$ rpki-client -vvf repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3132302e302f32312d3231203d3e203234353235.roa File: 3131342e3139392e3132302e302f32312d3231203d3e203234353235.roa (raw, json) Hash identifier: 05Rprk8rQObqdRIoI/SbwvJAOsaznF1M/00PCmlaGI8= Subject key identifier: CB:19:BB:9A:7F:1C:F9:B8:49:B1:1B:C5:57:52:BB:FC:FB:57:AA:90 Certificate issuer: /CN=ADCB9F9DF56E90B39B5344118194104F46A83702 Certificate serial: 543FFFBBAFF19538C08443C782A75A667043A9D1 Authority key identifier: AD:CB:9F:9D:F5:6E:90:B3:9B:53:44:11:81:94:10:4F:46:A8:37:02 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3132302e302f32312d3231203d3e203234353235.roa Signing time: Tue 24 Mar 2026 06:00:01 +0000 ROA not before: Tue 24 Mar 2026 05:55:01 +0000 ROA not after: Tue 23 Mar 2027 06:00:01 +0000 asID: 24525 IP address blocks: 114.199.120.0/21 maxlen: 21 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.crl rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 20:48:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:3f:ff:bb:af:f1:95:38:c0:84:43:c7:82:a7:5a:66:70:43:a9:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ADCB9F9DF56E90B39B5344118194104F46A83702 Validity Not Before: Mar 24 05:55:01 2026 GMT Not After : Mar 23 06:00:01 2027 GMT Subject: CN=CB19BB9A7F1CF9B849B11BC55752BBFCFB57AA90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:01:04:db:73:63:f6:37:d3:28:29:6a:b8:75: 26:9b:9b:81:51:9e:14:ff:5e:22:7b:ed:09:9b:07: a0:c8:e7:38:e9:53:14:9e:46:8c:d5:1e:cd:ed:fb: 70:2e:47:2a:6f:a9:fb:ac:70:bc:65:38:3e:27:7b: f0:74:6f:b4:a0:18:93:53:2d:b7:f6:bc:d0:8b:bd: d3:9a:8b:ff:e4:42:27:9d:5f:34:83:ef:9b:f3:0f: a6:ac:ce:7f:68:f3:78:89:11:ad:cb:9d:87:1d:9d: 89:9b:54:85:ee:18:4e:d5:40:60:e9:9a:01:ca:68: 77:e2:5b:2e:f2:f3:29:70:cb:59:0c:e1:db:ed:10: ca:98:a7:37:a7:4e:f4:75:0b:98:ad:3b:c5:18:1e: c6:28:f8:1e:4a:51:c5:70:68:a3:60:1e:f1:73:28: ac:7d:14:a6:47:b6:7d:43:be:d5:2d:c0:fe:f6:aa: 6b:c8:73:20:b8:47:25:13:09:95:2b:6d:2b:8b:b0: 19:7f:81:bb:81:c6:9f:02:f5:8b:19:a5:f2:35:fe: d5:1f:74:24:44:c0:bb:df:a1:e5:81:80:40:08:ff: a9:05:63:44:2d:68:dd:b1:5b:91:e3:74:69:0a:ba: 72:41:c9:c8:92:2e:f9:a9:6e:a4:ba:54:07:bd:5f: 47:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:19:BB:9A:7F:1C:F9:B8:49:B1:1B:C5:57:52:BB:FC:FB:57:AA:90 X509v3 Authority Key Identifier: keyid:AD:CB:9F:9D:F5:6E:90:B3:9B:53:44:11:81:94:10:4F:46:A8:37:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3132302e302f32312d3231203d3e203234353235.