$ rpki-client -vvf repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3131392e3235322e3137302e302f32342d3234203d3e2039333431.roa File: 3131392e3235322e3137302e302f32342d3234203d3e2039333431.roa (raw, json) Hash identifier: HT9ChahkLOsJo+fGbPpbw8AjTI0bC8+N2H0xNUhXuY8= Subject key identifier: B5:6E:79:0E:B6:AC:AF:A0:7B:C1:1F:35:88:0B:DB:79:BA:94:0C:9E Certificate issuer: /CN=61566F205F7037962069571320603B274357CC6D Certificate serial: 7346D0EDC3C6F9BF8FCD84C5474A3E83A575AE48 Authority key identifier: 61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3131392e3235322e3137302e302f32342d3234203d3e2039333431.roa Signing time: Sun 22 Feb 2026 04:00:02 +0000 ROA not before: Sun 22 Feb 2026 03:55:02 +0000 ROA not after: Sun 21 Feb 2027 04:00:02 +0000 asID: 9341 IP address blocks: 119.252.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 02:10:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:46:d0:ed:c3:c6:f9:bf:8f:cd:84:c5:47:4a:3e:83:a5:75:ae:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61566F205F7037962069571320603B274357CC6D Validity Not Before: Feb 22 03:55:02 2026 GMT Not After : Feb 21 04:00:02 2027 GMT Subject: CN=B56E790EB6ACAFA07BC11F35880BDB79BA940C9E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:3b:8f:04:64:4d:3e:38:c9:04:42:cf:63:43: ee:9d:2a:c6:b2:4b:46:dd:be:8d:6a:11:03:fa:87: a7:9f:12:89:b6:fe:79:f9:09:01:fa:ae:01:80:e7: 82:37:cc:dd:03:b7:d5:20:2b:1e:62:a1:2c:a1:99: 82:36:50:cd:1a:35:95:f7:92:14:20:75:0f:fd:63: 67:5e:5c:7e:9e:0b:0c:0e:dc:d6:ed:b6:51:1d:53: ad:28:63:2e:c6:de:fa:b7:76:12:09:73:8f:de:94: b5:87:5d:77:74:8c:0f:17:90:3c:1d:93:49:82:22: e0:8a:3a:ba:e6:f6:f4:3e:1f:a2:53:50:59:93:18: 2b:cc:e3:7e:ca:4d:b2:da:1b:78:ce:12:62:ee:55: 65:a1:b2:8a:a5:be:f5:81:fe:d5:63:ea:c5:84:0d: df:cb:e4:d6:43:fe:31:19:37:04:ca:4b:96:82:7a: 15:9e:3d:39:45:4c:4c:65:b9:20:bf:c0:51:d0:5c: 9b:2d:80:bb:94:10:69:f4:4f:be:ad:a2:f5:1f:e8: d4:90:95:73:c9:7a:bc:c6:6f:33:8c:b6:a7:b9:3f: cb:60:b0:a3:ac:f1:71:b9:71:0b:0d:4b:5f:30:0f: 9d:fd:3e:df:f2:79:80:bb:23:5c:63:d8:ee:f5:c0: db:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:6E:79:0E:B6:AC:AF:A0:7B:C1:1F:35:88:0B:DB:79:BA:94:0C:9E X509v3 Authority Key Identifier: keyid:61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3131392e3235322e3137302e302f32342d3234203d3e2039333431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 119.252.170.0/24 Signature Algorithm: sha256WithRSAEncryption 52:ba:7d:8e:56:57:6b:7d:61:50:69:f1:11:9d:32:df:f9:40: e6:5f:c3:d9:a3:7b:2c:db:b9:ab:c3:e1:83:1a:2a:cf:bb:47: 