$ rpki-client -vvf repo-rpki.idnic.net/repo/dc34eed9-187e-4f46-a5bb-0ea8f669ae90/0/3135372e31352e34372e302f32342d3234203d3e20313532333936.roa File: 3135372e31352e34372e302f32342d3234203d3e20313532333936.roa (raw, json) Hash identifier: JBRMsmUAdYzb3+gwoPUcR31Beca7hRL3R3vmPms0eZM= Subject key identifier: A5:52:B1:01:EB:ED:0F:C7:7F:9A:FC:B4:F4:F9:88:7B:DD:D3:C1:FD Certificate issuer: /CN=3008AF948C4742A525201F3FDA7EFB1800D52D64 Certificate serial: 37B1CD2F84A71CFA448AC5BFEEFCB1435FED4A12 Authority key identifier: 30:08:AF:94:8C:47:42:A5:25:20:1F:3F:DA:7E:FB:18:00:D5:2D:64 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3008AF948C4742A525201F3FDA7EFB1800D52D64.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dc34eed9-187e-4f46-a5bb-0ea8f669ae90/0/3135372e31352e34372e302f32342d3234203d3e20313532333936.roa Signing time: Wed 24 Dec 2025 05:00:02 +0000 ROA not before: Wed 24 Dec 2025 04:55:02 +0000 ROA not after: Wed 23 Dec 2026 05:00:02 +0000 asID: 152396 IP address blocks: 157.15.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dc34eed9-187e-4f46-a5bb-0ea8f669ae90/0/3008AF948C4742A525201F3FDA7EFB1800D52D64.crl rsync://repo-rpki.idnic.net/repo/dc34eed9-187e-4f46-a5bb-0ea8f669ae90/0/3008AF948C4742A525201F3FDA7EFB1800D52D64.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3008AF948C4742A525201F3FDA7EFB1800D52D64.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 22:28:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:b1:cd:2f:84:a7:1c:fa:44:8a:c5:bf:ee:fc:b1:43:5f:ed:4a:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3008AF948C4742A525201F3FDA7EFB1800D52D64 Validity Not Before: Dec 24 04:55:02 2025 GMT Not After : Dec 23 05:00:02 2026 GMT Subject: CN=A552B101EBED0FC77F9AFCB4F4F9887BDDD3C1FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:89:4a:56:28:29:08:dc:ee:d8:c9:0d:09:e2: bf:8a:c2:57:32:15:83:c1:64:0c:c1:04:14:c0:9c: 37:a9:9d:08:c7:16:53:21:84:d7:ee:59:8f:e3:0b: cd:3c:b0:e6:9f:78:0d:21:26:f3:65:09:12:7a:e0: a3:a9:25:88:01:81:b6:36:ff:2e:13:66:d2:9b:31: 1b:13:e7:fe:e5:d2:8e:d7:5d:fd:8d:6f:16:f2:cf: ce:8a:44:a5:58:26:a0:f9:71:6e:f7:e1:76:62:ec: 02:f8:9e:97:b9:ca:1c:e2:71:1e:be:fd:b7:28:1f: 4d:c6:20:82:6f:39:8a:71:2d:53:ab:37:90:a6:18: 4a:77:1b:7f:cb:6b:b6:5a:46:4a:16:27:3d:8f:5b: d1:aa:6b:7e:84:fa:6b:38:da:04:f0:91:95:ca:06: 4c:69:c2:84:dc:4a:33:5c:22:da:d6:51:09:75:7f: 18:d8:a7:b3:f9:c5:06:03:25:09:ba:4f:8d:1b:2b: 2b:51:64:7d:23:16:c3:81:52:ce:46:55:15:ea:06: 04:57:69:34:c9:c2:8f:63:1c:c6:13:f5:c7:30:b9: ff:d6:72:89:e7:51:a3:bd:64:3e:5d:51:f9:12:68: b9:e5:20:ba:a0:5d:fa:bf:4a:87:79:7e:36:ee:be: fa:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:52:B1:01:EB:ED:0F:C7:7F:9A:FC:B4:F4:F9:88:7B:DD:D3:C1:FD X509v3 Authority Key Identifier: keyid:30:08:AF:94:8C:47:42:A5:25:20:1F:3F:DA:7E:FB:18:00:D5:2D:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dc34eed9-187e-4f46-a5bb-0ea8f669ae90/0/3008AF948C4742A525201F3FDA7EFB1800D52D64.