$ rpki-client -vvf repo-rpki.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/3135372e36362e35342e302f32332d3233203d3e20313431383932.roa File: 3135372e36362e35342e302f32332d3233203d3e20313431383932.roa (raw, json) Hash identifier: estSt0lx87WBVBswIF9rRgY2flq/yvc9a4g4mDVN9PM= Subject key identifier: 8D:B5:E5:3A:CF:E5:BF:C8:8B:85:67:A0:5D:CB:F7:92:13:60:72:BC Certificate issuer: /CN=528098CFFE1330AD3E557BCFEC2D8B4692F51248 Certificate serial: 44375064E24561803A0EF251208C74CB2B901624 Authority key identifier: 52:80:98:CF:FE:13:30:AD:3E:55:7B:CF:EC:2D:8B:46:92:F5:12:48 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/528098CFFE1330AD3E557BCFEC2D8B4692F51248.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/3135372e36362e35342e302f32332d3233203d3e20313431383932.roa Signing time: Fri 06 Feb 2026 09:00:01 +0000 ROA not before: Fri 06 Feb 2026 08:55:01 +0000 ROA not after: Fri 05 Feb 2027 09:00:01 +0000 asID: 141892 IP address blocks: 157.66.54.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/528098CFFE1330AD3E557BCFEC2D8B4692F51248.crl rsync://repo-rpki.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/528098CFFE1330AD3E557BCFEC2D8B4692F51248.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/528098CFFE1330AD3E557BCFEC2D8B4692F51248.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 19:55:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:37:50:64:e2:45:61:80:3a:0e:f2:51:20:8c:74:cb:2b:90:16:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=528098CFFE1330AD3E557BCFEC2D8B4692F51248 Validity Not Before: Feb 6 08:55:01 2026 GMT Not After : Feb 5 09:00:01 2027 GMT Subject: CN=8DB5E53ACFE5BFC88B8567A05DCBF792136072BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:72:df:e4:90:a7:68:44:cc:3a:34:6d:cb:21: e6:86:91:30:07:c9:49:2d:14:97:dc:d7:c2:5e:b0: 03:6b:7f:80:68:ff:d3:a8:5b:ad:31:de:ed:6c:f2: c2:c9:aa:1a:78:67:0e:a1:bc:0f:37:32:6f:35:87: 2c:70:51:e5:e8:28:70:9e:b2:17:30:ac:fc:08:b2: 39:9d:6f:f2:f6:96:2f:27:15:6d:0c:1b:2f:69:d3: 9c:b2:f0:9a:2b:41:99:ae:8c:d6:d3:56:f7:df:4b: cf:27:9c:b9:7c:e9:33:92:56:6a:30:68:0f:2a:00: d4:a3:6c:a0:f9:3c:a8:78:2e:da:95:a1:ec:31:0e: 56:3b:1c:82:59:38:8b:3a:ed:07:86:b2:3f:01:5f: 35:b0:c9:1b:92:cd:3a:e6:f1:e9:bb:7b:00:6a:06: b2:f5:dd:ee:89:ad:64:d3:c1:53:93:d1:cb:36:cb: 0f:cc:7f:0e:e4:3d:49:75:89:95:53:10:b3:fa:8b: e5:bc:a3:c3:3c:9e:b3:0f:de:af:6e:d8:ea:63:39: 30:98:26:78:4c:6a:36:da:18:76:af:7e:a4:78:13: e9:00:2e:3b:d8:d5:fb:62:d6:7a:ca:b9:af:37:bc: ef:bf:74:a9:4e:4d:97:14:47:bc:fe:37:5b:3f:a1: 13:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:B5:E5:3A:CF:E5:BF:C8:8B:85:67:A0:5D:CB:F7:92:13:60:72:BC X509v3 Authority Key Identifier: keyid:52:80:98:CF:FE:13:30:AD:3E:55:7B:CF:EC:2D:8B:46:92:F5:12:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/528098CFFE1330AD3E557BCFEC2D8B4692F51248.