$ rpki-client -vvf repo-rpki.idnic.net/repo/1f2f64ca-fa54-499e-bc33-4862dca794f7/0/3135372e31302e39372e302f32342d3234203d3e203538383231.roa File: 3135372e31302e39372e302f32342d3234203d3e203538383231.roa (raw, json) Hash identifier: Wx2OjPLLf/p+4FpTc/iFj9ib95oosG62DmEcDyqUABQ= Subject key identifier: 2C:EA:9B:5D:8F:4D:32:52:1A:6B:C0:07:FC:9F:FD:CA:31:1B:CD:EA Certificate issuer: /CN=B9A55DD123C2F224C4E245856905F78F2F354D92 Certificate serial: 33B806351CF445E86A1A72D15A561830CE9044EA Authority key identifier: B9:A5:5D:D1:23:C2:F2:24:C4:E2:45:85:69:05:F7:8F:2F:35:4D:92 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B9A55DD123C2F224C4E245856905F78F2F354D92.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1f2f64ca-fa54-499e-bc33-4862dca794f7/0/3135372e31302e39372e302f32342d3234203d3e203538383231.roa Signing time: Fri 10 Apr 2026 05:03:19 +0000 ROA not before: Fri 10 Apr 2026 04:58:19 +0000 ROA not after: Fri 09 Apr 2027 05:03:19 +0000 asID: 58821 IP address blocks: 157.10.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1f2f64ca-fa54-499e-bc33-4862dca794f7/0/B9A55DD123C2F224C4E245856905F78F2F354D92.crl rsync://repo-rpki.idnic.net/repo/1f2f64ca-fa54-499e-bc33-4862dca794f7/0/B9A55DD123C2F224C4E245856905F78F2F354D92.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B9A55DD123C2F224C4E245856905F78F2F354D92.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 06:15:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:b8:06:35:1c:f4:45:e8:6a:1a:72:d1:5a:56:18:30:ce:90:44:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B9A55DD123C2F224C4E245856905F78F2F354D92 Validity Not Before: Apr 10 04:58:19 2026 GMT Not After : Apr 9 05:03:19 2027 GMT Subject: CN=2CEA9B5D8F4D32521A6BC007FC9FFDCA311BCDEA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:64:0f:5a:da:4a:68:50:ff:c6:47:72:7b:35: d9:1f:d7:3f:5a:9d:d7:41:85:2c:27:9a:07:95:6a: 75:70:95:61:08:67:aa:02:bd:e2:5b:e6:82:bc:47: 6e:db:71:dd:63:09:84:01:d7:5b:c4:b3:e2:7f:7d: 11:f4:8b:b2:9e:45:bf:1e:f3:fb:2f:66:0c:b0:8f: 1c:23:05:10:fb:cc:34:e0:39:d4:3e:2f:fc:95:d4: 3e:80:59:19:4b:c3:a0:a9:b5:aa:2b:52:0c:29:62: 70:a1:00:0a:5a:c0:1a:d3:02:b5:14:25:4f:19:e8: 69:e1:fa:96:34:70:e4:de:93:fe:9d:2d:06:f9:b0: fc:df:34:76:ee:90:9f:25:e1:71:95:48:1a:87:47: 4a:65:b9:13:1f:25:76:94:6b:cc:c6:c6:56:c5:8e: c4:59:3f:40:09:e8:ac:e7:94:50:1a:f3:d1:29:1a: de:dc:f2:8a:c3:e4:f0:0e:43:2b:bf:37:90:0c:6b: bb:cf:1b:40:29:6f:8f:16:7e:4f:cd:2b:ee:d6:2d: de:6e:0d:5a:b3:6a:40:df:08:b0:04:9b:ea:16:5d: db:14:76:76:da:bf:da:14:0f:4f:54:cc:9b:66:f2: 9e:07:f6:1e:4e:2a:e0:e6:59:56:43:c5:47:4f:2f: a5:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:EA:9B:5D:8F:4D:32:52:1A:6B:C0:07:FC:9F:FD:CA:31:1B:CD:EA X509v3 Authority Key Identifier: keyid:B9:A5:5D:D1:23:C2:F2:24:C4:E2:45:85:69:05:F7:8F:2F:35:4D:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1f2f64ca-fa54-499e-bc33-4862dca794f7/0/B9A55DD123C2F224C4E245856905F78F2F354D92.