$ rpki-client -vvf repo-rpki.idnic.net/repo/994d1f62-8488-4086-8d4c-f2de5c76da3d/0/3135372e31302e312e302f32342d3234203d3e20313532303739.roa File: 3135372e31302e312e302f32342d3234203d3e20313532303739.roa (raw, json) Hash identifier: DOErYNNeAHBg7jPgOxCOjjiUusb0dUbys1pc3kVIxCE= Subject key identifier: F9:E8:EE:76:0B:6D:DD:88:2D:E7:EB:A8:38:A9:20:18:9A:D4:34:C9 Certificate issuer: /CN=FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD Certificate serial: 13E4EFFCDE8C457FC6A5EC1BEA65CDE138B8A65C Authority key identifier: FA:B0:81:FC:D8:6A:B0:F8:1D:41:C9:E5:FB:9C:3D:32:22:0F:48:CD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/994d1f62-8488-4086-8d4c-f2de5c76da3d/0/3135372e31302e312e302f32342d3234203d3e20313532303739.roa Signing time: Wed 31 Dec 2025 15:00:02 +0000 ROA not before: Wed 31 Dec 2025 14:55:02 +0000 ROA not after: Wed 30 Dec 2026 15:00:02 +0000 asID: 152079 IP address blocks: 157.10.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/994d1f62-8488-4086-8d4c-f2de5c76da3d/0/FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD.crl rsync://repo-rpki.idnic.net/repo/994d1f62-8488-4086-8d4c-f2de5c76da3d/0/FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 22:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:e4:ef:fc:de:8c:45:7f:c6:a5:ec:1b:ea:65:cd:e1:38:b8:a6:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD Validity Not Before: Dec 31 14:55:02 2025 GMT Not After : Dec 30 15:00:02 2026 GMT Subject: CN=F9E8EE760B6DDD882DE7EBA838A920189AD434C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:69:d7:99:b9:30:f7:da:f7:6f:97:49:f9:fc: b1:07:3a:6d:4d:92:b0:15:bc:cf:7f:99:84:74:67: 2f:0b:93:81:6c:cb:fa:c2:a4:41:01:23:b5:92:16: 51:db:8e:6b:61:50:1c:39:58:3a:fd:d1:4d:b3:de: c7:7c:6c:2d:ef:e4:80:63:5c:6d:65:fc:10:cd:7a: 8e:3f:91:d3:32:d8:3b:db:2c:ec:c7:23:16:24:37: a1:b6:3a:cf:2e:5f:03:13:d5:d8:f5:da:d5:30:e1: 63:7c:ac:64:41:b5:c6:d7:91:99:fd:c2:f9:c2:7a: b7:77:c0:09:7c:43:2a:64:20:a3:e4:c1:29:18:6a: 0e:f6:64:00:13:95:88:cb:5b:9b:03:f5:38:22:f4: 58:8b:ed:2d:ef:bc:4a:95:7f:7e:f6:24:47:95:53: 14:82:64:fc:db:a9:74:c2:b0:38:81:02:11:18:2a: ce:2e:1c:2e:6f:a6:17:85:74:29:4a:3f:b0:cf:89: cf:6f:70:ae:4a:bf:89:70:3d:30:9e:5b:6f:0b:55: 4e:76:e0:1f:31:57:da:ce:ee:ba:38:b4:bc:32:7a: 5a:ef:60:25:a7:e1:2e:de:2f:a9:86:48:51:35:de: e4:da:61:04:f5:e1:94:cb:f2:73:a5:f2:0e:a4:4d: b9:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:E8:EE:76:0B:6D:DD:88:2D:E7:EB:A8:38:A9:20:18:9A:D4:34:C9 X509v3 Authority Key Identifier: keyid:FA:B0:81:FC:D8:6A:B0:F8:1D:41:C9:E5:FB:9C:3D:32:22:0F:48:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/994d1f62-8488-4086-8d4c-f2de5c76da3d/0/FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/994d1f62-8488-4086-8d4c-f2de5c76da3d/0/3135372e31302e312e302f32342d3234203d3e20313532303739.