$ rpki-client -vvf repo-rpki.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/3132332e3130382e36362e302f32342d3234203d3e20313333373939.roa File: 3132332e3130382e36362e302f32342d3234203d3e20313333373939.roa (raw, json) Hash identifier: xVuWjNIPg+9K49gtAuNGLfqYN7QFfENKsG3WlW8R/sk= Subject key identifier: 94:FB:12:2E:C7:03:B4:D4:7F:76:5E:32:BA:82:E5:57:BE:ED:2A:4B Certificate issuer: /CN=108261B2B5A1F3CC828EF2A532ED94DFC1202853 Certificate serial: 0DC440B8E4043588CCB39B5EF76141C5769F43E3 Authority key identifier: 10:82:61:B2:B5:A1:F3:CC:82:8E:F2:A5:32:ED:94:DF:C1:20:28:53 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/108261B2B5A1F3CC828EF2A532ED94DFC1202853.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/3132332e3130382e36362e302f32342d3234203d3e20313333373939.roa Signing time: Sat 07 Mar 2026 17:00:01 +0000 ROA not before: Sat 07 Mar 2026 16:55:01 +0000 ROA not after: Sat 06 Mar 2027 17:00:01 +0000 asID: 133799 IP address blocks: 123.108.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/108261B2B5A1F3CC828EF2A532ED94DFC1202853.crl rsync://repo-rpki.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/108261B2B5A1F3CC828EF2A532ED94DFC1202853.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/108261B2B5A1F3CC828EF2A532ED94DFC1202853.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 14:56:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:c4:40:b8:e4:04:35:88:cc:b3:9b:5e:f7:61:41:c5:76:9f:43:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=108261B2B5A1F3CC828EF2A532ED94DFC1202853 Validity Not Before: Mar 7 16:55:01 2026 GMT Not After : Mar 6 17:00:01 2027 GMT Subject: CN=94FB122EC703B4D47F765E32BA82E557BEED2A4B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:30:9f:a9:07:a0:5b:2f:49:05:7a:52:aa:09: c6:53:3b:06:3d:84:4e:ff:f5:1e:7c:4c:43:84:e9: 51:72:2f:c0:53:49:64:0d:5b:3a:16:41:18:75:8d: 2c:1a:80:8c:bb:d2:93:ca:52:91:71:42:75:b3:32: 41:42:45:65:bf:5d:7b:2f:6e:10:c1:04:ce:c0:c7: 5e:30:56:44:ee:61:3e:fc:c7:24:cb:dd:cd:2e:12: 78:34:3f:fa:4a:7f:d2:c3:ca:dd:a9:a8:44:38:70: 87:6e:a2:8f:19:9f:85:60:4f:4e:fc:c4:46:37:c1: ce:bc:64:46:86:6e:65:78:fd:19:74:67:1f:0a:ba: 04:b5:a7:dd:a6:12:d4:57:e5:3f:97:0c:8b:b4:b3: 55:88:a4:ba:13:f6:c0:a0:0d:4b:b2:93:eb:7a:f0: a7:7d:10:4d:e3:f4:1f:23:00:e4:b2:cf:19:43:f7: 10:95:f9:a9:ca:7e:dc:d6:23:ba:bb:d5:a9:6b:d5: 20:be:a2:e4:3f:7d:a6:f2:b5:ab:c4:47:2c:3d:92: b8:61:cb:35:c7:7a:ea:eb:5b:0c:1d:f6:bd:e2:49: 19:45:3b:f6:09:c0:3b:bb:37:b5:f0:eb:f1:d8:31: d0:18:f7:bd:2e:e3:30:09:a0:63:6f:e5:af:ca:6d: 3d:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:FB:12:2E:C7:03:B4:D4:7F:76:5E:32:BA:82:E5:57:BE:ED:2A:4B X509v3 Authority Key Identifier: keyid:10:82:61:B2:B5:A1:F3:CC:82:8E:F2:A5:32:ED:94:DF:C1:20:28:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/108261B2B5A1F3CC828EF2A532ED94DFC1202853.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/108261B2B5A1F3CC828EF2A532ED94DFC1202853.