$ rpki-client -vvf repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3135302e3130372e3130382e302f32322d3234203d3e203138303539.roa File: 3135302e3130372e3130382e302f32322d3234203d3e203138303539.roa (raw, json) Hash identifier: LvVBQ26RG9BUStDlFlm0kc5vXUN6deVeT7aK6PdwDts= Subject key identifier: 32:D4:C3:44:3D:31:DF:00:E4:A4:6E:00:E8:A5:C0:72:19:DC:8E:BA Certificate issuer: /CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E Certificate serial: 5F983AC91351C53274CBC54687EDE70D752B1B79 Authority key identifier: 82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3135302e3130372e3130382e302f32322d3234203d3e203138303539.roa Signing time: Fri 20 Feb 2026 11:00:01 +0000 ROA not before: Fri 20 Feb 2026 10:55:01 +0000 ROA not after: Fri 19 Feb 2027 11:00:01 +0000 asID: 18059 IP address blocks: 150.107.108.0/22 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 14:25:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:98:3a:c9:13:51:c5:32:74:cb:c5:46:87:ed:e7:0d:75:2b:1b:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E Validity Not Before: Feb 20 10:55:01 2026 GMT Not After : Feb 19 11:00:01 2027 GMT Subject: CN=32D4C3443D31DF00E4A46E00E8A5C07219DC8EBA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:61:88:3e:04:b8:0b:ec:79:7f:3a:cd:b0:37: 18:8e:77:9d:58:02:16:fc:d8:bd:d5:59:61:7e:ac: 66:ef:a0:b6:d3:01:30:f1:23:87:68:67:36:1b:1e: 7d:ab:86:40:31:4d:8d:8e:f2:68:ec:7e:50:2b:b2: 51:63:5c:87:46:82:16:66:4b:9f:27:b0:da:dc:cb: c7:57:0d:bb:4c:f9:89:08:fb:87:d6:e4:e3:f7:f6: 6d:bf:e8:50:3c:87:ed:79:93:6c:f3:33:67:ec:1d: 3f:21:e2:61:2a:ce:ad:1d:bf:3e:e0:f0:73:90:1b: da:29:3b:51:ed:74:93:2c:1b:60:8a:33:f6:d1:2d: 3c:e5:fc:fa:8c:b6:01:bd:c4:c6:56:5d:8b:eb:31: 3f:95:e9:66:28:c0:5b:f3:6e:c3:d5:ff:80:f0:08: 1a:fd:ec:ee:50:63:33:37:5d:27:a5:ec:16:9b:23: ad:eb:d3:63:1f:3e:7f:35:31:64:e9:87:4b:a4:fc: 61:78:70:60:d2:06:78:e5:8f:40:b7:a9:20:fb:2b: 1d:d6:42:35:8d:c2:f6:ee:c8:34:db:6c:44:a4:a3: 2b:b6:c7:e5:16:c4:23:40:36:9b:e1:75:e0:5f:1d: e1:c4:01:a8:10:24:4d:4b:9b:24:14:ea:00:6c:a7: d0:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:D4:C3:44:3D:31:DF:00:E4:A4:6E:00:E8:A5:C0:72:19:DC:8E:BA X509v3 Authority Key Identifier: keyid:82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3135302e3130372e3130382e302f32322d3234203d3e203138303539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 150.107.108.0/22 Signature Algorithm: sha256WithRSAEncryption 2d:fc:46:62:91:65:e1:fa:40:da:09:13:d8:be:ed:c1:d2:b8: bf:0d:17:ac:6c:58:1c:fb:b9:80:16:15:fa:ce:e0:db:9a:0d: 