$ rpki-client -vvf repo-rpki.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/3132332e3130382e36372e302f32342d3234203d3e20313333373939.roa File: 3132332e3130382e36372e302f32342d3234203d3e20313333373939.roa (raw, json) Hash identifier: za0Z0h7B6rXfwK+gwVXCLP4pPInhM0Xgqb7AixJZuSM= Subject key identifier: 93:12:00:4B:B6:FB:13:6B:5D:CA:CF:AA:D2:B5:EE:D1:38:EF:B6:40 Certificate issuer: /CN=108261B2B5A1F3CC828EF2A532ED94DFC1202853 Certificate serial: 28D2799E60A772C749E2811C16D6E11A7F1FFB6C Authority key identifier: 10:82:61:B2:B5:A1:F3:CC:82:8E:F2:A5:32:ED:94:DF:C1:20:28:53 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/108261B2B5A1F3CC828EF2A532ED94DFC1202853.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/3132332e3130382e36372e302f32342d3234203d3e20313333373939.roa Signing time: Sat 07 Mar 2026 18:00:01 +0000 ROA not before: Sat 07 Mar 2026 17:55:01 +0000 ROA not after: Sat 06 Mar 2027 18:00:01 +0000 asID: 133799 IP address blocks: 123.108.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/108261B2B5A1F3CC828EF2A532ED94DFC1202853.crl rsync://repo-rpki.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/108261B2B5A1F3CC828EF2A532ED94DFC1202853.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/108261B2B5A1F3CC828EF2A532ED94DFC1202853.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 14:56:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:d2:79:9e:60:a7:72:c7:49:e2:81:1c:16:d6:e1:1a:7f:1f:fb:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=108261B2B5A1F3CC828EF2A532ED94DFC1202853 Validity Not Before: Mar 7 17:55:01 2026 GMT Not After : Mar 6 18:00:01 2027 GMT Subject: CN=9312004BB6FB136B5DCACFAAD2B5EED138EFB640 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:d5:ef:5a:88:ca:27:1d:5b:b8:9a:ad:ad:72: 10:04:ca:4a:66:54:83:ca:88:2a:e7:24:9f:84:6f: 9e:b0:40:93:71:95:7c:d7:4b:7d:69:0e:58:5b:9e: 50:94:24:65:41:0d:c1:b2:84:6b:86:b4:f4:90:ce: 6f:90:c4:59:ea:45:3c:40:e6:72:a1:5b:54:cd:36: 74:a6:75:7a:36:5a:1c:18:09:d8:58:e3:6a:46:96: 73:e9:3a:b5:e5:3f:fc:58:16:ad:6b:8f:04:ea:3b: 35:44:cf:c7:4d:07:ac:af:b5:7f:a7:1c:10:c6:95: b2:f1:20:eb:b9:c3:66:8a:ee:03:fa:53:1b:71:cb: d4:2e:88:86:2b:6a:c2:b2:5a:39:e9:7b:9b:a8:0d: b9:eb:4e:f8:d3:fd:96:ef:f0:9e:13:23:0f:6b:80: 40:25:99:22:96:38:5f:4b:eb:02:4c:79:cb:66:2e: d9:95:c6:3c:19:3f:30:89:40:39:a9:fc:32:13:9e: 73:47:ce:98:cd:d4:60:0a:60:d0:5e:a9:65:c3:3a: ff:0a:84:9d:24:29:0d:95:d8:f5:5b:06:25:61:8f: 10:b1:5f:71:22:a3:5f:39:ae:97:1c:cc:02:f7:86: d4:12:f6:32:a8:eb:45:fe:39:4a:55:52:b9:23:cb: 83:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:12:00:4B:B6:FB:13:6B:5D:CA:CF:AA:D2:B5:EE:D1:38:EF:B6:40 X509v3 Authority Key Identifier: keyid:10:82:61:B2:B5:A1:F3:CC:82:8E:F2:A5:32:ED:94:DF:C1:20:28:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/108261B2B5A1F3CC828EF2A532ED94DFC1202853.