$ rpki-client -vvf repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3130332e302f32342d3234203d3e203234353235.roa File: 3131342e3139392e3130332e302f32342d3234203d3e203234353235.roa (raw, json) Hash identifier: PIj621tb2Ko9LC2tCZOjtR9P8KspoZMWcgfFe8szXgk= Subject key identifier: 16:25:B3:92:19:BC:7E:03:05:36:E7:DA:AE:83:0F:09:6A:4F:27:C1 Certificate issuer: /CN=ADCB9F9DF56E90B39B5344118194104F46A83702 Certificate serial: 55A43D51131975A9B605265E3C0E87A2A0A9AAFA Authority key identifier: AD:CB:9F:9D:F5:6E:90:B3:9B:53:44:11:81:94:10:4F:46:A8:37:02 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3130332e302f32342d3234203d3e203234353235.roa Signing time: Sat 04 Apr 2026 10:00:03 +0000 ROA not before: Sat 04 Apr 2026 09:55:03 +0000 ROA not after: Sat 03 Apr 2027 10:00:03 +0000 asID: 24525 IP address blocks: 114.199.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.crl rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 11:57:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:a4:3d:51:13:19:75:a9:b6:05:26:5e:3c:0e:87:a2:a0:a9:aa:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ADCB9F9DF56E90B39B5344118194104F46A83702 Validity Not Before: Apr 4 09:55:03 2026 GMT Not After : Apr 3 10:00:03 2027 GMT Subject: CN=1625B39219BC7E030536E7DAAE830F096A4F27C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:0b:e1:7f:92:12:34:d5:bb:98:53:cf:0e:45: 37:fc:66:e6:8e:b4:d7:8e:23:ed:75:7e:fc:6f:6d: 89:19:0b:57:6d:2b:f8:44:6e:88:f0:c5:0a:66:da: 76:fc:ab:41:ec:12:b4:a5:d0:eb:8e:9d:52:86:23: fe:d7:74:8f:50:08:93:31:79:bd:5e:d5:d7:34:84: 33:89:9a:66:38:71:26:62:f6:29:1a:ef:18:ab:5e: 94:f9:f1:38:f2:65:34:f2:ca:9d:8c:8c:70:e9:ce: b6:67:1f:1a:7b:7a:21:20:6c:88:af:54:31:2f:49: 3d:cf:67:e9:46:0f:ac:2b:b9:41:ad:4f:bd:b8:f2: 40:57:a5:41:9c:e7:68:03:94:0a:68:c4:66:94:1a: f2:84:df:d4:d2:17:4a:93:17:6d:4d:b5:25:d2:97: a4:9b:03:ba:62:8a:bd:bd:6f:99:85:1e:74:39:c3: 7d:39:33:60:ad:4e:10:79:b4:87:27:a6:d9:7a:ae: b9:4d:5d:da:e1:54:fe:55:c9:67:49:36:c7:96:fe: 0e:43:23:2f:0e:26:24:d2:29:25:7d:30:c9:d2:8c: 2b:d6:71:86:e1:b6:73:8a:c1:b0:41:c5:9e:9b:41: ed:8d:f9:e3:af:ca:aa:3d:cc:f8:94:c6:26:16:90: be:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:25:B3:92:19:BC:7E:03:05:36:E7:DA:AE:83:0F:09:6A:4F:27:C1 X509v3 Authority Key Identifier: keyid:AD:CB:9F:9D:F5:6E:90:B3:9B:53:44:11:81:94:10:4F:46:A8:37:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3130332e302f32342d3234203d3e203234353235.