$ rpki-client -vvf repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e39362e302f32322d3232203d3e203234353235.roa File: 3131342e3139392e39362e302f32322d3232203d3e203234353235.roa (raw, json) Hash identifier: wCDrEZ4rzIcSXmx6SA5sUfwt8HKF3XPR24Oicu4LwYE= Subject key identifier: 90:D4:46:A6:D4:9D:E9:06:5F:71:EB:72:1C:8D:F3:A2:EE:60:7E:63 Certificate issuer: /CN=ADCB9F9DF56E90B39B5344118194104F46A83702 Certificate serial: 4835BD2AAB4EFD583EE660919F4F7A5EB1F43A7E Authority key identifier: AD:CB:9F:9D:F5:6E:90:B3:9B:53:44:11:81:94:10:4F:46:A8:37:02 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e39362e302f32322d3232203d3e203234353235.roa Signing time: Tue 24 Mar 2026 09:02:51 +0000 ROA not before: Tue 24 Mar 2026 08:57:51 +0000 ROA not after: Tue 23 Mar 2027 09:02:51 +0000 asID: 24525 IP address blocks: 114.199.96.0/22 maxlen: 22 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.crl rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 12:38:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:35:bd:2a:ab:4e:fd:58:3e:e6:60:91:9f:4f:7a:5e:b1:f4:3a:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ADCB9F9DF56E90B39B5344118194104F46A83702 Validity Not Before: Mar 24 08:57:51 2026 GMT Not After : Mar 23 09:02:51 2027 GMT Subject: CN=90D446A6D49DE9065F71EB721C8DF3A2EE607E63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:6f:af:46:91:ed:10:ba:eb:f2:c9:6c:71:36: a6:40:88:83:8e:58:39:89:d2:91:79:20:1d:01:f9: 34:3d:d0:9f:3f:20:f7:7c:30:9d:db:99:89:0d:a1: cd:8c:7d:d3:bf:7a:f9:f7:97:fa:d9:ed:73:a8:35: a2:d7:b5:db:d9:18:43:e2:5e:e6:97:8b:29:dd:06: 19:9b:c6:d5:d1:6b:45:40:13:f7:cc:d8:9f:6f:d2: 6b:58:02:c4:d7:7b:01:f6:45:16:c8:01:a2:27:4e: 10:00:d1:16:9e:dc:4c:e2:2b:2f:a7:86:9f:43:e5: 07:fc:e1:76:21:0a:e3:f5:40:7b:7b:1a:2e:1d:71: 9e:97:64:dc:b9:ed:84:0d:cf:5c:06:cf:d0:e6:cd: 1c:fc:83:0c:43:97:79:2e:08:84:04:1f:55:46:cc: 71:7b:a0:4f:4a:95:6f:62:6f:c6:f0:ae:51:1d:77: 5f:cc:1b:60:1f:7b:c0:e4:85:3f:9b:1d:c4:91:d1: f9:e3:7d:4a:fa:e6:d7:c8:87:13:b5:52:8f:d3:8e: 8c:56:ce:ba:ba:76:c6:73:3a:9b:08:be:a0:e0:4f: 14:f2:e2:f3:b5:ca:cd:ac:0e:0c:eb:0d:19:46:b6: 1e:b8:32:5c:84:12:39:ba:30:4d:9e:9f:66:dc:e9: 22:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:D4:46:A6:D4:9D:E9:06:5F:71:EB:72:1C:8D:F3:A2:EE:60:7E:63 X509v3 Authority Key Identifier: keyid:AD:CB:9F:9D:F5:6E:90:B3:9B:53:44:11:81:94:10:4F:46:A8:37:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e39362e302f32322d3232203d3e203234353235.