$ rpki-client -vvf repo-rpki.idnic.net/repo/32880ddb-3d94-4e34-92dc-4d4538b905a2/0/3135372e32302e3139332e302f32342d3234203d3e20313532343237.roa File: 3135372e32302e3139332e302f32342d3234203d3e20313532343237.roa (raw, json) Hash identifier: vB79AQ7LVU9msWJ/4Zg3oCzBcGrchuHrWRYyI1kBoZQ= Subject key identifier: 3D:D1:E0:1B:DD:F2:58:D5:0A:D1:29:81:8E:60:CA:80:04:9E:98:61 Certificate issuer: /CN=46A2E634FFF40AE545EC7DB67A888189AAEB5D03 Certificate serial: 6F19EB928929B4B786B589B7A3957D61C4667A47 Authority key identifier: 46:A2:E6:34:FF:F4:0A:E5:45:EC:7D:B6:7A:88:81:89:AA:EB:5D:03 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/46A2E634FFF40AE545EC7DB67A888189AAEB5D03.cer Subject info access: rsync://repo-rpki.idnic.net/repo/32880ddb-3d94-4e34-92dc-4d4538b905a2/0/3135372e32302e3139332e302f32342d3234203d3e20313532343237.roa Signing time: Tue 27 Jan 2026 08:03:08 +0000 ROA not before: Tue 27 Jan 2026 07:58:08 +0000 ROA not after: Tue 26 Jan 2027 08:03:08 +0000 asID: 152427 IP address blocks: 157.20.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/32880ddb-3d94-4e34-92dc-4d4538b905a2/0/46A2E634FFF40AE545EC7DB67A888189AAEB5D03.crl rsync://repo-rpki.idnic.net/repo/32880ddb-3d94-4e34-92dc-4d4538b905a2/0/46A2E634FFF40AE545EC7DB67A888189AAEB5D03.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/46A2E634FFF40AE545EC7DB67A888189AAEB5D03.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 02:45:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:19:eb:92:89:29:b4:b7:86:b5:89:b7:a3:95:7d:61:c4:66:7a:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46A2E634FFF40AE545EC7DB67A888189AAEB5D03 Validity Not Before: Jan 27 07:58:08 2026 GMT Not After : Jan 26 08:03:08 2027 GMT Subject: CN=3DD1E01BDDF258D50AD129818E60CA80049E9861 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:55:41:74:07:44:5e:4a:99:5f:e9:b5:dc:24: 4b:1f:79:24:fb:4e:d1:92:2b:2e:12:3b:36:bb:6a: 49:fb:7b:1f:08:66:ee:5f:86:1c:48:8d:19:ca:58: 89:9a:fe:5e:41:da:69:46:52:1c:58:d6:e5:d3:e5: 36:32:31:53:3c:37:ed:1c:cb:6e:03:f9:d7:bd:69: 3f:c4:bc:3d:4d:65:f7:bc:2c:b1:c7:3d:0f:45:a2: 17:5f:3d:10:54:ef:29:22:61:63:f9:fe:5d:75:f7: 1c:66:08:1e:d3:1f:3b:ab:5c:ed:18:15:35:84:48: 9e:44:f3:9c:c1:a8:4a:eb:fd:f1:4d:95:a6:ab:da: ad:d4:a9:8d:89:07:62:e2:a1:09:bd:24:4d:3c:9c: 7a:24:a9:cc:43:26:c9:6b:80:7e:a9:1e:a0:bb:c0: d1:b3:0c:5f:3e:96:de:fb:a7:1d:d2:dc:d3:9a:db: dd:b2:1a:aa:ec:85:8e:8b:d8:35:30:ff:fd:27:33: 70:f5:a4:72:58:e5:d9:72:c2:0d:65:bf:99:35:f8: eb:54:fd:49:16:a3:12:3c:80:56:d8:1c:07:ec:2c: 9f:95:2a:c5:00:0a:18:e3:95:39:d5:c1:3e:68:25: 68:04:d3:33:af:9e:2b:83:d1:f7:20:5c:77:d7:a8: c0:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:D1:E0:1B:DD:F2:58:D5:0A:D1:29:81:8E:60:CA:80:04:9E:98:61 X509v3 Authority Key Identifier: keyid:46:A2:E6:34:FF:F4:0A:E5:45:EC:7D:B6:7A:88:81:89:AA:EB:5D:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/32880ddb-3d94-4e34-92dc-4d4538b905a2/0/46A2E634FFF40AE545EC7DB67A888189AAEB5D03.