$ rpki-client -vvf repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3131392e3235322e3137342e302f32342d3234203d3e2039333431.roa File: 3131392e3235322e3137342e302f32342d3234203d3e2039333431.roa (raw, json) Hash identifier: r5ScbQNwdSd2scLiTFhUh538dNBOSESaSy/A5kd8srM= Subject key identifier: 08:C9:EE:85:47:B7:AB:67:1E:64:72:7C:8D:7C:D7:6E:B1:FF:EF:40 Certificate issuer: /CN=61566F205F7037962069571320603B274357CC6D Certificate serial: 748418C3141A2DD49AC52BC1FB08CF939A6E599C Authority key identifier: 61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3131392e3235322e3137342e302f32342d3234203d3e2039333431.roa Signing time: Sun 22 Feb 2026 07:00:02 +0000 ROA not before: Sun 22 Feb 2026 06:55:02 +0000 ROA not after: Sun 21 Feb 2027 07:00:02 +0000 asID: 9341 IP address blocks: 119.252.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 02:10:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:84:18:c3:14:1a:2d:d4:9a:c5:2b:c1:fb:08:cf:93:9a:6e:59:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61566F205F7037962069571320603B274357CC6D Validity Not Before: Feb 22 06:55:02 2026 GMT Not After : Feb 21 07:00:02 2027 GMT Subject: CN=08C9EE8547B7AB671E64727C8D7CD76EB1FFEF40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:94:4e:ac:bc:32:88:c8:04:f9:55:36:ec:f3: 5b:19:9e:fc:14:6b:1e:b0:57:03:ef:ad:af:b6:26: 50:96:9c:fb:72:0c:60:7c:b1:38:f1:ec:1d:23:24: 16:18:6c:06:f2:81:7b:a9:7f:2e:4e:9a:81:22:d0: 8f:19:d2:df:ec:ee:8d:9b:52:a0:af:2f:c8:06:7b: 92:6b:4e:ec:48:4a:9f:5d:6e:a1:ab:f4:68:b3:51: 0b:42:b3:6d:47:27:22:1e:38:67:17:51:1b:52:72: 0a:8f:8a:71:d4:29:84:be:37:09:e7:d7:1a:5c:3e: 3c:51:83:f6:a1:84:00:49:c4:08:6d:73:9d:29:ff: cd:df:6b:bc:62:b0:c7:54:9d:30:98:8e:66:c3:1a: 4f:f0:07:22:d3:fe:01:90:66:c5:49:cb:b5:4b:87: bd:66:3b:b8:73:f9:78:d1:17:c2:47:75:3d:fd:19: 34:b4:d4:24:76:c4:18:45:aa:20:8b:c9:31:0b:8e: 4b:85:23:31:7b:91:9a:fe:b9:f3:c4:6a:c5:89:71: 6a:e1:67:5f:b8:1c:bf:52:64:95:9c:26:5f:d6:28: 2a:ff:fc:80:0b:a9:4e:1b:d7:b6:aa:59:7d:88:a6: e8:83:ad:bd:32:cb:75:9d:f9:01:e1:9c:6e:66:c5: 1f:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:C9:EE:85:47:B7:AB:67:1E:64:72:7C:8D:7C:D7:6E:B1:FF:EF:40 X509v3 Authority Key Identifier: keyid:61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3131392e3235322e3137342e302f32342d3234203d3e2039333431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 119.252.174.0/24 Signature Algorithm: sha256WithRSAEncryption 8d:5a:5d:08:53:e1:1a:5f:ea:a3:43:34:4f:7c:db:d6:d5:7f: 0a:2b:b3:38:1f:22:57:e0:8b:ee:cf:ac:3e:0c:76:f8:bc:80: 