$ rpki-client -vvf repo-rpki.idnic.net/repo/153b067c-ecc9-4dca-987d-b9576815f855/0/3131372e3132312e3230312e302f32342d3234203d3e203436303239.roa File: 3131372e3132312e3230312e302f32342d3234203d3e203436303239.roa (raw, json) Hash identifier: DX38fpxpc+mA6ZlLNcNyHZoYPw6/HKLzAPuzu7R51qY= Subject key identifier: 00:3E:B4:87:B0:28:78:67:3A:E3:86:29:43:A5:98:FB:62:86:D8:C3 Certificate issuer: /CN=45FD71C7EFF830D20E960225B4A971A14B081364 Certificate serial: 5B5B6343B02209C73A6FA5EE9C2D3DC2488D5781 Authority key identifier: 45:FD:71:C7:EF:F8:30:D2:0E:96:02:25:B4:A9:71:A1:4B:08:13:64 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45FD71C7EFF830D20E960225B4A971A14B081364.cer Subject info access: rsync://repo-rpki.idnic.net/repo/153b067c-ecc9-4dca-987d-b9576815f855/0/3131372e3132312e3230312e302f32342d3234203d3e203436303239.roa Signing time: Thu 02 Apr 2026 03:04:58 +0000 ROA not before: Thu 02 Apr 2026 02:59:58 +0000 ROA not after: Thu 01 Apr 2027 03:04:58 +0000 asID: 46029 IP address blocks: 117.121.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/153b067c-ecc9-4dca-987d-b9576815f855/0/45FD71C7EFF830D20E960225B4A971A14B081364.crl rsync://repo-rpki.idnic.net/repo/153b067c-ecc9-4dca-987d-b9576815f855/0/45FD71C7EFF830D20E960225B4A971A14B081364.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45FD71C7EFF830D20E960225B4A971A14B081364.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 01:03:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:5b:63:43:b0:22:09:c7:3a:6f:a5:ee:9c:2d:3d:c2:48:8d:57:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45FD71C7EFF830D20E960225B4A971A14B081364 Validity Not Before: Apr 2 02:59:58 2026 GMT Not After : Apr 1 03:04:58 2027 GMT Subject: CN=003EB487B02878673AE3862943A598FB6286D8C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:be:43:97:6e:d2:4b:ff:84:b9:9a:f6:2b:a9: a4:f1:53:74:86:b6:1e:74:7b:33:f8:a8:0a:28:f4: 4d:53:f8:3e:34:1e:ab:a1:95:c0:d9:62:20:29:a2: 03:6a:e9:14:1c:70:c9:f5:13:9a:aa:af:66:ad:c8: 1e:d8:fa:8e:e1:77:60:b2:c5:c0:b5:09:b0:a8:97: 52:cc:30:d2:7b:fa:e9:73:0b:d0:38:85:31:58:e1: 40:24:7d:53:86:90:a5:1a:10:9c:fb:62:cf:1f:fc: b3:48:a5:17:fa:7d:49:d0:0d:f9:c9:a9:e0:e6:78: 2f:da:80:ed:7d:01:d7:32:c6:2f:f7:51:c4:d4:46: 10:2b:97:ca:46:ef:f2:63:91:dc:8f:79:4a:f8:77: e8:a5:1f:63:22:4a:e2:92:2a:23:98:5e:80:69:31: 6c:02:0a:df:d2:f8:50:31:04:48:ae:3f:8a:85:6c: 5b:a7:2f:dc:bf:a0:f6:de:12:38:ea:5f:7b:33:57: c3:d8:0f:d7:5a:15:b6:46:be:8d:65:ec:8f:5f:97: d7:c8:04:21:8b:1b:fd:26:75:28:23:89:05:95:0c: a1:5b:89:7f:15:b2:e8:b8:74:2a:9f:9b:57:46:3d: 62:41:1e:fc:7c:20:d6:dd:40:7e:f5:79:58:2c:b0: 48:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:3E:B4:87:B0:28:78:67:3A:E3:86:29:43:A5:98:FB:62:86:D8:C3 X509v3 Authority Key Identifier: keyid:45:FD:71:C7:EF:F8:30:D2:0E:96:02:25:B4:A9:71:A1:4B:08:13:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/153b067c-ecc9-4dca-987d-b9576815f855/0/45FD71C7EFF830D20E960225B4A971A14B081364.