$ rpki-client -vvf repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3132362e302f32332d3233203d3e203234353235.roa File: 3131342e3139392e3132362e302f32332d3233203d3e203234353235.roa (raw, json) Hash identifier: uGZ0EkabHJv0ss2EZ5/A209hUmrCTRXM8+Z1cEjz84k= Subject key identifier: 82:2A:0B:F4:4E:31:7B:C3:39:5A:7F:DA:5A:44:6A:EF:05:6A:E9:C1 Certificate issuer: /CN=ADCB9F9DF56E90B39B5344118194104F46A83702 Certificate serial: 7D4E983B0EE208F6A0FC5FBBD558D469C5AD268F Authority key identifier: AD:CB:9F:9D:F5:6E:90:B3:9B:53:44:11:81:94:10:4F:46:A8:37:02 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3132362e302f32332d3233203d3e203234353235.roa Signing time: Tue 24 Mar 2026 09:02:49 +0000 ROA not before: Tue 24 Mar 2026 08:57:49 +0000 ROA not after: Tue 23 Mar 2027 09:02:49 +0000 asID: 24525 IP address blocks: 114.199.126.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.crl rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 12:38:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:4e:98:3b:0e:e2:08:f6:a0:fc:5f:bb:d5:58:d4:69:c5:ad:26:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ADCB9F9DF56E90B39B5344118194104F46A83702 Validity Not Before: Mar 24 08:57:49 2026 GMT Not After : Mar 23 09:02:49 2027 GMT Subject: CN=822A0BF44E317BC3395A7FDA5A446AEF056AE9C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:a8:a7:db:74:5d:06:b6:c8:8b:45:79:84:a5: af:f4:f1:bb:2e:2b:8e:08:75:bd:79:8d:41:7c:7f: 7f:a5:10:f7:39:43:cc:e4:d3:0d:e0:08:37:e1:81: 7e:ee:3b:9e:cd:69:32:f6:20:e6:bc:0f:8e:6b:ed: 31:ff:70:db:48:a3:b0:07:5a:5a:e3:ad:5a:e4:c2: 9f:6a:f2:6b:fc:27:64:c6:95:39:90:8d:ff:50:df: 41:ea:f5:14:b2:31:dd:4e:d0:9c:9d:3b:44:ae:96: 98:3d:68:28:9c:ba:56:14:b7:7e:58:64:83:38:ec: c4:3c:37:b4:2e:02:21:ad:00:53:01:07:1e:b1:ff: 9e:51:04:9b:b7:e4:3e:32:5a:e7:fe:a0:22:4c:b3: 2d:f5:2f:fa:32:57:d5:0d:e2:47:20:f0:9a:f7:98: 58:53:39:d1:e2:d6:2c:3f:02:7c:b2:d0:7b:73:8f: 47:ab:4a:f1:0e:fc:e3:1c:0e:13:98:e5:7d:3c:92: 88:7a:5f:ab:99:97:6b:47:95:38:5e:50:ad:49:09: de:81:a8:4c:62:27:4f:f5:ab:63:8b:e6:7d:f1:71: db:76:70:64:df:f3:bb:5d:5a:92:ca:a2:9f:d9:9f: 53:60:0c:66:6d:0e:3c:56:00:97:ef:5d:1f:cc:e2: 38:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:2A:0B:F4:4E:31:7B:C3:39:5A:7F:DA:5A:44:6A:EF:05:6A:E9:C1 X509v3 Authority Key Identifier: keyid:AD:CB:9F:9D:F5:6E:90:B3:9B:53:44:11:81:94:10:4F:46:A8:37:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3132362e302f32332d3233203d3e203234353235.