85:25:27:fa:16:1f:3e:84:40:4b:eb:c1:35:2c:9a:84:63:c3: 50:42:3e:cb:62:a6:73:c2:d4:7d:dc:b6:e6:df:6f:d9:94:b2: d2:d0:d6:16:53:bb:24:4b:85:ce:97:ed:ea:ff:8b:ac:2c:91: 80:20:27:41:19:4e:31:30:e1:cd:ca:ad:af:26:62:67:6d:55: 00:e7:2f:96:08:8a:37:1b:b1:4d:f8:26:ec:6e:e6:1b:bc:6a: 1c:37:c2:0d:c6:17:ef:21:d5:e7:a0:00:b0:ae:9c:59:1c:b9: ff:13:a5:37:22:41:a3:a9:0f:6f:94:bc:2f:d4:64:38:69:a1: 7d:9b:b3:86:46:d6:65:dd:0a:5b:dc:0f:29:fa:1b:f4:14:1e: e0:b0:05:16:76:95:18:37:ec:26:9e:57:86:f1:31:c6:44:43: a1:0c:d7:6d:fb:5a:70:ae:1e:28:b1:b8:ce:81:1e:3f:f0:d4: 53:2f:07:7d:cf:d5:d6:8e:ff:d9:b0:e9:dc:d3:ad:01:11:24: 3f:18:42:f4:cb:96:a2:48:62:74:e0:ee:0f:aa:4a:45:8f:07: 33:34:a8:ac -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUX5g6yRNRxTJ0y8VGh+3nDXUrG3kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODI4ODQxNTFBNTI4M0Y0M0NBOTdDRTFBQ0U5NUE1MUM2 QzhBMUQ4RTAeFw0yNjAyMjAxMDU1MDFaFw0yNzAyMTkxMTAwMDFaMDMxMTAvBgNV BAMTKDMyRDRDMzQ0M0QzMURGMDBFNEE0NkUwMEU4QTVDMDcyMTlEQzhFQkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBYYg+BLgL7Hl/Os2wNxiOd51Y Ahb82L3VWWF+rGbvoLbTATDxI4doZzYbHn2rhkAxTY2O8mjsflArslFjXIdGghZm S58nsNrcy8dXDbtM+YkI+4fW5OP39m2/6FA8h+15k2zzM2fsHT8h4mEqzq0dvz7g 8HOQG9opO1HtdJMsG2CKM/bRLTzl/PqMtgG9xMZWXYvrMT+V6WYowFvzbsPV/4Dw CBr97O5QYzM3XSel7BabI63r02MfPn81MWTph0uk/GF4cGDSBnjlj0C3qSD7Kx3W QjWNwvbuyDTbbESkoyu2x+UWxCNANpvhdeBfHeHEAagQJE1LmyQU6gBsp9BxAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUMtTDRD0x3wDkpG4A6KXAchncjrowHwYDVR0j BBgwFoAUgohBUaUoP0PKl84azpWlHGyKHY4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MjgzNjc2My0xMmI2LTRkOGYtYWQwYi00Y2Q1YjYxOTU5ZWYvMC84Mjg4NDE1MUE1 MjgzRjQzQ0E5N0NFMUFDRTk1QTUxQzZDOEExRDhFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODI4ODQxNTFBNTI4M0Y0M0NBOTdDRTFBQ0U5NUE1MUM2QzhB MUQ4RS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2MyODM2NzYzLTEyYjYtNGQ4Zi1h ZDBiLTRjZDViNjE5NTllZi8wLzMxMzUzMDJlMzEzMDM3MmUzMTMwMzgyZTMwMmYz MjMyMmQzMjM0MjAzZDNlMjAzMTM4MzAzNTM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClmtsMA0GCSqG SIb3DQEBCwUAA4IBAQAt/EZikWXh+kDaCRPYvu3B0ri/DResbFgc+7mAFhX6zuDb mg2FJSf6Fh8+hEBL68E1LJqEY8NQQj7LYqZzwtR93Lbm32/ZlLLS0NYWU7skS4XO l+3q/4usLJGAICdBGU4xMOHNyq2vJmJnbVUA5y+WCIo3G7FN+CbsbuYbvGocN8IN xhfvIdXnoACwrpxZHLn/E6U3IkGjqQ9vlLwv1GQ4aaF9m7OGRtZl3Qpb3A8p+hv0 FB7gsAUWdpUYN+wmnleG8THGREOhDNdt+1pwrh4osbjOgR4/8NRTLwd9z9XWjv/Z sOnc060BESQ/GEL0y5aiSGJ04O4PqkpFjwczNKis -----END CERTIFICATE-----Generated at Mon Mar 2 15:20:09 2026 by rpki-client