$ rpki-client -vvf repo-rpki.idnic.net/repo/153b067c-ecc9-4dca-987d-b9576815f855/0/3131372e3132312e3230332e302f32342d3234203d3e203436303239.roa File: 3131372e3132312e3230332e302f32342d3234203d3e203436303239.roa (raw, json) Hash identifier: P8aS68geJajJn/yE+GCIxgmIL0p3n8dBmSKrsBdYFiE= Subject key identifier: 0E:85:48:2B:2B:4A:66:50:C3:D0:A7:7C:C3:C4:11:E3:C8:F4:14:83 Certificate issuer: /CN=45FD71C7EFF830D20E960225B4A971A14B081364 Certificate serial: 1C1A06470FA0E72C67A77AF202FACC53CB12330E Authority key identifier: 45:FD:71:C7:EF:F8:30:D2:0E:96:02:25:B4:A9:71:A1:4B:08:13:64 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45FD71C7EFF830D20E960225B4A971A14B081364.cer Subject info access: rsync://repo-rpki.idnic.net/repo/153b067c-ecc9-4dca-987d-b9576815f855/0/3131372e3132312e3230332e302f32342d3234203d3e203436303239.roa Signing time: Thu 02 Apr 2026 03:03:48 +0000 ROA not before: Thu 02 Apr 2026 02:58:48 +0000 ROA not after: Thu 01 Apr 2027 03:03:48 +0000 asID: 46029 IP address blocks: 117.121.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/153b067c-ecc9-4dca-987d-b9576815f855/0/45FD71C7EFF830D20E960225B4A971A14B081364.crl rsync://repo-rpki.idnic.net/repo/153b067c-ecc9-4dca-987d-b9576815f855/0/45FD71C7EFF830D20E960225B4A971A14B081364.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45FD71C7EFF830D20E960225B4A971A14B081364.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 01:03:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:1a:06:47:0f:a0:e7:2c:67:a7:7a:f2:02:fa:cc:53:cb:12:33:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45FD71C7EFF830D20E960225B4A971A14B081364 Validity Not Before: Apr 2 02:58:48 2026 GMT Not After : Apr 1 03:03:48 2027 GMT Subject: CN=0E85482B2B4A6650C3D0A77CC3C411E3C8F41483 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:49:4a:08:4c:96:9b:87:79:8c:ed:3e:a7:7f: a1:e3:fd:2b:13:86:60:94:51:0f:68:de:1c:74:e8: c1:23:04:75:38:52:1d:33:63:13:a0:4c:13:f1:b6: ab:19:fb:ab:ca:93:60:59:f1:ba:9a:a0:c1:41:3b: 75:0a:02:8c:21:df:0b:e0:1c:61:f0:b3:ba:46:ce: 43:41:9f:16:87:48:ca:d5:3d:90:26:60:32:38:49: fa:5e:ec:08:a8:53:ee:08:42:a3:9e:81:86:94:50: 8c:0f:0d:90:4b:3c:f0:f7:95:16:d5:9e:3d:dc:b1: 83:86:6b:7b:5b:d2:d1:2b:a8:30:b6:8f:30:59:b9: b2:cd:1b:26:95:70:79:e4:00:23:ea:4a:34:13:34: 91:b0:36:31:be:b3:3a:0b:65:a9:6a:3d:7e:26:8b: 03:71:1b:a5:64:51:87:94:97:f0:92:4e:92:e1:e9: 75:a6:c8:2c:39:7a:c7:08:58:4b:66:96:86:0b:fc: e1:12:de:6d:1b:b4:0b:4a:18:bc:93:7e:ed:71:68: 2b:a2:dc:75:fc:e0:a0:f4:e5:c9:79:23:76:ab:45: ca:1a:c7:88:76:06:e8:70:a1:b0:31:90:c3:c1:29: 67:6a:b0:9a:b7:f4:41:26:fb:b1:47:38:61:24:98: 24:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:85:48:2B:2B:4A:66:50:C3:D0:A7:7C:C3:C4:11:E3:C8:F4:14:83 X509v3 Authority Key Identifier: keyid:45:FD:71:C7:EF:F8:30:D2:0E:96:02:25:B4:A9:71:A1:4B:08:13:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/153b067c-ecc9-4dca-987d-b9576815f855/0/45FD71C7EFF830D20E960225B4A971A14B081364.