$ rpki-client -vvf repo-rpki.idnic.net/repo/a572dfbe-4ca0-4a46-8037-4968ed97cadc/0/3132312e3130312e3138342e302f32342d3234203d3e203338373835.roa File: 3132312e3130312e3138342e302f32342d3234203d3e203338373835.roa (raw, json) Hash identifier: t/PNdhAimXVY10CPtXNhPj7zhZ0aTYHgcrFrXGZksrU= Subject key identifier: FF:84:7D:97:D1:E4:09:19:F8:22:2E:AE:69:0D:67:58:3D:57:DB:C2 Certificate issuer: /CN=3308A0FBD29F359AD61CAA389208E1D74CC28164 Certificate serial: 2869996594A54E35915D8642389549844B651B35 Authority key identifier: 33:08:A0:FB:D2:9F:35:9A:D6:1C:AA:38:92:08:E1:D7:4C:C2:81:64 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3308A0FBD29F359AD61CAA389208E1D74CC28164.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a572dfbe-4ca0-4a46-8037-4968ed97cadc/0/3132312e3130312e3138342e302f32342d3234203d3e203338373835.roa Signing time: Thu 05 Mar 2026 05:00:03 +0000 ROA not before: Thu 05 Mar 2026 04:55:03 +0000 ROA not after: Thu 04 Mar 2027 05:00:03 +0000 asID: 38785 IP address blocks: 121.101.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a572dfbe-4ca0-4a46-8037-4968ed97cadc/0/3308A0FBD29F359AD61CAA389208E1D74CC28164.crl rsync://repo-rpki.idnic.net/repo/a572dfbe-4ca0-4a46-8037-4968ed97cadc/0/3308A0FBD29F359AD61CAA389208E1D74CC28164.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3308A0FBD29F359AD61CAA389208E1D74CC28164.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 00:21:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:69:99:65:94:a5:4e:35:91:5d:86:42:38:95:49:84:4b:65:1b:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3308A0FBD29F359AD61CAA389208E1D74CC28164 Validity Not Before: Mar 5 04:55:03 2026 GMT Not After : Mar 4 05:00:03 2027 GMT Subject: CN=FF847D97D1E40919F8222EAE690D67583D57DBC2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:e3:05:c7:12:e9:21:8e:92:21:c1:60:3d:95: 25:83:94:8b:16:79:3c:40:7b:33:55:80:92:e1:dd: 18:de:8d:a4:3a:a3:db:4d:39:09:fa:bb:91:da:e6: 7e:02:f3:c9:57:74:e0:55:86:7a:fa:04:8f:b2:50: 5f:f0:0d:74:08:08:97:d8:03:d3:17:99:cb:ba:91: 07:5c:6e:5f:2d:6d:6b:fd:63:9e:67:8c:b2:6a:f5: 65:ef:d3:df:98:3e:69:3d:15:02:4c:81:ab:9a:cd: 65:94:02:01:e0:af:02:df:ff:bd:80:30:73:0e:f7: 52:d2:fc:89:a1:86:5a:82:52:73:01:23:04:d8:fa: 22:33:75:57:f5:87:40:63:1f:4a:d9:49:eb:81:54: ec:3a:82:fc:f1:e4:08:a4:da:c1:4f:7a:28:41:88: 55:1d:b7:79:2c:b5:9e:09:66:23:6f:a5:df:05:c7: 0a:3c:72:2a:2c:fc:d5:a3:d1:e5:1a:e6:ea:0d:6e: a6:0f:09:73:d3:e1:92:9b:97:b7:db:40:a0:84:74: 93:1f:c8:31:2b:36:63:f8:f4:2b:c3:72:3e:09:6a: 8b:cb:d6:0b:0b:b7:e7:4e:c4:5c:f0:26:b8:39:b6: 1c:96:f7:ce:6e:ff:1a:e4:1f:78:ca:e2:5e:cb:75: 43:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:84:7D:97:D1:E4:09:19:F8:22:2E:AE:69:0D:67:58:3D:57:DB:C2 X509v3 Authority Key Identifier: keyid:33:08:A0:FB:D2:9F:35:9A:D6:1C:AA:38:92:08:E1:D7:4C:C2:81:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a572dfbe-4ca0-4a46-8037-4968ed97cadc/0/3308A0FBD29F359AD61CAA389208E1D74CC28164.