$ rpki-client -vvf repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3130382e302f32322d3232203d3e203234353235.roa File: 3131342e3139392e3130382e302f32322d3232203d3e203234353235.roa (raw, json) Hash identifier: 6R43oYlWu/Zcj8ofnXtUwPSXBC9ph2r2EdB6SFXI2JM= Subject key identifier: 4C:0C:0F:16:FB:64:0A:A1:28:DD:0D:54:D6:56:2B:E2:D2:3B:E0:E7 Certificate issuer: /CN=ADCB9F9DF56E90B39B5344118194104F46A83702 Certificate serial: 6B28B8F75434BFE3C897D88355946673694BBA5E Authority key identifier: AD:CB:9F:9D:F5:6E:90:B3:9B:53:44:11:81:94:10:4F:46:A8:37:02 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3130382e302f32322d3232203d3e203234353235.roa Signing time: Tue 24 Mar 2026 06:00:01 +0000 ROA not before: Tue 24 Mar 2026 05:55:01 +0000 ROA not after: Tue 23 Mar 2027 06:00:01 +0000 asID: 24525 IP address blocks: 114.199.108.0/22 maxlen: 22 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.crl rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 16:25:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:28:b8:f7:54:34:bf:e3:c8:97:d8:83:55:94:66:73:69:4b:ba:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ADCB9F9DF56E90B39B5344118194104F46A83702 Validity Not Before: Mar 24 05:55:01 2026 GMT Not After : Mar 23 06:00:01 2027 GMT Subject: CN=4C0C0F16FB640AA128DD0D54D6562BE2D23BE0E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:3d:02:97:3c:49:69:19:56:4d:ba:4f:67:e1: f1:c4:36:46:94:fd:ef:cb:77:30:4a:3f:34:6b:8e: 88:e6:f1:f5:1b:2a:20:21:a7:2b:24:46:ae:9c:c6: 35:9b:8e:05:e5:1f:95:53:f5:00:d3:b6:94:a2:f3: 89:d7:10:8a:f0:62:01:40:a8:05:73:ea:e1:24:5c: b8:50:77:51:f2:f8:e5:73:ce:5c:34:35:33:ab:9b: 78:b6:1b:35:cb:e1:98:07:56:02:fa:05:56:f2:1b: b3:68:10:7f:08:12:f8:85:0f:b8:dc:e2:bc:2c:18: 33:68:10:28:df:c2:e3:e6:9f:bf:da:11:df:fe:78: 21:92:3c:46:29:97:78:76:b8:5a:54:dc:c7:cf:7d: 38:5f:1a:35:ed:45:62:ed:f7:86:8d:68:ee:96:b4: 1b:67:92:da:21:1d:74:ed:70:c3:1f:e5:57:0b:da: 71:aa:a5:34:bf:2b:07:c9:b7:f9:f6:35:9c:03:15: 32:1e:ff:ac:79:b4:f0:07:28:ed:be:10:50:b1:94: 31:c8:3c:d7:bf:57:77:a6:57:5b:98:fe:f6:d6:9a: be:68:c8:00:80:83:a9:a6:c7:30:c0:92:ff:70:4d: a9:6e:f9:4c:de:37:f6:59:8a:8d:53:9d:4a:3b:d0: ab:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:0C:0F:16:FB:64:0A:A1:28:DD:0D:54:D6:56:2B:E2:D2:3B:E0:E7 X509v3 Authority Key Identifier: keyid:AD:CB:9F:9D:F5:6E:90:B3:9B:53:44:11:81:94:10:4F:46:A8:37:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3130382e302f32322d3232203d3e203234353235.