$ rpki-client -vvf repo-rpki.idnic.net/repo/172d1752-4853-4c74-b574-994d3b124090/0/3135372e32302e39342e302f32342d3234203d3e20313532343039.roa File: 3135372e32302e39342e302f32342d3234203d3e20313532343039.roa (raw, json) Hash identifier: Ra05wkGB2Xe7FfSwCrcRzvRi0nxXzZPjhLkj6+5LETI= Subject key identifier: AF:90:06:47:F2:88:6D:CA:A6:93:03:D5:56:3F:B5:30:88:17:2A:61 Certificate issuer: /CN=7ED69B0DB232E419E90D72766374EA03E6F18F73 Certificate serial: 1D802CB1F129A94103328C3F88599F08576F236D Authority key identifier: 7E:D6:9B:0D:B2:32:E4:19:E9:0D:72:76:63:74:EA:03:E6:F1:8F:73 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7ED69B0DB232E419E90D72766374EA03E6F18F73.cer Subject info access: rsync://repo-rpki.idnic.net/repo/172d1752-4853-4c74-b574-994d3b124090/0/3135372e32302e39342e302f32342d3234203d3e20313532343039.roa Signing time: Thu 05 Mar 2026 12:00:01 +0000 ROA not before: Thu 05 Mar 2026 11:55:01 +0000 ROA not after: Thu 04 Mar 2027 12:00:01 +0000 asID: 152409 IP address blocks: 157.20.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/172d1752-4853-4c74-b574-994d3b124090/0/7ED69B0DB232E419E90D72766374EA03E6F18F73.crl rsync://repo-rpki.idnic.net/repo/172d1752-4853-4c74-b574-994d3b124090/0/7ED69B0DB232E419E90D72766374EA03E6F18F73.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7ED69B0DB232E419E90D72766374EA03E6F18F73.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 19:29:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:80:2c:b1:f1:29:a9:41:03:32:8c:3f:88:59:9f:08:57:6f:23:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ED69B0DB232E419E90D72766374EA03E6F18F73 Validity Not Before: Mar 5 11:55:01 2026 GMT Not After : Mar 4 12:00:01 2027 GMT Subject: CN=AF900647F2886DCAA69303D5563FB53088172A61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:12:67:64:c0:f0:36:6e:c2:29:fd:65:13:c7: eb:9a:f0:af:08:47:d5:cc:c3:3d:94:69:59:ca:4e: 8e:e8:77:41:44:c2:f3:be:03:34:46:a6:61:2d:da: e4:89:49:e3:5a:14:99:d7:a7:fe:e1:86:81:76:ad: 35:31:d7:ab:d1:57:2a:85:33:5d:c3:b3:07:36:21: 6f:78:e1:65:4a:ef:f9:66:af:76:22:4f:af:ae:bb: 2b:ae:1c:18:13:34:5b:c2:86:f2:4c:06:85:9e:1c: 3e:3f:f3:17:34:66:cd:1f:16:c2:52:5e:10:54:48: d9:50:da:d9:54:d4:ab:30:1a:6a:a1:81:d9:2a:34: 91:a1:7e:fa:bb:02:6a:f8:c6:5f:55:35:9a:ac:b5: 00:cf:14:61:19:e4:1d:1e:ee:cb:b0:e3:21:8a:47: 0a:f8:61:f6:2a:e6:9f:b6:cf:a4:ed:d0:c7:67:26: 7a:e9:a9:93:42:b9:98:7e:64:57:ee:65:89:14:d2: c5:23:79:dc:2b:92:63:23:9c:81:66:b7:c9:eb:36: 17:f6:45:06:e5:1b:65:2d:2e:f8:f7:0f:31:cc:58: b7:d0:88:ca:51:8c:10:07:90:45:33:64:a5:99:79: 82:fb:37:3b:90:27:49:fd:50:89:e3:e5:59:1b:05: e6:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:90:06:47:F2:88:6D:CA:A6:93:03:D5:56:3F:B5:30:88:17:2A:61 X509v3 Authority Key Identifier: keyid:7E:D6:9B:0D:B2:32:E4:19:E9:0D:72:76:63:74:EA:03:E6:F1:8F:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/172d1752-4853-4c74-b574-994d3b124090/0/7ED69B0DB232E419E90D72766374EA03E6F18F73.