44:b2:ef:cc:d3:f4:f3:41:47:c3:8f:f2:82:8a:00:a9:20:d6: d1:f0:28:29:ec:aa:3b:06:6c:f5:7c:f0:50:54:df:02:24:96: 0c:fb:52:dd:05:fd:2a:71:05:a8:2c:bb:85:23:46:52:d5:5e: 84:23:bf:10:04:75:5d:6f:55:bb:8f:16:94:96:05:01:14:0c: 3d:aa:c1:7a:c3:fc:41:28:be:24:18:d4:3e:93:24:9a:0a:bb: f5:0d:e8:07:e9:8d:7b:b2:af:d4:61:b8:62:ff:fb:f7:84:f4: 47:b8:fa:3f:8e:34:55:f8:a3:a1:b2:41:7b:a3:33:6c:b6:f2: b8:cb:33:f5:2f:cb:17:ca:96:df:8e:6b:26:c6:bd:81:18:f7: e9:e6:5e:9e:83:49:bf:35:0f:9d:cb:7d:ad:fe:a6:5b:2e:a1: de:76:e9:df:69:b9:ac:fe:fb:df:c9:cc:1d:82:e7:9b:39:60: 84:56:a2:9e:86:05:26:16:30:0c:e2:81:a1:bf:b4:9d:11:44: f8:fe:f6:eb:3e:01:41:21:e2:58:08:b1:af:02:e1:7c:1c:da: 38:7a:17:82 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUc0bQ7cPG+b+PzYTFR0o+g6V1rkgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjE1NjZGMjA1RjcwMzc5NjIwNjk1NzEzMjA2MDNCMjc0 MzU3Q0M2RDAeFw0yNjAyMjIwMzU1MDJaFw0yNzAyMjEwNDAwMDJaMDMxMTAvBgNV BAMTKEI1NkU3OTBFQjZBQ0FGQTA3QkMxMUYzNTg4MEJEQjc5QkE5NDBDOUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZO48EZE0+OMkEQs9jQ+6dKsay S0bdvo1qEQP6h6efEom2/nn5CQH6rgGA54I3zN0Dt9UgKx5ioSyhmYI2UM0aNZX3 khQgdQ/9Y2deXH6eCwwO3NbttlEdU60oYy7G3vq3dhIJc4/elLWHXXd0jA8XkDwd k0mCIuCKOrrm9vQ+H6JTUFmTGCvM437KTbLaG3jOEmLuVWWhsoqlvvWB/tVj6sWE Dd/L5NZD/jEZNwTKS5aCehWePTlFTExluSC/wFHQXJstgLuUEGn0T76tovUf6NSQ lXPJerzGbzOMtqe5P8tgsKOs8XG5cQsNS18wD539Pt/yeYC7I1xj2O71wNvxAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUtW55Drasr6B7wR81iAvbebqUDJ4wHwYDVR0j BBgwFoAUYVZvIF9wN5YgaVcTIGA7J0NXzG0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 M2JkY2JhZS0yZTlkLTRmM2YtOGFiOS0zNDI0ZTQ0ODQ4NGUvMC82MTU2NkYyMDVG NzAzNzk2MjA2OTU3MTMyMDYwM0IyNzQzNTdDQzZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjE1NjZGMjA1RjcwMzc5NjIwNjk1NzEzMjA2MDNCMjc0MzU3 Q0M2RC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzczYmRjYmFlLTJlOWQtNGYzZi04 YWI5LTM0MjRlNDQ4NDg0ZS8wLzMxMzEzOTJlMzIzNTMyMmUzMTM3MzAyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzOTMzMzQzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHf8qjANBgkqhkiG 9w0BAQsFAAOCAQEAUrp9jlZXa31hUGnxEZ0y3/lA5l/D2aN7LNu5q8Phgxoqz7tH RLLvzNP080FHw4/ygooAqSDW0fAoKeyqOwZs9XzwUFTfAiSWDPtS3QX9KnEFqCy7 hSNGUtVehCO/EAR1XW9Vu48WlJYFARQMParBesP8QSi+JBjUPpMkmgq79Q3oB+mN e7Kv1GG4Yv/794T0R7j6P440VfijobJBe6MzbLbyuMsz9S/LF8qW345rJsa9gRj3 6eZenoNJvzUPnct9rf6mWy6h3nbp32m5rP7738nMHYLnmzlghFainoYFJhYwDOKB ob+0nRFE+P726z4BQSHiWAixrwLhfBzaOHoXgg== -----END CERTIFICATE-----Generated at Mon Mar 2 16:44:46 2026 by rpki-client