$ rpki-client -vvf repo-rpki.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0/3132302e32392e3232372e302f32342d3234203d3e203338373634.roa File: 3132302e32392e3232372e302f32342d3234203d3e203338373634.roa (raw, json) Hash identifier: WD3hCT6MILwIPZ4dCDhl0fGWEEcaNJ+QbJrnwlE7Ah4= Subject key identifier: 7F:D6:B1:F1:66:AF:E4:1D:75:8E:2F:8A:66:CF:23:37:20:06:79:0A Certificate issuer: /CN=3E66628C03CAB8C6D6FCDEDBE0700557A35B0251 Certificate serial: 4B67D23E2C37AB0639D83EB91B91BC2C3363E9F4 Authority key identifier: 3E:66:62:8C:03:CA:B8:C6:D6:FC:DE:DB:E0:70:05:57:A3:5B:02:51 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E66628C03CAB8C6D6FCDEDBE0700557A35B0251.cer Subject info access: rsync://repo-rpki.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0/3132302e32392e3232372e302f32342d3234203d3e203338373634.roa Signing time: Wed 21 Jan 2026 12:00:01 +0000 ROA not before: Wed 21 Jan 2026 11:55:01 +0000 ROA not after: Wed 20 Jan 2027 12:00:01 +0000 asID: 38764 IP address blocks: 120.29.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0/3E66628C03CAB8C6D6FCDEDBE0700557A35B0251.crl rsync://repo-rpki.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0/3E66628C03CAB8C6D6FCDEDBE0700557A35B0251.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E66628C03CAB8C6D6FCDEDBE0700557A35B0251.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 00:32:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:67:d2:3e:2c:37:ab:06:39:d8:3e:b9:1b:91:bc:2c:33:63:e9:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E66628C03CAB8C6D6FCDEDBE0700557A35B0251 Validity Not Before: Jan 21 11:55:01 2026 GMT Not After : Jan 20 12:00:01 2027 GMT Subject: CN=7FD6B1F166AFE41D758E2F8A66CF23372006790A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:d4:e7:d3:bb:8f:73:e7:c6:70:b9:d9:34:31: cf:c4:40:07:67:c1:86:03:0f:b5:87:7c:4b:b5:09: a7:d0:ad:00:ae:d8:93:6e:cc:26:c3:10:00:6d:58: 67:8c:b2:e5:2a:53:a4:80:8f:7d:12:37:be:a2:f0: 08:fb:bc:76:7f:a4:06:f2:f4:0b:ac:b3:ca:2d:94: 8e:bf:86:e0:e0:e8:3b:83:9b:c2:36:3b:f8:61:7c: 87:00:7e:cf:4c:8d:95:6c:e2:fc:b1:bc:b7:dd:36: e4:ad:03:7a:09:55:9d:7a:50:07:ef:ab:4a:82:3c: 6c:f9:74:fe:cb:b0:cd:30:97:8c:ba:b2:12:36:6e: 31:99:85:f5:36:13:d4:52:b6:32:f7:74:d8:8b:c8: 2d:8a:b2:8b:62:b6:b9:fb:33:38:aa:72:42:14:6f: 61:5d:3b:4b:80:5d:cb:4a:1d:2f:57:4c:fa:e5:a9: 81:b0:c4:2a:15:a6:66:97:4c:18:aa:e0:d0:bd:a7: fc:08:bf:87:a4:b9:03:39:c1:ef:97:e1:b6:1b:ca: 79:bc:a9:5b:38:de:68:7d:d0:31:be:7b:e4:05:97: e7:90:ab:88:d4:a7:9b:e7:43:ce:28:da:3a:3d:f1: c4:83:cb:65:ae:8d:55:c0:45:48:fa:9e:91:ac:8c: ee:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:D6:B1:F1:66:AF:E4:1D:75:8E:2F:8A:66:CF:23:37:20:06:79:0A X509v3 Authority Key Identifier: keyid:3E:66:62:8C:03:CA:B8:C6:D6:FC:DE:DB:E0:70:05:57:A3:5B:02:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0/3E66628C03CAB8C6D6FCDEDBE0700557A35B0251.