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3008AF948C4742A525201F3FDA7EFB1800D52D64.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dc34eed9-187e-4f46-a5bb-0ea8f669ae90/0/3135372e31352e34372e302f32342d3234203d3e20313532333936.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.15.47.0/24 Signature Algorithm: sha256WithRSAEncryption 29:2d:dc:06:a9:18:85:f5:2a:e0:d7:56:15:52:85:af:02:5e: 37:d5:33:d3:19:df:bb:c7:fa:6a:c2:25:20:57:fc:16:47:95: 66:73:7b:0b:03:bf:bb:f0:6b:e9:36:c4:29:ca:f3:86:dd:6f: c8:ae:95:6f:d5:6d:bb:0c:ce:35:78:57:f2:dd:71:b1:97:c2: 7c:1b:ef:b1:56:5c:10:c6:92:99:3b:a6:15:b9:38:c2:a8:02: a9:5c:05:a4:c1:69:0a:5a:97:61:1d:6c:c5:99:0c:28:6f:d7: b7:73:7e:ad:cd:27:ff:51:e3:eb:e4:fb:c7:d6:25:11:d5:60: 92:40:c4:61:47:f3:e1:16:27:bd:53:d3:71:89:44:af:a2:46: 44:49:75:b4:60:21:97:3a:81:d8:a6:4c:d4:31:a6:64:3b:3f: 1d:3c:a9:83:7e:00:04:62:45:eb:bb:ba:29:71:6e:6c:fe:e0: e2:c1:a9:ef:11:48:6a:f7:9c:bd:74:dd:65:6a:79:f3:71:ff: c1:0c:1c:9d:81:4d:54:02:37:ab:5e:c8:a9:92:bc:d0:bf:a6: 4d:5e:90:c6:43:12:07:8d:dc:bc:9c:61:e0:63:44:6e:0c:ae: 97:e0:54:63:bf:28:81:3e:7c:52:6f:da:3a:21:a1:06:75:14: 00:6d:24:11 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUN7HNL4SnHPpEisW/7vyxQ1/tShIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzAwOEFGOTQ4QzQ3NDJBNTI1MjAxRjNGREE3RUZCMTgw MEQ1MkQ2NDAeFw0yNTEyMjQwNDU1MDJaFw0yNjEyMjMwNTAwMDJaMDMxMTAvBgNV BAMTKEE1NTJCMTAxRUJFRDBGQzc3RjlBRkNCNEY0Rjk4ODdCREREM0MxRkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2iUpWKCkI3O7YyQ0J4r+Kwlcy FYPBZAzBBBTAnDepnQjHFlMhhNfuWY/jC808sOafeA0hJvNlCRJ64KOpJYgBgbY2 /y4TZtKbMRsT5/7l0o7XXf2Nbxbyz86KRKVYJqD5cW734XZi7AL4npe5yhzicR6+ /bcoH03GIIJvOYpxLVOrN5CmGEp3G3/La7ZaRkoWJz2PW9Gqa36E+ms42gTwkZXK BkxpwoTcSjNcItrWUQl1fxjYp7P5xQYDJQm6T40bKytRZH0jFsOBUs5GVRXqBgRX aTTJwo9jHMYT9ccwuf/WconnUaO9ZD5dUfkSaLnlILqgXfq/Sod5fjbuvvq7AgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUpVKxAevtD8d/mvy09PmIe93Twf0wHwYDVR0j BBgwFoAUMAivlIxHQqUlIB8/2n77GADVLWQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YzM0ZWVkOS0xODdlLTRmNDYtYTViYi0wZWE4ZjY2OWFlOTAvMC8zMDA4QUY5NDhD NDc0MkE1MjUyMDFGM0ZEQTdFRkIxODAwRDUyRDY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMzAwOEFGOTQ4QzQ3NDJBNTI1MjAxRjNGREE3RUZCMTgwMEQ1 MkQ2NC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2RjMzRlZWQ5LTE4N2UtNGY0Ni1h NWJiLTBlYThmNjY5YWU5MC8wLzMxMzUzNzJlMzEzNTJlMzQzNzJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMxMzUzMjMzMzkzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJ0PLzANBgkqhkiG 9w0BAQsFAAOCAQEAKS3cBqkYhfUq4NdWFVKFrwJeN9Uz0xnfu8f6asIlIFf8FkeV ZnN7CwO/u/Br6TbEKcrzht1vyK6Vb9VtuwzONXhX8t1xsZfCfBvvsVZcEMaSmTum Fbk4wqgCqVwFpMFpClqXYR1sxZkMKG/Xt3N+rc0n/1Hj6+T7x9YlEdVgkkDEYUfz 4RYnvVPTcYlEr6JGREl1tGAhlzqB2KZM1DGmZDs/HTypg34ABGJF67u6KXFubP7g 4sGp7xFIavecvXTdZWp583H/wQwcnYFNVAI3q17IqZK80L+mTV6QxkMSB43cvJxh 4GNEbgyul+BUY78ogT58Um/aOiGhBnUUAG0kEQ== -----END CERTIFICATE-----Generated at Mon Mar 2 17:11:22 2026 by rpki-client