$ rpki-client -vvf repo-rpki.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/3135372e31352e38332e302f32342d3234203d3e20313532333633.roa File: 3135372e31352e38332e302f32342d3234203d3e20313532333633.roa (raw, json) Hash identifier: aBnBiM/MEhKqQ7n4gX23Mkjy/VKocVmrbAAfq1Psf+A= Subject key identifier: CD:0F:51:95:2A:0E:1C:E2:9C:D3:CF:3E:B2:1E:82:AD:68:80:64:3C Certificate issuer: /CN=FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8 Certificate serial: 7002D8BFB5A6EAE743DD5E7770F692CE26FCEF41 Authority key identifier: FF:3F:06:6A:5E:9A:B8:F9:88:B8:E1:7C:7A:56:DD:2E:00:A6:6A:D8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/3135372e31352e38332e302f32342d3234203d3e20313532333633.roa Signing time: Fri 17 Apr 2026 15:02:53 +0000 ROA not before: Fri 17 Apr 2026 14:57:53 +0000 ROA not after: Fri 16 Apr 2027 15:02:53 +0000 asID: 152363 IP address blocks: 157.15.83.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.crl rsync://repo-rpki.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 20:12:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:02:d8:bf:b5:a6:ea:e7:43:dd:5e:77:70:f6:92:ce:26:fc:ef:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8 Validity Not Before: Apr 17 14:57:53 2026 GMT Not After : Apr 16 15:02:53 2027 GMT Subject: CN=CD0F51952A0E1CE29CD3CF3EB21E82AD6880643C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:7b:3b:dd:3d:e7:5b:b5:79:e1:1f:f1:73:ec: b9:ec:0b:c0:6d:c8:b7:d1:8c:66:4d:ec:cc:44:23: 8d:f9:8a:ff:6a:b4:0e:6c:77:ff:fa:8c:13:9e:43: 06:9b:4b:80:58:a4:42:a5:c2:b3:81:b2:0e:a9:07: 9d:52:f0:3c:b4:cc:e0:a5:99:22:5d:0b:cf:af:dc: f9:70:e6:e2:1d:7a:05:d5:de:57:fa:35:2a:8b:5f: 09:e6:91:4b:ac:5d:3e:6a:95:9c:be:11:43:29:45: 61:8f:ae:aa:5e:0e:0b:63:69:22:cf:87:ee:c7:49: 22:92:10:4c:ce:36:64:66:cd:b5:18:5d:55:fc:ff: 77:08:9e:64:57:88:f6:ee:15:da:f8:c2:d1:e7:77: 79:37:5b:0d:3d:79:c8:94:b8:16:6b:b1:56:72:7b: c6:e6:eb:a3:02:7b:86:3e:b1:a3:b3:13:4a:46:70: ec:3b:26:36:4e:30:20:52:95:08:78:ee:c8:ff:72: 6e:eb:c9:24:a4:2a:e6:be:70:03:91:19:34:c0:b0: ae:1d:ee:68:8f:05:a3:44:cc:4f:1d:f1:4a:67:89: 24:0e:2d:68:20:63:ea:12:51:66:8a:5f:4e:4b:cf: e1:c2:1b:38:2d:55:95:76:dc:45:b4:01:c4:36:35: de:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:0F:51:95:2A:0E:1C:E2:9C:D3:CF:3E:B2:1E:82:AD:68:80:64:3C X509v3 Authority Key Identifier: keyid:FF:3F:06:6A:5E:9A:B8:F9:88:B8:E1:7C:7A:56:DD:2E:00:A6:6A:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/3135372e31352e38332e302f32342d3234203d3e20313532333633.