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/108261B2B5A1F3CC828EF2A532ED94DFC1202853.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/3132332e3130382e36372e302f32342d3234203d3e20313333373939.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 123.108.67.0/24 Signature Algorithm: sha256WithRSAEncryption 62:e3:3b:42:85:3c:e3:8c:04:ac:67:e4:7e:03:6b:df:06:7a: 8f:6c:8e:5e:28:d5:ab:4f:8c:0f:2a:06:26:65:b2:4b:e2:c3: f3:31:4b:67:f5:eb:9b:53:60:71:c2:0c:30:ee:6d:da:56:c3: 3c:6e:f6:50:1f:89:91:b0:a9:74:ec:cf:55:84:f8:c6:db:8f: 93:22:d4:b8:10:12:2b:b4:8c:6a:df:40:dd:9c:71:a2:22:2f: 2f:21:06:d3:63:8b:56:25:5e:20:02:7d:4b:6e:5f:9c:fb:b2: e5:8a:ba:dc:73:cc:fe:59:84:b1:f7:b3:41:a3:19:b7:1f:08: 72:13:0f:da:30:78:e5:61:78:24:b5:81:23:44:bf:6e:a2:be: e1:18:cf:7f:9c:e7:f4:91:ba:e0:76:38:22:fd:01:de:3b:78: 60:9c:49:b3:fd:8b:58:8f:7f:61:e2:3b:af:68:41:ce:19:05: cf:9f:e6:b7:03:6b:4f:27:ed:e1:a4:1d:86:e0:9f:d2:ad:8d: 05:6c:cf:68:86:d0:33:c4:2a:35:3a:d4:6f:cc:55:79:d2:23: 76:1b:56:9c:a5:df:de:ed:57:50:b1:d2:7d:41:5a:8a:fc:da: 39:c5:18:a7:a2:bf:d1:a1:31:55:e0:93:ab:ec:19:46:79:2c: ed:2a:81:15 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUKNJ5nmCncsdJ4oEcFtbhGn8f+2wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTA4MjYxQjJCNUExRjNDQzgyOEVGMkE1MzJFRDk0REZD MTIwMjg1MzAeFw0yNjAzMDcxNzU1MDFaFw0yNzAzMDYxODAwMDFaMDMxMTAvBgNV BAMTKDkzMTIwMDRCQjZGQjEzNkI1RENBQ0ZBQUQyQjVFRUQxMzhFRkI2NDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr1e9aiMonHVu4mq2tchAEykpm VIPKiCrnJJ+Eb56wQJNxlXzXS31pDlhbnlCUJGVBDcGyhGuGtPSQzm+QxFnqRTxA 5nKhW1TNNnSmdXo2WhwYCdhY42pGlnPpOrXlP/xYFq1rjwTqOzVEz8dNB6yvtX+n HBDGlbLxIOu5w2aK7gP6Uxtxy9QuiIYrasKyWjnpe5uoDbnrTvjT/Zbv8J4TIw9r gEAlmSKWOF9L6wJMectmLtmVxjwZPzCJQDmp/DITnnNHzpjN1GAKYNBeqWXDOv8K hJ0kKQ2V2PVbBiVhjxCxX3Eio185rpcczAL3htQS9jKo60X+OUpVUrkjy4MZAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUkxIAS7b7E2tdys+q0rXu0TjvtkAwHwYDVR0j BBgwFoAUEIJhsrWh88yCjvKlMu2U38EgKFMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YjYzZjc3MS1hOTVmLTRiNTMtODdiYy04YmZmNTA0ZGExZjQvMC8xMDgyNjFCMkI1 QTFGM0NDODI4RUYyQTUzMkVEOTRERkMxMjAyODUzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTA4MjYxQjJCNUExRjNDQzgyOEVGMkE1MzJFRDk0REZDMTIw Mjg1My5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2NiNjNmNzcxLWE5NWYtNGI1My04 N2JjLThiZmY1MDRkYTFmNC8wLzMxMzIzMzJlMzEzMDM4MmUzNjM3MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzMzMzczOTM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAe2xDMA0GCSqG SIb3DQEBCwUAA4IBAQBi4ztChTzjjASsZ+R+A2vfBnqPbI5eKNWrT4wPKgYmZbJL 4sPzMUtn9eubU2Bxwgww7m3aVsM8bvZQH4mRsKl07M9VhPjG24+TItS4EBIrtIxq 30DdnHGiIi8vIQbTY4tWJV4gAn1Lbl+c+7Llirrcc8z+WYSx97NBoxm3HwhyEw/a MHjlYXgktYEjRL9uor7hGM9/nOf0kbrgdjgi/QHeO3hgnEmz/YtYj39h4juvaEHO GQXPn+a3A2tPJ+3hpB2G4J/SrY0FbM9ohtAzxCo1OtRvzFV50iN2G1acpd/e7VdQ sdJ9QVqK/No5xRinor/RoTFV4JOr7BlGeSztKoEV -----END CERTIFICATE-----Generated at Thu Mar 26 23:53:54 2026 by rpki-client