$ rpki-client -vvf repo-rpki.idnic.net/repo/c86ff264-ff25-4fe6-86ef-d84b7d288354/0/3135372e32302e3133312e302f32342d3234203d3e20313532343134.roa File: 3135372e32302e3133312e302f32342d3234203d3e20313532343134.roa (raw, json) Hash identifier: 8cewFPLuyArtugKlZDxPydivdpl6gb8C4w3o7gohs6Q= Subject key identifier: 1B:78:FE:63:BE:DA:43:AD:AA:19:B2:EE:11:32:32:8A:56:CC:7D:7A Certificate issuer: /CN=F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF Certificate serial: 21BEE914E3982A7F13D4EE6E2590E82055532D6A Authority key identifier: F8:FA:AE:F9:7E:D3:DB:A7:D2:72:43:70:7C:7C:0D:16:05:89:6B:AF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c86ff264-ff25-4fe6-86ef-d84b7d288354/0/3135372e32302e3133312e302f32342d3234203d3e20313532343134.roa Signing time: Tue 10 Feb 2026 09:00:03 +0000 ROA not before: Tue 10 Feb 2026 08:55:03 +0000 ROA not after: Tue 09 Feb 2027 09:00:03 +0000 asID: 152414 IP address blocks: 157.20.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c86ff264-ff25-4fe6-86ef-d84b7d288354/0/F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.crl rsync://repo-rpki.idnic.net/repo/c86ff264-ff25-4fe6-86ef-d84b7d288354/0/F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 16:23:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:be:e9:14:e3:98:2a:7f:13:d4:ee:6e:25:90:e8:20:55:53:2d:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF Validity Not Before: Feb 10 08:55:03 2026 GMT Not After : Feb 9 09:00:03 2027 GMT Subject: CN=1B78FE63BEDA43ADAA19B2EE1132328A56CC7D7A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:b8:6c:e2:c0:73:d7:60:c1:6e:86:37:a5:87: 3d:7b:f4:b6:4e:12:39:31:43:65:ce:1e:8b:8f:c6: d5:46:3a:78:30:ab:b5:4e:ac:6b:f1:28:23:2a:a2: f6:f1:e9:8a:8a:aa:2d:3f:27:dc:3c:db:4b:45:fe: 0a:49:29:77:0e:6d:8b:72:67:1c:5a:45:cc:82:42: 82:da:c6:27:54:5e:4e:f3:5e:53:65:aa:52:13:af: fe:a7:49:13:0a:51:c1:96:0b:2d:24:45:4e:bd:9f: de:64:60:bb:ed:55:3b:73:b5:74:19:5d:2c:f0:fa: 5b:37:74:4b:4b:33:47:c2:d1:50:60:ce:5f:22:98: e4:a0:72:ba:2b:37:62:32:b9:2c:8e:c9:9b:95:de: ba:16:93:94:dd:d1:0f:48:5a:03:0f:96:c9:65:fc: a6:98:18:20:d2:91:52:5d:a8:8a:cd:86:37:47:ed: 4c:07:71:b6:3c:12:52:3b:48:85:d2:2d:7b:df:15: 3c:d9:21:ba:87:c0:94:b2:9a:05:5e:f1:2c:89:18: 20:98:14:cb:50:2b:a7:fd:57:f7:25:fe:91:7c:21: 67:be:b7:5e:ac:42:09:52:c7:59:4a:5f:82:13:20: 8c:7b:f0:ad:00:9f:09:4d:3e:0a:7b:8c:56:50:e5: a5:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:78:FE:63:BE:DA:43:AD:AA:19:B2:EE:11:32:32:8A:56:CC:7D:7A X509v3 Authority Key Identifier: keyid:F8:FA:AE:F9:7E:D3:DB:A7:D2:72:43:70:7C:7C:0D:16:05:89:6B:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c86ff264-ff25-4fe6-86ef-d84b7d288354/0/F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c86ff264-ff25-4fe6-86ef-d84b7d288354/0/3135372e32302e3133312e302f32342d3234203d3e20313532343134.