$ rpki-client -vvf repo-rpki.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/3132332e3130382e36342e302f32322d3232203d3e20313333373939.roa File: 3132332e3130382e36342e302f32322d3232203d3e20313333373939.roa (raw, json) Hash identifier: XpUOiQ9XLis+siwm2ltXy8+AprbbUAtuufHs1GLS3qc= Subject key identifier: 7B:38:6E:13:DD:18:CF:A4:D6:D5:C4:71:72:B5:A9:C6:AC:2A:53:4F Certificate issuer: /CN=108261B2B5A1F3CC828EF2A532ED94DFC1202853 Certificate serial: 072409F62A3CAC2F678D1F1E02BD9A62E4983598 Authority key identifier: 10:82:61:B2:B5:A1:F3:CC:82:8E:F2:A5:32:ED:94:DF:C1:20:28:53 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/108261B2B5A1F3CC828EF2A532ED94DFC1202853.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/3132332e3130382e36342e302f32322d3232203d3e20313333373939.roa Signing time: Sat 07 Mar 2026 18:00:01 +0000 ROA not before: Sat 07 Mar 2026 17:55:01 +0000 ROA not after: Sat 06 Mar 2027 18:00:01 +0000 asID: 133799 IP address blocks: 123.108.64.0/22 maxlen: 22 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/108261B2B5A1F3CC828EF2A532ED94DFC1202853.crl rsync://repo-rpki.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/108261B2B5A1F3CC828EF2A532ED94DFC1202853.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/108261B2B5A1F3CC828EF2A532ED94DFC1202853.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 14:56:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:24:09:f6:2a:3c:ac:2f:67:8d:1f:1e:02:bd:9a:62:e4:98:35:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=108261B2B5A1F3CC828EF2A532ED94DFC1202853 Validity Not Before: Mar 7 17:55:01 2026 GMT Not After : Mar 6 18:00:01 2027 GMT Subject: CN=7B386E13DD18CFA4D6D5C47172B5A9C6AC2A534F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:20:4c:26:e5:c7:fb:dc:69:60:86:50:25:20: f1:51:75:f0:77:05:3f:08:93:f0:65:ea:a6:8a:61: 51:af:80:2d:56:c7:22:1e:15:14:17:d7:2d:d0:52: a8:7a:f5:19:df:3e:e0:b1:56:97:70:e2:4d:64:38: 51:c6:42:3e:3a:7f:49:fb:39:3e:44:24:0a:28:ea: a5:da:ca:42:b7:2e:7e:29:19:a1:df:48:82:34:26: 6f:ff:2a:6e:dd:e7:61:9e:6d:2c:5e:58:f0:5c:7e: f9:fd:22:88:e5:02:60:73:45:80:c8:2a:b2:e5:29: a5:98:9e:6e:c8:de:30:d4:9e:2c:5b:72:38:bb:7d: dc:e4:ed:30:81:89:80:64:5b:6f:66:c3:7f:c4:fe: 55:d9:c8:af:26:40:4c:72:5a:1c:9a:91:21:48:f7: 7f:1e:81:81:85:2b:ce:0f:2c:41:c4:18:66:0f:a7: 8b:31:c5:ba:80:85:84:35:62:97:7b:0c:94:f7:30: dc:8f:29:c1:e7:3f:f2:81:3a:d2:6c:06:a8:57:9c: a9:07:18:94:e7:69:42:f1:ac:94:fc:b0:b9:45:62: 21:f8:d0:10:39:56:64:0d:a2:05:37:91:1d:99:ff: cd:71:5d:9d:e7:e6:e8:50:e3:28:87:82:14:cf:69: c3:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:38:6E:13:DD:18:CF:A4:D6:D5:C4:71:72:B5:A9:C6:AC:2A:53:4F X509v3 Authority Key Identifier: keyid:10:82:61:B2:B5:A1:F3:CC:82:8E:F2:A5:32:ED:94:DF:C1:20:28:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/108261B2B5A1F3CC828EF2A532ED94DFC1202853.