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.15.83.0/24 Signature Algorithm: sha256WithRSAEncryption a7:d1:f2:2e:76:b5:09:5d:ed:01:6f:0e:f1:dd:c6:68:a7:fb: 3c:b6:f2:bc:26:ba:59:ef:62:4e:a0:53:5c:06:b2:6e:5e:c4: 82:83:19:a7:74:cb:16:ee:e3:46:7f:e6:9f:cf:be:e2:24:64: 9f:70:44:15:90:cf:1c:7e:fe:d0:79:18:ca:bc:70:f0:f3:cb: 6c:09:fc:80:ce:cd:46:98:34:d8:56:ab:b2:31:12:00:8c:3f: 80:f6:fe:c9:02:13:b3:93:d9:9d:12:61:51:67:08:f9:98:8b: a6:12:29:f3:0e:7b:c0:87:b8:af:a6:9d:c8:5c:d6:16:63:7f: 42:3a:7f:43:36:e0:94:ab:14:d4:0f:19:f6:a0:f5:e7:5d:94: da:f4:0d:05:e6:c4:4d:08:47:ac:56:b3:cb:1b:5e:21:e4:1a: bd:16:9b:71:71:bd:4e:3c:c0:41:5a:8c:77:b7:50:8f:82:bc: 09:29:16:fb:7e:ab:3f:53:79:1c:42:07:ba:52:aa:a6:4a:7d: 91:a2:51:c7:82:f7:41:a7:c5:03:b0:3d:00:e8:03:d8:fc:a4: 2a:ec:fc:3b:5d:7c:32:5e:1a:23:7c:10:94:da:5b:a7:ef:57: d4:ea:cd:b3:2b:96:b8:da:9d:a4:c5:75:37:5b:9e:25:45:9d: d9:63:73:71 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUcALYv7Wm6udD3V53cPaSzib870EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkYzRjA2NkE1RTlBQjhGOTg4QjhFMTdDN0E1NkREMkUw MEE2NkFEODAeFw0yNjA0MTcxNDU3NTNaFw0yNzA0MTYxNTAyNTNaMDMxMTAvBgNV BAMTKENEMEY1MTk1MkEwRTFDRTI5Q0QzQ0YzRUIyMUU4MkFENjg4MDY0M0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2ezvdPedbtXnhH/Fz7LnsC8Bt yLfRjGZN7MxEI435iv9qtA5sd//6jBOeQwabS4BYpEKlwrOBsg6pB51S8Dy0zOCl mSJdC8+v3Plw5uIdegXV3lf6NSqLXwnmkUusXT5qlZy+EUMpRWGPrqpeDgtjaSLP h+7HSSKSEEzONmRmzbUYXVX8/3cInmRXiPbuFdr4wtHnd3k3Ww09eciUuBZrsVZy e8bm66MCe4Y+saOzE0pGcOw7JjZOMCBSlQh47sj/cm7rySSkKua+cAORGTTAsK4d 7miPBaNEzE8d8UpniSQOLWggY+oSUWaKX05Lz+HCGzgtVZV23EW0AcQ2Nd6TAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUzQ9RlSoOHOKc088+sh6CrWiAZDwwHwYDVR0j BBgwFoAU/z8Gal6auPmIuOF8elbdLgCmatgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZDAxMWExYy1hMGFkLTRkOTMtODZhZi0zZjBhYWRkOTY4NGYvMC9GRjNGMDY2QTVF OUFCOEY5ODhCOEUxN0M3QTU2REQyRTAwQTY2QUQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRkYzRjA2NkE1RTlBQjhGOTg4QjhFMTdDN0E1NkREMkUwMEE2 NkFEOC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzFkMDExYTFjLWEwYWQtNGQ5My04 NmFmLTNmMGFhZGQ5Njg0Zi8wLzMxMzUzNzJlMzEzNTJlMzgzMzJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMxMzUzMjMzMzYzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJ0PUzANBgkqhkiG 9w0BAQsFAAOCAQEAp9HyLna1CV3tAW8O8d3GaKf7PLbyvCa6We9iTqBTXAaybl7E goMZp3TLFu7jRn/mn8++4iRkn3BEFZDPHH7+0HkYyrxw8PPLbAn8gM7NRpg02Far sjESAIw/gPb+yQITs5PZnRJhUWcI+ZiLphIp8w57wIe4r6adyFzWFmN/Qjp/Qzbg lKsU1A8Z9qD1512U2vQNBebETQhHrFazyxteIeQavRabcXG9TjzAQVqMd7dQj4K8 CSkW+36rP1N5HEIHulKqpkp9kaJRx4L3QafFA7A9AOgD2PykKuz8O118Ml4aI3wQ lNpbp+9X1OrNsyuWuNqdpMV1N1ueJUWd2WNzcQ== -----END CERTIFICATE-----Generated at Fri Apr 17 20:03:30 2026 by rpki-client