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/46A2E634FFF40AE545EC7DB67A888189AAEB5D03.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/32880ddb-3d94-4e34-92dc-4d4538b905a2/0/3135372e32302e3139332e302f32342d3234203d3e20313532343237.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.20.193.0/24 Signature Algorithm: sha256WithRSAEncryption 4f:09:71:1c:2a:87:75:23:a0:af:86:64:e4:cc:36:b5:46:b0: bd:c0:b5:9e:05:ac:10:57:4b:ee:44:ac:ce:e8:5a:a0:29:84: 0f:5b:8f:86:d4:2c:5f:22:0e:33:a6:16:83:a9:9d:ed:bb:76: af:29:7e:fc:42:57:c1:d1:8d:00:62:d4:b2:55:90:20:76:30: 00:1a:01:a7:05:bb:b5:02:d4:2b:45:3d:98:a8:52:a2:80:26: 6a:da:36:1a:cd:9b:3e:12:93:b9:8a:69:cd:71:dc:ea:97:9b: a3:95:c0:f4:29:a4:73:27:1e:8d:81:26:43:81:d7:02:7d:de: ce:38:dc:34:72:64:4c:74:6a:ee:3e:08:b5:21:84:38:65:b9: d9:88:fd:56:a4:d7:87:7d:65:96:91:03:57:fe:0c:88:ee:9a: f4:4b:38:97:27:f9:67:bd:d5:82:84:35:7c:64:2e:d5:42:d1: e7:31:10:00:b5:b3:b0:5e:4d:8b:ee:f0:5e:df:c8:08:c2:3f: ff:86:76:05:0b:ef:ed:fd:77:65:29:c4:db:60:7c:cb:63:fc: d8:ce:fc:b9:8c:93:78:b0:c7:ea:19:2a:f9:13:93:f6:cc:44: 05:32:d1:d2:0f:a0:a7:17:5f:02:3f:2a:45:b5:80:13:03:e1: 91:07:1b:fe -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUbxnrkokptLeGtYm3o5V9YcRmekcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDZBMkU2MzRGRkY0MEFFNTQ1RUM3REI2N0E4ODgxODlB QUVCNUQwMzAeFw0yNjAxMjcwNzU4MDhaFw0yNzAxMjYwODAzMDhaMDMxMTAvBgNV BAMTKDNERDFFMDFCRERGMjU4RDUwQUQxMjk4MThFNjBDQTgwMDQ5RTk4NjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3VUF0B0ReSplf6bXcJEsfeST7 TtGSKy4SOza7akn7ex8IZu5fhhxIjRnKWIma/l5B2mlGUhxY1uXT5TYyMVM8N+0c y24D+de9aT/EvD1NZfe8LLHHPQ9FohdfPRBU7ykiYWP5/l119xxmCB7THzurXO0Y FTWESJ5E85zBqErr/fFNlaar2q3UqY2JB2LioQm9JE08nHokqcxDJslrgH6pHqC7 wNGzDF8+lt77px3S3NOa292yGqrshY6L2DUw//0nM3D1pHJY5dlywg1lv5k1+OtU /UkWoxI8gFbYHAfsLJ+VKsUAChjjlTnVwT5oJWgE0zOvniuD0fcgXHfXqMAPAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUPdHgG93yWNUK0SmBjmDKgASemGEwHwYDVR0j BBgwFoAURqLmNP/0CuVF7H22eoiBiarrXQMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z Mjg4MGRkYi0zZDk0LTRlMzQtOTJkYy00ZDQ1MzhiOTA1YTIvMC80NkEyRTYzNEZG RjQwQUU1NDVFQzdEQjY3QTg4ODE4OUFBRUI1RDAzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNDZBMkU2MzRGRkY0MEFFNTQ1RUM3REI2N0E4ODgxODlBQUVC NUQwMy5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzMyODgwZGRiLTNkOTQtNGUzNC05 MmRjLTRkNDUzOGI5MDVhMi8wLzMxMzUzNzJlMzIzMDJlMzEzOTMzMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNTMyMzQzMjM3LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnRTBMA0GCSqG SIb3DQEBCwUAA4IBAQBPCXEcKod1I6CvhmTkzDa1RrC9wLWeBawQV0vuRKzO6Fqg KYQPW4+G1CxfIg4zphaDqZ3tu3avKX78QlfB0Y0AYtSyVZAgdjAAGgGnBbu1AtQr RT2YqFKigCZq2jYazZs+EpO5imnNcdzql5ujlcD0KaRzJx6NgSZDgdcCfd7OONw0 cmRMdGruPgi1IYQ4ZbnZiP1WpNeHfWWWkQNX/gyI7pr0SziXJ/lnvdWChDV8ZC7V QtHnMRAAtbOwXk2L7vBe38gIwj//hnYFC+/t/XdlKcTbYHzLY/zYzvy5jJN4sMfq GSr5E5P2zEQFMtHSD6CnF18CPypFtYATA+GRBxv+ -----END CERTIFICATE-----Generated at Mon Mar 2 13:26:51 2026 by rpki-client