$ rpki-client -vvf repo-rpki.idnic.net/repo/a56eccb7-e917-40f5-acee-03d68be5fd97/0/3135372e31352e3134352e302f32342d3234203d3e20313532333736.roa File: 3135372e31352e3134352e302f32342d3234203d3e20313532333736.roa (raw, json) Hash identifier: xFffnrBfGrqinSzTOcLoNlqUPiFPKVW2xknOINPEUaI= Subject key identifier: DB:4E:36:21:08:D6:C2:DC:59:9D:35:60:BB:D8:82:76:27:C8:48:71 Certificate issuer: /CN=2246015FFF2FC55FEFB9C44A8AD416B55FA5E73F Certificate serial: 074DB7C727E09EB616F52BFDB44A2C6FD03DD802 Authority key identifier: 22:46:01:5F:FF:2F:C5:5F:EF:B9:C4:4A:8A:D4:16:B5:5F:A5:E7:3F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2246015FFF2FC55FEFB9C44A8AD416B55FA5E73F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a56eccb7-e917-40f5-acee-03d68be5fd97/0/3135372e31352e3134352e302f32342d3234203d3e20313532333736.roa Signing time: Mon 02 Mar 2026 06:00:01 +0000 ROA not before: Mon 02 Mar 2026 05:55:01 +0000 ROA not after: Mon 01 Mar 2027 06:00:01 +0000 asID: 152376 IP address blocks: 157.15.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a56eccb7-e917-40f5-acee-03d68be5fd97/0/2246015FFF2FC55FEFB9C44A8AD416B55FA5E73F.crl rsync://repo-rpki.idnic.net/repo/a56eccb7-e917-40f5-acee-03d68be5fd97/0/2246015FFF2FC55FEFB9C44A8AD416B55FA5E73F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2246015FFF2FC55FEFB9C44A8AD416B55FA5E73F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 09:40:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:4d:b7:c7:27:e0:9e:b6:16:f5:2b:fd:b4:4a:2c:6f:d0:3d:d8:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2246015FFF2FC55FEFB9C44A8AD416B55FA5E73F Validity Not Before: Mar 2 05:55:01 2026 GMT Not After : Mar 1 06:00:01 2027 GMT Subject: CN=DB4E362108D6C2DC599D3560BBD8827627C84871 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:b2:56:fb:7d:7a:b0:3e:b7:a4:da:7a:be:d6: 3f:f3:af:a8:f4:5c:d8:1f:e3:1c:9d:27:fd:1f:1c: 3f:ad:15:15:cd:b2:a4:70:df:46:77:a0:0b:78:74: 9a:ab:87:9e:83:73:53:53:5f:1b:54:22:fa:ca:ce: 13:32:a3:41:fb:57:2d:26:61:a0:04:19:2e:3f:21: 08:70:67:d8:a0:16:da:c2:9a:5e:e1:7b:44:ef:c6: 82:70:c0:e0:b1:90:19:ea:57:60:5b:c3:ad:3c:e9: 03:3e:7d:ce:1c:30:88:4d:a6:ce:b8:21:30:2f:89: 97:ff:70:6a:39:2a:b6:da:fd:ac:ba:f9:42:19:a4: 2c:8b:f1:ee:f6:94:ca:5d:42:3b:3f:47:99:04:49: db:7a:8e:25:ec:b0:3d:c2:2a:de:a0:27:08:8f:37: 4d:59:92:89:6f:3c:b9:e9:9c:c1:34:10:3e:a2:fe: f8:ae:71:e3:9d:85:d3:cb:e9:d1:33:51:65:51:13: d3:38:57:44:fb:a1:63:1e:c7:85:e7:ca:8c:c2:04: 31:8f:9f:97:8a:33:4c:56:2a:50:89:5e:bd:e3:4e: e9:18:d9:85:ad:e7:75:14:d6:e5:bf:02:c9:5d:97: 70:de:3e:d5:9e:1c:19:e8:44:16:28:de:bf:b0:00: 18:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:4E:36:21:08:D6:C2:DC:59:9D:35:60:BB:D8:82:76:27:C8:48:71 X509v3 Authority Key Identifier: keyid:22:46:01:5F:FF:2F:C5:5F:EF:B9:C4:4A:8A:D4:16:B5:5F:A5:E7:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a56eccb7-e917-40f5-acee-03d68be5fd97/0/2246015FFF2FC55FEFB9C44A8AD416B55FA5E73F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2246015FFF2FC55FEFB9C44A8AD416B55FA5E73F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a56eccb7-e917-40f5-acee-03d68be5fd97/0/3135372e31352e3134352e302f32342d3234203d3e20313532333736.