$ rpki-client -vvf repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/3132342e3135382e3138342e302f32312d3234203d3e203535363835.roa File: 3132342e3135382e3138342e302f32312d3234203d3e203535363835.roa (raw, json) Hash identifier: A1lD3CJk7P8ZOAlw+f6SraTF1oCZKgCxVMphCgK0TBA= Subject key identifier: 54:71:5E:8A:EC:25:D5:0D:74:45:F1:8B:A5:E0:91:FF:29:52:BB:8B Certificate issuer: /CN=B6F0131510E62F73E5F29246F9C8F691811A704D Certificate serial: 752801C98AB1CC5FA44E6CCC9A396F39D67C3513 Authority key identifier: B6:F0:13:15:10:E6:2F:73:E5:F2:92:46:F9:C8:F6:91:81:1A:70:4D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F0131510E62F73E5F29246F9C8F691811A704D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/3132342e3135382e3138342e302f32312d3234203d3e203535363835.roa Signing time: Sun 05 Apr 2026 12:00:03 +0000 ROA not before: Sun 05 Apr 2026 11:55:03 +0000 ROA not after: Sun 04 Apr 2027 12:00:03 +0000 asID: 55685 IP address blocks: 124.158.184.0/21 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/B6F0131510E62F73E5F29246F9C8F691811A704D.crl rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/B6F0131510E62F73E5F29246F9C8F691811A704D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F0131510E62F73E5F29246F9C8F691811A704D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 17:56:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:28:01:c9:8a:b1:cc:5f:a4:4e:6c:cc:9a:39:6f:39:d6:7c:35:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B6F0131510E62F73E5F29246F9C8F691811A704D Validity Not Before: Apr 5 11:55:03 2026 GMT Not After : Apr 4 12:00:03 2027 GMT Subject: CN=54715E8AEC25D50D7445F18BA5E091FF2952BB8B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:86:54:c7:3a:63:8f:a0:37:65:92:44:de:d4: 16:a7:c8:70:a4:f5:5e:42:cc:93:60:d9:18:e6:67: 8d:0f:1f:b6:5a:d5:a6:da:df:1e:6f:d7:7e:f3:7f: f4:af:a7:d0:93:8b:23:66:e6:ef:b9:c0:b6:45:2e: 9f:aa:68:39:5d:6f:66:88:8a:fb:e7:62:5f:ff:a6: ef:b6:ce:78:a9:6f:54:8a:f1:50:f1:04:79:59:94: 3c:93:d1:74:4a:98:22:ab:4d:98:13:98:ad:c4:9e: 03:08:87:ef:79:66:28:38:2d:99:b9:3d:f3:01:fb: 7a:f2:d6:1a:ae:b3:a1:82:f2:4f:25:b8:fc:a9:fa: 5c:6f:ea:3b:e7:7b:e9:59:76:61:ed:f2:8b:14:53: db:9b:7d:88:8b:9e:c0:df:13:25:8c:5d:f8:e9:6a: 91:d3:93:ae:6d:1b:f7:a5:6c:e5:99:29:aa:d2:aa: a2:55:6d:d6:fe:7b:fc:47:63:2f:86:31:83:3a:9d: db:24:83:ea:87:fd:aa:6c:d9:96:6a:6e:08:cc:65: 5f:64:cd:79:ac:e6:91:ca:89:23:c3:b8:a3:c1:48: 4c:76:8d:46:e3:c2:8f:d6:7a:58:a5:f4:64:4e:b0: af:d7:a9:74:a0:fa:81:0b:40:f2:94:19:fc:07:46: 33:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:71:5E:8A:EC:25:D5:0D:74:45:F1:8B:A5:E0:91:FF:29:52:BB:8B X509v3 Authority Key Identifier: keyid:B6:F0:13:15:10:E6:2F:73:E5:F2:92:46:F9:C8:F6:91:81:1A:70:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/B6F0131510E62F73E5F29246F9C8F691811A704D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F0131510E62F73E5F29246F9C8F691811A704D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/3132342e3135382e3138342e302f32312d3234203d3e203535363835.