3b:8c:f5:3f:7a:bc:ad:da:c3:bc:e5:df:45:6c:c8:c3:b5:47: 3c:5b:a8:d5:91:1c:d1:9b:38:2c:78:dd:64:bf:ef:58:73:5c: c9:18:d0:cd:7f:fd:ed:46:b9:88:c0:da:9f:54:13:57:05:28: 16:6b:4a:11:ba:b0:6c:e0:5e:79:19:83:85:29:ee:90:7c:45: d7:80:4c:51:cf:9b:90:fa:a7:ef:2e:51:97:77:84:b4:b3:16: 22:56:cb:f3:a2:24:f7:ec:ce:50:63:0a:f7:e4:eb:60:2f:8b: 0e:3a:88:f8:fa:93:da:5f:4a:9f:01:e9:8d:ed:f5:ef:c7:11: 1a:84:c4:ab:ab:9a:9f:c7:e3:17:a0:ec:5a:23:22:bc:ac:96: bf:74:36:bf:71:e5:ba:bc:e2:57:8f:bc:2f:fa:46:89:89:6c: 01:f1:e5:c3:a6:3e:23:29:70:e2:31:29:15:da:ea:11:e1:86: 71:83:30:1d:4e:a7:b1:a1:97:36:bd:8a:44:54:4a:18:66:28: 24:5b:cc:eb:a7:0b:f5:a3:2f:d3:fc:e8:4c:24:ed:b5:bb:9f: 37:bd:50:a1 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUdIQYwxQaLdSaxSvB+wjPk5puWZwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjE1NjZGMjA1RjcwMzc5NjIwNjk1NzEzMjA2MDNCMjc0 MzU3Q0M2RDAeFw0yNjAyMjIwNjU1MDJaFw0yNzAyMjEwNzAwMDJaMDMxMTAvBgNV BAMTKDA4QzlFRTg1NDdCN0FCNjcxRTY0NzI3QzhEN0NENzZFQjFGRkVGNDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNlE6svDKIyAT5VTbs81sZnvwU ax6wVwPvra+2JlCWnPtyDGB8sTjx7B0jJBYYbAbygXupfy5OmoEi0I8Z0t/s7o2b UqCvL8gGe5JrTuxISp9dbqGr9GizUQtCs21HJyIeOGcXURtScgqPinHUKYS+Nwnn 1xpcPjxRg/ahhABJxAhtc50p/83fa7xisMdUnTCYjmbDGk/wByLT/gGQZsVJy7VL h71mO7hz+XjRF8JHdT39GTS01CR2xBhFqiCLyTELjkuFIzF7kZr+ufPEasWJcWrh Z1+4HL9SZJWcJl/WKCr//IALqU4b17aqWX2IpuiDrb0yy3Wd+QHhnG5mxR+/AgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUCMnuhUe3q2ceZHJ8jXzXbrH/70AwHwYDVR0j BBgwFoAUYVZvIF9wN5YgaVcTIGA7J0NXzG0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 M2JkY2JhZS0yZTlkLTRmM2YtOGFiOS0zNDI0ZTQ0ODQ4NGUvMC82MTU2NkYyMDVG NzAzNzk2MjA2OTU3MTMyMDYwM0IyNzQzNTdDQzZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjE1NjZGMjA1RjcwMzc5NjIwNjk1NzEzMjA2MDNCMjc0MzU3 Q0M2RC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzczYmRjYmFlLTJlOWQtNGYzZi04 YWI5LTM0MjRlNDQ4NDg0ZS8wLzMxMzEzOTJlMzIzNTMyMmUzMTM3MzQyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzOTMzMzQzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHf8rjANBgkqhkiG 9w0BAQsFAAOCAQEAjVpdCFPhGl/qo0M0T3zb1tV/CiuzOB8iV+CL7s+sPgx2+LyA O4z1P3q8rdrDvOXfRWzIw7VHPFuo1ZEc0Zs4LHjdZL/vWHNcyRjQzX/97Ua5iMDa n1QTVwUoFmtKEbqwbOBeeRmDhSnukHxF14BMUc+bkPqn7y5Rl3eEtLMWIlbL86Ik 9+zOUGMK9+TrYC+LDjqI+PqT2l9KnwHpje3178cRGoTEq6uan8fjF6DsWiMivKyW v3Q2v3HlurziV4+8L/pGiYlsAfHlw6Y+Iylw4jEpFdrqEeGGcYMwHU6nsaGXNr2K RFRKGGYoJFvM66cL9aMv0/zoTCTttbufN71QoQ== -----END CERTIFICATE-----Generated at Mon Mar 2 11:23:23 2026 by rpki-client