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/528098CFFE1330AD3E557BCFEC2D8B4692F51248.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/3135372e36362e35342e302f32332d3233203d3e20313431383932.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.66.54.0/23 Signature Algorithm: sha256WithRSAEncryption 05:e5:8e:b0:fe:e7:4f:59:3c:22:e1:27:da:35:16:80:38:e1: e3:0f:dd:a7:20:95:0b:22:20:30:c1:32:10:a2:02:b3:e3:61: d9:93:73:a3:40:11:e7:3a:f7:0a:5a:40:6d:ae:58:cc:05:be: 55:ae:77:12:8e:39:3d:33:1c:7e:a6:f3:09:40:c4:77:bb:ae: 17:13:8e:3e:15:c5:d1:d4:7f:f3:44:23:3f:a0:58:4e:bf:70: bf:8a:76:c1:01:f8:0d:a6:0c:1c:d9:83:a3:f7:9a:d7:7f:53: 3d:97:05:b6:76:82:49:3e:93:a1:91:06:cb:b9:03:aa:cb:30: 4a:95:a0:59:b9:c2:62:98:f9:e3:20:c7:64:8e:61:37:57:65: d6:43:49:73:42:ea:14:03:d8:02:88:5a:64:ce:9d:d2:1d:8e: 73:7f:77:5a:44:cd:a3:0d:84:4d:dd:c1:20:0d:4e:7a:c6:c4: d8:72:61:ee:e3:61:a9:f5:c3:35:0b:a6:5f:4a:f5:15:00:99: 58:19:20:70:8f:9d:59:cc:dd:6d:83:eb:3c:22:64:42:db:a8: 46:68:ec:c1:5e:a4:4b:e2:aa:7d:3f:64:ce:18:55:f8:0e:70: 17:b1:35:db:c9:23:89:be:26:aa:b3:06:b3:b8:1e:b1:e7:c2: 5c:09:74:31 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIURDdQZOJFYYA6DvJRIIx0yyuQFiQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTI4MDk4Q0ZGRTEzMzBBRDNFNTU3QkNGRUMyRDhCNDY5 MkY1MTI0ODAeFw0yNjAyMDYwODU1MDFaFw0yNzAyMDUwOTAwMDFaMDMxMTAvBgNV BAMTKDhEQjVFNTNBQ0ZFNUJGQzg4Qjg1NjdBMDVEQ0JGNzkyMTM2MDcyQkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIct/kkKdoRMw6NG3LIeaGkTAH yUktFJfc18JesANrf4Bo/9OoW60x3u1s8sLJqhp4Zw6hvA83Mm81hyxwUeXoKHCe shcwrPwIsjmdb/L2li8nFW0MGy9p05yy8JorQZmujNbTVvffS88nnLl86TOSVmow aA8qANSjbKD5PKh4LtqVoewxDlY7HIJZOIs67QeGsj8BXzWwyRuSzTrm8em7ewBq BrL13e6JrWTTwVOT0cs2yw/Mfw7kPUl1iZVTELP6i+W8o8M8nrMP3q9u2OpjOTCY JnhMajbaGHavfqR4E+kALjvY1fti1nrKua83vO+/dKlOTZcUR7z+N1s/oRPfAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUjbXlOs/lv8iLhWegXcv3khNgcrwwHwYDVR0j BBgwFoAUUoCYz/4TMK0+VXvP7C2LRpL1EkgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m OGRjMDg0OS04M2ZiLTRjYzgtOGMyMS1iZTZjYTdhMmVkODMvMC81MjgwOThDRkZF MTMzMEFEM0U1NTdCQ0ZFQzJEOEI0NjkyRjUxMjQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNTI4MDk4Q0ZGRTEzMzBBRDNFNTU3QkNGRUMyRDhCNDY5MkY1 MTI0OC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Y4ZGMwODQ5LTgzZmItNGNjOC04 YzIxLWJlNmNhN2EyZWQ4My8wLzMxMzUzNzJlMzYzNjJlMzUzNDJlMzAyZjMyMzMy ZDMyMzMyMDNkM2UyMDMxMzQzMTM4MzkzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAZ1CNjANBgkqhkiG 9w0BAQsFAAOCAQEABeWOsP7nT1k8IuEn2jUWgDjh4w/dpyCVCyIgMMEyEKICs+Nh 2ZNzo0AR5zr3ClpAba5YzAW+Va53Eo45PTMcfqbzCUDEd7uuFxOOPhXF0dR/80Qj P6BYTr9wv4p2wQH4DaYMHNmDo/ea139TPZcFtnaCST6ToZEGy7kDqsswSpWgWbnC Ypj54yDHZI5hN1dl1kNJc0LqFAPYAohaZM6d0h2Oc393WkTNow2ETd3BIA1OesbE 2HJh7uNhqfXDNQumX0r1FQCZWBkgcI+dWczdbYPrPCJkQtuoRmjswV6kS+KqfT9k zhhV+A5wF7E128kjib4mqrMGs7gesefCXAl0MQ== -----END CERTIFICATE-----Generated at Mon Mar 2 08:00:48 2026 by rpki-client