$ rpki-client -vvf repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3130342e302f32342d3234203d3e203234353235.roa File: 3131342e3139392e3130342e302f32342d3234203d3e203234353235.roa (raw, json) Hash identifier: FszDPwICBYiFMvw1nlkmU7wmSMU5PGaqD47OMAzqofA= Subject key identifier: 90:44:A8:2D:90:AC:C4:CD:46:60:3A:91:F3:85:C4:CA:81:EF:99:F7 Certificate issuer: /CN=ADCB9F9DF56E90B39B5344118194104F46A83702 Certificate serial: 5CBFCD33883DE9B08F66E2EA61AB26606D94F159 Authority key identifier: AD:CB:9F:9D:F5:6E:90:B3:9B:53:44:11:81:94:10:4F:46:A8:37:02 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3130342e302f32342d3234203d3e203234353235.roa Signing time: Sat 04 Apr 2026 07:00:01 +0000 ROA not before: Sat 04 Apr 2026 06:55:01 +0000 ROA not after: Sat 03 Apr 2027 07:00:01 +0000 asID: 24525 IP address blocks: 114.199.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.crl rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 11:57:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:bf:cd:33:88:3d:e9:b0:8f:66:e2:ea:61:ab:26:60:6d:94:f1:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ADCB9F9DF56E90B39B5344118194104F46A83702 Validity Not Before: Apr 4 06:55:01 2026 GMT Not After : Apr 3 07:00:01 2027 GMT Subject: CN=9044A82D90ACC4CD46603A91F385C4CA81EF99F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:15:c3:1a:b3:7e:03:b2:d7:56:63:7f:eb:25: 93:f0:31:f9:2f:42:fc:e7:99:d5:7e:b9:12:6b:91: 87:1c:0c:ab:4a:8d:2e:9f:00:c5:51:a6:1b:3c:f0: 33:2f:bf:93:ab:aa:03:aa:c3:5e:d2:89:01:8e:4a: a4:63:05:79:84:a0:83:85:3f:31:78:2a:fd:aa:77: e1:80:12:ff:e9:aa:f9:5a:d9:aa:b3:da:6b:42:ec: c1:7d:c9:94:a3:b9:4e:0f:03:a2:49:00:72:0d:43: f6:98:0d:be:8c:7d:67:0d:e7:7b:5f:cf:c8:bb:b7: 29:c9:52:c0:a3:d1:48:e7:85:c8:ed:75:a8:58:9b: 7d:28:f4:bb:ca:1c:4b:77:0f:cb:2a:48:03:e4:8c: 6c:b2:75:52:96:c3:d2:be:c2:5d:e2:2b:22:01:3c: b1:97:2e:26:ab:54:28:3b:56:12:a5:cc:89:91:e8: 67:02:9d:20:76:a1:a9:ea:78:d9:f1:d4:cc:64:21: bf:b2:42:74:e0:b2:95:83:55:b8:44:62:e9:77:05: 01:40:99:fd:26:0f:cc:2f:e8:9c:6a:6d:8d:8a:a8: 77:e9:37:24:98:d8:88:ed:84:16:bc:7c:8a:99:b1: 9a:67:16:6b:41:22:f0:f8:5c:fe:de:9f:0a:91:ca: 15:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:44:A8:2D:90:AC:C4:CD:46:60:3A:91:F3:85:C4:CA:81:EF:99:F7 X509v3 Authority Key Identifier: keyid:AD:CB:9F:9D:F5:6E:90:B3:9B:53:44:11:81:94:10:4F:46:A8:37:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3130342e302f32342d3234203d3e203234353235.