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B9A55DD123C2F224C4E245856905F78F2F354D92.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1f2f64ca-fa54-499e-bc33-4862dca794f7/0/3135372e31302e39372e302f32342d3234203d3e203538383231.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.10.97.0/24 Signature Algorithm: sha256WithRSAEncryption ae:03:b3:16:9d:b5:7b:6b:9f:36:7e:38:f7:00:69:2e:9d:15: 0c:71:f0:9c:7d:30:16:2e:7a:16:a5:be:5c:e0:8d:4b:40:fa: 4e:3e:27:d3:3a:a4:a6:b7:ee:1b:84:6d:76:40:66:f4:96:48: 16:c3:ad:78:c5:67:2e:27:2c:d3:b6:d6:75:ff:e2:34:59:2c: b4:a9:d4:ba:c3:59:41:19:30:68:57:b8:2a:0f:94:f5:87:41: 1b:d8:ae:e4:47:79:98:9b:5c:b3:c9:f0:d1:2b:c0:76:0b:1c: e9:7d:48:14:e6:24:27:2e:a6:97:7d:2a:3a:4d:5d:81:9b:db: fd:b5:82:48:85:41:7d:37:dc:9c:be:d5:de:84:14:3c:bb:ca: dc:be:a4:a4:b5:d7:79:21:75:a5:a4:00:d4:2d:63:df:b6:e7: fd:c4:dc:24:e4:e1:85:3d:1f:81:97:5e:c7:67:62:50:9c:dd: 9e:ca:e6:04:3a:98:ce:5a:48:a8:e0:e8:5a:ed:1d:66:11:8f: bd:c9:b1:f1:12:87:fb:09:78:55:01:16:ba:32:6d:32:48:48: 7f:2e:fb:71:06:47:79:e7:92:ea:55:16:88:24:da:84:6f:53: b6:68:17:4b:f2:1d:b6:bf:96:1b:70:a8:83:9f:b7:36:16:50: 0f:2c:07:d1 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUM7gGNRz0RehqGnLRWlYYMM6QROowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjlBNTVERDEyM0MyRjIyNEM0RTI0NTg1NjkwNUY3OEYy RjM1NEQ5MjAeFw0yNjA0MTAwNDU4MTlaFw0yNzA0MDkwNTAzMTlaMDMxMTAvBgNV BAMTKDJDRUE5QjVEOEY0RDMyNTIxQTZCQzAwN0ZDOUZGRENBMzExQkNERUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRZA9a2kpoUP/GR3J7Ndkf1z9a nddBhSwnmgeVanVwlWEIZ6oCveJb5oK8R27bcd1jCYQB11vEs+J/fRH0i7KeRb8e 8/svZgywjxwjBRD7zDTgOdQ+L/yV1D6AWRlLw6CptaorUgwpYnChAApawBrTArUU JU8Z6Gnh+pY0cOTek/6dLQb5sPzfNHbukJ8l4XGVSBqHR0pluRMfJXaUa8zGxlbF jsRZP0AJ6KznlFAa89EpGt7c8orD5PAOQyu/N5AMa7vPG0Apb48Wfk/NK+7WLd5u DVqzakDfCLAEm+oWXdsUdnbav9oUD09UzJtm8p4H9h5OKuDmWVZDxUdPL6WpAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQULOqbXY9NMlIaa8AH/J/9yjEbzeowHwYDVR0j BBgwFoAUuaVd0SPC8iTE4kWFaQX3jy81TZIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZjJmNjRjYS1mYTU0LTQ5OWUtYmMzMy00ODYyZGNhNzk0ZjcvMC9COUE1NUREMTIz QzJGMjI0QzRFMjQ1ODU2OTA1Rjc4RjJGMzU0RDkyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQjlBNTVERDEyM0MyRjIyNEM0RTI0NTg1NjkwNUY3OEYyRjM1 NEQ5Mi5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzFmMmY2NGNhLWZhNTQtNDk5ZS1i YzMzLTQ4NjJkY2E3OTRmNy8wLzMxMzUzNzJlMzEzMDJlMzkzNzJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDM1MzgzODMyMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACdCmEwDQYJKoZIhvcN AQELBQADggEBAK4DsxadtXtrnzZ+OPcAaS6dFQxx8Jx9MBYuehalvlzgjUtA+k4+ J9M6pKa37huEbXZAZvSWSBbDrXjFZy4nLNO21nX/4jRZLLSp1LrDWUEZMGhXuCoP lPWHQRvYruRHeZibXLPJ8NErwHYLHOl9SBTmJCcuppd9KjpNXYGb2/21gkiFQX03 3Jy+1d6EFDy7yty+pKS113khdaWkANQtY9+25/3E3CTk4YU9H4GXXsdnYlCc3Z7K 5gQ6mM5aSKjg6FrtHWYRj73JsfESh/sJeFUBFroybTJISH8u+3EGR3nnkupVFogk 2oRvU7ZoF0vyHba/lhtwqIOftzYWUA8sB9E= -----END CERTIFICATE-----Generated at Fri Apr 17 13:55:00 2026 by rpki-client