRSAEncryption 5b:c2:94:65:39:4b:7a:cf:d0:5d:a2:81:c4:46:55:1a:e8:85: 1a:b6:f9:ad:cd:84:02:5b:1f:cf:91:eb:08:73:44:9a:77:a4: 26:03:b8:90:61:7f:53:1e:b4:f3:b6:e3:48:25:e0:be:74:23: 22:17:21:51:3d:87:f2:00:34:36:d9:40:58:bb:a6:bb:38:16: d0:0a:ae:90:56:e1:3a:35:f0:81:53:0b:2a:b1:77:ec:c1:12: 0a:44:8a:91:ab:b3:de:a3:80:f7:24:09:08:e2:87:af:66:de: 81:19:36:1b:c8:7d:e3:50:26:64:08:f7:5a:a1:80:b8:82:c6: 4d:c2:74:53:42:ae:19:15:85:0e:81:8d:87:31:58:93:81:45: 69:c7:c1:9e:e0:bc:52:87:d4:b4:12:81:d6:25:7b:c6:22:3e: 71:8b:1d:5c:87:c8:67:7d:17:fe:7b:79:e6:cd:53:9a:cb:ec: 83:ff:a0:1d:61:2f:c2:e2:2d:38:d0:1c:88:ac:01:30:58:b0: ed:96:4c:b2:43:fa:fd:d3:17:4d:f8:2d:f5:a8:d7:bf:15:1d: 95:aa:ec:1b:a2:89:8c:73:b0:f7:20:43:e7:66:39:eb:82:97: fc:da:cf:e2:31:77:fc:f6:57:7d:df:78:b5:d2:f9:5e:56:ce: 35:df:23:6c -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUe0Y6pLrgDScMBdGLHXKFM9EzcwkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkYzRjA2NkE1RTlBQjhGOTg4QjhFMTdDN0E1NkREMkUw MEE2NkFEODAeFw0yNjA0MTcxNDU3NTNaFw0yNzA0MTYxNTAyNTNaMDMxMTAvBgNV BAMTKDZBNERBNkU3OUUxRTAxRDMyNTlDNEYyMTQyM0ZBRjdFMDJFOTZDRDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTM7QPLMTiZsHvV2EgXvo4/nBz wyyYMvMWBDR8JI2f27z9X+lotmEjNnlMC+O+0j6PBriBiyJJg62jEO8+cik8M3Fb nrFaU2oVUzbV3H5Znf6oCaW6OwdoK7y8upgiLHLXwUv/fF9p6CP3NW9dIO5Mkdop l4n/EAwJXKXpBJ6ZUs1YQ4EczkAUa0YWZKjtHQwwSDztA2DnuId71ci8NDiKo66j 05ATbVlnim652TFEiceUJ60nFhD3xSfFec5HUM0W2ZMCiiw1c0OYtvcjOuyAj0HJ G064f7jGF+pDoVxTPXuJEDW4riQgl2Ye0MhJxoSXW689csXbzBT+FReVpl9nAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUak2m554eAdMlnE8hQj+vfgLpbNQwHwYDVR0j BBgwFoAU/z8Gal6auPmIuOF8elbdLgCmatgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZDAxMWExYy1hMGFkLTRkOTMtODZhZi0zZjBhYWRkOTY4NGYvMC9GRjNGMDY2QTVF OUFCOEY5ODhCOEUxN0M3QTU2REQyRTAwQTY2QUQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRkYzRjA2NkE1RTlBQjhGOTg4QjhFMTdDN0E1NkREMkUwMEE2 NkFEOC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzFkMDExYTFjLWEwYWQtNGQ5My04 NmFmLTNmMGFhZGQ5Njg0Zi8wLzMxMzUzNzJlMzEzNTJlMzgzMjJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMxMzUzMjMzMzYzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJ0PUjANBgkqhkiG 9w0BAQsFAAOCAQEAW8KUZTlLes/QXaKBxEZVGuiFGrb5rc2EAlsfz5HrCHNEmnek JgO4kGF/Ux6087bjSCXgvnQjIhchUT2H8gA0NtlAWLumuzgW0AqukFbhOjXwgVML KrF37MESCkSKkauz3qOA9yQJCOKHr2begRk2G8h941AmZAj3WqGAuILGTcJ0U0Ku GRWFDoGNhzFYk4FFacfBnuC8UofUtBKB1iV7xiI+cYsdXIfIZ30X/nt55s1Tmsvs g/+gHWEvwuItONAciKwBMFiw7ZZMskP6/dMXTfgt9ajXvxUdlarsG6KJjHOw9yBD 52Y564KX/NrP4jF3/PZXfd94tdL5XlbONd8jbA== -----END CERTIFICATE-----Generated at Fri Apr 17 20:21:31 2026 by rpki-client