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 114.199.120.0/21 Signature Algorithm: sha256WithRSAEncryption c3:97:37:d2:13:d2:94:05:6c:d5:56:8c:f8:f2:7d:c7:06:6d: 31:97:aa:f0:0c:5b:43:d7:a0:67:f1:bb:4d:73:6c:5b:05:8f: c1:69:85:2b:a1:bc:64:d2:87:cc:b5:f3:48:f8:92:f4:92:13: 60:50:f2:92:1f:ab:4f:2d:f1:a9:b2:9f:82:bd:6e:1a:f6:56: 44:5c:49:dc:38:4b:cd:e1:19:ab:ca:8b:68:2c:2f:c7:43:26: 6c:72:fe:83:1b:5f:d2:ad:70:7c:3a:cf:14:cf:4d:71:ec:81: 02:9f:86:91:d5:55:8c:f5:b5:ee:8b:bc:31:1e:86:b0:38:5e: d0:8d:b3:08:2e:7b:b5:8d:bb:c0:54:2e:76:cb:bc:e5:b9:67: bf:61:bb:13:55:e7:de:f1:ec:30:4b:f2:c8:84:86:35:44:2b: 3e:8e:2b:99:c0:27:20:1e:57:f2:d6:cc:1f:9b:c0:37:f9:1c: e8:fd:b8:47:56:08:e2:58:0e:d2:fc:46:71:50:a5:7b:d4:67: 7f:ed:39:f9:f6:1a:97:fc:df:e1:e7:b9:cc:80:4a:88:93:50: 74:fe:f6:11:3b:be:30:d4:99:78:5d:ef:52:48:14:60:0e:d3: 37:83:51:7b:5f:39:2d:ee:2a:b0:f3:92:37:46:ec:28:ea:fe: 7e:78:dd:c9 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUVD//u6/xlTjAhEPHgqdaZnBDqdEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQURDQjlGOURGNTZFOTBCMzlCNTM0NDExODE5NDEwNEY0 NkE4MzcwMjAeFw0yNjAzMjQwNTU1MDFaFw0yNzAzMjMwNjAwMDFaMDMxMTAvBgNV BAMTKENCMTlCQjlBN0YxQ0Y5Qjg0OUIxMUJDNTU3NTJCQkZDRkI1N0FBOTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+AQTbc2P2N9MoKWq4dSabm4FR nhT/XiJ77QmbB6DI5zjpUxSeRozVHs3t+3AuRypvqfuscLxlOD4ne/B0b7SgGJNT Lbf2vNCLvdOai//kQiedXzSD75vzD6aszn9o83iJEa3LnYcdnYmbVIXuGE7VQGDp mgHKaHfiWy7y8ylwy1kM4dvtEMqYpzenTvR1C5itO8UYHsYo+B5KUcVwaKNgHvFz KKx9FKZHtn1DvtUtwP72qmvIcyC4RyUTCZUrbSuLsBl/gbuBxp8C9YsZpfI1/tUf dCREwLvfoeWBgEAI/6kFY0QtaN2xW5HjdGkKunJByciSLvmpbqS6VAe9X0d3AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUyxm7mn8c+bhJsRvFV1K7/PtXqpAwHwYDVR0j BBgwFoAUrcufnfVukLObU0QRgZQQT0aoNwIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MWY0ZmQzOC03ODI2LTQyMDEtOWY5Yi0xZDdjNzZhYTI0ZGQvMC9BRENCOUY5REY1 NkU5MEIzOUI1MzQ0MTE4MTk0MTA0RjQ2QTgzNzAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQURDQjlGOURGNTZFOTBCMzlCNTM0NDExODE5NDEwNEY0NkE4 MzcwMi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2QxZjRmZDM4LTc4MjYtNDIwMS05 ZjliLTFkN2M3NmFhMjRkZC8wLzMxMzEzNDJlMzEzOTM5MmUzMTMyMzAyZTMwMmYz MjMxMmQzMjMxMjAzZDNlMjAzMjM0MzUzMjM1LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDcsd4MA0GCSqG SIb3DQEBCwUAA4IBAQDDlzfSE9KUBWzVVoz48n3HBm0xl6rwDFtD16Bn8btNc2xb BY/BaYUrobxk0ofMtfNI+JL0khNgUPKSH6tPLfGpsp+CvW4a9lZEXEncOEvN4Rmr yotoLC/HQyZscv6DG1/SrXB8Os8Uz01x7IECn4aR1VWM9bXui7wxHoawOF7QjbMI Lnu1jbvAVC52y7zluWe/YbsTVefe8ewwS/LIhIY1RCs+jiuZwCcgHlfy1swfm8A3 +Rzo/bhHVgjiWA7S/EZxUKV71Gd/7Tn59hqX/N/h57nMgEqIk1B0/vYRO74w1Jl4 Xe9SSBRgDtM3g1F7Xzkt7iqw85I3Ruwo6v5+eN3J -----END CERTIFICATE-----Generated at Thu Mar 26 22:08:15 2026 by rpki-client