$ rpki-client -vvf repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3131362e39302e3136392e302f32342d3234203d3e203338373635.roa File: 3131362e39302e3136392e302f32342d3234203d3e203338373635.roa (raw, json) Hash identifier: S6WBp1VPXxXaoJY/gth1Vo345xrNX8UhPHqEvplJaXU= Subject key identifier: D8:71:3B:9C:D9:C2:D0:27:97:D9:A5:E9:A3:DF:19:81:BA:06:9E:A8 Certificate issuer: /CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E Certificate serial: 27CDA460FE2BE1287E0CDA751448B9BE275B5E49 Authority key identifier: 82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3131362e39302e3136392e302f32342d3234203d3e203338373635.roa Signing time: Thu 12 Mar 2026 21:00:01 +0000 ROA not before: Thu 12 Mar 2026 20:55:01 +0000 ROA not after: Thu 11 Mar 2027 21:00:01 +0000 asID: 38765 IP address blocks: 116.90.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 22:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:cd:a4:60:fe:2b:e1:28:7e:0c:da:75:14:48:b9:be:27:5b:5e:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E Validity Not Before: Mar 12 20:55:01 2026 GMT Not After : Mar 11 21:00:01 2027 GMT Subject: CN=D8713B9CD9C2D02797D9A5E9A3DF1981BA069EA8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:3a:25:7e:88:6b:2c:5d:fc:ce:26:6a:90:80: b2:80:65:ed:1b:c3:de:41:fb:43:1d:97:48:ff:ab: 0a:a1:b6:3c:7b:69:1e:08:9f:d7:90:ac:08:dd:57: 87:fe:26:6e:ee:84:92:50:7e:77:a0:97:96:0d:6e: d3:34:e9:9f:8a:46:ba:5e:ab:97:55:0f:4f:5a:bc: 5e:1b:11:b3:1e:e3:31:5f:db:36:8f:94:c6:78:d3: da:4b:f8:1f:36:dc:38:a2:7f:26:54:31:47:c0:97: f7:eb:d0:af:99:23:1e:04:87:2a:40:6a:42:c2:f6: 60:e7:34:53:8c:8a:84:54:5f:00:81:be:ad:9b:55: 30:69:34:3c:a4:e7:d6:d1:2f:20:73:1f:ac:83:47: 88:9d:5f:02:d2:10:3a:d9:fd:83:e3:dc:6e:d4:a4: 60:0c:cb:66:07:7c:67:3b:de:66:f3:b8:df:d4:03: 9a:61:de:c0:d9:34:e0:c1:64:5c:6b:97:b5:01:ac: 76:d9:48:d6:e9:80:5a:ac:57:7f:58:43:c4:11:9c: 92:30:b2:71:c5:8e:c1:bc:6e:df:7b:1e:62:11:60: c0:db:18:92:c0:cf:c5:f1:eb:71:5e:db:19:61:b1: a9:da:fd:22:c1:bf:5a:d2:a6:6a:e3:46:80:e9:2a: 91:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:71:3B:9C:D9:C2:D0:27:97:D9:A5:E9:A3:DF:19:81:BA:06:9E:A8 X509v3 Authority Key Identifier: keyid:82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3131362e39302e3136392e302f32342d3234203d3e203338373635.