$ rpki-client -vvf repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3131392e3235322e3136332e302f32342d3234203d3e2039333431.roa File: 3131392e3235322e3136332e302f32342d3234203d3e2039333431.roa (raw, json) Hash identifier: k3yTHKlP40jbOhM0RoVNeOOKFG39jnA94yNwD1a5V6o= Subject key identifier: 90:6E:D1:4B:41:6A:7C:DA:D9:96:F5:50:45:C6:11:A8:6F:AB:16:BC Certificate issuer: /CN=61566F205F7037962069571320603B274357CC6D Certificate serial: 4630DEF97BD0EACC72F1948BCF1F2A29EDABDF68 Authority key identifier: 61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3131392e3235322e3136332e302f32342d3234203d3e2039333431.roa Signing time: Sun 22 Feb 2026 07:00:02 +0000 ROA not before: Sun 22 Feb 2026 06:55:02 +0000 ROA not after: Sun 21 Feb 2027 07:00:02 +0000 asID: 9341 IP address blocks: 119.252.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 02:10:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:30:de:f9:7b:d0:ea:cc:72:f1:94:8b:cf:1f:2a:29:ed:ab:df:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61566F205F7037962069571320603B274357CC6D Validity Not Before: Feb 22 06:55:02 2026 GMT Not After : Feb 21 07:00:02 2027 GMT Subject: CN=906ED14B416A7CDAD996F55045C611A86FAB16BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:3c:1d:e2:a1:7d:d8:ff:44:b8:48:67:d7:e2: 23:26:a4:c5:24:04:75:49:4f:78:b9:33:82:c1:0a: 74:ef:b2:e4:b1:7a:f1:6f:5b:e6:13:5a:c5:0f:36: b9:7f:25:77:a4:cb:ce:bb:2d:af:41:7f:dd:1b:51: 2c:03:e9:dc:ef:a0:7e:40:28:79:56:9d:e4:89:8d: 7f:11:c0:04:7f:b8:b7:8b:be:8c:ab:6c:38:b0:61: 17:8a:d1:04:c0:21:46:63:0c:c0:0b:69:97:a3:db: f1:5b:ed:b5:83:99:8e:6b:1a:3c:8e:a5:2e:c1:9e: 52:ad:39:ef:9e:d5:d3:dd:4f:72:93:ed:2a:4a:a0: 88:7c:6a:b5:11:b8:c3:10:8e:05:d8:95:96:02:06: 81:0b:bc:74:c9:db:cb:0b:13:73:e1:2a:4b:a1:8a: 74:57:2e:5d:82:27:be:01:33:f9:b5:56:30:d5:cb: 11:a7:af:27:4f:38:82:2c:e9:ed:91:ef:b9:0e:d0: 70:61:ac:6b:fe:4e:30:16:7d:cc:72:79:0b:4d:02: de:54:a0:01:51:40:e7:c7:fc:cc:72:c8:81:a4:8a: dd:35:40:bc:13:4c:d4:e9:bf:d4:86:21:99:f1:95: 44:ab:ae:f7:e6:64:64:24:2d:d5:e5:cc:84:e6:11: c9:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:6E:D1:4B:41:6A:7C:DA:D9:96:F5:50:45:C6:11:A8:6F:AB:16:BC X509v3 Authority Key Identifier: keyid:61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3131392e3235322e3136332e302f32342d3234203d3e2039333431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 119.252.163.0/24 Signature Algorithm: sha256WithRSAEncryption a9:88:cb:31:70:51:a4:68:5f:a3:48:81:47:1b:7c:a9:1b:78: c0:88:2b:26:ee:53:96:6e:5c:e7:78:d7:54:24:bb:2a:0a:71: