$ rpki-client -vvf repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/3132342e3130392e32322e302f32342d3234203d3e20313431313037.roa File: 3132342e3130392e32322e302f32342d3234203d3e20313431313037.roa (raw, json) Hash identifier: B91fipTOFpAzkFwpO49IAHAPfA5wpoTEbowTI/TzKsk= Subject key identifier: 15:58:93:EE:9C:14:A7:F2:7D:D6:B1:2F:BE:47:0B:E4:B3:6E:1C:AC Certificate issuer: /CN=228E752BBFB8C16B3B46F3D388ECED50CF9A6473 Certificate serial: 6DAEB195373781009242A91CD3D12FDAADB6A40E Authority key identifier: 22:8E:75:2B:BF:B8:C1:6B:3B:46:F3:D3:88:EC:ED:50:CF:9A:64:73 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.cer Subject info access: rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/3132342e3130392e32322e302f32342d3234203d3e20313431313037.roa Signing time: Thu 19 Feb 2026 12:23:23 +0000 ROA not before: Thu 19 Feb 2026 12:18:23 +0000 ROA not after: Thu 18 Feb 2027 12:23:23 +0000 asID: 141107 IP address blocks: 124.109.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.crl rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:ae:b1:95:37:37:81:00:92:42:a9:1c:d3:d1:2f:da:ad:b6:a4:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=228E752BBFB8C16B3B46F3D388ECED50CF9A6473 Validity Not Before: Feb 19 12:18:23 2026 GMT Not After : Feb 18 12:23:23 2027 GMT Subject: CN=155893EE9C14A7F27DD6B12FBE470BE4B36E1CAC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:a2:8a:87:59:2d:a1:f5:ee:1b:ad:09:e6:4e: 1c:18:5b:6e:57:c9:d3:86:fa:51:00:8b:a5:ea:87: 6a:67:e5:02:10:a1:1f:3f:23:8b:3a:84:c6:47:f9: 92:54:94:48:5e:bc:ea:a2:5f:fe:20:28:be:1f:60: 11:45:69:f6:30:4f:23:87:b9:74:60:f7:cb:38:dd: 99:a5:d9:a3:39:70:30:2f:da:a8:3e:e0:31:01:70: c9:dc:6f:c8:f9:57:76:44:2c:5b:7e:8e:2c:3f:98: 36:d1:b9:7a:1a:c8:7f:e0:d8:b9:2b:c1:bf:63:33: b0:98:f8:a1:66:c1:75:ae:d0:d6:05:5c:40:97:b9: de:f7:92:2a:86:cd:48:b3:df:a4:4a:12:88:fa:fa: a6:df:c9:31:9c:44:ed:4f:1a:9f:49:d1:da:93:01: 47:d0:d2:71:ea:f3:77:62:12:d4:9f:5d:71:bd:cb: 44:56:d8:23:e7:aa:87:6c:f0:3f:fb:b3:72:6e:23: a9:17:e4:c9:7b:46:3d:df:71:7c:0e:10:63:ed:79: be:bb:a4:ae:65:46:b0:3d:37:c7:07:3e:7d:39:26: 0d:c6:c9:e4:6d:66:eb:8e:c9:c4:58:b1:86:fc:14: 2d:c9:26:66:51:b2:6e:89:e5:a1:cc:0f:17:03:fe: f1:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:58:93:EE:9C:14:A7:F2:7D:D6:B1:2F:BE:47:0B:E4:B3:6E:1C:AC X509v3 Authority Key Identifier: keyid:22:8E:75:2B:BF:B8:C1:6B:3B:46:F3:D3:88:EC:ED:50:CF:9A:64:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/3132342e3130392e32322e302f32342d3234203d3e20313431313037.