$ rpki-client -vvf repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3131392e3235322e3136392e302f32342d3234203d3e2039333431.roa File: 3131392e3235322e3136392e302f32342d3234203d3e2039333431.roa (raw, json) Hash identifier: XgfkdPL9sbPPw0r/3F4nTt+ez3xDL8KRpPuk2dz9L5E= Subject key identifier: B8:21:0C:51:5D:37:56:EC:05:5E:6B:33:11:EE:AA:34:97:35:43:37 Certificate issuer: /CN=61566F205F7037962069571320603B274357CC6D Certificate serial: 1C4DD5EC9F885234167A1FD8B6174B689C35C44D Authority key identifier: 61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3131392e3235322e3136392e302f32342d3234203d3e2039333431.roa Signing time: Sun 22 Feb 2026 05:00:02 +0000 ROA not before: Sun 22 Feb 2026 04:55:02 +0000 ROA not after: Sun 21 Feb 2027 05:00:02 +0000 asID: 9341 IP address blocks: 119.252.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 02:10:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:4d:d5:ec:9f:88:52:34:16:7a:1f:d8:b6:17:4b:68:9c:35:c4:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61566F205F7037962069571320603B274357CC6D Validity Not Before: Feb 22 04:55:02 2026 GMT Not After : Feb 21 05:00:02 2027 GMT Subject: CN=B8210C515D3756EC055E6B3311EEAA3497354337 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:a9:89:fe:95:a6:1f:1a:2a:5f:1c:e5:25:06: f3:e9:5d:eb:30:bd:79:e0:83:b0:b0:86:96:16:f7: 87:26:c6:f5:5c:e6:23:29:9c:08:cb:22:eb:2c:c0: 88:df:90:38:44:9e:a8:5f:96:b5:59:3d:ba:75:c9: fc:c5:ef:6f:39:8c:e5:06:f8:ad:a9:8b:1c:8a:2f: 07:70:94:32:04:c1:5e:4c:ce:c1:35:c7:06:d4:ed: 62:8b:5f:ed:99:b4:6b:15:ad:a7:a4:cb:f5:ad:5f: fb:79:29:c7:16:1b:f8:03:36:d7:d5:dd:9d:6c:4a: df:9f:08:29:c7:f2:8c:ac:89:50:95:c3:5e:87:23: 34:d4:3e:04:62:c9:3c:db:17:aa:50:cc:8d:43:18: 6f:28:51:4a:9f:88:52:d7:20:e6:15:93:97:30:7e: 87:f2:d9:01:cf:6f:16:b3:0a:9f:7e:ba:79:f0:76: 5a:bd:9b:51:f8:ba:4d:70:92:08:e6:2a:7f:79:0f: 9b:d6:c1:c7:34:80:6d:4a:b4:22:82:18:7a:3d:0a: 26:67:83:96:1b:bf:92:7a:de:fc:ca:57:75:55:93: 21:e9:bf:07:80:b6:bc:b9:1d:ef:fe:34:c8:82:b3: cb:48:41:0e:cb:17:89:44:48:5c:8c:6e:77:77:e9: dd:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:21:0C:51:5D:37:56:EC:05:5E:6B:33:11:EE:AA:34:97:35:43:37 X509v3 Authority Key Identifier: keyid:61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3131392e3235322e3136392e302f32342d3234203d3e2039333431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 119.252.169.0/24 Signature Algorithm: sha256WithRSAEncryption 0d:eb:d3:35:2d:17:f2:ea:9f:26:7f:ca:11:7f:cc:7c:b4:09: 72:64:c1:97:42:1e:03:d3:b9:dd:d5:6e:c6:6b:5a:21:bc:af: 