$ rpki-client -vvf repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/3131372e37342e3132322e302f32342d3234203d3e203338353135.roa File: 3131372e37342e3132322e302f32342d3234203d3e203338353135.roa (raw, json) Hash identifier: L+491taLPuqBqSvOkXjgvP+pm08zY41h2d5QaEzeiJw= Subject key identifier: 58:5A:B7:9D:A8:9F:F5:8D:A4:F2:2C:6F:94:F4:92:4B:1C:3D:DA:DA Certificate issuer: /CN=935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3 Certificate serial: 52317A31EC52A8EEB919FAB263A2D0D172B0DAC9 Authority key identifier: 93:5D:B2:D4:48:8F:AE:2C:11:E1:BF:3B:DF:20:D8:2A:2D:DF:D8:F3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/3131372e37342e3132322e302f32342d3234203d3e203338353135.roa Signing time: Wed 11 Mar 2026 08:00:01 +0000 ROA not before: Wed 11 Mar 2026 07:55:01 +0000 ROA not after: Wed 10 Mar 2027 08:00:01 +0000 asID: 38515 IP address blocks: 117.74.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.crl rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 06:29:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:31:7a:31:ec:52:a8:ee:b9:19:fa:b2:63:a2:d0:d1:72:b0:da:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3 Validity Not Before: Mar 11 07:55:01 2026 GMT Not After : Mar 10 08:00:01 2027 GMT Subject: CN=585AB79DA89FF58DA4F22C6F94F4924B1C3DDADA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:5a:1c:32:e1:f9:dd:6f:f5:16:4b:57:59:bb: 8e:b8:b7:6a:44:da:bb:6d:c0:1e:28:c1:b4:45:d3: 95:e9:a6:52:b9:9e:c9:86:2b:ca:c3:b7:ef:2a:d7: a8:04:4f:61:cb:6d:83:46:73:df:65:93:65:db:33: d2:b3:d3:bf:64:3c:d0:bf:79:c4:39:8e:42:74:3d: 9c:98:47:c2:b4:32:a6:6f:5d:7f:4b:fe:2d:a1:30: d7:39:1e:f5:a1:9e:0d:46:2b:fc:17:a9:88:ac:85: 2b:80:b4:e0:de:b8:af:94:89:f6:8c:1e:a4:2b:99: 5e:1d:39:5d:47:0f:87:7b:e1:2a:58:08:50:5c:87: 37:88:06:63:80:9b:1b:73:95:ed:94:ad:b5:50:85: 9d:e1:00:fb:e8:af:02:9f:83:c6:3d:66:fa:b6:a3: 8f:d0:3d:99:3f:38:d0:95:ea:2a:28:3d:8c:7c:d1: 8b:1b:34:d5:c4:23:70:b6:ea:19:a7:ed:06:60:0a: fe:16:e6:c8:09:c2:df:1d:5f:5b:e1:7c:7e:fd:b1: 35:a7:05:4e:4c:18:e4:64:71:30:05:d7:4d:73:21: f0:5c:f4:51:11:0e:2e:9a:88:b1:fa:3d:d4:ea:77: ea:a5:18:22:9e:ae:77:3a:1e:d1:2d:50:c3:4e:5d: 37:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:5A:B7:9D:A8:9F:F5:8D:A4:F2:2C:6F:94:F4:92:4B:1C:3D:DA:DA X509v3 Authority Key Identifier: keyid:93:5D:B2:D4:48:8F:AE:2C:11:E1:BF:3B:DF:20:D8:2A:2D:DF:D8:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/3131372e37342e3132322e302f32342d3234203d3e203338353135.