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.15.145.0/24 Signature Algorithm: sha256WithRSAEncryption 13:07:82:b4:54:70:e6:8b:10:09:4c:f4:9e:28:f1:0a:0d:97: 6d:bc:d5:f2:52:19:8c:bb:f5:b2:46:03:54:c3:3f:73:9d:d2: 57:0b:a9:45:9b:9b:c0:f9:26:e7:cd:21:89:be:4e:5f:66:cb: b7:0c:a0:ba:72:4b:63:bc:fc:a0:7e:c5:f5:13:07:40:3b:b4: f4:14:e3:4a:76:b0:67:63:98:e8:a7:14:85:b7:30:cc:61:c9: 63:93:86:a2:cc:e5:32:4c:e6:2b:26:eb:49:2a:0e:cd:82:4d: cd:38:8d:da:8d:bc:e2:6b:97:78:7c:c7:14:f4:e1:c1:a3:fa: a7:bf:62:37:98:f0:f4:f8:f4:1f:a7:3e:a4:bf:ef:06:74:46: b9:5f:89:c6:70:10:ed:8a:cb:84:d0:40:ad:46:e9:e6:7c:d3: d0:db:75:83:18:d9:7f:bd:fe:16:e3:66:b9:db:fe:fb:bd:ad: 63:3d:67:0d:7b:da:31:82:ec:7c:d2:17:2d:47:35:7a:a7:be: ec:9c:13:eb:c0:6b:f8:da:9d:5e:f4:d6:15:8b:57:58:70:0f: b8:07:ca:e6:78:33:84:f6:ee:b4:8c:96:dc:a3:22:c3:d5:0a: 59:b8:78:4c:d4:78:65:3d:91:b1:38:35:b3:88:1d:41:f3:e4: 31:e8:d1:a6 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUB023xyfgnrYW9Sv9tEosb9A92AIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjI0NjAxNUZGRjJGQzU1RkVGQjlDNDRBOEFENDE2QjU1 RkE1RTczRjAeFw0yNjAzMDIwNTU1MDFaFw0yNzAzMDEwNjAwMDFaMDMxMTAvBgNV BAMTKERCNEUzNjIxMDhENkMyREM1OTlEMzU2MEJCRDg4Mjc2MjdDODQ4NzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgslb7fXqwPrek2nq+1j/zr6j0 XNgf4xydJ/0fHD+tFRXNsqRw30Z3oAt4dJqrh56Dc1NTXxtUIvrKzhMyo0H7Vy0m YaAEGS4/IQhwZ9igFtrCml7he0TvxoJwwOCxkBnqV2Bbw6086QM+fc4cMIhNps64 ITAviZf/cGo5Krba/ay6+UIZpCyL8e72lMpdQjs/R5kESdt6jiXssD3CKt6gJwiP N01ZkolvPLnpnME0ED6i/viuceOdhdPL6dEzUWVRE9M4V0T7oWMex4XnyozCBDGP n5eKM0xWKlCJXr3jTukY2YWt53UU1uW/Asldl3DePtWeHBnoRBYo3r+wABh1AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU2042IQjWwtxZnTVgu9iCdifISHEwHwYDVR0j BBgwFoAUIkYBX/8vxV/vucRKitQWtV+l5z8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NTZlY2NiNy1lOTE3LTQwZjUtYWNlZS0wM2Q2OGJlNWZkOTcvMC8yMjQ2MDE1RkZG MkZDNTVGRUZCOUM0NEE4QUQ0MTZCNTVGQTVFNzNGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMjI0NjAxNUZGRjJGQzU1RkVGQjlDNDRBOEFENDE2QjU1RkE1 RTczRi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E1NmVjY2I3LWU5MTctNDBmNS1h Y2VlLTAzZDY4YmU1ZmQ5Ny8wLzMxMzUzNzJlMzEzNTJlMzEzNDM1MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNTMyMzMzNzM2LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnQ+RMA0GCSqG SIb3DQEBCwUAA4IBAQATB4K0VHDmixAJTPSeKPEKDZdtvNXyUhmMu/WyRgNUwz9z ndJXC6lFm5vA+SbnzSGJvk5fZsu3DKC6cktjvPygfsX1EwdAO7T0FONKdrBnY5jo pxSFtzDMYcljk4aizOUyTOYrJutJKg7Ngk3NOI3ajbzia5d4fMcU9OHBo/qnv2I3 mPD0+PQfpz6kv+8GdEa5X4nGcBDtisuE0ECtRunmfNPQ23WDGNl/vf4W42a52/77 va1jPWcNe9oxgux80hctRzV6p77snBPrwGv42p1e9NYVi1dYcA+4B8rmeDOE9u60 jJbcoyLD1QpZuHhM1HhlPZGxODWziB1B8+Qx6NGm -----END CERTIFICATE-----Generated at Tue Mar 3 01:15:02 2026 by rpki-client