$ rpki-client -vvf repo-rpki.idnic.net/repo/c86ff264-ff25-4fe6-86ef-d84b7d288354/0/3135372e32302e3133302e302f32342d3234203d3e20313532343134.roa File: 3135372e32302e3133302e302f32342d3234203d3e20313532343134.roa (raw, json) Hash identifier: XsyvDRA0TNZEIvbyLzo4xfiEE9IebAVqTJNT7CQxRoY= Subject key identifier: 51:03:2F:CC:28:D0:60:26:72:93:7D:41:D3:86:91:99:B8:04:5D:E6 Certificate issuer: /CN=F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF Certificate serial: 58E77F981D6566C1D8D0EECD3F2685AC4D5F8F1A Authority key identifier: F8:FA:AE:F9:7E:D3:DB:A7:D2:72:43:70:7C:7C:0D:16:05:89:6B:AF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c86ff264-ff25-4fe6-86ef-d84b7d288354/0/3135372e32302e3133302e302f32342d3234203d3e20313532343134.roa Signing time: Tue 10 Feb 2026 09:00:02 +0000 ROA not before: Tue 10 Feb 2026 08:55:02 +0000 ROA not after: Tue 09 Feb 2027 09:00:02 +0000 asID: 152414 IP address blocks: 157.20.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c86ff264-ff25-4fe6-86ef-d84b7d288354/0/F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.crl rsync://repo-rpki.idnic.net/repo/c86ff264-ff25-4fe6-86ef-d84b7d288354/0/F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 16:23:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:e7:7f:98:1d:65:66:c1:d8:d0:ee:cd:3f:26:85:ac:4d:5f:8f:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF Validity Not Before: Feb 10 08:55:02 2026 GMT Not After : Feb 9 09:00:02 2027 GMT Subject: CN=51032FCC28D0602672937D41D3869199B8045DE6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:98:74:dc:9e:38:23:36:7c:46:0f:2a:e7:43: 60:96:d2:48:c8:44:99:d8:57:24:22:bb:34:00:5b: a2:ff:b5:15:be:d0:2d:e9:52:8d:8f:97:fb:11:4a: 58:0d:71:72:25:c8:64:42:6e:a4:ab:8f:b3:1e:e1: 0c:63:3a:22:6e:08:6f:44:08:bf:96:d3:8e:64:1f: 0e:86:3f:ea:48:1c:30:40:cd:39:45:e5:06:17:c1: e1:43:38:e0:27:cd:c1:1d:00:f7:0c:de:53:6a:43: fa:8f:0f:2c:c3:43:2c:9b:16:44:8a:f4:80:e8:f6: 26:e0:5e:28:0b:c5:25:b8:f0:d6:df:28:b6:49:02: 59:16:d5:9c:7d:0c:e7:71:e9:c0:0d:cc:bf:cf:b8: a2:7f:65:ff:e1:4f:21:56:e3:4f:b0:39:ef:76:d6: 2f:80:31:f7:9c:bc:47:11:71:e4:06:86:fb:84:74: 6b:05:59:ca:58:e4:4c:85:06:ba:45:c7:02:5d:38: 8b:11:d8:b2:73:84:fd:4a:93:d6:16:b6:9e:52:3c: 6a:07:47:2b:4a:ef:7d:98:bb:89:d1:02:be:44:7f: e0:3a:2d:30:b1:bf:dd:67:3c:dd:ef:c9:37:a6:2f: 7d:30:15:c8:b5:50:d6:a0:4f:05:8a:18:88:35:d6: 16:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:03:2F:CC:28:D0:60:26:72:93:7D:41:D3:86:91:99:B8:04:5D:E6 X509v3 Authority Key Identifier: keyid:F8:FA:AE:F9:7E:D3:DB:A7:D2:72:43:70:7C:7C:0D:16:05:89:6B:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c86ff264-ff25-4fe6-86ef-d84b7d288354/0/F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c86ff264-ff25-4fe6-86ef-d84b7d288354/0/3135372e32302e3133302e302f32342d3234203d3e20313532343134.