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 114.199.108.0/22 Signature Algorithm: sha256WithRSAEncryption 11:e9:ce:bc:5d:76:24:35:19:45:e4:bc:3d:e7:9b:b9:33:ec: c8:bc:66:be:27:7c:70:7e:e0:51:63:d4:62:99:94:4d:a4:77: 4e:64:86:a6:e4:25:59:20:40:39:81:b6:d2:f9:99:56:23:6a: ad:00:df:54:b9:f1:a9:3b:ba:a1:7c:7c:0f:03:fd:9c:2c:a2: a3:25:1f:55:5d:30:5d:4f:ba:85:e1:e3:93:fd:91:c8:70:1e: 89:02:29:17:e2:17:8a:aa:f6:71:91:86:e1:59:e3:1d:ae:da: 08:60:80:c6:37:3c:0e:12:bf:cc:c7:d4:ed:62:6a:f9:25:62: 05:df:43:0d:8d:c5:27:1f:89:75:2f:80:89:ca:ec:8f:76:7d: ba:f0:b3:bb:ce:8b:51:aa:ff:40:97:84:37:1b:e3:07:32:7f: 39:a0:ce:47:0a:b7:3b:d6:05:62:49:a7:30:71:1f:e3:37:d4: 0f:b0:0e:ac:67:00:e2:52:76:fd:aa:66:62:63:12:47:01:81: e0:25:9d:96:0a:9f:ee:32:68:23:33:9e:46:c0:fe:27:e0:c5: 8d:a1:9c:f1:cf:b4:c2:12:83:6d:b9:ef:05:03:e1:16:70:1d: a0:dd:67:c1:7a:a3:99:ee:10:85:d0:0b:78:58:b7:1f:ab:4f: 0e:64:79:d9 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUayi491Q0v+PIl9iDVZRmc2lLul4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQURDQjlGOURGNTZFOTBCMzlCNTM0NDExODE5NDEwNEY0 NkE4MzcwMjAeFw0yNjAzMjQwNTU1MDFaFw0yNzAzMjMwNjAwMDFaMDMxMTAvBgNV BAMTKDRDMEMwRjE2RkI2NDBBQTEyOEREMEQ1NEQ2NTYyQkUyRDIzQkUwRTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNPQKXPElpGVZNuk9n4fHENkaU /e/LdzBKPzRrjojm8fUbKiAhpyskRq6cxjWbjgXlH5VT9QDTtpSi84nXEIrwYgFA qAVz6uEkXLhQd1Hy+OVzzlw0NTOrm3i2GzXL4ZgHVgL6BVbyG7NoEH8IEviFD7jc 4rwsGDNoECjfwuPmn7/aEd/+eCGSPEYpl3h2uFpU3MfPfThfGjXtRWLt94aNaO6W tBtnktohHXTtcMMf5VcL2nGqpTS/KwfJt/n2NZwDFTIe/6x5tPAHKO2+EFCxlDHI PNe/V3emV1uY/vbWmr5oyACAg6mmxzDAkv9wTalu+UzeN/ZZio1TnUo70KsJAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUTAwPFvtkCqEo3Q1U1lYr4tI74OcwHwYDVR0j BBgwFoAUrcufnfVukLObU0QRgZQQT0aoNwIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MWY0ZmQzOC03ODI2LTQyMDEtOWY5Yi0xZDdjNzZhYTI0ZGQvMC9BRENCOUY5REY1 NkU5MEIzOUI1MzQ0MTE4MTk0MTA0RjQ2QTgzNzAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQURDQjlGOURGNTZFOTBCMzlCNTM0NDExODE5NDEwNEY0NkE4 MzcwMi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2QxZjRmZDM4LTc4MjYtNDIwMS05 ZjliLTFkN2M3NmFhMjRkZC8wLzMxMzEzNDJlMzEzOTM5MmUzMTMwMzgyZTMwMmYz MjMyMmQzMjMyMjAzZDNlMjAzMjM0MzUzMjM1LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCcsdsMA0GCSqG SIb3DQEBCwUAA4IBAQAR6c68XXYkNRlF5Lw955u5M+zIvGa+J3xwfuBRY9RimZRN pHdOZIam5CVZIEA5gbbS+ZlWI2qtAN9UufGpO7qhfHwPA/2cLKKjJR9VXTBdT7qF 4eOT/ZHIcB6JAikX4heKqvZxkYbhWeMdrtoIYIDGNzwOEr/Mx9TtYmr5JWIF30MN jcUnH4l1L4CJyuyPdn268LO7zotRqv9Al4Q3G+MHMn85oM5HCrc71gViSacwcR/j N9QPsA6sZwDiUnb9qmZiYxJHAYHgJZ2WCp/uMmgjM55GwP4n4MWNoZzxz7TCEoNt ue8FA+EWcB2g3WfBeqOZ7hCF0At4WLcfq08OZHnZ -----END CERTIFICATE-----Generated at Thu Mar 26 16:29:48 2026 by rpki-client