$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/0/3135312e3135382e3133322e302f32332d3234203d3e20313334373238.roa File: 3135312e3135382e3133322e302f32332d3234203d3e20313334373238.roa (raw, json) Hash identifier: 5lVjSKtWrmhtWPL47yMhwEDIaCukaKyrxLX70Wi5Smo= Subject key identifier: E5:92:B3:31:B9:46:7C:BC:04:DF:F3:B4:02:C1:5A:10:36:29:DD:41 Certificate issuer: /CN=A91862140000/serialNumber=12345F115AC4B62A51F5274C54C81E86463BD0BA Certificate serial: 1BF42196DBCE91170DCEFE38ED44D0120AC15C97 Authority key identifier: 12:34:5F:11:5A:C4:B6:2A:51:F5:27:4C:54:C8:1E:86:46:3B:D0:BA Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/EjRfEVrEtipR9SdMVMgehkY70Lo.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/3135312e3135382e3133322e302f32332d3234203d3e20313334373238.roa Signing time: Mon 02 Mar 2026 02:30:04 +0000 ROA not before: Mon 02 Mar 2026 02:25:04 +0000 ROA not after: Mon 01 Mar 2027 02:30:04 +0000 asID: 134728 IP address blocks: 151.158.132.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/EjRfEVrEtipR9SdMVMgehkY70Lo.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Mar 2026 07:02:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:f4:21:96:db:ce:91:17:0d:ce:fe:38:ed:44:d0:12:0a:c1:5c:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=12345F115AC4B62A51F5274C54C81E86463BD0BA Validity Not Before: Mar 2 02:25:04 2026 GMT Not After : Mar 1 02:30:04 2027 GMT Subject: CN=E592B331B9467CBC04DFF3B402C15A103629DD41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:79:44:fb:77:a8:60:f6:19:66:4e:ca:23:c3: 4a:f1:d2:81:33:35:0e:e2:77:b5:cb:36:d5:28:ba: 46:53:fb:d5:13:a8:ec:d5:b3:ac:39:f7:c6:f3:cf: 8a:d7:6b:24:1e:c6:30:2e:9b:bc:a7:a1:45:88:31: e8:f2:c6:db:e3:8e:a9:f2:98:69:16:a8:e1:a3:ad: bb:6b:6e:59:82:40:76:f6:b0:6e:81:f6:e7:4c:52: d4:a1:41:8c:ab:7b:d5:09:94:8b:0b:2a:d1:c1:b2: c5:c4:c5:f5:e7:86:62:88:c2:af:e0:59:fe:39:ec: cd:8a:09:92:b7:9e:f7:29:e0:43:53:e4:d1:31:f3: c3:2d:a4:d0:ae:fc:58:a6:9f:8d:1c:a4:92:e2:0f: 74:b2:e0:04:c7:40:96:85:0c:0a:8e:c4:54:33:3d: 22:cd:1a:9e:39:69:c6:ac:97:30:c3:fd:4b:5e:be: 0e:33:bf:1e:89:6f:0d:73:ed:ff:1f:15:45:56:dc: 6b:b4:ec:03:41:b9:c0:12:91:1c:cb:73:4f:29:e9: 2a:67:ee:30:e9:f2:0d:9d:08:91:4b:a4:10:28:03: 0e:c6:a2:a4:b8:fc:05:f2:d5:0e:6c:f5:5f:4b:9d: cb:f5:91:b8:2c:1d:be:b6:73:d2:73:6b:b3:1c:cd: 01:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:92:B3:31:B9:46:7C:BC:04:DF:F3:B4:02:C1:5A:10:36:29:DD:41 X509v3 Authority Key Identifier: keyid:12:34:5F:11:5A:C4:B6:2A:51:F5:27:4C:54:C8:1E:86:46:3B:D0:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/EjRfEVrEtipR9SdMVMgehkY70Lo.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/3135312e3135382e3133322e302f32332d3234203d3e20313334373238.