$ rpki-client -vvf repo-rpki.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/3132332e3130382e36342e302f32342d3234203d3e20313333373939.roa File: 3132332e3130382e36342e302f32342d3234203d3e20313333373939.roa (raw, json) Hash identifier: gJJCOrNxdaxjtZq7LDGjA/51Y+Aw2M/H/vJeKD854SU= Subject key identifier: B1:16:E0:10:A4:1D:9B:7F:96:19:13:33:F9:85:ED:5B:F7:43:87:71 Certificate issuer: /CN=108261B2B5A1F3CC828EF2A532ED94DFC1202853 Certificate serial: 64EB30C058F514FF640344D531CA4C46F5A2F1D6 Authority key identifier: 10:82:61:B2:B5:A1:F3:CC:82:8E:F2:A5:32:ED:94:DF:C1:20:28:53 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/108261B2B5A1F3CC828EF2A532ED94DFC1202853.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/3132332e3130382e36342e302f32342d3234203d3e20313333373939.roa Signing time: Sat 07 Mar 2026 18:00:01 +0000 ROA not before: Sat 07 Mar 2026 17:55:01 +0000 ROA not after: Sat 06 Mar 2027 18:00:01 +0000 asID: 133799 IP address blocks: 123.108.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/108261B2B5A1F3CC828EF2A532ED94DFC1202853.crl rsync://repo-rpki.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/108261B2B5A1F3CC828EF2A532ED94DFC1202853.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/108261B2B5A1F3CC828EF2A532ED94DFC1202853.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 14:56:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:eb:30:c0:58:f5:14:ff:64:03:44:d5:31:ca:4c:46:f5:a2:f1:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=108261B2B5A1F3CC828EF2A532ED94DFC1202853 Validity Not Before: Mar 7 17:55:01 2026 GMT Not After : Mar 6 18:00:01 2027 GMT Subject: CN=B116E010A41D9B7F96191333F985ED5BF7438771 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:9a:32:08:1a:b0:c1:5b:7e:e5:11:3a:c7:e8: e5:e6:c2:0e:ff:c5:00:06:fb:ed:15:81:8e:e2:89: 00:fd:66:1f:c0:1d:3c:52:24:e2:c2:fb:2e:50:21: 2c:81:41:83:75:2a:60:dc:4d:a6:f1:93:14:de:2f: db:75:d5:95:85:cb:00:ed:0a:ff:e0:d5:d4:84:6f: ef:2b:74:97:59:e6:eb:c4:59:73:6b:03:0d:cb:b0: 67:2c:d4:bb:ea:4d:18:2d:45:14:0c:55:83:36:06: cd:8f:3f:05:ce:09:d6:f1:9b:67:0e:73:7d:60:02: f2:42:4f:e9:05:43:8d:d9:8b:bd:a9:2e:e6:0d:66: e7:0b:5a:7f:17:df:8a:cd:e5:07:46:b6:f7:44:54: 9d:e9:69:46:9a:34:20:3b:71:69:89:14:e2:3d:60: 8e:3a:df:4d:a4:fe:a0:51:1f:10:e9:34:ba:8b:54: b7:95:6e:15:a2:32:e4:f7:ee:bb:37:5f:9d:a9:83: c3:9a:41:e8:c3:00:bc:10:19:de:58:c5:b5:d6:98: 04:d7:eb:7a:bb:9a:8c:5a:b0:9e:17:8b:52:e0:7a: 22:5f:c9:fc:33:63:81:52:83:70:5f:f8:19:f5:77: d3:59:f7:bf:93:db:e1:c3:9b:e8:b0:2f:ba:4b:a1: 7e:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:16:E0:10:A4:1D:9B:7F:96:19:13:33:F9:85:ED:5B:F7:43:87:71 X509v3 Authority Key Identifier: keyid:10:82:61:B2:B5:A1:F3:CC:82:8E:F2:A5:32:ED:94:DF:C1:20:28:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/108261B2B5A1F3CC828EF2A532ED94DFC1202853.