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.20.130.0/24 Signature Algorithm: sha256WithRSAEncryption 48:5e:e1:42:53:54:2d:23:b5:8a:ac:a7:f1:94:76:80:c5:74: 38:f5:31:d7:ef:db:0e:14:89:76:b2:0f:6f:cc:02:87:43:c5: ec:05:b4:a1:a5:26:f1:e9:be:fc:1b:99:d9:b2:f5:5d:46:38: 31:bf:78:d2:e4:1b:21:b3:75:df:98:5b:e4:57:6d:c9:64:69: 33:1d:43:af:e6:77:9f:4d:b2:67:74:60:0e:a0:92:5c:c4:a9: 23:52:48:3f:48:35:65:b0:cd:e4:9f:4c:5e:09:71:fd:67:a3: 64:c9:51:23:cb:a0:91:83:b4:07:dc:96:25:b2:18:d0:78:94: 22:61:1a:f0:fb:69:91:72:23:64:d6:92:aa:ae:af:54:9f:23: 8f:50:a1:82:97:b7:90:b5:2f:72:fc:90:6e:a0:32:eb:79:c6: 3a:8a:80:9e:dd:9d:dc:f7:dc:ed:23:30:7b:9d:fc:54:50:af: b4:75:73:58:84:7a:d2:ef:e7:4e:45:f6:5f:33:f6:f9:33:9b: 31:88:35:9c:d7:b8:05:70:1a:25:b4:b3:11:eb:2a:d0:ff:df: 30:fe:24:e7:ad:6b:4f:d3:c7:29:4b:b5:f6:53:05:be:f4:e6: f2:a8:1f:ac:42:f4:6f:e8:30:4c:cc:6e:f9:b3:56:a8:ba:12: 18:d8:0c:92 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUWOd/mB1lZsHY0O7NPyaFrE1fjxowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjhGQUFFRjk3RUQzREJBN0QyNzI0MzcwN0M3QzBEMTYw NTg5NkJBRjAeFw0yNjAyMTAwODU1MDJaFw0yNzAyMDkwOTAwMDJaMDMxMTAvBgNV BAMTKDUxMDMyRkNDMjhEMDYwMjY3MjkzN0Q0MUQzODY5MTk5QjgwNDVERTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9mHTcnjgjNnxGDyrnQ2CW0kjI RJnYVyQiuzQAW6L/tRW+0C3pUo2Pl/sRSlgNcXIlyGRCbqSrj7Me4QxjOiJuCG9E CL+W045kHw6GP+pIHDBAzTlF5QYXweFDOOAnzcEdAPcM3lNqQ/qPDyzDQyybFkSK 9IDo9ibgXigLxSW48NbfKLZJAlkW1Zx9DOdx6cANzL/PuKJ/Zf/hTyFW40+wOe92 1i+AMfecvEcRceQGhvuEdGsFWcpY5EyFBrpFxwJdOIsR2LJzhP1Kk9YWtp5SPGoH RytK732Yu4nRAr5Ef+A6LTCxv91nPN3vyTemL30wFci1UNagTwWKGIg11hYLAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUUQMvzCjQYCZyk31B04aRmbgEXeYwHwYDVR0j BBgwFoAU+Pqu+X7T26fSckNwfHwNFgWJa68wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ODZmZjI2NC1mZjI1LTRmZTYtODZlZi1kODRiN2QyODgzNTQvMC9GOEZBQUVGOTdF RDNEQkE3RDI3MjQzNzA3QzdDMEQxNjA1ODk2QkFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRjhGQUFFRjk3RUQzREJBN0QyNzI0MzcwN0M3QzBEMTYwNTg5 NkJBRi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2M4NmZmMjY0LWZmMjUtNGZlNi04 NmVmLWQ4NGI3ZDI4ODM1NC8wLzMxMzUzNzJlMzIzMDJlMzEzMzMwMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNTMyMzQzMTM0LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnRSCMA0GCSqG SIb3DQEBCwUAA4IBAQBIXuFCU1QtI7WKrKfxlHaAxXQ49THX79sOFIl2sg9vzAKH Q8XsBbShpSbx6b78G5nZsvVdRjgxv3jS5Bshs3XfmFvkV23JZGkzHUOv5nefTbJn dGAOoJJcxKkjUkg/SDVlsM3kn0xeCXH9Z6NkyVEjy6CRg7QH3JYlshjQeJQiYRrw +2mRciNk1pKqrq9UnyOPUKGCl7eQtS9y/JBuoDLrecY6ioCe3Z3c99ztIzB7nfxU UK+0dXNYhHrS7+dORfZfM/b5M5sxiDWc17gFcBoltLMR6yrQ/98w/iTnrWtP08cp S7X2UwW+9ObyqB+sQvRv6DBMzG75s1aouhIY2AyS -----END CERTIFICATE-----Generated at Mon Mar 2 14:48:32 2026 by rpki-client