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 114.199.126.0/23 Signature Algorithm: sha256WithRSAEncryption a5:ea:5e:3c:8e:e3:46:19:87:db:88:e0:11:ea:5b:85:2d:9a: 49:27:2f:2b:2f:71:08:a5:38:83:be:70:c1:a7:d5:58:fb:61: f0:78:8d:47:84:2e:44:d8:90:fb:69:72:3b:66:b0:0f:c1:d5: 3b:7a:43:2a:af:d3:b4:0c:7e:67:10:69:5e:44:b8:fa:60:a4: 33:21:ad:2a:eb:df:a9:f7:08:7e:1c:0e:8d:c4:90:8f:24:ae: 16:cb:07:7f:04:90:f8:ba:39:e4:04:d1:aa:f6:34:a3:64:eb: c9:fc:e0:0a:e0:71:24:66:4d:f7:05:a1:0e:5a:ec:64:ea:6b: aa:47:17:84:f2:5b:6e:e3:fb:f9:79:8e:dd:4c:55:41:06:bf: 05:fb:df:96:73:44:dc:e1:7d:2d:00:bd:e2:d4:41:86:19:5a: d0:9a:ab:5a:91:e1:28:90:f7:cd:6c:16:0f:94:bf:c8:c0:e5: 07:90:ac:ea:2c:9f:e9:2f:2c:69:58:ba:2d:a8:6c:9e:1f:39: 09:9a:4d:1b:b1:f7:97:e1:a9:4b:56:c2:e3:b0:20:23:ec:28: 6d:a2:8b:32:88:ad:80:5d:4c:9f:14:52:2f:34:de:a5:22:c3: 6d:e6:33:16:5a:f6:61:bf:b1:45:d0:aa:75:e7:f6:fb:13:0a: ac:24:06:1b -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUfU6YOw7iCPag/F+71VjUacWtJo8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQURDQjlGOURGNTZFOTBCMzlCNTM0NDExODE5NDEwNEY0 NkE4MzcwMjAeFw0yNjAzMjQwODU3NDlaFw0yNzAzMjMwOTAyNDlaMDMxMTAvBgNV BAMTKDgyMkEwQkY0NEUzMTdCQzMzOTVBN0ZEQTVBNDQ2QUVGMDU2QUU5QzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmqKfbdF0GtsiLRXmEpa/08bsu K44Idb15jUF8f3+lEPc5Q8zk0w3gCDfhgX7uO57NaTL2IOa8D45r7TH/cNtIo7AH WlrjrVrkwp9q8mv8J2TGlTmQjf9Q30Hq9RSyMd1O0JydO0Sulpg9aCiculYUt35Y ZIM47MQ8N7QuAiGtAFMBBx6x/55RBJu35D4yWuf+oCJMsy31L/oyV9UN4kcg8Jr3 mFhTOdHi1iw/Anyy0Htzj0erSvEO/OMcDhOY5X08koh6X6uZl2tHlTheUK1JCd6B qExiJ0/1q2OL5n3xcdt2cGTf87tdWpLKop/Zn1NgDGZtDjxWAJfvXR/M4jizAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUgioL9E4xe8M5Wn/aWkRq7wVq6cEwHwYDVR0j BBgwFoAUrcufnfVukLObU0QRgZQQT0aoNwIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MWY0ZmQzOC03ODI2LTQyMDEtOWY5Yi0xZDdjNzZhYTI0ZGQvMC9BRENCOUY5REY1 NkU5MEIzOUI1MzQ0MTE4MTk0MTA0RjQ2QTgzNzAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQURDQjlGOURGNTZFOTBCMzlCNTM0NDExODE5NDEwNEY0NkE4 MzcwMi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2QxZjRmZDM4LTc4MjYtNDIwMS05 ZjliLTFkN2M3NmFhMjRkZC8wLzMxMzEzNDJlMzEzOTM5MmUzMTMyMzYyZTMwMmYz MjMzMmQzMjMzMjAzZDNlMjAzMjM0MzUzMjM1LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBcsd+MA0GCSqG SIb3DQEBCwUAA4IBAQCl6l48juNGGYfbiOAR6luFLZpJJy8rL3EIpTiDvnDBp9VY +2HweI1HhC5E2JD7aXI7ZrAPwdU7ekMqr9O0DH5nEGleRLj6YKQzIa0q69+p9wh+ HA6NxJCPJK4Wywd/BJD4ujnkBNGq9jSjZOvJ/OAK4HEkZk33BaEOWuxk6muqRxeE 8ltu4/v5eY7dTFVBBr8F+9+Wc0Tc4X0tAL3i1EGGGVrQmqtakeEokPfNbBYPlL/I wOUHkKzqLJ/pLyxpWLotqGyeHzkJmk0bsfeX4alLVsLjsCAj7ChtoosyiK2AXUyf FFIvNN6lIsNt5jMWWvZhv7FF0Kp15/b7EwqsJAYb -----END CERTIFICATE-----Generated at Thu Mar 26 14:42:05 2026 by rpki-client