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.158.132.0/23 Signature Algorithm: sha256WithRSAEncryption 50:eb:fd:a1:50:f2:66:6f:48:e4:f7:d7:e0:7a:06:99:37:04: 04:0f:6d:31:33:cb:dc:ac:20:96:0f:10:e3:a0:c6:6e:89:ef: fa:35:af:90:2e:43:2f:07:be:be:db:7b:98:2d:7a:7c:73:4e: 7e:7b:12:24:d0:30:ef:c7:c8:d0:48:6a:e5:02:bd:8f:a7:9c: 81:4c:38:e3:6e:27:b5:d0:39:64:f3:3d:62:b5:fe:6c:89:8e: 10:1a:e5:11:1f:41:c5:ad:4f:4e:f3:37:e9:8d:66:3a:cd:46: 92:d8:18:37:f1:2e:1c:b1:00:86:d3:2f:55:6b:8f:b0:65:01: 98:e4:fe:b2:cc:e6:ca:85:05:46:2f:66:48:e8:23:97:1a:3d: 58:71:ef:2a:a1:77:b6:32:98:bc:b1:db:4d:1c:70:4f:4b:0d: 8b:57:30:c2:82:69:d1:f2:b5:7a:1c:78:8f:d9:e6:83:af:51: 41:7d:0a:06:d2:b2:ce:79:52:d0:6c:97:de:b1:6e:be:0e:65: 05:63:db:cb:cd:19:a4:5d:3c:37:fa:cb:fb:50:3c:91:04:78: f3:08:a5:37:60:c9:35:46:a3:4c:16:d6:88:32:29:20:d8:d4: fb:d0:05:3b:e4:fe:17:7c:71:67:71:98:71:ee:4a:be:f8:88: 58:b6:1a:f7 -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgIUG/QhltvOkRcNzv447UTQEgrBXJcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEygxMjM0NUYxMTVB QzRCNjJBNTFGNTI3NEM1NEM4MUU4NjQ2M0JEMEJBMB4XDTI2MDMwMjAyMjUwNFoX DTI3MDMwMTAyMzAwNFowMzExMC8GA1UEAxMoRTU5MkIzMzFCOTQ2N0NCQzA0REZG M0I0MDJDMTVBMTAzNjI5REQ0MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANV5RPt3qGD2GWZOyiPDSvHSgTM1DuJ3tcs21Si6RlP71ROo7NWzrDn3xvPP itdrJB7GMC6bvKehRYgx6PLG2+OOqfKYaRao4aOtu2tuWYJAdvawboH250xS1KFB jKt71QmUiwsq0cGyxcTF9eeGYojCr+BZ/jnszYoJkree9yngQ1Pk0THzwy2k0K78 WKafjRykkuIPdLLgBMdAloUMCo7EVDM9Is0anjlpxqyXMMP9S16+DjO/HolvDXPt /x8VRVbca7TsA0G5wBKRHMtzTynpKmfuMOnyDZ0IkUukECgDDsaipLj8BfLVDmz1 X0udy/WRuCwdvrZz0nNrsxzNAScCAwEAAaOCAgMwggH/MB0GA1UdDgQWBBTlkrMx uUZ8vATf87QCwVoQNindQTAfBgNVHSMEGDAWgBQSNF8RWsS2KlH1J0xUyB6GRjvQ ujAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMC8xMjM0NUYxMTVBQzRCNjJB NTFGNTI3NEM1NEM4MUU4NjQ2M0JEMEJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CMzIy QTVGNDFENjYxMUUyQTNGMjdGN0M3MkZEMUZGMi9FalJmRVZyRXRpcFI5U2RNVk1n ZWhrWTcwTG8uY2VyMIGGBggrBgEFBQcBCwR6MHgwdgYIKwYBBQUHMAuGanJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL0lETklDLUlELzAvMzEzNTMxMmUz MTM1MzgyZTMxMzMzMjJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDMxMzMzNDM3MzIz OC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAZeehDANBgkqhkiG9w0BAQsFAAOCAQEAUOv9oVDyZm9I5PfX 4HoGmTcEBA9tMTPL3Kwglg8Q46DGbonv+jWvkC5DLwe+vtt7mC16fHNOfnsSJNAw 78fI0Ehq5QK9j6ecgUw4424ntdA5ZPM9YrX+bImOEBrlER9Bxa1PTvM36Y1mOs1G ktgYN/EuHLEAhtMvVWuPsGUBmOT+sszmyoUFRi9mSOgjlxo9WHHvKqF3tjKYvLHb TRxwT0sNi1cwwoJp0fK1ehx4j9nmg69RQX0KBtKyznlS0GyX3rFuvg5lBWPby80Z pF08N/rL+1A8kQR48wilN2DJNUajTBbWiDIpINjU+9AFO+T+F3xxZ3GYce5KvviI WLYa9w== -----END CERTIFICATE-----Generated at Sat Mar 7 16:08:18 2026 by rpki-client