$ rpki-client -vvf repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3132302e302f32342d3234203d3e203234353235.roa File: 3131342e3139392e3132302e302f32342d3234203d3e203234353235.roa (raw, json) Hash identifier: edqOa5it4cGb7DuiqWYTCTeSLNmqS/+pbVRYynWZUnc= Subject key identifier: 13:3E:1B:C9:A5:60:EE:A1:00:EC:DD:DE:D4:F4:59:00:10:69:07:2A Certificate issuer: /CN=ADCB9F9DF56E90B39B5344118194104F46A83702 Certificate serial: 495357CCD14764DA4E2AB86F0E32349B092A3263 Authority key identifier: AD:CB:9F:9D:F5:6E:90:B3:9B:53:44:11:81:94:10:4F:46:A8:37:02 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3132302e302f32342d3234203d3e203234353235.roa Signing time: Sat 04 Apr 2026 09:00:01 +0000 ROA not before: Sat 04 Apr 2026 08:55:01 +0000 ROA not after: Sat 03 Apr 2027 09:00:01 +0000 asID: 24525 IP address blocks: 114.199.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.crl rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 11:57:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:53:57:cc:d1:47:64:da:4e:2a:b8:6f:0e:32:34:9b:09:2a:32:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ADCB9F9DF56E90B39B5344118194104F46A83702 Validity Not Before: Apr 4 08:55:01 2026 GMT Not After : Apr 3 09:00:01 2027 GMT Subject: CN=133E1BC9A560EEA100ECDDDED4F459001069072A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:f5:76:a0:86:9b:35:df:9a:87:ab:03:c3:b1: d5:1d:32:fc:f0:7f:39:93:fc:70:7a:b6:94:0e:2c: 40:a5:de:a7:5c:b0:3c:25:29:00:8a:7e:8e:82:86: 9d:f5:e4:7b:df:43:f6:72:26:a1:c5:8d:f6:c3:de: b0:7c:57:5f:58:29:92:d9:05:cf:99:6a:de:78:fd: 4d:cf:ed:6e:f8:53:1d:81:e9:95:87:e3:05:c1:9b: 00:df:b6:1c:6e:a9:48:51:d5:2d:db:22:23:f0:08: cc:2b:17:67:59:00:71:16:6f:4a:c1:d0:4e:c1:12: 6c:f8:32:f7:ac:79:20:29:86:9c:f5:95:df:0d:f9: d3:1c:6d:b3:27:da:a7:86:32:31:2a:3a:b4:0c:8f: 30:66:bb:65:c4:c4:1f:bf:70:cb:27:2f:25:19:dd: 6f:32:4b:45:48:b1:72:c5:e4:14:75:f9:f7:15:0a: 41:05:a0:8a:45:84:8e:1b:9f:c0:7b:07:3b:01:14: 80:61:1c:9b:2b:c7:92:23:b4:6f:3f:e0:8b:8d:04: 44:7f:32:bc:fb:9f:b9:3a:9f:6a:bf:60:9c:5e:85: 04:68:85:b4:f4:c3:63:cd:2c:44:fc:56:bb:2e:12: 76:d4:a4:06:67:41:4d:ae:12:e4:54:ac:01:14:df: 5a:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:3E:1B:C9:A5:60:EE:A1:00:EC:DD:DE:D4:F4:59:00:10:69:07:2A X509v3 Authority Key Identifier: keyid:AD:CB:9F:9D:F5:6E:90:B3:9B:53:44:11:81:94:10:4F:46:A8:37:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3132302e302f32342d3234203d3e203234353235.