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E66628C03CAB8C6D6FCDEDBE0700557A35B0251.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0/3132302e32392e3232372e302f32342d3234203d3e203338373634.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 120.29.227.0/24 Signature Algorithm: sha256WithRSAEncryption 56:c1:b2:75:97:be:7c:48:77:c1:2c:da:de:5f:24:e5:8b:02: e6:62:32:4b:ae:4a:92:8e:f5:bf:a8:84:fd:f9:cd:73:4d:c2: 3a:0f:9f:5c:44:7a:77:9e:16:da:a4:8f:82:e9:21:ed:b1:de: 6c:24:68:4c:a5:33:40:bf:c8:6a:1b:81:8e:15:74:94:a2:cf: ce:9a:d8:5f:2b:17:e5:ea:cb:b9:0e:e3:50:8a:17:ac:fa:17: 53:f9:d0:8c:c2:47:60:a9:d5:1b:1a:dc:a9:a5:4c:a2:5a:b3: e2:53:21:4c:77:fb:69:ce:64:b5:04:01:ba:a2:ce:4b:49:e6: 7b:96:eb:af:d0:ef:7a:b4:00:6b:04:53:76:bc:98:af:33:52: 37:5e:05:f4:18:b4:e7:85:5c:78:d9:8b:6c:05:17:41:00:99: 44:01:cc:38:85:57:0e:78:7b:29:4b:6a:9a:86:a8:a8:5a:d2: d8:8b:6f:7b:48:32:da:a1:4d:ce:3b:27:cd:94:e0:0a:19:aa: 78:4e:57:b6:ca:ea:97:dc:6c:ec:ca:12:af:ec:ab:34:91:63: 50:8b:ce:53:ff:53:37:f6:d7:88:7b:7e:31:29:9b:65:c2:92: 34:43:11:96:fe:f9:7b:37:2e:37:ad:90:2d:a7:8f:2b:8a:24: a9:b8:86:70 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUS2fSPiw3qwY52D65G5G8LDNj6fQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0U2NjYyOEMwM0NBQjhDNkQ2RkNERURCRTA3MDA1NTdB MzVCMDI1MTAeFw0yNjAxMjExMTU1MDFaFw0yNzAxMjAxMjAwMDFaMDMxMTAvBgNV BAMTKDdGRDZCMUYxNjZBRkU0MUQ3NThFMkY4QTY2Q0YyMzM3MjAwNjc5MEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCh1OfTu49z58Zwudk0Mc/EQAdn wYYDD7WHfEu1CafQrQCu2JNuzCbDEABtWGeMsuUqU6SAj30SN76i8Aj7vHZ/pAby 9Auss8otlI6/huDg6DuDm8I2O/hhfIcAfs9MjZVs4vyxvLfdNuStA3oJVZ16UAfv q0qCPGz5dP7LsM0wl4y6shI2bjGZhfU2E9RStjL3dNiLyC2Ksotitrn7MziqckIU b2FdO0uAXctKHS9XTPrlqYGwxCoVpmaXTBiq4NC9p/wIv4ekuQM5we+X4bYbynm8 qVs43mh90DG+e+QFl+eQq4jUp5vnQ84o2jo98cSDy2WujVXARUj6npGsjO4zAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUf9ax8Wav5B11ji+KZs8jNyAGeQowHwYDVR0j BBgwFoAUPmZijAPKuMbW/N7b4HAFV6NbAlEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MjFjOWNhZC1jM2I5LTQ1YTAtYmViNi1iY2U0OGUyYjIyNzIvMC8zRTY2NjI4QzAz Q0FCOEM2RDZGQ0RFREJFMDcwMDU1N0EzNUIwMjUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0U2NjYyOEMwM0NBQjhDNkQ2RkNERURCRTA3MDA1NTdBMzVC MDI1MS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzIyMWM5Y2FkLWMzYjktNDVhMC1i ZWI2LWJjZTQ4ZTJiMjI3Mi8wLzMxMzIzMDJlMzIzOTJlMzIzMjM3MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzMzODM3MzYzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHgd4zANBgkqhkiG 9w0BAQsFAAOCAQEAVsGydZe+fEh3wSza3l8k5YsC5mIyS65Kko71v6iE/fnNc03C Og+fXER6d54W2qSPgukh7bHebCRoTKUzQL/IahuBjhV0lKLPzprYXysX5erLuQ7j UIoXrPoXU/nQjMJHYKnVGxrcqaVMolqz4lMhTHf7ac5ktQQBuqLOS0nme5brr9Dv erQAawRTdryYrzNSN14F9Bi054VceNmLbAUXQQCZRAHMOIVXDnh7KUtqmoaoqFrS 2Itve0gy2qFNzjsnzZTgChmqeE5Xtsrql9xs7MoSr+yrNJFjUIvOU/9TN/bXiHt+ MSmbZcKSNEMRlv75ezcuN62QLaePK4okqbiGcA== -----END CERTIFICATE-----Generated at Mon Mar 2 17:10:45 2026 by rpki-client