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 117.74.122.0/24 Signature Algorithm: sha256WithRSAEncryption 5a:05:29:61:0c:65:a2:1e:f8:65:9b:7e:32:dd:5a:e4:47:77: 57:b0:8a:bc:55:a4:f9:d9:0a:91:16:95:13:7c:1a:8a:65:f8: e0:8d:6c:4b:f9:5e:c5:52:fd:79:d1:82:1c:45:8b:38:30:ed: bf:d7:b2:15:c2:c4:d7:ae:7e:e6:45:ce:0c:ae:1b:6f:13:cb: e6:b1:ba:52:11:71:21:1d:51:5f:2f:20:fb:9a:1b:f1:a9:0f: ac:3d:81:d7:03:8b:63:c2:3c:4b:d9:66:77:35:14:f3:98:cb: 91:28:3d:6a:63:ad:c6:78:8c:c4:ab:f0:9c:b1:10:06:4e:83: 10:7c:ed:d9:07:ca:89:f9:f7:69:d6:9b:e3:9e:43:d1:21:a0: e5:1c:85:a3:f4:04:2b:00:8b:8e:d4:88:d5:d4:f6:20:4f:1d: e6:16:3a:8f:87:6e:87:ad:39:0d:fb:7f:98:c2:9a:a4:67:32: 31:23:bc:3d:13:0a:38:b1:b0:9e:43:26:da:0e:a9:87:93:ed: 5e:a2:46:9e:2c:68:2f:4f:98:54:32:74:33:e4:af:75:6c:4d: fd:d5:59:38:c3:d6:66:33:a3:62:f6:9c:85:1c:6a:23:83:9d: 02:32:ee:93:04:ca:50:07:7a:f4:a4:6c:fb:8a:21:bc:ba:f9: 48:11:0e:ff -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUUjF6MexSqO65GfqyY6LQ0XKw2skwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTM1REIyRDQ0ODhGQUUyQzExRTFCRjNCREYyMEQ4MkEy RERGRDhGMzAeFw0yNjAzMTEwNzU1MDFaFw0yNzAzMTAwODAwMDFaMDMxMTAvBgNV BAMTKDU4NUFCNzlEQTg5RkY1OERBNEYyMkM2Rjk0RjQ5MjRCMUMzRERBREEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpWhwy4fndb/UWS1dZu464t2pE 2rttwB4owbRF05XpplK5nsmGK8rDt+8q16gET2HLbYNGc99lk2XbM9Kz079kPNC/ ecQ5jkJ0PZyYR8K0MqZvXX9L/i2hMNc5HvWhng1GK/wXqYishSuAtODeuK+UifaM HqQrmV4dOV1HD4d74SpYCFBchzeIBmOAmxtzle2UrbVQhZ3hAPvorwKfg8Y9Zvq2 o4/QPZk/ONCV6iooPYx80YsbNNXEI3C26hmn7QZgCv4W5sgJwt8dX1vhfH79sTWn BU5MGORkcTAF101zIfBc9FERDi6aiLH6PdTqd+qlGCKernc6HtEtUMNOXTfHAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUWFq3naif9Y2k8ixvlPSSSxw92towHwYDVR0j BBgwFoAUk12y1EiPriwR4b873yDYKi3f2PMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YzRjNjRhOS0zNTM3LTRiYzctODYxMy04ZTk4MTYyOWU0Y2EvMC85MzVEQjJENDQ4 OEZBRTJDMTFFMUJGM0JERjIwRDgyQTJEREZEOEYzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTM1REIyRDQ0ODhGQUUyQzExRTFCRjNCREYyMEQ4MkEyRERG RDhGMy5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzZjNGM2NGE5LTM1MzctNGJjNy04 NjEzLThlOTgxNjI5ZTRjYS8wLzMxMzEzNzJlMzczNDJlMzEzMjMyMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzMzODM1MzEzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHVKejANBgkqhkiG 9w0BAQsFAAOCAQEAWgUpYQxloh74ZZt+Mt1a5Ed3V7CKvFWk+dkKkRaVE3waimX4 4I1sS/lexVL9edGCHEWLODDtv9eyFcLE165+5kXODK4bbxPL5rG6UhFxIR1RXy8g +5ob8akPrD2B1wOLY8I8S9lmdzUU85jLkSg9amOtxniMxKvwnLEQBk6DEHzt2QfK ifn3adab455D0SGg5RyFo/QEKwCLjtSI1dT2IE8d5hY6j4duh605Dft/mMKapGcy MSO8PRMKOLGwnkMm2g6ph5PtXqJGnixoL0+YVDJ0M+SvdWxN/dVZOMPWZjOjYvac hRxqI4OdAjLukwTKUAd69KRs+4ohvLr5SBEO/w== -----END CERTIFICATE-----Generated at Thu Mar 26 17:42:05 2026 by rpki-client