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.20.131.0/24 Signature Algorithm: sha256WithRSAEncryption 87:d4:42:7d:fe:8a:d9:82:43:42:2e:3d:8f:80:8a:26:d7:77: c1:24:b0:92:a3:c7:e7:70:56:40:66:df:12:71:66:0d:b1:8d: e1:96:43:cb:fa:84:91:ce:cc:ff:11:00:a2:5e:41:32:20:1d: 2b:b9:2c:56:19:ba:7d:32:52:f6:63:7b:92:96:55:13:dc:6b: a4:ef:88:8a:4e:81:8e:ad:3f:05:b8:b9:be:24:6e:f0:9a:c8: 47:aa:d2:91:9c:59:cf:c7:c1:73:8d:f2:a4:26:73:bf:de:e5: f0:04:d5:4c:d4:40:b4:18:61:84:85:36:90:2b:00:b8:66:15: cf:b7:c5:92:f3:42:65:64:f2:fd:09:0c:12:b9:9a:1d:28:98: 2a:64:86:55:8a:69:e8:4a:10:05:e7:04:e3:77:b2:a3:3a:14: 54:e2:7d:f6:f8:0f:aa:4d:63:33:95:fe:99:ce:b3:05:ca:39: 23:4f:0a:7e:23:83:45:2f:f7:b0:c7:31:84:fb:96:8f:3e:aa: 35:93:c7:be:12:f7:76:f6:24:32:46:10:b3:ca:1e:1b:5b:b6: 89:75:e3:04:98:df:d0:9a:96:68:de:57:fe:79:0f:9c:dc:71: 6f:68:96:d6:1f:05:ed:2f:fb:b7:19:8d:e0:69:2d:20:49:94: b1:6b:f1:2d -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUIb7pFOOYKn8T1O5uJZDoIFVTLWowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjhGQUFFRjk3RUQzREJBN0QyNzI0MzcwN0M3QzBEMTYw NTg5NkJBRjAeFw0yNjAyMTAwODU1MDNaFw0yNzAyMDkwOTAwMDNaMDMxMTAvBgNV BAMTKDFCNzhGRTYzQkVEQTQzQURBQTE5QjJFRTExMzIzMjhBNTZDQzdEN0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSuGziwHPXYMFuhjelhz179LZO EjkxQ2XOHouPxtVGOngwq7VOrGvxKCMqovbx6YqKqi0/J9w820tF/gpJKXcObYty ZxxaRcyCQoLaxidUXk7zXlNlqlITr/6nSRMKUcGWCy0kRU69n95kYLvtVTtztXQZ XSzw+ls3dEtLM0fC0VBgzl8imOSgcrorN2IyuSyOyZuV3roWk5Td0Q9IWgMPlsll /KaYGCDSkVJdqIrNhjdH7UwHcbY8ElI7SIXSLXvfFTzZIbqHwJSymgVe8SyJGCCY FMtQK6f9V/cl/pF8IWe+t16sQglSx1lKX4ITIIx78K0AnwlNPgp7jFZQ5aV1AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUG3j+Y77aQ62qGbLuETIyilbMfXowHwYDVR0j BBgwFoAU+Pqu+X7T26fSckNwfHwNFgWJa68wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ODZmZjI2NC1mZjI1LTRmZTYtODZlZi1kODRiN2QyODgzNTQvMC9GOEZBQUVGOTdF RDNEQkE3RDI3MjQzNzA3QzdDMEQxNjA1ODk2QkFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRjhGQUFFRjk3RUQzREJBN0QyNzI0MzcwN0M3QzBEMTYwNTg5 NkJBRi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2M4NmZmMjY0LWZmMjUtNGZlNi04 NmVmLWQ4NGI3ZDI4ODM1NC8wLzMxMzUzNzJlMzIzMDJlMzEzMzMxMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNTMyMzQzMTM0LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnRSDMA0GCSqG SIb3DQEBCwUAA4IBAQCH1EJ9/orZgkNCLj2PgIom13fBJLCSo8fncFZAZt8ScWYN sY3hlkPL+oSRzsz/EQCiXkEyIB0ruSxWGbp9MlL2Y3uSllUT3Guk74iKToGOrT8F uLm+JG7wmshHqtKRnFnPx8FzjfKkJnO/3uXwBNVM1EC0GGGEhTaQKwC4ZhXPt8WS 80JlZPL9CQwSuZodKJgqZIZVimnoShAF5wTjd7KjOhRU4n32+A+qTWMzlf6ZzrMF yjkjTwp+I4NFL/ewxzGE+5aPPqo1k8e+Evd29iQyRhCzyh4bW7aJdeMEmN/QmpZo 3lf+eQ+c3HFvaJbWHwXtL/u3GY3gaS0gSZSxa/Et -----END CERTIFICATE-----Generated at Mon Mar 2 17:13:57 2026 by rpki-client