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7ED69B0DB232E419E90D72766374EA03E6F18F73.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/172d1752-4853-4c74-b574-994d3b124090/0/3135372e32302e39342e302f32342d3234203d3e20313532343039.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.20.94.0/24 Signature Algorithm: sha256WithRSAEncryption 1c:91:e5:cc:bb:43:9d:82:67:7d:36:a9:e2:09:8d:6d:2c:8c: 96:ab:12:01:d7:8d:4e:c2:5e:b4:e7:2c:9f:06:35:7b:da:e6: 4e:b8:28:f7:c8:ea:81:a7:55:6e:51:de:6f:3c:7f:a5:ca:e3: 46:5a:0d:a5:b0:81:47:1d:01:76:ae:1f:0f:ea:3c:d8:9f:a9: 7b:cc:2b:96:f1:ff:50:fb:9d:27:b4:2c:93:93:32:72:87:93: 23:d0:a6:17:e7:c8:77:4d:6d:53:92:75:aa:d4:6e:10:fb:18: df:74:e7:3f:c5:cd:7f:17:52:0a:77:38:5f:fd:40:f3:c1:8e: 44:14:58:aa:44:01:36:60:d6:ae:39:0a:66:3d:a7:45:df:ab: 8e:27:d6:9b:2c:b3:22:50:84:8e:3f:d3:f5:12:7c:90:83:94: 47:b4:e4:de:5d:7e:3e:ce:02:62:67:f2:98:75:db:f3:e6:d0: da:f4:15:32:63:2a:4f:89:16:ff:c7:4c:3f:6d:ed:ef:e4:94: 75:3c:cb:7a:72:f0:25:ec:a8:7b:c3:14:9d:92:7b:f4:42:a9: 8e:16:b3:eb:9c:6b:a0:20:a7:c2:1f:fb:5b:1f:be:33:3c:b9: 4b:9f:f9:34:33:a5:fd:e3:3d:e7:b7:68:ce:f8:8e:73:93:57: b9:8c:0a:82 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUHYAssfEpqUEDMow/iFmfCFdvI20wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0VENjlCMERCMjMyRTQxOUU5MEQ3Mjc2NjM3NEVBMDNF NkYxOEY3MzAeFw0yNjAzMDUxMTU1MDFaFw0yNzAzMDQxMjAwMDFaMDMxMTAvBgNV BAMTKEFGOTAwNjQ3RjI4ODZEQ0FBNjkzMDNENTU2M0ZCNTMwODgxNzJBNjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzEmdkwPA2bsIp/WUTx+ua8K8I R9XMwz2UaVnKTo7od0FEwvO+AzRGpmEt2uSJSeNaFJnXp/7hhoF2rTUx16vRVyqF M13Dswc2IW944WVK7/lmr3YiT6+uuyuuHBgTNFvChvJMBoWeHD4/8xc0Zs0fFsJS XhBUSNlQ2tlU1KswGmqhgdkqNJGhfvq7Amr4xl9VNZqstQDPFGEZ5B0e7suw4yGK Rwr4YfYq5p+2z6Tt0MdnJnrpqZNCuZh+ZFfuZYkU0sUjedwrkmMjnIFmt8nrNhf2 RQblG2UtLvj3DzHMWLfQiMpRjBAHkEUzZKWZeYL7NzuQJ0n9UInj5VkbBebbAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUr5AGR/KIbcqmkwPVVj+1MIgXKmEwHwYDVR0j BBgwFoAUftabDbIy5BnpDXJ2Y3TqA+bxj3MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NzJkMTc1Mi00ODUzLTRjNzQtYjU3NC05OTRkM2IxMjQwOTAvMC83RUQ2OUIwREIy MzJFNDE5RTkwRDcyNzY2Mzc0RUEwM0U2RjE4RjczLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvN0VENjlCMERCMjMyRTQxOUU5MEQ3Mjc2NjM3NEVBMDNFNkYx OEY3My5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE3MmQxNzUyLTQ4NTMtNGM3NC1i NTc0LTk5NGQzYjEyNDA5MC8wLzMxMzUzNzJlMzIzMDJlMzkzNDJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMxMzUzMjM0MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJ0UXjANBgkqhkiG 9w0BAQsFAAOCAQEAHJHlzLtDnYJnfTap4gmNbSyMlqsSAdeNTsJetOcsnwY1e9rm Trgo98jqgadVblHebzx/pcrjRloNpbCBRx0Bdq4fD+o82J+pe8wrlvH/UPudJ7Qs k5MycoeTI9CmF+fId01tU5J1qtRuEPsY33TnP8XNfxdSCnc4X/1A88GORBRYqkQB NmDWrjkKZj2nRd+rjifWmyyzIlCEjj/T9RJ8kIOUR7Tk3l1+Ps4CYmfymHXb8+bQ 2vQVMmMqT4kW/8dMP23t7+SUdTzLenLwJeyoe8MUnZJ79EKpjhaz65xroCCnwh/7 Wx++Mzy5S5/5NDOl/eM957dozviOc5NXuYwKgg== -----END CERTIFICATE-----Generated at Sat Mar 7 19:37:46 2026 by rpki-client