$ rpki-client -vvf repo-rpki.idnic.net/repo/d159a362-950c-45c2-aecc-82b214bce474/0/3135372e32302e3135392e302f32342d3234203d3e20313431313230.roa File: 3135372e32302e3135392e302f32342d3234203d3e20313431313230.roa (raw, json) Hash identifier: nSJVoG4D6/bGoLQwSAn+ZSP/PaLdUBaDt+5AYEiWLy8= Subject key identifier: 53:D8:02:58:EC:60:20:9D:18:F4:DF:8D:F1:64:91:35:5B:F5:6F:31 Certificate issuer: /CN=3C6D7485D61AD54226152E5D8A813D70E34D29AB Certificate serial: 40D5AB7D290F25888855CE6BBD54C540BB7FDEAD Authority key identifier: 3C:6D:74:85:D6:1A:D5:42:26:15:2E:5D:8A:81:3D:70:E3:4D:29:AB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3C6D7485D61AD54226152E5D8A813D70E34D29AB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d159a362-950c-45c2-aecc-82b214bce474/0/3135372e32302e3135392e302f32342d3234203d3e20313431313230.roa Signing time: Wed 04 Feb 2026 03:00:01 +0000 ROA not before: Wed 04 Feb 2026 02:55:01 +0000 ROA not after: Wed 03 Feb 2027 03:00:01 +0000 asID: 141120 IP address blocks: 157.20.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d159a362-950c-45c2-aecc-82b214bce474/0/3C6D7485D61AD54226152E5D8A813D70E34D29AB.crl rsync://repo-rpki.idnic.net/repo/d159a362-950c-45c2-aecc-82b214bce474/0/3C6D7485D61AD54226152E5D8A813D70E34D29AB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3C6D7485D61AD54226152E5D8A813D70E34D29AB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 22:43:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:d5:ab:7d:29:0f:25:88:88:55:ce:6b:bd:54:c5:40:bb:7f:de:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C6D7485D61AD54226152E5D8A813D70E34D29AB Validity Not Before: Feb 4 02:55:01 2026 GMT Not After : Feb 3 03:00:01 2027 GMT Subject: CN=53D80258EC60209D18F4DF8DF16491355BF56F31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:91:4c:7e:27:a1:06:c1:31:bf:3d:89:26:ad: 11:46:be:9d:b1:62:a9:1f:8d:2c:d0:c4:89:17:05: fb:70:31:3f:c9:fb:14:19:d7:83:61:ab:43:fe:34: 54:40:2c:ba:f2:b0:9c:0e:06:a0:24:cb:69:7c:a0: 9c:59:8d:df:a5:62:17:6d:5c:be:cf:c6:39:9c:6f: c4:4f:42:30:b7:0d:8a:96:0a:ca:f2:cb:fb:4e:82: 8c:73:0a:6e:17:b8:52:1a:21:c7:73:0f:3f:12:3a: cf:a0:08:a4:db:0e:68:ac:ca:5a:f1:8c:af:57:9e: 51:7b:61:5c:97:82:47:a0:d7:82:98:89:96:79:a7: b0:86:45:97:8f:47:87:b3:eb:a7:af:71:0e:73:1d: f1:2d:bd:99:7b:a9:a1:d4:2f:f9:3b:9c:4f:41:28: 25:fd:c5:d3:9e:d9:68:1d:81:fd:74:f7:3c:85:ee: b9:54:f3:78:c4:20:2f:ed:0e:44:8b:84:ee:1b:23: e0:aa:44:45:22:10:10:9f:a2:97:ee:b0:de:66:40: 90:cb:6d:9f:69:d4:2c:92:2a:c3:a7:df:34:f3:d2: 36:08:37:a2:d8:56:42:4c:a7:44:86:28:55:ae:c9: ef:36:6e:fd:32:42:00:24:1d:38:56:3e:47:2e:c7: 8f:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:D8:02:58:EC:60:20:9D:18:F4:DF:8D:F1:64:91:35:5B:F5:6F:31 X509v3 Authority Key Identifier: keyid:3C:6D:74:85:D6:1A:D5:42:26:15:2E:5D:8A:81:3D:70:E3:4D:29:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d159a362-950c-45c2-aecc-82b214bce474/0/3C6D7485D61AD54226152E5D8A813D70E34D29AB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3C6D7485D61AD54226152E5D8A813D70E34D29AB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d159a362-950c-45c2-aecc-82b214bce474/0/3135372e32302e3135392e302f32342d3234203d3e20313431313230.