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/3132332e3130382e36362e302f32342d3234203d3e20313333373939.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 123.108.66.0/24 Signature Algorithm: sha256WithRSAEncryption 06:2e:c7:e2:64:e6:fa:5d:e7:39:ea:d5:bd:33:1d:bc:32:23: b1:56:24:6f:1e:dc:e7:9c:2b:0e:da:a9:b6:3c:1f:72:9d:e3: cb:56:4f:4b:93:f5:0a:dc:e6:e8:c1:aa:5f:8a:8d:7a:ec:81: af:cb:d2:4a:3d:1d:9f:9f:be:1e:f2:56:63:4e:88:8e:57:36: 57:1f:97:ad:e5:20:a3:d2:60:f5:df:a9:bc:fa:ce:87:fd:ad: d5:fe:00:fd:a4:76:c5:41:58:90:53:64:87:fb:cf:62:a0:6b: d7:09:cf:b0:91:9f:69:ea:ac:ac:b5:7a:76:c1:e2:d6:49:b3: 6c:a3:36:4d:e7:61:5b:b2:d8:92:12:83:b0:65:d1:b5:4a:8d: 76:a0:ed:74:89:28:7f:19:53:c4:fc:fe:a2:81:4e:d1:aa:b3: 11:ed:c9:86:d3:4a:ee:d9:28:4f:c0:f1:22:e1:2f:5f:4d:2c: d9:49:4b:4a:69:bd:05:20:13:02:ef:6e:e8:d5:c5:32:86:38: 43:4c:01:6d:ca:7b:9f:53:f1:c6:86:35:e9:7c:1c:87:ed:79: 1d:c5:0e:67:74:10:67:eb:d9:39:cb:4b:2f:a0:3a:96:a4:e8: 91:06:8c:07:ad:f9:06:9e:4c:0f:ad:fa:ed:1f:3a:89:50:91: 47:26:35:2f -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUDcRAuOQENYjMs5te92FBxXafQ+MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTA4MjYxQjJCNUExRjNDQzgyOEVGMkE1MzJFRDk0REZD MTIwMjg1MzAeFw0yNjAzMDcxNjU1MDFaFw0yNzAzMDYxNzAwMDFaMDMxMTAvBgNV BAMTKDk0RkIxMjJFQzcwM0I0RDQ3Rjc2NUUzMkJBODJFNTU3QkVFRDJBNEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuMJ+pB6BbL0kFelKqCcZTOwY9 hE7/9R58TEOE6VFyL8BTSWQNWzoWQRh1jSwagIy70pPKUpFxQnWzMkFCRWW/XXsv bhDBBM7Ax14wVkTuYT78xyTL3c0uEng0P/pKf9LDyt2pqEQ4cIduoo8Zn4VgT078 xEY3wc68ZEaGbmV4/Rl0Zx8KugS1p92mEtRX5T+XDIu0s1WIpLoT9sCgDUuyk+t6 8Kd9EE3j9B8jAOSyzxlD9xCV+anKftzWI7q71alr1SC+ouQ/fabytavERyw9krhh yzXHeurrWwwd9r3iSRlFO/YJwDu7N7Xw6/HYMdAY970u4zAJoGNv5a/KbT2rAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUlPsSLscDtNR/dl4yuoLlV77tKkswHwYDVR0j BBgwFoAUEIJhsrWh88yCjvKlMu2U38EgKFMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YjYzZjc3MS1hOTVmLTRiNTMtODdiYy04YmZmNTA0ZGExZjQvMC8xMDgyNjFCMkI1 QTFGM0NDODI4RUYyQTUzMkVEOTRERkMxMjAyODUzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTA4MjYxQjJCNUExRjNDQzgyOEVGMkE1MzJFRDk0REZDMTIw Mjg1My5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2NiNjNmNzcxLWE5NWYtNGI1My04 N2JjLThiZmY1MDRkYTFmNC8wLzMxMzIzMzJlMzEzMDM4MmUzNjM2MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzMzMzczOTM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAe2xCMA0GCSqG SIb3DQEBCwUAA4IBAQAGLsfiZOb6Xec56tW9Mx28MiOxViRvHtznnCsO2qm2PB9y nePLVk9Lk/UK3Obowapfio167IGvy9JKPR2fn74e8lZjToiOVzZXH5et5SCj0mD1 36m8+s6H/a3V/gD9pHbFQViQU2SH+89ioGvXCc+wkZ9p6qystXp2weLWSbNsozZN 52FbstiSEoOwZdG1So12oO10iSh/GVPE/P6igU7RqrMR7cmG00ru2ShPwPEi4S9f TSzZSUtKab0FIBMC727o1cUyhjhDTAFtynufU/HGhjXpfByH7XkdxQ5ndBBn69k5 y0svoDqWpOiRBowHrfkGnkwPrfrtHzqJUJFHJjUv -----END CERTIFICATE-----Generated at Thu Mar 26 23:54:01 2026 by rpki-client