$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/0/3135312e3135382e3233392e302f32342d3234203d3e20313534353238.roa File: 3135312e3135382e3233392e302f32342d3234203d3e20313534353238.roa (raw, json) Hash identifier: wpGsP5+dmtc+mo9jkkLJhvYfdaoWqGz7+ZwQ9EIWJrQ= Subject key identifier: 08:A8:29:89:C8:8E:08:08:14:86:C5:1E:8B:DC:14:FE:BC:6C:06:21 Certificate issuer: /CN=A91862140000/serialNumber=12345F115AC4B62A51F5274C54C81E86463BD0BA Certificate serial: 142034B100FA885E6DAFFC5504EEF865DCA2C947 Authority key identifier: 12:34:5F:11:5A:C4:B6:2A:51:F5:27:4C:54:C8:1E:86:46:3B:D0:BA Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/EjRfEVrEtipR9SdMVMgehkY70Lo.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/3135312e3135382e3233392e302f32342d3234203d3e20313534353238.roa Signing time: Wed 01 Apr 2026 03:40:33 +0000 ROA not before: Wed 01 Apr 2026 03:35:33 +0000 ROA not after: Wed 31 Mar 2027 03:40:33 +0000 asID: 154528 IP address blocks: 151.158.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/EjRfEVrEtipR9SdMVMgehkY70Lo.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 15:12:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:20:34:b1:00:fa:88:5e:6d:af:fc:55:04:ee:f8:65:dc:a2:c9:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=12345F115AC4B62A51F5274C54C81E86463BD0BA Validity Not Before: Apr 1 03:35:33 2026 GMT Not After : Mar 31 03:40:33 2027 GMT Subject: CN=08A82989C88E08081486C51E8BDC14FEBC6C0621 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:f7:42:f2:f8:49:29:c8:69:56:df:4d:1a:7f: 09:c0:01:82:3f:61:78:ea:fe:b8:29:c8:24:82:c3: a1:d7:b5:22:e4:ea:20:c3:ed:ed:08:d9:3b:8d:5b: cd:4e:f1:70:2d:6c:17:92:bf:39:87:dc:0a:86:94: 2a:f8:99:e2:d5:91:77:6c:e8:fe:2e:0a:e7:31:16: cf:57:56:3b:0b:ce:55:79:d1:eb:5d:4f:b1:81:ac: 40:2e:0e:65:97:d8:7b:1b:0b:05:e9:b1:25:b3:9f: 54:f7:d2:b9:87:c0:23:6e:15:50:3e:6f:db:d9:c9: dd:59:e4:80:41:bf:6f:e4:6b:72:08:ff:47:8a:30: d3:7d:36:0e:90:73:f0:63:bf:c7:7c:e1:da:2e:da: a1:6a:74:87:b4:bf:11:04:66:03:c5:38:a0:16:64: 10:20:4a:9b:18:f6:99:e0:ad:2d:5b:ea:a9:6a:2a: 7c:46:0b:79:33:54:a6:3c:2a:32:23:5c:de:d8:1c: f9:b1:92:1e:f1:26:ec:cc:98:ee:be:d8:e9:e6:85: 00:d2:c2:a6:9a:ea:a2:dc:51:6b:9b:f9:68:b9:b9: 80:10:04:7c:3a:f6:60:2e:17:48:17:5c:8f:99:1e: 18:0a:7a:b9:8e:2a:cf:04:51:13:36:a8:7d:c9:dd: 35:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:A8:29:89:C8:8E:08:08:14:86:C5:1E:8B:DC:14:FE:BC:6C:06:21 X509v3 Authority Key Identifier: keyid:12:34:5F:11:5A:C4:B6:2A:51:F5:27:4C:54:C8:1E:86:46:3B:D0:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/EjRfEVrEtipR9SdMVMgehkY70Lo.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/3135312e3135382e3233392e302f32342d3234203d3e20313534353238.