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45FD71C7EFF830D20E960225B4A971A14B081364.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/153b067c-ecc9-4dca-987d-b9576815f855/0/3131372e3132312e3230332e302f32342d3234203d3e203436303239.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 117.121.203.0/24 Signature Algorithm: sha256WithRSAEncryption 0f:4a:2e:2e:c3:00:70:e0:5a:97:97:c6:4c:7c:36:0f:04:20: 9f:10:db:56:b3:47:2f:b8:84:22:c1:19:2e:51:8b:eb:83:52: 95:1d:a2:cc:33:c9:4b:01:e5:1f:8e:cf:8b:f2:6f:67:5e:a5: e0:f5:91:99:01:50:b7:c5:44:93:a2:d2:4a:b4:14:b7:22:ab: 54:17:b8:54:93:80:50:65:3e:37:93:29:1a:be:e0:d6:44:9c: 5f:fb:c1:c7:a5:fc:99:93:0b:41:21:a8:65:5f:d5:27:a9:f2: 00:ee:5c:3a:44:7c:88:fc:6a:8b:56:bc:0b:91:e1:d7:a3:f1: 15:bf:c8:16:0a:b2:ed:7e:1d:9c:4d:94:f0:c3:f3:f5:ae:db: 6f:5e:47:12:93:f9:51:bb:a7:3c:08:3a:e5:a2:d8:87:26:a6: 3e:fa:cb:2a:5c:69:94:00:4d:ae:d6:7c:9d:6e:a4:05:8a:77: 61:dd:e8:4b:cc:5b:c1:5b:38:26:63:7a:b0:62:b6:e8:91:e9: 34:29:ac:25:64:0a:6d:ba:4a:fc:23:8d:05:5e:80:51:33:0c: ac:1a:b2:25:6e:e3:20:1b:d7:95:17:c6:a3:c8:9d:66:cc:af: f2:06:b1:10:38:ee:a7:f1:20:e4:d8:99:fc:d8:d2:dd:b3:24: 4c:66:d6:d1 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUHBoGRw+g5yxnp3ryAvrMU8sSMw4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDVGRDcxQzdFRkY4MzBEMjBFOTYwMjI1QjRBOTcxQTE0 QjA4MTM2NDAeFw0yNjA0MDIwMjU4NDhaFw0yNzA0MDEwMzAzNDhaMDMxMTAvBgNV BAMTKDBFODU0ODJCMkI0QTY2NTBDM0QwQTc3Q0MzQzQxMUUzQzhGNDE0ODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSSUoITJabh3mM7T6nf6Hj/SsT hmCUUQ9o3hx06MEjBHU4Uh0zYxOgTBPxtqsZ+6vKk2BZ8bqaoMFBO3UKAowh3wvg HGHws7pGzkNBnxaHSMrVPZAmYDI4Sfpe7AioU+4IQqOegYaUUIwPDZBLPPD3lRbV nj3csYOGa3tb0tErqDC2jzBZubLNGyaVcHnkACPqSjQTNJGwNjG+szoLZalqPX4m iwNxG6VkUYeUl/CSTpLh6XWmyCw5escIWEtmloYL/OES3m0btAtKGLyTfu1xaCui 3HX84KD05cl5I3arRcoax4h2BuhwobAxkMPBKWdqsJq39EEm+7FHOGEkmCSlAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUDoVIKytKZlDD0Kd8w8QR48j0FIMwHwYDVR0j BBgwFoAURf1xx+/4MNIOlgIltKlxoUsIE2QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NTNiMDY3Yy1lY2M5LTRkY2EtOTg3ZC1iOTU3NjgxNWY4NTUvMC80NUZENzFDN0VG RjgzMEQyMEU5NjAyMjVCNEE5NzFBMTRCMDgxMzY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDVGRDcxQzdFRkY4MzBEMjBFOTYwMjI1QjRBOTcxQTE0QjA4 MTM2NC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE1M2IwNjdjLWVjYzktNGRjYS05 ODdkLWI5NTc2ODE1Zjg1NS8wLzMxMzEzNzJlMzEzMjMxMmUzMjMwMzMyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzNDM2MzAzMjM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAdXnLMA0GCSqG SIb3DQEBCwUAA4IBAQAPSi4uwwBw4FqXl8ZMfDYPBCCfENtWs0cvuIQiwRkuUYvr g1KVHaLMM8lLAeUfjs+L8m9nXqXg9ZGZAVC3xUSTotJKtBS3IqtUF7hUk4BQZT43 kykavuDWRJxf+8HHpfyZkwtBIahlX9UnqfIA7lw6RHyI/GqLVrwLkeHXo/EVv8gW CrLtfh2cTZTww/P1rttvXkcSk/lRu6c8CDrlotiHJqY++ssqXGmUAE2u1nydbqQF indh3ehLzFvBWzgmY3qwYrbokek0KawlZAptukr8I40FXoBRMwysGrIlbuMgG9eV F8ajyJ1mzK/yBrEQOO6n8SDk2Jn82NLdsyRMZtbR -----END CERTIFICATE-----Generated at Sat Apr 18 01:20:13 2026 by rpki-client