$ rpki-client -vvf repo-rpki.idnic.net/repo/a572dfbe-4ca0-4a46-8037-4968ed97cadc/0/3132312e3130312e3138382e302f32342d3234203d3e203338373835.roa File: 3132312e3130312e3138382e302f32342d3234203d3e203338373835.roa (raw, json) Hash identifier: u43zTi9Bk1sJznU4k2t//pSN767UMyRsnCd0m+J61t0= Subject key identifier: 42:93:B9:0D:43:0A:3A:C8:F8:FA:61:D7:AC:08:3A:13:D9:25:3D:AC Certificate issuer: /CN=3308A0FBD29F359AD61CAA389208E1D74CC28164 Certificate serial: 7A0D1E69A10876315D1E2CBA7B5B1D0B19C7DE0A Authority key identifier: 33:08:A0:FB:D2:9F:35:9A:D6:1C:AA:38:92:08:E1:D7:4C:C2:81:64 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3308A0FBD29F359AD61CAA389208E1D74CC28164.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a572dfbe-4ca0-4a46-8037-4968ed97cadc/0/3132312e3130312e3138382e302f32342d3234203d3e203338373835.roa Signing time: Thu 05 Mar 2026 05:00:03 +0000 ROA not before: Thu 05 Mar 2026 04:55:03 +0000 ROA not after: Thu 04 Mar 2027 05:00:03 +0000 asID: 38785 IP address blocks: 121.101.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a572dfbe-4ca0-4a46-8037-4968ed97cadc/0/3308A0FBD29F359AD61CAA389208E1D74CC28164.crl rsync://repo-rpki.idnic.net/repo/a572dfbe-4ca0-4a46-8037-4968ed97cadc/0/3308A0FBD29F359AD61CAA389208E1D74CC28164.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3308A0FBD29F359AD61CAA389208E1D74CC28164.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 00:21:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:0d:1e:69:a1:08:76:31:5d:1e:2c:ba:7b:5b:1d:0b:19:c7:de:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3308A0FBD29F359AD61CAA389208E1D74CC28164 Validity Not Before: Mar 5 04:55:03 2026 GMT Not After : Mar 4 05:00:03 2027 GMT Subject: CN=4293B90D430A3AC8F8FA61D7AC083A13D9253DAC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ce:c9:f8:2f:dc:73:12:09:41:d3:c9:3c:1f: 8d:9e:c2:f0:6a:2b:ac:2d:50:f0:8b:38:0e:67:3d: 23:45:9d:cb:74:4c:24:60:12:8c:e9:6c:98:d2:b7: 94:61:86:db:5b:f5:12:0f:a3:4e:38:d9:0a:7b:aa: 95:79:a3:bf:f5:c6:4e:d0:96:62:1b:e4:c7:fc:cc: d0:69:b6:e2:03:3e:5a:2d:7a:8b:3d:9d:b0:f6:60: 09:59:b9:90:a2:bc:2a:97:96:5d:3d:5b:ab:c8:d4: 87:dd:01:1b:41:c5:6c:0b:3b:b2:61:86:ac:59:b1: 83:29:24:34:6e:c8:87:1e:1b:71:b8:44:23:57:1a: 1c:64:6b:db:b6:4b:7b:02:44:75:85:88:81:7d:a1: 60:64:14:37:2d:1b:60:1b:79:63:b7:10:bb:e1:3a: ad:10:6c:44:ba:2c:bc:34:e8:14:65:b1:1d:42:14: e4:9c:92:f5:bf:4f:6c:4f:be:05:1c:cc:1f:ef:c1: 82:5d:4a:04:aa:42:e7:8f:85:88:c4:e6:1f:19:f7: 4d:a7:ee:b9:f1:39:4f:47:77:15:2f:14:0b:f9:a0: af:0a:35:aa:d5:d5:a3:fc:d2:dc:a6:23:2e:82:c7: 16:18:2f:bb:27:95:83:9d:58:61:85:cd:fd:d6:b6: b6:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:93:B9:0D:43:0A:3A:C8:F8:FA:61:D7:AC:08:3A:13:D9:25:3D:AC X509v3 Authority Key Identifier: keyid:33:08:A0:FB:D2:9F:35:9A:D6:1C:AA:38:92:08:E1:D7:4C:C2:81:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a572dfbe-4ca0-4a46-8037-4968ed97cadc/0/3308A0FBD29F359AD61CAA389208E1D74CC28164.