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.158.239.0/24 Signature Algorithm: sha256WithRSAEncryption 9d:50:1e:64:46:0c:22:87:40:a9:d4:a1:97:11:d0:e6:17:b8: 63:b2:f0:66:69:9f:ce:79:31:7d:25:bb:f0:2d:79:40:94:c6: a0:f7:71:51:2f:eb:f5:80:87:7c:55:4c:e8:95:7a:2f:3c:25: c8:a6:e4:84:82:f6:14:ef:94:ba:d8:e8:b2:5f:31:ac:1e:6c: 99:87:97:bb:ed:e7:53:01:8a:db:c8:ac:9c:46:44:d6:03:a4: e8:2c:b0:21:fc:42:30:da:b0:70:5a:7a:8c:08:be:91:fb:d4: ec:db:3f:ed:49:ac:8f:3e:98:ba:7d:82:e4:f7:64:4e:95:30: 0c:c3:22:aa:94:af:6c:fb:38:d6:33:05:6f:6d:01:9c:fb:75: 9a:b7:25:3e:68:d1:28:70:43:fb:7a:2a:9d:3a:ee:0a:29:07: a3:c3:79:da:2b:80:1d:91:5a:bf:64:ea:fc:d7:ff:17:97:61: e8:cb:20:ca:b0:26:8d:16:0a:6f:ad:50:4d:e8:fd:13:59:91: 6c:cd:46:a0:55:42:7e:39:e8:5a:66:0e:35:40:84:67:d7:b1: 24:a9:35:1d:32:fa:a3:ed:ee:71:42:4a:7d:ff:54:d9:e1:33: 02:bc:21:47:98:93:42:24:b2:d4:a4:38:fa:d3:e4:25:8f:55: 51:00:b5:38 -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgIUFCA0sQD6iF5tr/xVBO74ZdyiyUcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEygxMjM0NUYxMTVB QzRCNjJBNTFGNTI3NEM1NEM4MUU4NjQ2M0JEMEJBMB4XDTI2MDQwMTAzMzUzM1oX DTI3MDMzMTAzNDAzM1owMzExMC8GA1UEAxMoMDhBODI5ODlDODhFMDgwODE0ODZD NTFFOEJEQzE0RkVCQzZDMDYyMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMX3QvL4SSnIaVbfTRp/CcABgj9heOr+uCnIJILDode1IuTqIMPt7QjZO41b zU7xcC1sF5K/OYfcCoaUKviZ4tWRd2zo/i4K5zEWz1dWOwvOVXnR611PsYGsQC4O ZZfYexsLBemxJbOfVPfSuYfAI24VUD5v29nJ3VnkgEG/b+Rrcgj/R4ow0302DpBz 8GO/x3zh2i7aoWp0h7S/EQRmA8U4oBZkECBKmxj2meCtLVvqqWoqfEYLeTNUpjwq MiNc3tgc+bGSHvEm7MyY7r7Y6eaFANLCpprqotxRa5v5aLm5gBAEfDr2YC4XSBdc j5keGAp6uY4qzwRREzaofcndNVcCAwEAAaOCAgMwggH/MB0GA1UdDgQWBBQIqCmJ yI4ICBSGxR6L3BT+vGwGITAfBgNVHSMEGDAWgBQSNF8RWsS2KlH1J0xUyB6GRjvQ ujAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMC8xMjM0NUYxMTVBQzRCNjJB NTFGNTI3NEM1NEM4MUU4NjQ2M0JEMEJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CMzIy QTVGNDFENjYxMUUyQTNGMjdGN0M3MkZEMUZGMi9FalJmRVZyRXRpcFI5U2RNVk1n ZWhrWTcwTG8uY2VyMIGGBggrBgEFBQcBCwR6MHgwdgYIKwYBBQUHMAuGanJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL0lETklDLUlELzAvMzEzNTMxMmUz MTM1MzgyZTMyMzMzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzUzNDM1MzIz OC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAJee7zANBgkqhkiG9w0BAQsFAAOCAQEAnVAeZEYMIodAqdSh lxHQ5he4Y7LwZmmfznkxfSW78C15QJTGoPdxUS/r9YCHfFVM6JV6LzwlyKbkhIL2 FO+Uutjosl8xrB5smYeXu+3nUwGK28isnEZE1gOk6CywIfxCMNqwcFp6jAi+kfvU 7Ns/7Umsjz6Yun2C5PdkTpUwDMMiqpSvbPs41jMFb20BnPt1mrclPmjRKHBD+3oq nTruCikHo8N52iuAHZFav2Tq/Nf/F5dh6MsgyrAmjRYKb61QTej9E1mRbM1GoFVC fjnoWmYONUCEZ9exJKk1HTL6o+3ucUJKff9U2eEzArwhR5iTQiSy1KQ4+tPkJY9V UQC1OA== -----END CERTIFICATE-----Generated at Fri Apr 17 16:11:53 2026 by rpki-client