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.20.159.0/24 Signature Algorithm: sha256WithRSAEncryption 13:4e:4a:ba:02:d8:6b:55:7f:29:7c:0a:c7:29:a0:6f:ff:bd: 95:b9:eb:79:4d:11:d5:54:a5:00:98:98:90:21:7b:11:53:10: 61:18:6a:7e:8f:ca:cb:9d:38:6f:be:3c:17:1b:53:92:69:72: de:c8:a6:1c:bf:50:ee:1b:0c:8c:3f:1e:d6:97:a1:a4:20:a5: f0:62:0c:11:b5:a1:b3:cc:69:7f:40:a7:ea:36:43:04:43:b0: f2:a8:c3:c9:7e:b5:79:3a:eb:f3:3b:73:51:1e:3d:93:54:35: fb:6a:04:ba:dc:8d:c5:e3:18:e6:00:73:4d:37:db:9a:21:52: 73:30:0b:1f:90:5f:6a:12:aa:b4:e8:24:ab:f2:b3:bd:93:88: e6:a9:38:f1:7d:87:21:4d:51:d9:3c:60:7f:13:4f:68:a2:6f: dd:d1:9d:20:41:1d:d9:55:a0:11:09:0b:e5:9d:78:f5:44:f7: e4:65:78:bd:38:21:4c:a3:11:62:d0:ef:bd:e1:30:52:53:99: 1a:27:2c:50:aa:d1:cf:f5:23:38:c7:43:7d:89:23:4f:42:e3: 43:7f:b4:f4:4b:94:72:7a:b0:1d:03:12:2c:bb:62:52:49:6f: a3:a3:df:04:d9:d4:2e:8e:84:62:91:9b:ec:05:56:5e:81:ca: 00:38:ff:56 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUQNWrfSkPJYiIVc5rvVTFQLt/3q0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0M2RDc0ODVENjFBRDU0MjI2MTUyRTVEOEE4MTNENzBF MzREMjlBQjAeFw0yNjAyMDQwMjU1MDFaFw0yNzAyMDMwMzAwMDFaMDMxMTAvBgNV BAMTKDUzRDgwMjU4RUM2MDIwOUQxOEY0REY4REYxNjQ5MTM1NUJGNTZGMzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0kUx+J6EGwTG/PYkmrRFGvp2x YqkfjSzQxIkXBftwMT/J+xQZ14Nhq0P+NFRALLrysJwOBqAky2l8oJxZjd+lYhdt XL7Pxjmcb8RPQjC3DYqWCsryy/tOgoxzCm4XuFIaIcdzDz8SOs+gCKTbDmisylrx jK9XnlF7YVyXgkeg14KYiZZ5p7CGRZePR4ez66evcQ5zHfEtvZl7qaHUL/k7nE9B KCX9xdOe2Wgdgf109zyF7rlU83jEIC/tDkSLhO4bI+CqREUiEBCfopfusN5mQJDL bZ9p1CySKsOn3zTz0jYIN6LYVkJMp0SGKFWuye82bv0yQgAkHThWPkcux48xAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUU9gCWOxgIJ0Y9N+N8WSRNVv1bzEwHwYDVR0j BBgwFoAUPG10hdYa1UImFS5dioE9cONNKaswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MTU5YTM2Mi05NTBjLTQ1YzItYWVjYy04MmIyMTRiY2U0NzQvMC8zQzZENzQ4NUQ2 MUFENTQyMjYxNTJFNUQ4QTgxM0Q3MEUzNEQyOUFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvM0M2RDc0ODVENjFBRDU0MjI2MTUyRTVEOEE4MTNENzBFMzRE MjlBQi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2QxNTlhMzYyLTk1MGMtNDVjMi1h ZWNjLTgyYjIxNGJjZTQ3NC8wLzMxMzUzNzJlMzIzMDJlMzEzNTM5MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNDMxMzEzMjMwLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnRSfMA0GCSqG SIb3DQEBCwUAA4IBAQATTkq6AthrVX8pfArHKaBv/72Vuet5TRHVVKUAmJiQIXsR UxBhGGp+j8rLnThvvjwXG1OSaXLeyKYcv1DuGwyMPx7Wl6GkIKXwYgwRtaGzzGl/ QKfqNkMEQ7DyqMPJfrV5OuvzO3NRHj2TVDX7agS63I3F4xjmAHNNN9uaIVJzMAsf kF9qEqq06CSr8rO9k4jmqTjxfYchTVHZPGB/E09oom/d0Z0gQR3ZVaARCQvlnXj1 RPfkZXi9OCFMoxFi0O+94TBSU5kaJyxQqtHP9SM4x0N9iSNPQuNDf7T0S5RyerAd AxIsu2JSSW+jo98E2dQujoRikZvsBVZegcoAOP9W -----END CERTIFICATE-----Generated at Mon Mar 2 15:42:07 2026 by rpki-client