$ rpki-client -vvf repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3132302e302f32332d3233203d3e203234353235.roa File: 3131342e3139392e3132302e302f32332d3233203d3e203234353235.roa (raw, json) Hash identifier: 6Zj5LdgonCKcZ2segHdVgEpxfpGmNeQQEQEcu8pFpbs= Subject key identifier: FD:D0:E3:AE:C4:4B:14:6F:FA:AF:EB:C9:6F:A4:A7:0F:83:55:D5:C6 Certificate issuer: /CN=ADCB9F9DF56E90B39B5344118194104F46A83702 Certificate serial: 76BE296B6B039A993B6D3A8921A1735A6E7E1F7A Authority key identifier: AD:CB:9F:9D:F5:6E:90:B3:9B:53:44:11:81:94:10:4F:46:A8:37:02 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3132302e302f32332d3233203d3e203234353235.roa Signing time: Tue 24 Mar 2026 08:01:32 +0000 ROA not before: Tue 24 Mar 2026 07:56:32 +0000 ROA not after: Tue 23 Mar 2027 08:01:32 +0000 asID: 24525 IP address blocks: 114.199.120.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.crl rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 16:25:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:be:29:6b:6b:03:9a:99:3b:6d:3a:89:21:a1:73:5a:6e:7e:1f:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ADCB9F9DF56E90B39B5344118194104F46A83702 Validity Not Before: Mar 24 07:56:32 2026 GMT Not After : Mar 23 08:01:32 2027 GMT Subject: CN=FDD0E3AEC44B146FFAAFEBC96FA4A70F8355D5C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:c4:cf:1f:ef:16:d3:fc:88:62:ee:29:c2:02: f1:2d:d7:e4:6a:58:e9:45:0f:bb:2b:47:ec:e0:d5: 3a:e6:5b:25:0f:40:d2:1f:a6:fa:72:ff:9e:17:ee: d0:31:51:97:e7:36:98:7c:00:52:1f:c1:19:15:25: 40:2a:8f:6d:bc:10:ab:d6:a8:ca:8d:ec:18:ed:90: 56:9e:9d:1c:88:53:91:dc:1b:2b:49:30:7a:ff:ad: ec:3e:02:6f:2a:e7:fb:6a:db:1e:ff:84:8e:9b:3d: 73:4f:39:96:e2:b6:ca:f3:d3:c5:ce:ec:1d:4b:8e: e9:e3:d8:e5:67:33:bf:c3:bf:a6:03:e4:96:ba:49: 98:54:b9:6b:ff:c5:1e:e4:02:43:af:23:1c:6c:10: 9c:f4:27:82:d8:69:09:21:d4:54:4b:bd:8b:42:5a: ed:ac:79:39:fa:3b:0b:03:b0:27:7a:ad:80:54:98: 65:ec:a0:ce:b0:57:59:f2:46:3d:d4:39:1b:e7:b8: 11:4b:c4:cd:59:3f:32:66:db:65:97:ad:73:8d:0f: f9:b2:fd:17:31:2d:88:cc:b7:40:80:89:09:7a:e3: 12:de:5f:3c:07:bb:2d:ce:bd:b5:e1:1c:4f:38:5f: e7:a6:18:db:63:8f:05:44:5b:b4:9b:62:b7:7c:0f: f5:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:D0:E3:AE:C4:4B:14:6F:FA:AF:EB:C9:6F:A4:A7:0F:83:55:D5:C6 X509v3 Authority Key Identifier: keyid:AD:CB:9F:9D:F5:6E:90:B3:9B:53:44:11:81:94:10:4F:46:A8:37:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3132302e302f32332d3233203d3e203234353235.