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 116.90.169.0/24 Signature Algorithm: sha256WithRSAEncryption a0:25:88:08:d1:89:a3:76:d1:7b:a1:1d:68:cd:98:dd:85:cf: 40:8f:1d:cb:42:0d:eb:62:32:df:9e:55:41:f1:53:36:30:b0: 7f:c9:62:62:25:44:e9:32:59:a6:ee:6b:6f:d4:1a:77:f9:1e: 8e:d8:af:c5:75:ef:3c:13:dd:71:db:0b:60:de:b5:9c:07:08: cb:6f:0b:02:ff:fd:70:5b:9a:b7:c9:f7:f4:cd:f8:93:98:74: 43:1e:33:ef:8d:34:01:0f:26:fd:16:0f:97:e9:89:eb:08:f5: a4:58:a9:34:dd:23:95:b4:2c:aa:8a:bc:ce:1e:7e:a7:8c:57: 65:43:ab:86:86:a5:0e:70:c7:d9:16:f0:cf:19:9b:6f:fe:c4: c9:05:f7:7f:3e:a6:8a:69:94:f3:87:ea:85:5c:ff:fb:e5:23: 20:07:93:77:69:a6:f2:f7:49:44:21:86:f5:32:45:a8:66:07: 1d:84:d9:57:df:9b:3d:f8:e0:e0:b7:a1:74:32:cd:58:4b:d5: 9e:45:35:d4:67:00:7b:b0:ca:e2:5c:88:8e:49:7a:80:c7:29: 39:64:46:6f:25:38:47:c1:61:ef:ef:c2:90:44:56:08:b2:39: 73:b5:45:00:2d:e2:e1:3c:c5:cb:a9:43:99:b7:48:a0:a1:e0: b9:a2:41:08 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUJ82kYP4r4Sh+DNp1FEi5vidbXkkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODI4ODQxNTFBNTI4M0Y0M0NBOTdDRTFBQ0U5NUE1MUM2 QzhBMUQ4RTAeFw0yNjAzMTIyMDU1MDFaFw0yNzAzMTEyMTAwMDFaMDMxMTAvBgNV BAMTKEQ4NzEzQjlDRDlDMkQwMjc5N0Q5QTVFOUEzREYxOTgxQkEwNjlFQTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChOiV+iGssXfzOJmqQgLKAZe0b w95B+0Mdl0j/qwqhtjx7aR4In9eQrAjdV4f+Jm7uhJJQfnegl5YNbtM06Z+KRrpe q5dVD09avF4bEbMe4zFf2zaPlMZ409pL+B823DiifyZUMUfAl/fr0K+ZIx4EhypA akLC9mDnNFOMioRUXwCBvq2bVTBpNDyk59bRLyBzH6yDR4idXwLSEDrZ/YPj3G7U pGAMy2YHfGc73mbzuN/UA5ph3sDZNODBZFxrl7UBrHbZSNbpgFqsV39YQ8QRnJIw snHFjsG8bt97HmIRYMDbGJLAz8Xx63Fe2xlhsana/SLBv1rSpmrjRoDpKpFTAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQU2HE7nNnC0CeX2aXpo98ZgboGnqgwHwYDVR0j BBgwFoAUgohBUaUoP0PKl84azpWlHGyKHY4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MjgzNjc2My0xMmI2LTRkOGYtYWQwYi00Y2Q1YjYxOTU5ZWYvMC84Mjg4NDE1MUE1 MjgzRjQzQ0E5N0NFMUFDRTk1QTUxQzZDOEExRDhFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODI4ODQxNTFBNTI4M0Y0M0NBOTdDRTFBQ0U5NUE1MUM2QzhB MUQ4RS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2MyODM2NzYzLTEyYjYtNGQ4Zi1h ZDBiLTRjZDViNjE5NTllZi8wLzMxMzEzNjJlMzkzMDJlMzEzNjM5MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzMzODM3MzYzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHRaqTANBgkqhkiG 9w0BAQsFAAOCAQEAoCWICNGJo3bRe6EdaM2Y3YXPQI8dy0IN62Iy355VQfFTNjCw f8liYiVE6TJZpu5rb9Qad/kejtivxXXvPBPdcdsLYN61nAcIy28LAv/9cFuat8n3 9M34k5h0Qx4z7400AQ8m/RYPl+mJ6wj1pFipNN0jlbQsqoq8zh5+p4xXZUOrhoal DnDH2Rbwzxmbb/7EyQX3fz6mimmU84fqhVz/++UjIAeTd2mm8vdJRCGG9TJFqGYH HYTZV9+bPfjg4LehdDLNWEvVnkU11GcAe7DK4lyIjkl6gMcpOWRGbyU4R8Fh7+/C kERWCLI5c7VFAC3i4TzFy6lDmbdIoKHguaJBCA== -----END CERTIFICATE-----Generated at Thu Mar 26 19:45:58 2026 by rpki-client