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 124.109.22.0/24 Signature Algorithm: sha256WithRSAEncryption 44:01:f9:5d:6e:8a:cd:c7:04:b4:e0:92:d2:eb:b4:73:fc:32: e5:6b:e7:31:a7:d0:0b:7c:4b:41:d3:ae:31:43:e5:12:d2:d8: 01:7f:5d:e6:4b:58:69:08:05:20:eb:96:ce:79:20:a7:47:b3: 07:be:90:b9:7b:92:b5:d3:a8:3e:20:4f:21:df:b7:cd:4d:0e: ce:02:e1:8a:02:85:da:26:16:18:18:ac:8f:92:5a:69:82:24: bd:85:13:7b:64:a0:62:7c:2b:a4:0e:70:bd:17:be:1a:33:01: 4c:9e:3f:6b:0e:62:4d:a4:f0:8c:5c:c5:c4:f8:27:b6:10:65: 57:ea:70:ef:cf:51:45:29:6b:eb:48:99:fe:09:2f:68:1b:94: a1:41:01:f3:f2:08:01:1a:ba:49:c5:7f:75:30:e6:e8:08:b4: df:55:0b:cf:65:06:82:26:51:16:46:f8:11:cb:9b:2e:35:fc: df:67:b7:08:eb:90:5c:f0:1b:bb:6d:6f:a9:67:d8:09:1e:14: 13:be:c1:34:2e:9d:04:0b:99:dc:d0:5d:d8:63:e3:92:1a:84: 5e:e3:3d:45:54:35:b3:f3:1d:2b:17:01:c4:ab:ce:45:29:4b: 53:c9:2d:40:31:c2:eb:78:6a:63:aa:50:99:f4:11:63:56:32: ec:6a:64:ed -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUba6xlTc3gQCSQqkc09Ev2q22pA4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjI4RTc1MkJCRkI4QzE2QjNCNDZGM0QzODhFQ0VENTBD RjlBNjQ3MzAeFw0yNjAyMTkxMjE4MjNaFw0yNzAyMTgxMjIzMjNaMDMxMTAvBgNV BAMTKDE1NTg5M0VFOUMxNEE3RjI3REQ2QjEyRkJFNDcwQkU0QjM2RTFDQUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeooqHWS2h9e4brQnmThwYW25X ydOG+lEAi6Xqh2pn5QIQoR8/I4s6hMZH+ZJUlEhevOqiX/4gKL4fYBFFafYwTyOH uXRg98s43Zml2aM5cDAv2qg+4DEBcMncb8j5V3ZELFt+jiw/mDbRuXoayH/g2Lkr wb9jM7CY+KFmwXWu0NYFXECXud73kiqGzUiz36RKEoj6+qbfyTGcRO1PGp9J0dqT AUfQ0nHq83diEtSfXXG9y0RW2CPnqods8D/7s3JuI6kX5Ml7Rj3fcXwOEGPteb67 pK5lRrA9N8cHPn05Jg3GyeRtZuuOycRYsYb8FC3JJmZRsm6J5aHMDxcD/vGlAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUFViT7pwUp/J91rEvvkcL5LNuHKwwHwYDVR0j BBgwFoAUIo51K7+4wWs7RvPTiOztUM+aZHMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MTdlZmQyYS0wMmFiLTQyMDItOTcwZi1mNjk5ZGZmOTdkZTUvMC8yMjhFNzUyQkJG QjhDMTZCM0I0NkYzRDM4OEVDRUQ1MENGOUE2NDczLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjI4RTc1MkJCRkI4QzE2QjNCNDZGM0QzODhFQ0VENTBDRjlB NjQ3My5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzMxN2VmZDJhLTAyYWItNDIwMi05 NzBmLWY2OTlkZmY5N2RlNS8wLzMxMzIzNDJlMzEzMDM5MmUzMjMyMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNDMxMzEzMDM3LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAfG0WMA0GCSqG SIb3DQEBCwUAA4IBAQBEAfldborNxwS04JLS67Rz/DLla+cxp9ALfEtB064xQ+US 0tgBf13mS1hpCAUg65bOeSCnR7MHvpC5e5K106g+IE8h37fNTQ7OAuGKAoXaJhYY GKyPklppgiS9hRN7ZKBifCukDnC9F74aMwFMnj9rDmJNpPCMXMXE+Ce2EGVX6nDv z1FFKWvrSJn+CS9oG5ShQQHz8ggBGrpJxX91MOboCLTfVQvPZQaCJlEWRvgRy5su NfzfZ7cI65Bc8Bu7bW+pZ9gJHhQTvsE0Lp0EC5nc0F3YY+OSGoRe4z1FVDWz8x0r FwHEq85FKUtTyS1AMcLreGpjqlCZ9BFjVjLsamTt -----END CERTIFICATE-----Generated at Mon Mar 2 14:44:57 2026 by rpki-client