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/108261B2B5A1F3CC828EF2A532ED94DFC1202853.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/3132332e3130382e36342e302f32342d3234203d3e20313333373939.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 123.108.64.0/24 Signature Algorithm: sha256WithRSAEncryption 5b:02:2a:50:b2:fe:ae:4f:85:9f:f2:e5:38:ee:9a:4a:b6:c6: dd:5d:25:f4:c7:0e:54:73:d9:3c:ac:de:2f:c4:cf:c8:f0:d0: 43:cc:b2:94:aa:91:1c:0e:ff:5e:52:87:cc:eb:c5:fd:90:eb: 1d:d8:ad:e9:b3:cc:e5:6e:77:a9:bd:9a:e6:92:e3:9a:c5:eb: 9c:ed:b3:a4:4f:1d:25:d7:1b:40:be:8f:ee:5b:8e:9f:80:44: 03:f9:95:5b:95:2b:be:11:f5:75:83:9c:46:07:1b:9c:9c:31: bb:7c:dd:20:54:ce:3d:a9:2f:e2:93:7c:a0:9a:d5:99:93:33: ab:e8:70:cf:f6:1a:e6:fb:35:e2:c6:38:57:fd:f9:57:a7:c4: 6b:ce:b5:0e:f2:c8:34:0d:2f:1b:2e:02:f3:d5:11:c8:fa:74: 1d:92:4c:66:b2:7a:bd:60:62:ea:1a:86:1c:0c:fd:77:19:5a: 70:23:d3:42:9b:c7:3c:5d:98:8b:36:83:13:86:ef:88:4e:28: dc:d1:59:5c:36:3a:47:4c:db:81:36:f4:c0:c4:24:55:00:dc: 39:ca:c4:68:a4:fe:ae:3d:b6:80:56:1f:25:c6:6a:1d:52:f3: 97:0b:c6:22:7b:24:6a:74:3f:f9:13:aa:49:95:21:90:d2:9a: 3f:33:33:85 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUZOswwFj1FP9kA0TVMcpMRvWi8dYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTA4MjYxQjJCNUExRjNDQzgyOEVGMkE1MzJFRDk0REZD MTIwMjg1MzAeFw0yNjAzMDcxNzU1MDFaFw0yNzAzMDYxODAwMDFaMDMxMTAvBgNV BAMTKEIxMTZFMDEwQTQxRDlCN0Y5NjE5MTMzM0Y5ODVFRDVCRjc0Mzg3NzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWmjIIGrDBW37lETrH6OXmwg7/ xQAG++0VgY7iiQD9Zh/AHTxSJOLC+y5QISyBQYN1KmDcTabxkxTeL9t11ZWFywDt Cv/g1dSEb+8rdJdZ5uvEWXNrAw3LsGcs1LvqTRgtRRQMVYM2Bs2PPwXOCdbxm2cO c31gAvJCT+kFQ43Zi72pLuYNZucLWn8X34rN5QdGtvdEVJ3paUaaNCA7cWmJFOI9 YI46302k/qBRHxDpNLqLVLeVbhWiMuT37rs3X52pg8OaQejDALwQGd5YxbXWmATX 63q7moxasJ4Xi1LgeiJfyfwzY4FSg3Bf+Bn1d9NZ97+T2+HDm+iwL7pLoX4HAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUsRbgEKQdm3+WGRMz+YXtW/dDh3EwHwYDVR0j BBgwFoAUEIJhsrWh88yCjvKlMu2U38EgKFMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YjYzZjc3MS1hOTVmLTRiNTMtODdiYy04YmZmNTA0ZGExZjQvMC8xMDgyNjFCMkI1 QTFGM0NDODI4RUYyQTUzMkVEOTRERkMxMjAyODUzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTA4MjYxQjJCNUExRjNDQzgyOEVGMkE1MzJFRDk0REZDMTIw Mjg1My5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2NiNjNmNzcxLWE5NWYtNGI1My04 N2JjLThiZmY1MDRkYTFmNC8wLzMxMzIzMzJlMzEzMDM4MmUzNjM0MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzMzMzczOTM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAe2xAMA0GCSqG SIb3DQEBCwUAA4IBAQBbAipQsv6uT4Wf8uU47ppKtsbdXSX0xw5Uc9k8rN4vxM/I 8NBDzLKUqpEcDv9eUofM68X9kOsd2K3ps8zlbnepvZrmkuOaxeuc7bOkTx0l1xtA vo/uW46fgEQD+ZVblSu+EfV1g5xGBxucnDG7fN0gVM49qS/ik3ygmtWZkzOr6HDP 9hrm+zXixjhX/flXp8RrzrUO8sg0DS8bLgLz1RHI+nQdkkxmsnq9YGLqGoYcDP13 GVpwI9NCm8c8XZiLNoMThu+ITijc0VlcNjpHTNuBNvTAxCRVANw5ysRopP6uPbaA Vh8lxmodUvOXC8YieyRqdD/5E6pJlSGQ0po/MzOF -----END CERTIFICATE-----Generated at Thu Mar 26 19:16:29 2026 by rpki-client