$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/0/3135312e3135382e3234302e302f32332d3234203d3e20313534353237.roa File: 3135312e3135382e3234302e302f32332d3234203d3e20313534353237.roa (raw, json) Hash identifier: dM4L9Ic4RBC7usWTGbce/eZBXoOgJht8T0TuRtZKZGg= Subject key identifier: 36:3B:BF:F3:7B:27:58:4C:53:25:D4:5A:D3:DF:6E:B7:8F:53:C1:A8 Certificate issuer: /CN=A91862140000/serialNumber=12345F115AC4B62A51F5274C54C81E86463BD0BA Certificate serial: 494175BAA299E1901114AFA70AF20C1B067EA46E Authority key identifier: 12:34:5F:11:5A:C4:B6:2A:51:F5:27:4C:54:C8:1E:86:46:3B:D0:BA Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/EjRfEVrEtipR9SdMVMgehkY70Lo.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/3135312e3135382e3234302e302f32332d3234203d3e20313534353237.roa Signing time: Wed 04 Mar 2026 04:17:32 +0000 ROA not before: Wed 04 Mar 2026 04:12:32 +0000 ROA not after: Wed 03 Mar 2027 04:17:32 +0000 asID: 154527 IP address blocks: 151.158.240.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/EjRfEVrEtipR9SdMVMgehkY70Lo.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Mar 2026 07:02:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:41:75:ba:a2:99:e1:90:11:14:af:a7:0a:f2:0c:1b:06:7e:a4:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=12345F115AC4B62A51F5274C54C81E86463BD0BA Validity Not Before: Mar 4 04:12:32 2026 GMT Not After : Mar 3 04:17:32 2027 GMT Subject: CN=363BBFF37B27584C5325D45AD3DF6EB78F53C1A8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:03:51:43:23:fd:fd:b6:27:cc:a3:1f:6c:87: 4b:06:27:76:8e:82:ab:6f:64:18:29:1d:28:a9:47: d2:90:8f:2b:c2:f9:e2:b3:48:88:34:b1:3e:11:a6: b2:42:01:63:22:ff:0d:92:47:bd:52:76:f2:08:7c: 6a:08:ce:02:08:ac:d4:37:a3:58:48:77:5d:66:88: 7b:83:15:92:a3:ff:6e:51:b8:c4:73:af:c5:20:f1: 39:68:8e:d0:7f:d8:b0:1c:78:59:58:08:51:01:5c: 0f:a6:20:70:5f:db:d8:b0:2b:2a:b5:07:fb:df:05: 02:7c:db:5b:eb:ce:9d:c1:d2:c4:cf:9a:3b:24:f3: 51:4a:ca:a7:60:62:70:c8:b0:df:1e:85:30:75:7d: 9a:47:77:d3:ff:c8:71:f2:1e:69:d2:95:4d:94:9a: 75:b2:36:7f:77:05:e5:0f:aa:9d:0a:43:18:e4:69: b3:3a:44:96:a5:9b:06:24:8b:e5:f1:84:9a:5d:36: f7:c2:39:b8:22:f0:b6:53:6f:22:b0:78:5b:22:4a: 0e:fd:87:58:25:84:7d:d9:e2:69:ad:8e:9a:1f:92: c3:ff:86:44:2c:97:3f:06:c8:33:0f:5d:4d:b4:a1: ab:00:e4:93:c2:20:4f:f0:22:9b:8a:23:95:be:b5: 02:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:3B:BF:F3:7B:27:58:4C:53:25:D4:5A:D3:DF:6E:B7:8F:53:C1:A8 X509v3 Authority Key Identifier: keyid:12:34:5F:11:5A:C4:B6:2A:51:F5:27:4C:54:C8:1E:86:46:3B:D0:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/EjRfEVrEtipR9SdMVMgehkY70Lo.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/3135312e3135382e3234302e302f32332d3234203d3e20313534353237.