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 114.199.120.0/23 Signature Algorithm: sha256WithRSAEncryption 33:c1:ad:f9:91:45:01:e3:69:01:19:ab:08:8b:39:92:86:3f: b9:8f:3e:dd:19:79:64:05:52:96:dc:ac:c0:a9:88:cd:ad:e1: 85:21:bb:30:28:16:6f:8d:fd:66:3c:a2:00:27:b0:fa:1d:42: 44:07:9d:ba:45:69:a4:9e:04:cb:4f:24:3b:b8:de:49:31:5f: 43:f9:c5:88:9d:ae:73:27:73:df:b9:28:09:9f:b8:e3:a9:bf: 74:fe:b9:6f:7a:27:70:7d:97:62:03:ac:a8:58:b0:67:cf:68: 57:48:3e:14:cc:1a:64:3b:0e:4e:2d:8e:c9:49:e5:3f:bb:67: d6:05:50:50:7f:cb:82:a4:b5:fd:ab:d5:0a:ff:68:73:55:93: 21:17:4f:0d:9a:72:b2:cf:d0:bd:ce:04:d4:77:b0:49:3c:74: 2a:be:02:4f:c9:d0:62:26:a7:7f:13:33:ec:06:53:34:0c:d8: 46:41:a4:e5:f7:f6:58:3a:76:5b:5a:6a:15:0b:5e:1e:a0:48: 2d:91:35:6f:a3:6a:d6:bb:7d:34:d0:62:8f:d4:3d:b4:75:d7: 96:94:fe:37:75:18:42:6d:8c:9d:d8:86:ba:b3:42:5b:0a:77: a5:ec:dc:f0:b1:2d:3c:a3:4c:d5:3d:e7:f8:15:f7:23:dc:ee: 67:fb:cd:b3 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUdr4pa2sDmpk7bTqJIaFzWm5+H3owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQURDQjlGOURGNTZFOTBCMzlCNTM0NDExODE5NDEwNEY0 NkE4MzcwMjAeFw0yNjAzMjQwNzU2MzJaFw0yNzAzMjMwODAxMzJaMDMxMTAvBgNV BAMTKEZERDBFM0FFQzQ0QjE0NkZGQUFGRUJDOTZGQTRBNzBGODM1NUQ1QzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfxM8f7xbT/Ihi7inCAvEt1+Rq WOlFD7srR+zg1TrmWyUPQNIfpvpy/54X7tAxUZfnNph8AFIfwRkVJUAqj228EKvW qMqN7BjtkFaenRyIU5HcGytJMHr/rew+Am8q5/tq2x7/hI6bPXNPOZbitsrz08XO 7B1Ljunj2OVnM7/Dv6YD5Ja6SZhUuWv/xR7kAkOvIxxsEJz0J4LYaQkh1FRLvYtC Wu2seTn6OwsDsCd6rYBUmGXsoM6wV1nyRj3UORvnuBFLxM1ZPzJm22WXrXOND/my /RcxLYjMt0CAiQl64xLeXzwHuy3OvbXhHE84X+emGNtjjwVEW7SbYrd8D/WHAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU/dDjrsRLFG/6r+vJb6SnD4NV1cYwHwYDVR0j BBgwFoAUrcufnfVukLObU0QRgZQQT0aoNwIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MWY0ZmQzOC03ODI2LTQyMDEtOWY5Yi0xZDdjNzZhYTI0ZGQvMC9BRENCOUY5REY1 NkU5MEIzOUI1MzQ0MTE4MTk0MTA0RjQ2QTgzNzAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQURDQjlGOURGNTZFOTBCMzlCNTM0NDExODE5NDEwNEY0NkE4 MzcwMi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2QxZjRmZDM4LTc4MjYtNDIwMS05 ZjliLTFkN2M3NmFhMjRkZC8wLzMxMzEzNDJlMzEzOTM5MmUzMTMyMzAyZTMwMmYz MjMzMmQzMjMzMjAzZDNlMjAzMjM0MzUzMjM1LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBcsd4MA0GCSqG SIb3DQEBCwUAA4IBAQAzwa35kUUB42kBGasIizmShj+5jz7dGXlkBVKW3KzAqYjN reGFIbswKBZvjf1mPKIAJ7D6HUJEB526RWmkngTLTyQ7uN5JMV9D+cWIna5zJ3Pf uSgJn7jjqb90/rlveidwfZdiA6yoWLBnz2hXSD4UzBpkOw5OLY7JSeU/u2fWBVBQ f8uCpLX9q9UK/2hzVZMhF08NmnKyz9C9zgTUd7BJPHQqvgJPydBiJqd/EzPsBlM0 DNhGQaTl9/ZYOnZbWmoVC14eoEgtkTVvo2rWu3000GKP1D20ddeWlP43dRhCbYyd 2Ia6s0JbCnel7NzwsS08o0zVPef4Ffcj3O5n+82z -----END CERTIFICATE-----Generated at Thu Mar 26 16:19:33 2026 by rpki-client