$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/0/3135312e3135382e3233342e302f32342d3234203d3e20313534353230.roa File: 3135312e3135382e3233342e302f32342d3234203d3e20313534353230.roa (raw, json) Hash identifier: /mPQp0zRLRixv4ruZ9YF3ierQjYd2QtemmGEIe6D21s= Subject key identifier: 20:91:96:86:0C:85:27:00:8C:39:AE:43:BE:E9:BB:7E:F6:AD:EA:EF Certificate issuer: /CN=A91862140000/serialNumber=12345F115AC4B62A51F5274C54C81E86463BD0BA Certificate serial: 3534CAE0A23FA3DF2D55D658FC26612429D58DAA Authority key identifier: 12:34:5F:11:5A:C4:B6:2A:51:F5:27:4C:54:C8:1E:86:46:3B:D0:BA Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/EjRfEVrEtipR9SdMVMgehkY70Lo.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/3135312e3135382e3233342e302f32342d3234203d3e20313534353230.roa Signing time: Thu 26 Feb 2026 05:36:03 +0000 ROA not before: Thu 26 Feb 2026 05:31:03 +0000 ROA not after: Thu 25 Feb 2027 05:36:03 +0000 asID: 154520 IP address blocks: 151.158.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/EjRfEVrEtipR9SdMVMgehkY70Lo.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 18:33:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:34:ca:e0:a2:3f:a3:df:2d:55:d6:58:fc:26:61:24:29:d5:8d:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=12345F115AC4B62A51F5274C54C81E86463BD0BA Validity Not Before: Feb 26 05:31:03 2026 GMT Not After : Feb 25 05:36:03 2027 GMT Subject: CN=209196860C8527008C39AE43BEE9BB7EF6ADEAEF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:92:87:86:0e:d8:56:8f:88:96:1b:15:08:4c: 8e:af:5c:e0:ce:34:ae:c6:88:c3:ec:2b:20:17:e8: 5c:c1:09:86:db:01:41:11:b8:9d:01:a4:64:c3:6f: 8c:a8:f9:4b:c0:b2:95:eb:c5:b4:61:ba:6c:c3:63: 6f:11:91:a6:29:17:f4:ea:f9:78:75:e2:c8:c2:0a: 1e:38:f1:81:f6:f0:0b:91:46:e6:17:d1:07:0b:65: a0:36:4d:81:0e:95:f9:d9:f4:44:6e:63:b9:23:5c: 84:f2:f4:df:50:18:d0:b0:42:ce:0d:fd:c6:01:b1: 48:e2:42:13:36:f4:97:1a:5f:0e:33:41:6a:de:41: e5:ea:8d:f6:5c:77:de:60:47:1f:87:3a:84:a3:dc: 81:a0:7d:04:b4:0f:49:ea:ea:53:13:b3:5b:d9:f6: f1:dd:b3:74:1c:91:74:0d:78:ec:0a:72:fb:f2:a9: 4f:83:b9:f7:25:9c:fd:21:06:dd:44:a8:92:91:d7: 14:f2:89:5e:9f:2e:6a:c6:7b:95:77:0c:2f:4f:32: 5a:81:c3:1d:eb:c2:5d:1f:cc:01:d7:bd:a8:a1:63: 97:50:bc:d2:3b:c6:1b:2a:e7:5d:47:82:4f:47:63: 46:aa:96:93:7f:bf:e2:74:0c:c3:6e:b1:ec:87:dd: 0f:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:91:96:86:0C:85:27:00:8C:39:AE:43:BE:E9:BB:7E:F6:AD:EA:EF X509v3 Authority Key Identifier: keyid:12:34:5F:11:5A:C4:B6:2A:51:F5:27:4C:54:C8:1E:86:46:3B:D0:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/EjRfEVrEtipR9SdMVMgehkY70Lo.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/3135312e3135382e3233342e302f32342d3234203d3e20313534353230.