b3:59:d9:33:d6:f0:ce:91:95:55:af:33:0b:2a:40:ee:0d:5e: 63:bb:d4:e5:75:9f:17:9d:ec:99:4a:f2:89:e6:03:af:47:d9: a1:d2:c3:40:45:ad:ba:bb:ec:f9:fe:14:54:02:03:6a:fe:f9: 37:50:45:29:a4:49:73:e9:cd:80:74:41:04:5e:1c:b3:be:da: 40:07:53:3f:b3:3a:df:ec:15:d7:95:b6:74:bc:55:54:31:52: dd:0d:fa:a1:54:76:47:2e:6a:3c:bf:77:a8:2d:47:92:fa:21: c2:b5:17:da:ae:5d:62:ae:a6:28:87:ea:97:53:bf:50:6e:a4: 3f:5b:a4:4a:0f:90:d7:61:d7:cc:b3:45:8d:0c:92:3f:76:52: 44:fd:23:d6:af:6d:5b:b8:81:2d:ee:b3:63:c0:05:9a:07:38: 5f:d8:17:8e:ee:1e:8d:d2:91:b2:72:63:53:ff:71:33:de:ae: 42:ca:aa:2f:45:2f:3e:9f:ca:4c:3c:c6:dc:54:d3:77:d5:6b: da:c7:bf:ce:8e:cd:0b:a7:09:97:b0:d2:68:be:d5:05:17:55: 78:af:0c:a6 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIURjDe+XvQ6sxy8ZSLzx8qKe2r32gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjE1NjZGMjA1RjcwMzc5NjIwNjk1NzEzMjA2MDNCMjc0 MzU3Q0M2RDAeFw0yNjAyMjIwNjU1MDJaFw0yNzAyMjEwNzAwMDJaMDMxMTAvBgNV BAMTKDkwNkVEMTRCNDE2QTdDREFEOTk2RjU1MDQ1QzYxMUE4NkZBQjE2QkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzPB3ioX3Y/0S4SGfX4iMmpMUk BHVJT3i5M4LBCnTvsuSxevFvW+YTWsUPNrl/JXeky867La9Bf90bUSwD6dzvoH5A KHlWneSJjX8RwAR/uLeLvoyrbDiwYReK0QTAIUZjDMALaZej2/Fb7bWDmY5rGjyO pS7BnlKtOe+e1dPdT3KT7SpKoIh8arURuMMQjgXYlZYCBoELvHTJ28sLE3PhKkuh inRXLl2CJ74BM/m1VjDVyxGnrydPOIIs6e2R77kO0HBhrGv+TjAWfcxyeQtNAt5U oAFRQOfH/MxyyIGkit01QLwTTNTpv9SGIZnxlUSrrvfmZGQkLdXlzITmEckfAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUkG7RS0FqfNrZlvVQRcYRqG+rFrwwHwYDVR0j BBgwFoAUYVZvIF9wN5YgaVcTIGA7J0NXzG0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 M2JkY2JhZS0yZTlkLTRmM2YtOGFiOS0zNDI0ZTQ0ODQ4NGUvMC82MTU2NkYyMDVG NzAzNzk2MjA2OTU3MTMyMDYwM0IyNzQzNTdDQzZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjE1NjZGMjA1RjcwMzc5NjIwNjk1NzEzMjA2MDNCMjc0MzU3 Q0M2RC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzczYmRjYmFlLTJlOWQtNGYzZi04 YWI5LTM0MjRlNDQ4NDg0ZS8wLzMxMzEzOTJlMzIzNTMyMmUzMTM2MzMyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzOTMzMzQzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHf8ozANBgkqhkiG 9w0BAQsFAAOCAQEAqYjLMXBRpGhfo0iBRxt8qRt4wIgrJu5Tlm5c53jXVCS7Kgpx s1nZM9bwzpGVVa8zCypA7g1eY7vU5XWfF53smUryieYDr0fZodLDQEWturvs+f4U VAIDav75N1BFKaRJc+nNgHRBBF4cs77aQAdTP7M63+wV15W2dLxVVDFS3Q36oVR2 Ry5qPL93qC1HkvohwrUX2q5dYq6mKIfql1O/UG6kP1ukSg+Q12HXzLNFjQySP3ZS RP0j1q9tW7iBLe6zY8AFmgc4X9gXju4ejdKRsnJjU/9xM96uQsqqL0UvPp/KTDzG 3FTTd9Vr2se/zo7NC6cJl7DSaL7VBRdVeK8Mpg== -----END CERTIFICATE-----Generated at Mon Mar 2 14:09:03 2026 by rpki-client