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.10.1.0/24 Signature Algorithm: sha256WithRSAEncryption 3f:e5:eb:8d:6d:1a:4e:d0:06:15:70:ae:4b:12:a3:86:65:71: 4a:60:22:f1:0d:08:52:25:d8:38:ba:5e:c6:71:a6:6d:39:3f: cc:84:53:39:02:60:05:55:e7:35:28:da:fc:9b:be:06:c3:91: 9f:d1:23:d0:c3:ca:e3:45:c4:67:eb:f9:22:01:6a:0b:40:a5: 78:f7:99:0e:4f:46:d2:ae:ba:f9:53:f4:a0:00:ac:b0:42:2a: 1c:9b:fa:4e:3f:55:05:f9:8a:a6:40:11:d7:66:7d:92:a2:85: aa:8c:b9:1e:45:5b:23:6f:d2:07:2c:f6:14:47:3a:ed:4d:60: 12:25:65:e9:b0:be:6b:aa:70:18:19:65:b0:f0:17:c9:9b:c6: f6:d0:73:a1:67:aa:bf:63:07:a0:87:f0:20:fc:94:41:ce:7c: 5c:1b:9d:3b:73:35:a9:00:b4:3c:d7:1d:90:9d:66:6e:5f:5f: 75:35:b3:4a:c5:2c:99:f5:6b:b0:c5:41:d1:05:a2:f2:33:83: 8f:63:bf:66:c3:ac:4e:bc:b5:2a:70:0a:bd:0e:11:2e:0e:96: 1b:8a:cb:62:c2:43:30:5a:16:fc:09:e1:0e:1f:38:b1:cc:ab: ec:f0:16:a4:b2:dd:3d:15:a4:b6:f4:47:8e:fb:f5:89:ba:a6: 4d:ec:74:46 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUE+Tv/N6MRX/Gpewb6mXN4Ti4plwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkFCMDgxRkNEODZBQjBGODFENDFDOUU1RkI5QzNEMzIy MjBGNDhDRDAeFw0yNTEyMzExNDU1MDJaFw0yNjEyMzAxNTAwMDJaMDMxMTAvBgNV BAMTKEY5RThFRTc2MEI2REREODgyREU3RUJBODM4QTkyMDE4OUFENDM0QzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnadeZuTD32vdvl0n5/LEHOm1N krAVvM9/mYR0Zy8Lk4Fsy/rCpEEBI7WSFlHbjmthUBw5WDr90U2z3sd8bC3v5IBj XG1l/BDNeo4/kdMy2DvbLOzHIxYkN6G2Os8uXwMT1dj12tUw4WN8rGRBtcbXkZn9 wvnCerd3wAl8QypkIKPkwSkYag72ZAATlYjLW5sD9Tgi9FiL7S3vvEqVf372JEeV UxSCZPzbqXTCsDiBAhEYKs4uHC5vpheFdClKP7DPic9vcK5Kv4lwPTCeW28LVU52 4B8xV9rO7ro4tLwyelrvYCWn4S7eL6mGSFE13uTaYQT14ZTL8nOl8g6kTbnJAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQU+ejudgtt3Ygt5+uoOKkgGJrUNMkwHwYDVR0j BBgwFoAU+rCB/NhqsPgdQcnl+5w9MiIPSM0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 OTRkMWY2Mi04NDg4LTQwODYtOGQ0Yy1mMmRlNWM3NmRhM2QvMC9GQUIwODFGQ0Q4 NkFCMEY4MUQ0MUM5RTVGQjlDM0QzMjIyMEY0OENELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRkFCMDgxRkNEODZBQjBGODFENDFDOUU1RkI5QzNEMzIyMjBG NDhDRC5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzk5NGQxZjYyLTg0ODgtNDA4Ni04 ZDRjLWYyZGU1Yzc2ZGEzZC8wLzMxMzUzNzJlMzEzMDJlMzEyZTMwMmYzMjM0MmQz MjM0MjAzZDNlMjAzMTM1MzIzMDM3Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACdCgEwDQYJKoZIhvcN AQELBQADggEBAD/l641tGk7QBhVwrksSo4ZlcUpgIvENCFIl2Di6XsZxpm05P8yE UzkCYAVV5zUo2vybvgbDkZ/RI9DDyuNFxGfr+SIBagtApXj3mQ5PRtKuuvlT9KAA rLBCKhyb+k4/VQX5iqZAEddmfZKihaqMuR5FWyNv0gcs9hRHOu1NYBIlZemwvmuq cBgZZbDwF8mbxvbQc6Fnqr9jB6CH8CD8lEHOfFwbnTtzNakAtDzXHZCdZm5fX3U1 s0rFLJn1a7DFQdEFovIzg49jv2bDrE68tSpwCr0OES4OlhuKy2LCQzBaFvwJ4Q4f OLHMq+zwFqSy3T0VpLb0R4779Ym6pk3sdEY= -----END CERTIFICATE-----Generated at Mon Mar 2 16:34:38 2026 by rpki-client