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 114.199.96.0/22 Signature Algorithm: sha256WithRSAEncryption 4c:58:24:eb:09:b7:e4:c2:50:6a:24:72:52:6f:b2:e0:5d:56: 74:34:56:d4:39:ee:76:78:84:ac:58:b0:3a:1d:35:37:70:f9: cd:21:f7:5f:3a:a1:56:4b:89:05:8e:f5:a2:dc:a0:73:93:1e: 5c:29:f7:29:79:19:b9:91:3b:20:61:e4:38:20:d9:ea:69:2b: b4:c9:8c:ea:46:b3:26:c0:33:83:63:a6:52:be:93:f0:79:5d: d8:82:9d:b5:8c:13:08:3c:53:87:e2:e6:6b:80:c3:14:a4:02: 1d:39:b3:ae:a6:dd:49:51:75:66:ba:2b:7b:42:d2:54:6a:77: 23:a2:4a:c3:3d:be:9e:d7:7e:b3:45:06:8b:cd:bc:94:55:f3: 55:92:15:10:94:44:ce:07:c1:d5:b2:3f:02:97:9c:9c:6e:f8: 83:96:f6:22:6d:07:25:f2:b9:93:9c:f2:7d:58:29:a6:9e:80: fc:09:6a:b6:44:23:46:39:16:e2:67:95:f7:d5:a5:15:02:ab: be:62:27:06:25:5c:b2:b2:fb:62:38:6b:6c:3a:e6:39:6f:94: 1b:84:bd:ac:7d:72:99:a6:b9:d6:38:27:07:79:8b:4d:44:57: 0e:cf:46:65:35:5e:9e:92:ce:8d:1a:46:56:31:68:81:21:4d: 5e:72:df:ba -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUSDW9KqtO/Vg+5mCRn096XrH0On4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQURDQjlGOURGNTZFOTBCMzlCNTM0NDExODE5NDEwNEY0 NkE4MzcwMjAeFw0yNjAzMjQwODU3NTFaFw0yNzAzMjMwOTAyNTFaMDMxMTAvBgNV BAMTKDkwRDQ0NkE2RDQ5REU5MDY1RjcxRUI3MjFDOERGM0EyRUU2MDdFNjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDub69Gke0QuuvyyWxxNqZAiIOO WDmJ0pF5IB0B+TQ90J8/IPd8MJ3bmYkNoc2MfdO/evn3l/rZ7XOoNaLXtdvZGEPi XuaXiyndBhmbxtXRa0VAE/fM2J9v0mtYAsTXewH2RRbIAaInThAA0Rae3EziKy+n hp9D5Qf84XYhCuP1QHt7Gi4dcZ6XZNy57YQNz1wGz9DmzRz8gwxDl3kuCIQEH1VG zHF7oE9KlW9ib8bwrlEdd1/MG2Afe8DkhT+bHcSR0fnjfUr65tfIhxO1Uo/TjoxW zrq6dsZzOpsIvqDgTxTy4vO1ys2sDgzrDRlGth64MlyEEjm6ME2en2bc6SKhAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUkNRGptSd6QZfcetyHI3zou5gfmMwHwYDVR0j BBgwFoAUrcufnfVukLObU0QRgZQQT0aoNwIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MWY0ZmQzOC03ODI2LTQyMDEtOWY5Yi0xZDdjNzZhYTI0ZGQvMC9BRENCOUY5REY1 NkU5MEIzOUI1MzQ0MTE4MTk0MTA0RjQ2QTgzNzAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQURDQjlGOURGNTZFOTBCMzlCNTM0NDExODE5NDEwNEY0NkE4 MzcwMi5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2QxZjRmZDM4LTc4MjYtNDIwMS05 ZjliLTFkN2M3NmFhMjRkZC8wLzMxMzEzNDJlMzEzOTM5MmUzOTM2MmUzMDJmMzIz MjJkMzIzMjIwM2QzZTIwMzIzNDM1MzIzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAnLHYDANBgkqhkiG 9w0BAQsFAAOCAQEATFgk6wm35MJQaiRyUm+y4F1WdDRW1DnudniErFiwOh01N3D5 zSH3XzqhVkuJBY71otygc5MeXCn3KXkZuZE7IGHkOCDZ6mkrtMmM6kazJsAzg2Om Ur6T8Hld2IKdtYwTCDxTh+Lma4DDFKQCHTmzrqbdSVF1Zrore0LSVGp3I6JKwz2+ ntd+s0UGi828lFXzVZIVEJREzgfB1bI/ApecnG74g5b2Im0HJfK5k5zyfVgppp6A /AlqtkQjRjkW4meV99WlFQKrvmInBiVcsrL7YjhrbDrmOW+UG4S9rH1ymaa51jgn B3mLTURXDs9GZTVenpLOjRpGVjFogSFNXnLfug== -----END CERTIFICATE-----Generated at Thu Mar 26 15:06:33 2026 by rpki-client