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 114.199.120.0/24 Signature Algorithm: sha256WithRSAEncryption a0:4b:a5:90:2f:6b:49:b2:b4:9c:5b:bb:7d:50:8b:d5:20:95: 18:78:97:83:1f:6d:9f:07:ba:24:cf:ed:04:5a:3d:21:68:89: 1a:83:a1:c3:c5:0c:c9:be:13:03:11:c6:f6:2f:57:83:82:fb: 97:9a:4a:d8:b0:2a:99:5a:2e:04:c9:93:a2:81:54:59:cb:e9: 9d:81:64:5e:18:3e:14:7a:79:56:5d:aa:e7:ac:87:01:09:35: b6:03:6d:b8:db:a5:00:ce:3d:ee:ba:50:c4:c2:d8:18:39:06: bc:93:cd:e8:b8:cd:93:9a:01:ea:ea:3e:ee:76:b0:0d:c6:bd: 3a:88:ef:e3:4f:40:60:20:42:9b:dd:b5:4a:69:d0:68:76:bf: f9:e3:d8:04:29:b8:6b:47:84:b8:67:5a:87:9c:ae:94:f9:1d: b3:b2:e7:2d:eb:12:b6:a6:04:1c:1b:1f:32:14:0b:28:1b:bd: b2:90:a4:4f:90:fb:38:2f:9a:ec:61:43:3d:e7:87:72:b6:4e: 6c:91:42:90:67:7b:96:61:37:f1:5a:ae:43:e0:bb:9f:8d:a3: f3:56:69:72:1f:68:4e:2f:34:58:8a:fb:84:d7:bd:f0:9f:06: 04:04:ff:d7:b1:bd:32:f5:5b:e3:bc:a1:54:5d:de:10:52:3c: 9e:ad:f4:58 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUSVNXzNFHZNpOKrhvDjI0mwkqMmMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQURDQjlGOURGNTZFOTBCMzlCNTM0NDExODE5NDEwNEY0 NkE4MzcwMjAeFw0yNjA0MDQwODU1MDFaFw0yNzA0MDMwOTAwMDFaMDMxMTAvBgNV BAMTKDEzM0UxQkM5QTU2MEVFQTEwMEVDRERERUQ0RjQ1OTAwMTA2OTA3MkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp9Xaghps135qHqwPDsdUdMvzw fzmT/HB6tpQOLECl3qdcsDwlKQCKfo6Chp315HvfQ/ZyJqHFjfbD3rB8V19YKZLZ Bc+Zat54/U3P7W74Ux2B6ZWH4wXBmwDfthxuqUhR1S3bIiPwCMwrF2dZAHEWb0rB 0E7BEmz4MveseSAphpz1ld8N+dMcbbMn2qeGMjEqOrQMjzBmu2XExB+/cMsnLyUZ 3W8yS0VIsXLF5BR1+fcVCkEFoIpFhI4bn8B7BzsBFIBhHJsrx5IjtG8/4IuNBER/ Mrz7n7k6n2q/YJxehQRohbT0w2PNLET8VrsuEnbUpAZnQU2uEuRUrAEU31pjAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUEz4byaVg7qEA7N3e1PRZABBpByowHwYDVR0j BBgwFoAUrcufnfVukLObU0QRgZQQT0aoNwIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MWY0ZmQzOC03ODI2LTQyMDEtOWY5Yi0xZDdjNzZhYTI0ZGQvMC9BRENCOUY5REY1 NkU5MEIzOUI1MzQ0MTE4MTk0MTA0RjQ2QTgzNzAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQURDQjlGOURGNTZFOTBCMzlCNTM0NDExODE5NDEwNEY0NkE4 MzcwMi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2QxZjRmZDM4LTc4MjYtNDIwMS05 ZjliLTFkN2M3NmFhMjRkZC8wLzMxMzEzNDJlMzEzOTM5MmUzMTMyMzAyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMjM0MzUzMjM1LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAcsd4MA0GCSqG SIb3DQEBCwUAA4IBAQCgS6WQL2tJsrScW7t9UIvVIJUYeJeDH22fB7okz+0EWj0h aIkag6HDxQzJvhMDEcb2L1eDgvuXmkrYsCqZWi4EyZOigVRZy+mdgWReGD4UenlW XarnrIcBCTW2A22426UAzj3uulDEwtgYOQa8k83ouM2TmgHq6j7udrANxr06iO/j T0BgIEKb3bVKadBodr/549gEKbhrR4S4Z1qHnK6U+R2zsuct6xK2pgQcGx8yFAso G72ykKRPkPs4L5rsYUM954dytk5skUKQZ3uWYTfxWq5D4LufjaPzVmlyH2hOLzRY ivuE173wnwYEBP/Xsb0y9VvjvKFUXd4QUjyerfRY -----END CERTIFICATE-----Generated at Sun Apr 19 13:03:11 2026 by rpki-client