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 124.158.184.0/21 Signature Algorithm: sha256WithRSAEncryption 68:7e:a5:6c:bb:2e:a6:31:f8:d3:cf:f3:bd:2d:ac:d6:9f:b7: 0a:25:5f:3b:43:f3:05:94:a4:a0:fd:89:b1:3f:10:08:85:36: 8e:71:73:59:b7:9f:b8:6b:b3:4f:7c:1f:9d:56:4d:13:80:74: de:0a:bd:38:4a:84:d5:f3:7c:40:3f:62:31:bd:32:1d:b4:c2: 87:59:fa:01:9d:e1:cd:53:c6:8d:ee:c9:e8:32:b8:54:7f:f8: 4e:d7:b6:5e:7b:10:86:f2:d7:49:5c:8a:88:47:28:e5:b4:56: 99:b9:6f:28:9a:27:44:92:e3:d6:77:25:fc:06:70:b6:e3:4c: 26:b9:de:4d:c2:3a:2e:07:10:9a:3d:b9:d2:dd:c8:6d:7d:e4: 12:67:49:1f:d0:a4:51:db:9b:34:30:ff:60:17:54:d5:30:87: f9:be:a2:16:16:52:36:83:17:bc:54:ae:74:1d:a9:05:1f:84: c1:1a:1a:ca:45:86:ee:65:29:0f:94:c4:69:6d:f8:78:85:1b: 2f:ce:fc:76:7f:27:96:cc:1d:b1:df:78:0c:03:64:e7:d5:44: ce:e1:d6:a1:cb:f9:d1:d5:52:06:9c:bb:93:48:ef:28:ad:29: d2:f8:03:99:d0:f9:5c:36:3c:a9:c7:47:19:98:05:d2:a9:ff: 83:76:f3:20 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUdSgByYqxzF+kTmzMmjlvOdZ8NRMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjZGMDEzMTUxMEU2MkY3M0U1RjI5MjQ2RjlDOEY2OTE4 MTFBNzA0RDAeFw0yNjA0MDUxMTU1MDNaFw0yNzA0MDQxMjAwMDNaMDMxMTAvBgNV BAMTKDU0NzE1RThBRUMyNUQ1MEQ3NDQ1RjE4QkE1RTA5MUZGMjk1MkJCOEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnhlTHOmOPoDdlkkTe1BanyHCk 9V5CzJNg2RjmZ40PH7Za1aba3x5v137zf/Svp9CTiyNm5u+5wLZFLp+qaDldb2aI ivvnYl//pu+2znipb1SK8VDxBHlZlDyT0XRKmCKrTZgTmK3EngMIh+95Zig4LZm5 PfMB+3ry1hqus6GC8k8luPyp+lxv6jvne+lZdmHt8osUU9ubfYiLnsDfEyWMXfjp apHTk65tG/elbOWZKarSqqJVbdb+e/xHYy+GMYM6ndskg+qH/aps2ZZqbgjMZV9k zXms5pHKiSPDuKPBSEx2jUbjwo/Welil9GROsK/XqXSg+oELQPKUGfwHRjP7AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUVHFeiuwl1Q10RfGLpeCR/ylSu4swHwYDVR0j BBgwFoAUtvATFRDmL3Pl8pJG+cj2kYEacE0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NWQ4ZGFiNC04YmI2LTRlZDAtOGRhYi01YTQwNjE2N2I5OWQvMC9CNkYwMTMxNTEw RTYyRjczRTVGMjkyNDZGOUM4RjY5MTgxMUE3MDRELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjZGMDEzMTUxMEU2MkY3M0U1RjI5MjQ2RjlDOEY2OTE4MTFB NzA0RC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzg1ZDhkYWI0LThiYjYtNGVkMC04 ZGFiLTVhNDA2MTY3Yjk5ZC8wLzMxMzIzNDJlMzEzNTM4MmUzMTM4MzQyZTMwMmYz MjMxMmQzMjM0MjAzZDNlMjAzNTM1MzYzODM1LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDfJ64MA0GCSqG SIb3DQEBCwUAA4IBAQBofqVsuy6mMfjTz/O9LazWn7cKJV87Q/MFlKSg/YmxPxAI hTaOcXNZt5+4a7NPfB+dVk0TgHTeCr04SoTV83xAP2IxvTIdtMKHWfoBneHNU8aN 7snoMrhUf/hO17ZeexCG8tdJXIqIRyjltFaZuW8omidEkuPWdyX8BnC240wmud5N wjouBxCaPbnS3chtfeQSZ0kf0KRR25s0MP9gF1TVMIf5vqIWFlI2gxe8VK50HakF H4TBGhrKRYbuZSkPlMRpbfh4hRsvzvx2fyeWzB2x33gMA2Tn1UTO4dahy/nR1VIG nLuTSO8orSnS+AOZ0PlcNjypx0cZmAXSqf+DdvMg -----END CERTIFICATE-----Generated at Fri Apr 17 15:01:16 2026 by rpki-client