$ rpki-client -vvf repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3130322e302f32342d3234203d3e203234353235.roa File: 3131342e3139392e3130322e302f32342d3234203d3e203234353235.roa (raw, json) Hash identifier: okgKK0t1jT1ezp+jQdhNwOO3lafTjA3tQqqSYWclSkw= Subject key identifier: 17:86:56:4C:5F:11:00:6D:03:70:EE:E9:64:56:0A:E7:B6:93:29:A2 Certificate issuer: /CN=ADCB9F9DF56E90B39B5344118194104F46A83702 Certificate serial: 73E72F6C0F6F024E52E437C68ED0267322F11163 Authority key identifier: AD:CB:9F:9D:F5:6E:90:B3:9B:53:44:11:81:94:10:4F:46:A8:37:02 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3130322e302f32342d3234203d3e203234353235.roa Signing time: Sat 04 Apr 2026 09:00:01 +0000 ROA not before: Sat 04 Apr 2026 08:55:01 +0000 ROA not after: Sat 03 Apr 2027 09:00:01 +0000 asID: 24525 IP address blocks: 114.199.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.crl rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 11:57:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:e7:2f:6c:0f:6f:02:4e:52:e4:37:c6:8e:d0:26:73:22:f1:11:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ADCB9F9DF56E90B39B5344118194104F46A83702 Validity Not Before: Apr 4 08:55:01 2026 GMT Not After : Apr 3 09:00:01 2027 GMT Subject: CN=1786564C5F11006D0370EEE964560AE7B69329A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:ca:f2:b9:72:39:63:e7:5a:0c:a0:ab:ac:68: ca:cb:01:89:24:78:95:cd:8c:b6:86:e1:ab:32:02: a8:95:ef:8e:9b:d0:11:91:31:27:6f:6a:1f:73:96: b1:aa:fc:f0:a5:47:ae:26:3f:03:2c:4b:de:3b:1a: 14:fa:f0:03:5a:e4:a8:16:b2:60:bb:b1:f3:a9:51: 8b:28:14:a6:fc:16:92:48:f6:47:56:4e:be:96:43: 46:de:8e:2f:e6:2b:41:8d:0b:df:77:bf:45:d2:0f: ec:0e:1d:cb:ab:c9:3e:de:4b:df:ea:82:3c:4d:d5: 03:e2:0b:32:99:52:8f:66:6f:f4:dd:c9:2b:47:09: 57:16:0b:99:16:39:5f:59:2d:6e:b2:ae:27:ad:b9: 67:2c:e0:d3:5a:00:9d:a3:76:d5:f1:2a:f3:92:a7: e9:45:53:85:69:6f:17:69:e0:42:61:52:fb:ce:4b: ff:79:5f:f6:8c:78:e9:40:13:47:21:0c:a4:9c:e4: 92:45:78:7d:5e:1e:68:58:ed:3a:25:cc:ef:bf:b6: 84:b9:f5:3a:4f:e1:bd:de:2a:11:5e:4e:87:9c:ee: 6a:0b:83:bf:1b:c2:98:d6:cb:2d:f1:f5:bb:2e:43: ae:2e:7d:18:99:1c:9e:63:06:80:8c:20:a2:d7:90: ab:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:86:56:4C:5F:11:00:6D:03:70:EE:E9:64:56:0A:E7:B6:93:29:A2 X509v3 Authority Key Identifier: keyid:AD:CB:9F:9D:F5:6E:90:B3:9B:53:44:11:81:94:10:4F:46:A8:37:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3130322e302f32342d3234203d3e203234353235.