$ rpki-client -vvf repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/3136332e35332e3139322e302f32342d3234203d3e203538333831.roa File: 3136332e35332e3139322e302f32342d3234203d3e203538333831.roa (raw, json) Hash identifier: /Ofm9hgC2vE5yJdV0nMHS0AoKDDRKW35xmkMsGHOf0s= Subject key identifier: AA:8F:3A:F6:E6:29:2F:FC:FB:33:E9:30:1D:0D:B2:8F:D4:E0:96:3D Certificate issuer: /CN=E5A907C4EC6DA6D9342613280CCAF26E98DBEB98 Certificate serial: 4BBE7F7AE005EA3546685E3E6783B952E590BF8A Authority key identifier: E5:A9:07:C4:EC:6D:A6:D9:34:26:13:28:0C:CA:F2:6E:98:DB:EB:98 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.cer Subject info access: rsync://repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/3136332e35332e3139322e302f32342d3234203d3e203538333831.roa Signing time: Wed 04 Mar 2026 17:00:03 +0000 ROA not before: Wed 04 Mar 2026 16:55:03 +0000 ROA not after: Wed 03 Mar 2027 17:00:03 +0000 asID: 58381 IP address blocks: 163.53.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.crl rsync://repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Mar 2026 03:25:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:be:7f:7a:e0:05:ea:35:46:68:5e:3e:67:83:b9:52:e5:90:bf:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E5A907C4EC6DA6D9342613280CCAF26E98DBEB98 Validity Not Before: Mar 4 16:55:03 2026 GMT Not After : Mar 3 17:00:03 2027 GMT Subject: CN=AA8F3AF6E6292FFCFB33E9301D0DB28FD4E0963D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:d1:fa:48:4e:18:0f:4d:0d:5e:3f:15:ed:73: e9:81:81:12:28:b1:6d:a6:06:0b:78:a5:da:9f:6e: 39:a9:1b:1f:59:7a:45:90:bd:d6:4c:e0:2a:21:dc: f6:88:3b:69:28:f9:20:1d:4c:11:ff:14:0c:a9:5a: 42:31:8e:a5:46:63:33:ae:4f:64:cc:75:f7:c2:5a: b2:fc:67:f7:0a:bc:c0:2f:08:0b:4e:80:94:4c:31: 55:ef:31:35:d8:f1:e1:45:1c:c9:06:66:04:b4:c6: 78:d1:39:ed:32:a5:c8:a4:5c:9f:5f:ab:04:88:f6: 96:d1:b7:e8:15:fa:b6:46:f8:f7:0c:18:16:f4:b5: 8a:3c:84:c8:cf:ef:87:3d:07:00:9e:c2:41:46:52: 49:ae:71:a5:cc:30:de:54:66:38:c5:67:b4:79:cc: 3f:1e:62:e4:e5:dd:7d:08:c9:d2:97:79:a7:4a:f1: 7e:8f:fa:ea:96:2c:3b:21:de:17:85:2d:23:65:fc: 57:3f:95:96:c7:55:47:df:a2:dd:35:d9:c9:87:00: 13:c5:75:1a:60:86:b3:bd:d3:c5:b0:de:cb:a6:9b: 37:07:82:04:95:1d:47:ba:dc:ba:bf:c2:3e:85:c6: 75:3c:06:45:d4:0a:30:19:02:e0:2d:14:6f:c8:75: 0f:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:8F:3A:F6:E6:29:2F:FC:FB:33:E9:30:1D:0D:B2:8F:D4:E0:96:3D X509v3 Authority Key Identifier: keyid:E5:A9:07:C4:EC:6D:A6:D9:34:26:13:28:0C:CA:F2:6E:98:DB:EB:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/3136332e35332e3139322e302f32342d3234203d3e203538333831.