$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/0/3135312e3135382e3235302e302f32342d3234203d3e20313432353636.roa File: 3135312e3135382e3235302e302f32342d3234203d3e20313432353636.roa (raw, json) Hash identifier: snY8hCWpMQz3894nERSOV1ZUgmPo7DqaG6a4ucnpn8M= Subject key identifier: 99:87:0C:66:DC:41:80:20:E7:98:83:9A:FA:81:3D:13:CB:36:BD:3C Certificate issuer: /CN=A91862140000/serialNumber=12345F115AC4B62A51F5274C54C81E86463BD0BA Certificate serial: 6333BCED9726CFF48D79CEEB7BE95A77D15DCF6F Authority key identifier: 12:34:5F:11:5A:C4:B6:2A:51:F5:27:4C:54:C8:1E:86:46:3B:D0:BA Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/EjRfEVrEtipR9SdMVMgehkY70Lo.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/3135312e3135382e3235302e302f32342d3234203d3e20313432353636.roa Signing time: Thu 05 Mar 2026 04:11:15 +0000 ROA not before: Thu 05 Mar 2026 04:06:15 +0000 ROA not after: Thu 04 Mar 2027 04:11:15 +0000 asID: 142566 IP address blocks: 151.158.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/EjRfEVrEtipR9SdMVMgehkY70Lo.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Mar 2026 07:02:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:33:bc:ed:97:26:cf:f4:8d:79:ce:eb:7b:e9:5a:77:d1:5d:cf:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=12345F115AC4B62A51F5274C54C81E86463BD0BA Validity Not Before: Mar 5 04:06:15 2026 GMT Not After : Mar 4 04:11:15 2027 GMT Subject: CN=99870C66DC418020E798839AFA813D13CB36BD3C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:74:a7:e1:f9:88:fc:4d:c6:2f:ac:e8:d6:0d: f4:79:c1:33:1f:0d:72:73:02:ef:ab:5e:48:53:f2: 46:89:ff:d5:1c:5d:fe:72:7b:1b:26:d7:9e:3f:c1: d9:de:c0:75:68:cd:c3:3c:47:3c:f0:83:6c:5c:0b: 5f:ac:56:43:dd:5b:72:25:13:8c:d8:cc:59:5c:8b: 45:95:eb:73:3c:d9:5e:77:a5:00:09:c4:48:fb:ca: 8f:b6:2a:a3:72:24:7c:5d:62:4c:ce:63:b4:a1:30: d3:52:cd:76:51:a6:eb:dc:f6:33:c0:a1:91:14:ee: 35:ab:f3:5b:6a:2f:bc:f7:a8:84:ec:09:bb:bf:d0: a7:89:d4:a7:e5:b5:e9:59:1b:46:32:4f:e4:aa:55: 5f:67:f6:d4:9b:cc:a8:8b:70:a7:59:5e:c6:49:a3: 25:ac:72:46:49:af:b0:87:d9:7b:ec:0d:5a:0c:b4: ac:1e:0d:d2:b9:c7:da:79:56:07:b3:60:a2:14:e6: b3:7c:f1:ba:d9:9b:ae:87:b2:74:3b:f2:a5:fc:db: d1:ec:22:96:18:c5:93:b8:ad:f2:eb:9e:38:78:f2: 76:f7:7d:52:fe:ea:7b:f7:35:08:b5:ff:c2:80:d9: 69:c2:ea:02:36:28:6b:2d:e5:f9:85:78:3d:db:b3: 99:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:87:0C:66:DC:41:80:20:E7:98:83:9A:FA:81:3D:13:CB:36:BD:3C X509v3 Authority Key Identifier: keyid:12:34:5F:11:5A:C4:B6:2A:51:F5:27:4C:54:C8:1E:86:46:3B:D0:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/EjRfEVrEtipR9SdMVMgehkY70Lo.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/3135312e3135382e3235302e302f32342d3234203d3e20313432353636.