3d:8e:57:3a:99:02:d1:21:4e:d5:0e:00:b6:55:a9:b6:43:8f: 71:ca:55:84:48:6e:64:f8:23:7a:89:d9:c2:2a:5e:b7:94:7c: 8c:7a:42:88:e4:c0:82:78:17:0f:27:8e:57:15:29:24:73:78: 72:4a:a6:f4:5d:41:96:e9:36:9c:58:53:5b:fe:23:71:48:61: 19:d3:08:df:7e:d5:70:84:16:03:b7:5d:20:eb:96:0b:d5:35: e4:7c:d8:62:a6:5c:96:e4:33:e7:e3:16:cb:3d:b8:12:eb:21: a6:84:34:04:32:62:39:c5:8c:f2:34:de:73:8a:c2:6e:32:78: d2:fd:bf:e5:46:85:86:f3:f5:3c:3f:ec:c3:b0:df:1e:07:d9: 7f:69:ef:56:64:07:41:7d:8b:82:59:ae:7f:a2:84:0d:c9:f0: c6:e5:62:93:a9:3e:62:a4:aa:41:da:82:ac:c1:27:bb:13:2d: b8:d3:9f:7f:d4:42:e8:05:86:8c:b1:65:81:5d:33:ca:02:08: ce:f6:2f:e0:3e:fd:a0:04:e1:8c:3d:f6:7c:10:a0:cb:dd:c3: ce:51:81:48 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUHE3V7J+IUjQWeh/YthdLaJw1xE0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjE1NjZGMjA1RjcwMzc5NjIwNjk1NzEzMjA2MDNCMjc0 MzU3Q0M2RDAeFw0yNjAyMjIwNDU1MDJaFw0yNzAyMjEwNTAwMDJaMDMxMTAvBgNV BAMTKEI4MjEwQzUxNUQzNzU2RUMwNTVFNkIzMzExRUVBQTM0OTczNTQzMzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfqYn+laYfGipfHOUlBvPpXesw vXngg7CwhpYW94cmxvVc5iMpnAjLIusswIjfkDhEnqhflrVZPbp1yfzF7285jOUG +K2pixyKLwdwlDIEwV5MzsE1xwbU7WKLX+2ZtGsVraeky/WtX/t5KccWG/gDNtfV 3Z1sSt+fCCnH8oysiVCVw16HIzTUPgRiyTzbF6pQzI1DGG8oUUqfiFLXIOYVk5cw fofy2QHPbxazCp9+unnwdlq9m1H4uk1wkgjmKn95D5vWwcc0gG1KtCKCGHo9CiZn g5Ybv5J63vzKV3VVkyHpvweAtry5He/+NMiCs8tIQQ7LF4lESFyMbnd36d2ZAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUuCEMUV03VuwFXmszEe6qNJc1QzcwHwYDVR0j BBgwFoAUYVZvIF9wN5YgaVcTIGA7J0NXzG0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 M2JkY2JhZS0yZTlkLTRmM2YtOGFiOS0zNDI0ZTQ0ODQ4NGUvMC82MTU2NkYyMDVG NzAzNzk2MjA2OTU3MTMyMDYwM0IyNzQzNTdDQzZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjE1NjZGMjA1RjcwMzc5NjIwNjk1NzEzMjA2MDNCMjc0MzU3 Q0M2RC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzczYmRjYmFlLTJlOWQtNGYzZi04 YWI5LTM0MjRlNDQ4NDg0ZS8wLzMxMzEzOTJlMzIzNTMyMmUzMTM2MzkyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzOTMzMzQzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHf8qTANBgkqhkiG 9w0BAQsFAAOCAQEADevTNS0X8uqfJn/KEX/MfLQJcmTBl0IeA9O53dVuxmtaIbyv PY5XOpkC0SFO1Q4AtlWptkOPccpVhEhuZPgjeonZwipet5R8jHpCiOTAgngXDyeO VxUpJHN4ckqm9F1Bluk2nFhTW/4jcUhhGdMI337VcIQWA7ddIOuWC9U15HzYYqZc luQz5+MWyz24EushpoQ0BDJiOcWM8jTec4rCbjJ40v2/5UaFhvP1PD/sw7DfHgfZ f2nvVmQHQX2Lglmuf6KEDcnwxuVik6k+YqSqQdqCrMEnuxMtuNOff9RC6AWGjLFl gV0zygIIzvYv4D79oAThjD32fBCgy93DzlGBSA== -----END CERTIFICATE-----Generated at Mon Mar 2 18:26:54 2026 by rpki-client