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.53.192.0/24 Signature Algorithm: sha256WithRSAEncryption 0a:41:ab:4c:ca:46:c2:19:bf:91:04:0d:17:9f:ee:8a:5c:a1: e7:a8:82:9b:6e:0a:c1:fa:08:8b:4d:d0:78:7b:c0:e1:7f:8b: 46:c4:ba:b0:7b:04:88:fc:b0:28:ac:5d:98:c3:d8:ed:c9:11: 6e:fa:03:e0:5e:54:1c:04:36:cd:c0:a8:2b:3e:a5:0d:ba:32: 72:60:cb:b9:b4:d7:cd:f0:40:b0:31:c5:9d:dc:bf:24:65:82: b9:d6:b5:26:d4:bd:31:db:c7:e1:5c:04:ee:46:23:6c:52:cd: bf:56:87:ed:c1:43:25:59:67:d3:5d:94:56:09:ee:3c:dd:2c: 80:cf:03:aa:d9:d7:b6:b2:b5:c7:21:92:e8:76:e4:1f:46:25: 6a:72:79:5b:a2:93:89:8c:dc:97:e5:a5:35:d7:27:a5:59:f2: 80:ab:ae:44:01:bf:7b:13:b9:9a:7b:2e:99:1e:fa:c5:03:0d: f1:84:7f:de:5a:75:a1:65:72:2c:32:a3:e3:ca:5b:47:88:7c: 19:ec:61:a8:b3:6c:ee:8c:f5:8f:ef:c0:a2:4f:3a:03:0e:e5: 5e:cf:55:c3:07:50:1d:84:38:58:bb:ad:06:07:64:20:86:d0: 08:ee:b6:c6:9d:b8:a4:4f:6d:34:46:ed:df:60:13:2f:33:5c: 80:88:7d:d7 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUS75/euAF6jVGaF4+Z4O5UuWQv4owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTVBOTA3QzRFQzZEQTZEOTM0MjYxMzI4MENDQUYyNkU5 OERCRUI5ODAeFw0yNjAzMDQxNjU1MDNaFw0yNzAzMDMxNzAwMDNaMDMxMTAvBgNV BAMTKEFBOEYzQUY2RTYyOTJGRkNGQjMzRTkzMDFEMERCMjhGRDRFMDk2M0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDr0fpIThgPTQ1ePxXtc+mBgRIo sW2mBgt4pdqfbjmpGx9ZekWQvdZM4Coh3PaIO2ko+SAdTBH/FAypWkIxjqVGYzOu T2TMdffCWrL8Z/cKvMAvCAtOgJRMMVXvMTXY8eFFHMkGZgS0xnjROe0ypcikXJ9f qwSI9pbRt+gV+rZG+PcMGBb0tYo8hMjP74c9BwCewkFGUkmucaXMMN5UZjjFZ7R5 zD8eYuTl3X0IydKXeadK8X6P+uqWLDsh3heFLSNl/Fc/lZbHVUffot012cmHABPF dRpghrO908Ww3summzcHggSVHUe63Lq/wj6FxnU8BkXUCjAZAuAtFG/IdQ91AgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUqo869uYpL/z7M+kwHQ2yj9Tglj0wHwYDVR0j BBgwFoAU5akHxOxtptk0JhMoDMrybpjb65gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MzhkMjc1NS0zODBkLTQ3N2UtYmYyNS0wYWYyOTAyNmJkNzAvMC9FNUE5MDdDNEVD NkRBNkQ5MzQyNjEzMjgwQ0NBRjI2RTk4REJFQjk4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTVBOTA3QzRFQzZEQTZEOTM0MjYxMzI4MENDQUYyNkU5OERC RUI5OC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzMzOGQyNzU1LTM4MGQtNDc3ZS1i ZjI1LTBhZjI5MDI2YmQ3MC8wLzMxMzYzMzJlMzUzMzJlMzEzOTMyMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzUzODMzMzgzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKM1wDANBgkqhkiG 9w0BAQsFAAOCAQEACkGrTMpGwhm/kQQNF5/uilyh56iCm24KwfoIi03QeHvA4X+L RsS6sHsEiPywKKxdmMPY7ckRbvoD4F5UHAQ2zcCoKz6lDboycmDLubTXzfBAsDHF ndy/JGWCuda1JtS9MdvH4VwE7kYjbFLNv1aH7cFDJVln012UVgnuPN0sgM8DqtnX trK1xyGS6HbkH0YlanJ5W6KTiYzcl+WlNdcnpVnygKuuRAG/exO5mnsumR76xQMN 8YR/3lp1oWVyLDKj48pbR4h8GexhqLNs7oz1j+/Aok86Aw7lXs9VwwdQHYQ4WLut BgdkIIbQCO62xp24pE9tNEbt32ATLzNcgIh91w== -----END CERTIFICATE-----Generated at Thu Mar 19 10:39:41 2026 by rpki-client