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.158.250.0/24 Signature Algorithm: sha256WithRSAEncryption 71:73:bf:ed:18:c3:8c:14:bd:1d:71:d5:76:82:d4:8f:42:17: 59:fe:3f:41:0f:1e:08:56:80:2a:8e:3e:0f:68:d4:dd:5d:f1: aa:cf:a8:58:f2:ac:29:26:b8:de:a2:e4:09:05:4a:08:ab:16: 27:d6:1b:f9:08:3a:cd:7e:73:01:6f:ea:ce:2b:9a:aa:d3:5d: 36:b6:5c:76:a5:e6:cc:e2:2c:83:fb:5f:ea:46:22:a0:21:a4: 78:25:d6:a1:ac:41:e6:de:ad:e0:b5:b7:01:f4:df:d1:6b:b0: cb:e0:3f:32:e7:6d:30:35:0c:d9:98:f8:cb:30:92:63:32:97: b4:9f:09:21:0c:c9:97:4f:a7:09:87:a5:8f:23:82:21:3d:d4: 44:eb:cc:e2:e4:b2:b0:be:a7:c5:1c:8b:dd:c7:2e:ec:b3:a1: d9:c9:dd:79:99:dc:e5:55:36:bb:71:1c:bf:45:ab:d9:2c:64: 5b:97:fd:14:74:03:1e:d6:07:e8:2b:66:ec:dc:8f:b8:46:04: d6:7e:c9:89:07:4f:c2:69:c1:b0:24:a7:71:cb:5f:ad:c1:64: be:45:b1:c5:6b:c5:8e:3c:5e:d6:5f:d9:a2:a2:d0:59:15:88: 5e:53:c4:e1:98:a6:76:eb:1b:20:87:01:20:46:c0:4d:56:60: 1d:82:99:01 -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgIUYzO87Zcmz/SNec7re+lad9Fdz28wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEygxMjM0NUYxMTVB QzRCNjJBNTFGNTI3NEM1NEM4MUU4NjQ2M0JEMEJBMB4XDTI2MDMwNTA0MDYxNVoX DTI3MDMwNDA0MTExNVowMzExMC8GA1UEAxMoOTk4NzBDNjZEQzQxODAyMEU3OTg4 MzlBRkE4MTNEMTNDQjM2QkQzQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKp0p+H5iPxNxi+s6NYN9HnBMx8NcnMC76teSFPyRon/1Rxd/nJ7GybXnj/B 2d7AdWjNwzxHPPCDbFwLX6xWQ91bciUTjNjMWVyLRZXrczzZXnelAAnESPvKj7Yq o3IkfF1iTM5jtKEw01LNdlGm69z2M8ChkRTuNavzW2ovvPeohOwJu7/Qp4nUp+W1 6VkbRjJP5KpVX2f21JvMqItwp1lexkmjJaxyRkmvsIfZe+wNWgy0rB4N0rnH2nlW B7NgohTms3zxutmbroeydDvypfzb0ewilhjFk7it8uueOHjydvd9Uv7qe/c1CLX/ woDZacLqAjYoay3l+YV4PduzmWsCAwEAAaOCAgMwggH/MB0GA1UdDgQWBBSZhwxm 3EGAIOeYg5r6gT0Tyza9PDAfBgNVHSMEGDAWgBQSNF8RWsS2KlH1J0xUyB6GRjvQ ujAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMC8xMjM0NUYxMTVBQzRCNjJB NTFGNTI3NEM1NEM4MUU4NjQ2M0JEMEJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CMzIy QTVGNDFENjYxMUUyQTNGMjdGN0M3MkZEMUZGMi9FalJmRVZyRXRpcFI5U2RNVk1n ZWhrWTcwTG8uY2VyMIGGBggrBgEFBQcBCwR6MHgwdgYIKwYBBQUHMAuGanJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL0lETklDLUlELzAvMzEzNTMxMmUz MTM1MzgyZTMyMzUzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzQzMjM1MzYz Ni5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAJee+jANBgkqhkiG9w0BAQsFAAOCAQEAcXO/7RjDjBS9HXHV doLUj0IXWf4/QQ8eCFaAKo4+D2jU3V3xqs+oWPKsKSa43qLkCQVKCKsWJ9Yb+Qg6 zX5zAW/qziuaqtNdNrZcdqXmzOIsg/tf6kYioCGkeCXWoaxB5t6t4LW3AfTf0Wuw y+A/MudtMDUM2Zj4yzCSYzKXtJ8JIQzJl0+nCYeljyOCIT3UROvM4uSysL6nxRyL 3ccu7LOh2cndeZnc5VU2u3Ecv0Wr2SxkW5f9FHQDHtYH6Ctm7NyPuEYE1n7JiQdP wmnBsCSncctfrcFkvkWxxWvFjjxe1l/ZoqLQWRWIXlPE4ZimdusbIIcBIEbATVZg HYKZAQ== -----END CERTIFICATE-----Generated at Sat Mar 7 16:08:19 2026 by rpki-client