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 114.199.103.0/24 Signature Algorithm: sha256WithRSAEncryption bf:75:5d:07:07:3c:a3:df:12:a8:a8:6e:6f:94:de:89:16:81: b7:25:01:3e:0d:f9:90:91:b6:32:ae:0d:2c:8c:6f:3f:9e:74: 38:9b:88:6c:b2:cd:58:23:71:90:64:cb:34:7f:7d:63:a5:4f: f6:70:59:91:da:1f:4f:fc:ff:62:fa:06:f6:47:92:cb:d3:af: 16:45:a3:d2:99:54:6d:da:a0:4a:36:97:98:86:96:bb:82:a3: 6a:cc:03:b2:3d:bb:35:e3:77:dc:56:5d:5c:89:52:ed:24:f8: 86:99:85:1f:90:b3:de:3f:93:9e:a8:05:97:0d:f3:56:94:32: c7:40:ab:51:90:8a:7b:ae:95:0d:79:92:7d:3c:41:4c:05:d4: 1f:01:28:cd:a2:18:39:6c:b8:f8:8e:63:63:f2:f2:03:1f:30: 93:d0:82:f0:e4:23:a5:0b:82:6f:77:3f:02:61:0b:78:15:f2: 3d:6e:b5:c8:2d:04:f6:82:00:e4:90:f1:e8:03:01:02:05:2a: a9:e8:e0:4e:e7:c2:fa:cf:77:44:82:8b:58:3b:66:37:18:83: c3:76:be:9a:56:76:60:d6:da:9b:40:d8:ec:88:4f:a9:d7:80: 2d:cf:7c:14:9a:e7:af:e5:1c:9b:3a:ef:8d:56:54:f6:82:a7: ee:71:7a:3e -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUVaQ9URMZdam2BSZePA6HoqCpqvowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQURDQjlGOURGNTZFOTBCMzlCNTM0NDExODE5NDEwNEY0 NkE4MzcwMjAeFw0yNjA0MDQwOTU1MDNaFw0yNzA0MDMxMDAwMDNaMDMxMTAvBgNV BAMTKDE2MjVCMzkyMTlCQzdFMDMwNTM2RTdEQUFFODMwRjA5NkE0RjI3QzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoC+F/khI01buYU88ORTf8ZuaO tNeOI+11fvxvbYkZC1dtK/hEbojwxQpm2nb8q0HsErSl0OuOnVKGI/7XdI9QCJMx eb1e1dc0hDOJmmY4cSZi9ika7xirXpT58TjyZTTyyp2MjHDpzrZnHxp7eiEgbIiv VDEvST3PZ+lGD6wruUGtT7248kBXpUGc52gDlApoxGaUGvKE39TSF0qTF21NtSXS l6SbA7piir29b5mFHnQ5w305M2CtThB5tIcnptl6rrlNXdrhVP5VyWdJNseW/g5D Iy8OJiTSKSV9MMnSjCvWcYbhtnOKwbBBxZ6bQe2N+eOvyqo9zPiUxiYWkL4xAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUFiWzkhm8fgMFNufaroMPCWpPJ8EwHwYDVR0j BBgwFoAUrcufnfVukLObU0QRgZQQT0aoNwIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MWY0ZmQzOC03ODI2LTQyMDEtOWY5Yi0xZDdjNzZhYTI0ZGQvMC9BRENCOUY5REY1 NkU5MEIzOUI1MzQ0MTE4MTk0MTA0RjQ2QTgzNzAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQURDQjlGOURGNTZFOTBCMzlCNTM0NDExODE5NDEwNEY0NkE4 MzcwMi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2QxZjRmZDM4LTc4MjYtNDIwMS05 ZjliLTFkN2M3NmFhMjRkZC8wLzMxMzEzNDJlMzEzOTM5MmUzMTMwMzMyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMjM0MzUzMjM1LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAcsdnMA0GCSqG SIb3DQEBCwUAA4IBAQC/dV0HBzyj3xKoqG5vlN6JFoG3JQE+DfmQkbYyrg0sjG8/ nnQ4m4hsss1YI3GQZMs0f31jpU/2cFmR2h9P/P9i+gb2R5LL068WRaPSmVRt2qBK NpeYhpa7gqNqzAOyPbs143fcVl1ciVLtJPiGmYUfkLPeP5OeqAWXDfNWlDLHQKtR kIp7rpUNeZJ9PEFMBdQfASjNohg5bLj4jmNj8vIDHzCT0ILw5COlC4Jvdz8CYQt4 FfI9brXILQT2ggDkkPHoAwECBSqp6OBO58L6z3dEgotYO2Y3GIPDdr6aVnZg1tqb QNjsiE+p14Atz3wUmuev5RybOu+NVlT2gqfucXo+ -----END CERTIFICATE-----Generated at Sun Apr 19 13:03:06 2026 by rpki-client