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.158.240.0/23 Signature Algorithm: sha256WithRSAEncryption 05:03:aa:85:60:d8:6f:2b:58:ff:5c:9f:67:50:df:66:92:45: f7:30:7e:ee:f1:1d:9a:a1:cf:61:9d:7f:db:b7:ca:1a:93:f0: 77:9c:50:9b:6f:f6:ed:11:88:e1:a3:d1:79:cc:e3:de:11:6c: 25:49:3e:75:3d:77:df:28:fc:67:4a:a3:01:1d:0b:99:f3:33: f1:78:57:9a:ff:b0:21:d9:9b:ae:de:0c:8f:0e:1f:c0:21:1e: 37:af:0a:ed:8f:f6:7a:a6:36:ea:1c:af:94:96:41:72:6d:06: 08:59:1b:1c:e2:0f:04:70:c3:d0:8f:a7:fa:1c:59:d4:a2:b4: e4:44:c1:18:f3:33:3a:83:8f:e0:47:bc:63:7c:5b:e3:a2:7d: f9:84:dd:20:29:e8:79:64:40:84:25:73:56:03:23:0e:d3:e3: 8c:d9:00:92:e3:3c:1f:9d:f6:ba:de:ea:3d:4c:18:89:ae:12: 31:2e:5b:ee:7c:e9:53:0b:80:2a:93:df:b7:0f:8d:bf:0b:38: da:22:c5:63:8a:89:1b:90:fe:01:c4:0b:5a:39:06:63:32:02: 74:d3:6e:a4:d0:84:b4:37:0d:18:e8:76:07:13:e6:30:ab:2b: 12:fd:fb:bc:6b:aa:cf:3a:1b:53:b3:40:83:ca:c9:c2:ad:1d: 7b:38:42:6b -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgIUSUF1uqKZ4ZARFK+nCvIMGwZ+pG4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEygxMjM0NUYxMTVB QzRCNjJBNTFGNTI3NEM1NEM4MUU4NjQ2M0JEMEJBMB4XDTI2MDMwNDA0MTIzMloX DTI3MDMwMzA0MTczMlowMzExMC8GA1UEAxMoMzYzQkJGRjM3QjI3NTg0QzUzMjVE NDVBRDNERjZFQjc4RjUzQzFBODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM4DUUMj/f22J8yjH2yHSwYndo6Cq29kGCkdKKlH0pCPK8L54rNIiDSxPhGm skIBYyL/DZJHvVJ28gh8agjOAgis1DejWEh3XWaIe4MVkqP/blG4xHOvxSDxOWiO 0H/YsBx4WVgIUQFcD6YgcF/b2LArKrUH+98FAnzbW+vOncHSxM+aOyTzUUrKp2Bi cMiw3x6FMHV9mkd30//IcfIeadKVTZSadbI2f3cF5Q+qnQpDGORpszpElqWbBiSL 5fGEml0298I5uCLwtlNvIrB4WyJKDv2HWCWEfdniaa2Omh+Sw/+GRCyXPwbIMw9d TbShqwDkk8IgT/Aim4ojlb61Ag8CAwEAAaOCAgMwggH/MB0GA1UdDgQWBBQ2O7/z eydYTFMl1FrT3263j1PBqDAfBgNVHSMEGDAWgBQSNF8RWsS2KlH1J0xUyB6GRjvQ ujAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMC8xMjM0NUYxMTVBQzRCNjJB NTFGNTI3NEM1NEM4MUU4NjQ2M0JEMEJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CMzIy QTVGNDFENjYxMUUyQTNGMjdGN0M3MkZEMUZGMi9FalJmRVZyRXRpcFI5U2RNVk1n ZWhrWTcwTG8uY2VyMIGGBggrBgEFBQcBCwR6MHgwdgYIKwYBBQUHMAuGanJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL0lETklDLUlELzAvMzEzNTMxMmUz MTM1MzgyZTMyMzQzMDJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDMxMzUzNDM1MzIz Ny5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAZee8DANBgkqhkiG9w0BAQsFAAOCAQEABQOqhWDYbytY/1yf Z1DfZpJF9zB+7vEdmqHPYZ1/27fKGpPwd5xQm2/27RGI4aPReczj3hFsJUk+dT13 3yj8Z0qjAR0LmfMz8XhXmv+wIdmbrt4Mjw4fwCEeN68K7Y/2eqY26hyvlJZBcm0G CFkbHOIPBHDD0I+n+hxZ1KK05ETBGPMzOoOP4Ee8Y3xb46J9+YTdICnoeWRAhCVz VgMjDtPjjNkAkuM8H532ut7qPUwYia4SMS5b7nzpUwuAKpPftw+Nvws42iLFY4qJ G5D+AcQLWjkGYzICdNNupNCEtDcNGOh2BxPmMKsrEv37vGuqzzobU7NAg8rJwq0d ezhCaw== -----END CERTIFICATE-----Generated at Sat Mar 7 16:08:28 2026 by rpki-client