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.158.234.0/24 Signature Algorithm: sha256WithRSAEncryption 3c:33:ed:b3:48:0b:d6:b4:7c:a8:29:f2:ee:ea:f2:8d:25:3e: 4f:ec:6c:86:65:3b:02:99:d0:90:5e:cb:90:1a:12:38:ab:43: 2f:7d:97:50:d9:75:c5:8f:fd:1d:0a:1f:85:17:6d:27:e6:56: 0c:69:07:e7:41:6b:a5:19:2f:9d:6b:50:ef:fa:ea:4d:03:7a: 3d:ae:6f:e2:c2:28:2c:6c:92:a7:7e:10:e2:ff:07:66:dc:19: d6:c7:16:5b:37:86:1e:c7:cd:42:98:b0:30:c0:c3:78:4c:f1: 7e:f7:69:e7:a2:dd:9e:1b:b9:78:30:43:d4:e9:62:65:97:aa: fa:97:b1:ec:95:d8:36:e6:a9:23:e3:6e:ee:45:e1:c5:e6:8f: f2:c3:51:30:2c:7f:7d:d1:8a:b9:9e:85:ed:24:57:d6:17:59: 5d:7c:7a:f2:4f:b7:f3:ee:36:9b:02:72:c4:b5:32:81:c7:8f: d0:ec:b2:0b:69:5b:3c:4e:ab:96:dd:23:76:0f:64:14:5b:56: 51:bc:1e:54:99:6d:c3:da:c6:de:f4:c5:61:22:36:5f:d0:d2: 51:40:23:42:cb:9b:a8:06:22:e3:53:dc:e1:f4:26:59:0a:85: 3d:1d:d5:d9:80:bd:64:58:df:ab:ea:1c:8c:1a:eb:bf:c7:a2: 0b:4b:46:ef -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgIUNTTK4KI/o98tVdZY/CZhJCnVjaowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEygxMjM0NUYxMTVB QzRCNjJBNTFGNTI3NEM1NEM4MUU4NjQ2M0JEMEJBMB4XDTI2MDIyNjA1MzEwM1oX DTI3MDIyNTA1MzYwM1owMzExMC8GA1UEAxMoMjA5MTk2ODYwQzg1MjcwMDhDMzlB RTQzQkVFOUJCN0VGNkFERUFFRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL+Sh4YO2FaPiJYbFQhMjq9c4M40rsaIw+wrIBfoXMEJhtsBQRG4nQGkZMNv jKj5S8CylevFtGG6bMNjbxGRpikX9Or5eHXiyMIKHjjxgfbwC5FG5hfRBwtloDZN gQ6V+dn0RG5juSNchPL031AY0LBCzg39xgGxSOJCEzb0lxpfDjNBat5B5eqN9lx3 3mBHH4c6hKPcgaB9BLQPSerqUxOzW9n28d2zdByRdA147Apy+/KpT4O59yWc/SEG 3USokpHXFPKJXp8uasZ7lXcML08yWoHDHevCXR/MAde9qKFjl1C80jvGGyrnXUeC T0djRqqWk3+/4nQMw26x7IfdD2sCAwEAAaOCAgMwggH/MB0GA1UdDgQWBBQgkZaG DIUnAIw5rkO+6bt+9q3q7zAfBgNVHSMEGDAWgBQSNF8RWsS2KlH1J0xUyB6GRjvQ ujAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMC8xMjM0NUYxMTVBQzRCNjJB NTFGNTI3NEM1NEM4MUU4NjQ2M0JEMEJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CMzIy QTVGNDFENjYxMUUyQTNGMjdGN0M3MkZEMUZGMi9FalJmRVZyRXRpcFI5U2RNVk1n ZWhrWTcwTG8uY2VyMIGGBggrBgEFBQcBCwR6MHgwdgYIKwYBBQUHMAuGanJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL0lETklDLUlELzAvMzEzNTMxMmUz MTM1MzgyZTMyMzMzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzUzNDM1MzIz MC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAJee6jANBgkqhkiG9w0BAQsFAAOCAQEAPDPts0gL1rR8qCny 7uryjSU+T+xshmU7ApnQkF7LkBoSOKtDL32XUNl1xY/9HQofhRdtJ+ZWDGkH50Fr pRkvnWtQ7/rqTQN6Pa5v4sIoLGySp34Q4v8HZtwZ1scWWzeGHsfNQpiwMMDDeEzx fvdp56Ldnhu5eDBD1OliZZeq+pex7JXYNuapI+Nu7kXhxeaP8sNRMCx/fdGKuZ6F 7SRX1hdZXXx68k+38+42mwJyxLUygceP0OyyC2lbPE6rlt0jdg9kFFtWUbweVJlt w9rG3vTFYSI2X9DSUUAjQsubqAYi41Pc4fQmWQqFPR3V2YC9ZFjfq+ocjBrrv8ei C0tG7w== -----END CERTIFICATE-----Generated at Sun Mar 1 22:32:34 2026 by rpki-client