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/108261B2B5A1F3CC828EF2A532ED94DFC1202853.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/3132332e3130382e36342e302f32322d3232203d3e20313333373939.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 123.108.64.0/22 Signature Algorithm: sha256WithRSAEncryption 2d:8f:13:ce:88:b2:5d:5b:13:11:64:b2:f1:58:a3:1c:20:f9: 19:e2:65:b9:77:c9:9e:ce:61:b6:b9:0a:13:08:e0:3d:90:7c: 4a:b3:03:dc:ad:b2:cc:ea:24:17:fd:6f:48:24:7f:f6:88:48: 4a:83:99:18:f9:b1:b6:ba:43:4e:2b:e2:94:05:30:07:26:f8: 17:6c:04:fa:09:97:4a:83:5c:4d:f0:07:cd:a6:27:3c:52:91: dd:1f:e5:ad:7b:51:c6:54:f6:78:89:8b:38:61:7a:9b:91:73: 1f:26:cf:46:8c:1a:f4:b6:5a:16:f3:10:d2:9f:a4:70:6b:cb: 9a:63:6e:c9:d1:a9:b2:6a:c7:93:e8:aa:d0:f8:4e:44:b9:61: db:19:e4:98:39:fa:e0:90:76:12:1b:96:ac:cc:10:77:5d:ef: 38:a9:09:52:bc:ff:38:ec:44:e6:a1:8c:0c:2a:62:fa:a1:a8: 18:95:39:de:6f:54:67:5c:70:2f:1d:b7:78:ab:87:ad:59:06: 6d:c8:83:90:4f:98:ff:9a:b5:72:c1:93:0e:f8:47:bf:26:40: ba:44:30:bb:73:a3:b8:1e:43:6e:35:a6:77:98:67:31:18:3d: 44:ea:3d:7e:2a:45:55:fd:37:cd:e6:d7:59:09:87:43:e6:14: 46:d6:2c:89 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUByQJ9io8rC9njR8eAr2aYuSYNZgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTA4MjYxQjJCNUExRjNDQzgyOEVGMkE1MzJFRDk0REZD MTIwMjg1MzAeFw0yNjAzMDcxNzU1MDFaFw0yNzAzMDYxODAwMDFaMDMxMTAvBgNV BAMTKDdCMzg2RTEzREQxOENGQTRENkQ1QzQ3MTcyQjVBOUM2QUMyQTUzNEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhIEwm5cf73GlghlAlIPFRdfB3 BT8Ik/Bl6qaKYVGvgC1WxyIeFRQX1y3QUqh69RnfPuCxVpdw4k1kOFHGQj46f0n7 OT5EJAoo6qXaykK3Ln4pGaHfSII0Jm//Km7d52GebSxeWPBcfvn9IojlAmBzRYDI KrLlKaWYnm7I3jDUnixbcji7fdzk7TCBiYBkW29mw3/E/lXZyK8mQExyWhyakSFI 938egYGFK84PLEHEGGYPp4sxxbqAhYQ1Ypd7DJT3MNyPKcHnP/KBOtJsBqhXnKkH GJTnaULxrJT8sLlFYiH40BA5VmQNogU3kR2Z/81xXZ3n5uhQ4yiHghTPacPFAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUezhuE90Yz6TW1cRxcrWpxqwqU08wHwYDVR0j BBgwFoAUEIJhsrWh88yCjvKlMu2U38EgKFMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YjYzZjc3MS1hOTVmLTRiNTMtODdiYy04YmZmNTA0ZGExZjQvMC8xMDgyNjFCMkI1 QTFGM0NDODI4RUYyQTUzMkVEOTRERkMxMjAyODUzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTA4MjYxQjJCNUExRjNDQzgyOEVGMkE1MzJFRDk0REZDMTIw Mjg1My5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2NiNjNmNzcxLWE5NWYtNGI1My04 N2JjLThiZmY1MDRkYTFmNC8wLzMxMzIzMzJlMzEzMDM4MmUzNjM0MmUzMDJmMzIz MjJkMzIzMjIwM2QzZTIwMzEzMzMzMzczOTM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCe2xAMA0GCSqG SIb3DQEBCwUAA4IBAQAtjxPOiLJdWxMRZLLxWKMcIPkZ4mW5d8mezmG2uQoTCOA9 kHxKswPcrbLM6iQX/W9IJH/2iEhKg5kY+bG2ukNOK+KUBTAHJvgXbAT6CZdKg1xN 8AfNpic8UpHdH+Wte1HGVPZ4iYs4YXqbkXMfJs9GjBr0tloW8xDSn6Rwa8uaY27J 0amyaseT6KrQ+E5EuWHbGeSYOfrgkHYSG5aszBB3Xe84qQlSvP847ETmoYwMKmL6 oagYlTneb1RnXHAvHbd4q4etWQZtyIOQT5j/mrVywZMO+Ee/JkC6RDC7c6O4HkNu NaZ3mGcxGD1E6j1+KkVV/TfN5tdZCYdD5hRG1iyJ -----END CERTIFICATE-----Generated at Thu Mar 26 19:16:18 2026 by rpki-client