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 114.199.102.0/24 Signature Algorithm: sha256WithRSAEncryption 6b:45:02:14:52:6b:e2:ad:b3:15:6e:68:9f:2d:af:d4:c6:93: 55:4d:45:09:8b:24:74:c0:99:1f:25:1f:d1:d7:92:66:26:08: 84:c6:b1:78:a7:0e:c4:fa:26:e9:5b:1e:47:1a:05:07:97:6f: bc:25:fb:df:40:10:cd:8a:05:0a:72:9b:7e:23:fd:38:24:45: 51:b3:71:84:65:af:6a:18:b9:8a:c8:81:5c:a1:0b:03:74:d2: 4d:74:50:d4:da:8a:0a:98:6b:a3:62:41:54:ba:9a:b3:0a:21: 07:3a:7e:5e:05:19:ba:79:58:1e:29:c2:b1:7e:ae:91:ed:3c: 6f:24:93:41:be:bc:d5:09:fd:d4:20:f1:4c:ba:bd:4d:1d:cf: 6b:c1:29:4e:3e:c2:a1:42:53:cb:ea:11:d5:6f:84:a1:49:b4: 95:80:54:73:07:4e:f8:df:1c:e4:09:c9:7b:81:a0:3d:33:04: fa:79:f0:c6:8a:e7:e7:eb:02:7a:b0:82:82:e5:83:77:ae:d6: 11:6c:6a:90:8c:85:5a:99:e1:b8:e9:1a:c3:9d:fd:48:de:bf: f6:44:2e:6f:e5:01:77:24:e7:ff:02:6e:98:4e:29:75:94:50: ae:ae:11:6b:51:29:0b:fc:53:37:5f:d3:28:d0:cf:34:c6:d3: 6a:7b:b2:b5 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUc+cvbA9vAk5S5DfGjtAmcyLxEWMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQURDQjlGOURGNTZFOTBCMzlCNTM0NDExODE5NDEwNEY0 NkE4MzcwMjAeFw0yNjA0MDQwODU1MDFaFw0yNzA0MDMwOTAwMDFaMDMxMTAvBgNV BAMTKDE3ODY1NjRDNUYxMTAwNkQwMzcwRUVFOTY0NTYwQUU3QjY5MzI5QTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjyvK5cjlj51oMoKusaMrLAYkk eJXNjLaG4asyAqiV746b0BGRMSdvah9zlrGq/PClR64mPwMsS947GhT68ANa5KgW smC7sfOpUYsoFKb8FpJI9kdWTr6WQ0beji/mK0GNC993v0XSD+wOHcuryT7eS9/q gjxN1QPiCzKZUo9mb/TdyStHCVcWC5kWOV9ZLW6yrietuWcs4NNaAJ2jdtXxKvOS p+lFU4Vpbxdp4EJhUvvOS/95X/aMeOlAE0chDKSc5JJFeH1eHmhY7TolzO+/toS5 9TpP4b3eKhFeToec7moLg78bwpjWyy3x9bsuQ64ufRiZHJ5jBoCMIKLXkKspAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUF4ZWTF8RAG0DcO7pZFYK57aTKaIwHwYDVR0j BBgwFoAUrcufnfVukLObU0QRgZQQT0aoNwIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MWY0ZmQzOC03ODI2LTQyMDEtOWY5Yi0xZDdjNzZhYTI0ZGQvMC9BRENCOUY5REY1 NkU5MEIzOUI1MzQ0MTE4MTk0MTA0RjQ2QTgzNzAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQURDQjlGOURGNTZFOTBCMzlCNTM0NDExODE5NDEwNEY0NkE4 MzcwMi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2QxZjRmZDM4LTc4MjYtNDIwMS05 ZjliLTFkN2M3NmFhMjRkZC8wLzMxMzEzNDJlMzEzOTM5MmUzMTMwMzIyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMjM0MzUzMjM1LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAcsdmMA0GCSqG SIb3DQEBCwUAA4IBAQBrRQIUUmvirbMVbmifLa/UxpNVTUUJiyR0wJkfJR/R15Jm JgiExrF4pw7E+ibpWx5HGgUHl2+8JfvfQBDNigUKcpt+I/04JEVRs3GEZa9qGLmK yIFcoQsDdNJNdFDU2ooKmGujYkFUupqzCiEHOn5eBRm6eVgeKcKxfq6R7TxvJJNB vrzVCf3UIPFMur1NHc9rwSlOPsKhQlPL6hHVb4ShSbSVgFRzB0743xzkCcl7gaA9 MwT6efDGiufn6wJ6sIKC5YN3rtYRbGqQjIVameG46RrDnf1I3r/2RC5v5QF3JOf/ Am6YTil1lFCurhFrUSkL/FM3X9Mo0M80xtNqe7K1 -----END CERTIFICATE-----Generated at Sun Apr 19 14:24:06 2026 by rpki-client