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3308A0FBD29F359AD61CAA389208E1D74CC28164.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a572dfbe-4ca0-4a46-8037-4968ed97cadc/0/3132312e3130312e3138342e302f32342d3234203d3e203338373835.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 121.101.184.0/24 Signature Algorithm: sha256WithRSAEncryption 0d:87:bc:0e:00:90:c7:fb:d2:ce:3c:b7:bb:54:44:74:49:66: 8d:a7:4c:88:41:5c:dc:ed:0e:b3:30:7a:ca:c6:60:cb:a2:9d: ad:79:4c:7e:d0:e7:19:42:a1:0c:d3:aa:26:17:38:7f:8d:e6: b8:d1:42:22:7a:ce:a5:7a:f2:51:f0:0c:34:ac:af:f4:89:f6: 27:84:cd:0c:80:72:1c:52:78:e0:27:53:bf:77:e3:f9:46:da: e3:f8:27:11:12:55:ec:b6:58:b9:2d:d8:da:47:b7:d5:b7:1b: 03:ba:0c:fd:bc:76:75:d9:f0:4a:fe:c9:73:61:56:ed:3f:d1: 22:dc:91:30:db:50:e3:d1:be:6a:3a:f0:3c:2f:a2:94:76:73: 41:e4:d6:67:a4:e5:62:e8:37:ab:e2:d3:ae:eb:92:84:cc:72: b7:8a:40:d6:77:37:dd:fd:52:38:25:b4:ef:bf:ee:7d:e2:54: 1d:e4:55:e9:a6:5a:2c:e9:70:c1:f7:0a:87:46:ae:43:cc:fa: be:2a:7b:bb:74:e0:7e:a3:c5:0b:77:84:4f:03:d7:1f:d3:6f: 9a:aa:c7:65:ee:f3:dd:f3:e0:fa:74:e3:c7:b2:27:3b:f6:60: ca:7f:1e:2e:bc:b8:78:48:e0:1a:64:0a:5a:a3:28:05:43:f2: 84:15:63:87 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUKGmZZZSlTjWRXYZCOJVJhEtlGzUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzMwOEEwRkJEMjlGMzU5QUQ2MUNBQTM4OTIwOEUxRDc0 Q0MyODE2NDAeFw0yNjAzMDUwNDU1MDNaFw0yNzAzMDQwNTAwMDNaMDMxMTAvBgNV BAMTKEZGODQ3RDk3RDFFNDA5MTlGODIyMkVBRTY5MEQ2NzU4M0Q1N0RCQzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx4wXHEukhjpIhwWA9lSWDlIsW eTxAezNVgJLh3RjejaQ6o9tNOQn6u5Ha5n4C88lXdOBVhnr6BI+yUF/wDXQICJfY A9MXmcu6kQdcbl8tbWv9Y55njLJq9WXv09+YPmk9FQJMgauazWWUAgHgrwLf/72A MHMO91LS/ImhhlqCUnMBIwTY+iIzdVf1h0BjH0rZSeuBVOw6gvzx5Aik2sFPeihB iFUdt3kstZ4JZiNvpd8Fxwo8cios/NWj0eUa5uoNbqYPCXPT4ZKbl7fbQKCEdJMf yDErNmP49CvDcj4JaovL1gsLt+dOxFzwJrg5thyW985u/xrkH3jK4l7LdUNtAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU/4R9l9HkCRn4Ii6uaQ1nWD1X28IwHwYDVR0j BBgwFoAUMwig+9KfNZrWHKo4kgjh10zCgWQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NTcyZGZiZS00Y2EwLTRhNDYtODAzNy00OTY4ZWQ5N2NhZGMvMC8zMzA4QTBGQkQy OUYzNTlBRDYxQ0FBMzg5MjA4RTFENzRDQzI4MTY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzMwOEEwRkJEMjlGMzU5QUQ2MUNBQTM4OTIwOEUxRDc0Q0My ODE2NC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E1NzJkZmJlLTRjYTAtNGE0Ni04 MDM3LTQ5NjhlZDk3Y2FkYy8wLzMxMzIzMTJlMzEzMDMxMmUzMTM4MzQyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMzM4MzczODM1LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAeWW4MA0GCSqG SIb3DQEBCwUAA4IBAQANh7wOAJDH+9LOPLe7VER0SWaNp0yIQVzc7Q6zMHrKxmDL op2teUx+0OcZQqEM06omFzh/jea40UIies6levJR8Aw0rK/0ifYnhM0MgHIcUnjg J1O/d+P5Rtrj+CcRElXstli5LdjaR7fVtxsDugz9vHZ12fBK/slzYVbtP9Ei3JEw 21Dj0b5qOvA8L6KUdnNB5NZnpOVi6Der4tOu65KEzHK3ikDWdzfd/VI4JbTvv+59 4lQd5FXpplos6XDB9wqHRq5DzPq+Knu7dOB+o8ULd4RPA9cf02+aqsdl7vPd8+D6 dOPHsic79mDKfx4uvLh4SOAaZApaoygFQ/KEFWOH -----END CERTIFICATE-----Generated at Thu Mar 26 22:36:13 2026 by rpki-client