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3308A0FBD29F359AD61CAA389208E1D74CC28164.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a572dfbe-4ca0-4a46-8037-4968ed97cadc/0/3132312e3130312e3138382e302f32342d3234203d3e203338373835.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 121.101.188.0/24 Signature Algorithm: sha256WithRSAEncryption b3:69:a6:58:46:50:37:83:1a:84:14:c1:39:ab:41:7d:e1:91: 1e:c3:f4:73:57:c4:36:b6:e9:74:56:2e:04:bd:88:03:7b:cd: 37:8e:78:b1:1b:b3:f4:d4:77:d5:8a:69:5b:40:25:b5:02:18: 5f:ae:97:67:90:2e:07:fe:36:5a:11:19:01:40:3d:a1:e5:b0: c1:32:05:cb:06:5e:7d:ac:92:20:5b:3d:bd:1a:77:e8:e0:e5: 90:14:88:73:0f:9e:8f:30:2d:56:01:79:3a:31:a9:31:b0:cb: 21:47:0e:0f:1b:fb:13:9c:78:03:aa:20:cb:9c:48:e9:16:3f: e5:0b:39:bf:5f:c0:ba:ab:68:71:b6:00:47:42:83:ea:98:ac: 24:bb:7d:e9:21:bb:b9:18:61:93:70:37:03:84:73:d6:9d:64: e5:83:6b:8f:2a:96:e0:f0:49:9e:c4:32:2d:04:e8:03:a3:5b: f7:52:12:95:22:b9:00:af:06:73:eb:32:bb:73:53:25:47:3d: 8b:50:ff:80:4c:8d:b3:4f:47:51:df:4c:d5:ce:32:fc:8d:99: 03:b7:13:f8:7f:46:31:75:f5:cd:2b:4e:d7:69:64:56:d4:cd: e9:ac:d7:d9:09:b3:80:b6:63:15:91:44:5f:2f:f2:87:07:0b: 7e:23:1e:59 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUeg0eaaEIdjFdHiy6e1sdCxnH3gowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzMwOEEwRkJEMjlGMzU5QUQ2MUNBQTM4OTIwOEUxRDc0 Q0MyODE2NDAeFw0yNjAzMDUwNDU1MDNaFw0yNzAzMDQwNTAwMDNaMDMxMTAvBgNV BAMTKDQyOTNCOTBENDMwQTNBQzhGOEZBNjFEN0FDMDgzQTEzRDkyNTNEQUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/zsn4L9xzEglB08k8H42ewvBq K6wtUPCLOA5nPSNFnct0TCRgEozpbJjSt5Rhhttb9RIPo0442Qp7qpV5o7/1xk7Q lmIb5Mf8zNBptuIDPloteos9nbD2YAlZuZCivCqXll09W6vI1IfdARtBxWwLO7Jh hqxZsYMpJDRuyIceG3G4RCNXGhxka9u2S3sCRHWFiIF9oWBkFDctG2AbeWO3ELvh Oq0QbES6LLw06BRlsR1CFOSckvW/T2xPvgUczB/vwYJdSgSqQuePhYjE5h8Z902n 7rnxOU9HdxUvFAv5oK8KNarV1aP80tymIy6CxxYYL7snlYOdWGGFzf3Wtra5AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUQpO5DUMKOsj4+mHXrAg6E9klPawwHwYDVR0j BBgwFoAUMwig+9KfNZrWHKo4kgjh10zCgWQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NTcyZGZiZS00Y2EwLTRhNDYtODAzNy00OTY4ZWQ5N2NhZGMvMC8zMzA4QTBGQkQy OUYzNTlBRDYxQ0FBMzg5MjA4RTFENzRDQzI4MTY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzMwOEEwRkJEMjlGMzU5QUQ2MUNBQTM4OTIwOEUxRDc0Q0My ODE2NC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E1NzJkZmJlLTRjYTAtNGE0Ni04 MDM3LTQ5NjhlZDk3Y2FkYy8wLzMxMzIzMTJlMzEzMDMxMmUzMTM4MzgyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMzM4MzczODM1LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAeWW8MA0GCSqG SIb3DQEBCwUAA4IBAQCzaaZYRlA3gxqEFME5q0F94ZEew/RzV8Q2tul0Vi4EvYgD e803jnixG7P01HfVimlbQCW1AhhfrpdnkC4H/jZaERkBQD2h5bDBMgXLBl59rJIg Wz29Gnfo4OWQFIhzD56PMC1WAXk6MakxsMshRw4PG/sTnHgDqiDLnEjpFj/lCzm/ X8C6q2hxtgBHQoPqmKwku33pIbu5GGGTcDcDhHPWnWTlg2uPKpbg8EmexDItBOgD o1v3UhKVIrkArwZz6zK7c1MlRz2LUP+ATI2zT0dR30zVzjL8jZkDtxP4f0YxdfXN K07XaWRW1M3prNfZCbOAtmMVkURfL/KHBwt+Ix5Z -----END CERTIFICATE-----Generated at Thu Mar 26 22:35:04 2026 by rpki-client