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 114.199.104.0/24 Signature Algorithm: sha256WithRSAEncryption 57:c3:09:0a:46:a5:3d:de:31:be:b5:cf:a6:28:e1:0a:7d:92: 02:8f:52:fa:5c:5d:cc:b9:13:11:73:a6:44:e7:fd:33:8f:8d: 99:44:04:11:02:05:25:4c:66:94:67:70:13:db:9c:5f:80:4a: bd:50:33:f0:d4:af:ea:d0:f8:f0:ed:95:51:b5:17:db:38:f8: e1:37:6e:90:72:51:e2:e4:de:d5:17:10:21:9f:77:eb:0e:ac: 5e:f6:3c:01:9d:ee:40:cc:fe:b1:7a:43:c0:bb:06:6f:05:cf: f1:f9:58:1f:1d:53:19:ae:6f:c4:25:6c:b2:68:14:c0:79:94: e6:82:87:09:9e:28:d5:e1:ce:1b:f3:5c:21:94:dd:5c:92:04: 65:8c:d3:ed:d2:4f:0e:80:45:51:e6:08:02:fb:2e:3b:bd:6d: 83:ab:af:1c:1c:39:fb:9c:2d:a6:24:ec:da:81:09:63:b0:fa: 9b:cb:c5:9c:02:10:82:f2:8e:db:72:d3:95:94:1c:db:b4:40: 5d:57:3f:6e:d5:2d:85:4a:bc:69:27:50:c9:2b:6a:b4:39:04: 39:96:9d:bb:d4:9a:6e:7d:26:2a:23:73:2b:38:e9:ca:a9:e2: 02:26:85:b3:96:7f:10:5b:e5:fe:1b:af:c7:4a:a0:3e:12:2a: d2:46:12:32 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUXL/NM4g96bCPZuLqYasmYG2U8VkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQURDQjlGOURGNTZFOTBCMzlCNTM0NDExODE5NDEwNEY0 NkE4MzcwMjAeFw0yNjA0MDQwNjU1MDFaFw0yNzA0MDMwNzAwMDFaMDMxMTAvBgNV BAMTKDkwNDRBODJEOTBBQ0M0Q0Q0NjYwM0E5MUYzODVDNENBODFFRjk5RjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzFcMas34DstdWY3/rJZPwMfkv QvznmdV+uRJrkYccDKtKjS6fAMVRphs88DMvv5OrqgOqw17SiQGOSqRjBXmEoIOF PzF4Kv2qd+GAEv/pqvla2aqz2mtC7MF9yZSjuU4PA6JJAHINQ/aYDb6MfWcN53tf z8i7tynJUsCj0UjnhcjtdahYm30o9LvKHEt3D8sqSAPkjGyydVKWw9K+wl3iKyIB PLGXLiarVCg7VhKlzImR6GcCnSB2oanqeNnx1MxkIb+yQnTgspWDVbhEYul3BQFA mf0mD8wv6JxqbY2KqHfpNySY2IjthBa8fIqZsZpnFmtBIvD4XP7enwqRyhVBAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUkESoLZCsxM1GYDqR84XEyoHvmfcwHwYDVR0j BBgwFoAUrcufnfVukLObU0QRgZQQT0aoNwIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MWY0ZmQzOC03ODI2LTQyMDEtOWY5Yi0xZDdjNzZhYTI0ZGQvMC9BRENCOUY5REY1 NkU5MEIzOUI1MzQ0MTE4MTk0MTA0RjQ2QTgzNzAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQURDQjlGOURGNTZFOTBCMzlCNTM0NDExODE5NDEwNEY0NkE4 MzcwMi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2QxZjRmZDM4LTc4MjYtNDIwMS05 ZjliLTFkN2M3NmFhMjRkZC8wLzMxMzEzNDJlMzEzOTM5MmUzMTMwMzQyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMjM0MzUzMjM1LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAcsdoMA0GCSqG SIb3DQEBCwUAA4IBAQBXwwkKRqU93jG+tc+mKOEKfZICj1L6XF3MuRMRc6ZE5/0z j42ZRAQRAgUlTGaUZ3AT25xfgEq9UDPw1K/q0Pjw7ZVRtRfbOPjhN26QclHi5N7V FxAhn3frDqxe9jwBne5AzP6xekPAuwZvBc/x+VgfHVMZrm/EJWyyaBTAeZTmgocJ nijV4c4b81whlN1ckgRljNPt0k8OgEVR5ggC+y47vW2Dq68cHDn7nC2mJOzagQlj sPqby8WcAhCC8o7bctOVlBzbtEBdVz9u1S2FSrxpJ1DJK2q0OQQ5lp271JpufSYq I3MrOOnKqeICJoWzln8QW+X+G6/HSqA+EirSRhIy -----END CERTIFICATE-----Generated at Sun Apr 19 13:03:05 2026 by rpki-client