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45FD71C7EFF830D20E960225B4A971A14B081364.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/153b067c-ecc9-4dca-987d-b9576815f855/0/3131372e3132312e3230312e302f32342d3234203d3e203436303239.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 117.121.201.0/24 Signature Algorithm: sha256WithRSAEncryption 52:7b:a1:af:c1:d5:66:82:96:37:82:80:b9:82:6c:5d:a5:b3: fb:01:b3:44:48:15:6d:75:5b:7a:c7:40:ad:0f:8b:32:05:f3: 62:ac:47:01:38:51:e0:42:9f:3b:43:8b:41:e6:13:d7:08:bf: 77:e0:6f:58:71:61:0c:15:02:20:40:33:e9:bf:7e:d8:3a:18: 80:76:31:f5:bf:b5:73:81:a8:bd:9f:f5:e6:e2:7a:ca:c0:c7: a1:c6:92:70:01:c6:ff:6b:87:53:98:34:ab:21:8d:95:8d:1d: 70:a5:a9:87:17:22:8a:73:21:2c:4d:5f:4a:2f:32:bf:d1:47: 54:03:44:52:77:a7:63:a0:3d:42:52:38:3f:f2:91:b0:1f:f2: 4b:f8:ac:b0:ba:4b:90:32:3c:2a:c6:57:22:d4:bb:df:0f:50: f6:8f:4f:09:ce:ae:90:64:47:bc:7b:8e:e6:07:48:0b:8e:77: 36:a5:a6:ce:04:ee:ab:08:55:db:d3:43:0d:54:2e:ff:a1:3e: f8:1b:af:78:b2:66:88:7a:eb:18:12:2b:0e:63:4e:ed:c0:f3: c4:d0:3a:64:d9:fb:50:b5:a4:e0:45:3c:9d:13:00:ed:86:70: 36:3f:e1:07:72:a7:e3:39:d9:ce:0e:bc:5c:3a:b0:4c:8a:b3: 35:73:b4:88 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUW1tjQ7AiCcc6b6XunC09wkiNV4EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDVGRDcxQzdFRkY4MzBEMjBFOTYwMjI1QjRBOTcxQTE0 QjA4MTM2NDAeFw0yNjA0MDIwMjU5NThaFw0yNzA0MDEwMzA0NThaMDMxMTAvBgNV BAMTKDAwM0VCNDg3QjAyODc4NjczQUUzODYyOTQzQTU5OEZCNjI4NkQ4QzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkvkOXbtJL/4S5mvYrqaTxU3SG th50ezP4qAoo9E1T+D40HquhlcDZYiApogNq6RQccMn1E5qqr2atyB7Y+o7hd2Cy xcC1CbCol1LMMNJ7+ulzC9A4hTFY4UAkfVOGkKUaEJz7Ys8f/LNIpRf6fUnQDfnJ qeDmeC/agO19Adcyxi/3UcTURhArl8pG7/JjkdyPeUr4d+ilH2MiSuKSKiOYXoBp MWwCCt/S+FAxBEiuP4qFbFunL9y/oPbeEjjqX3szV8PYD9daFbZGvo1l7I9fl9fI BCGLG/0mdSgjiQWVDKFbiX8Vsui4dCqfm1dGPWJBHvx8INbdQH71eVgssEjHAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUAD60h7AoeGc644YpQ6WY+2KG2MMwHwYDVR0j BBgwFoAURf1xx+/4MNIOlgIltKlxoUsIE2QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NTNiMDY3Yy1lY2M5LTRkY2EtOTg3ZC1iOTU3NjgxNWY4NTUvMC80NUZENzFDN0VG RjgzMEQyMEU5NjAyMjVCNEE5NzFBMTRCMDgxMzY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDVGRDcxQzdFRkY4MzBEMjBFOTYwMjI1QjRBOTcxQTE0QjA4 MTM2NC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE1M2IwNjdjLWVjYzktNGRjYS05 ODdkLWI5NTc2ODE1Zjg1NS8wLzMxMzEzNzJlMzEzMjMxMmUzMjMwMzEyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzNDM2MzAzMjM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAdXnJMA0GCSqG SIb3DQEBCwUAA4IBAQBSe6GvwdVmgpY3goC5gmxdpbP7AbNESBVtdVt6x0CtD4sy BfNirEcBOFHgQp87Q4tB5hPXCL934G9YcWEMFQIgQDPpv37YOhiAdjH1v7Vzgai9 n/Xm4nrKwMehxpJwAcb/a4dTmDSrIY2VjR1wpamHFyKKcyEsTV9KLzK/0UdUA0RS d6djoD1CUjg/8pGwH/JL+KywukuQMjwqxlci1LvfD1D2j08Jzq6QZEe8e47mB0gL jnc2pabOBO6rCFXb00MNVC7/oT74G694smaIeusYEisOY07twPPE0Dpk2ftQtaTg RTydEwDthnA2P+EHcqfjOdnODrxcOrBMirM1c7SI -----END CERTIFICATE-----Generated at Fri Apr 17 23:55:33 2026 by rpki-client