$ rpki-client -vvf repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e39382e302f32342d3234203d3e203234353235.roa File: 3131342e3139392e39382e302f32342d3234203d3e203234353235.roa (raw, json) Hash identifier: xddiDK5l3lboXdvss9hPAojSvXTmo871vqF+HeI3VWA= Subject key identifier: 4F:1C:93:E8:29:84:FD:74:70:4D:AC:09:D4:3C:A4:E6:C2:99:A5:5A Certificate issuer: /CN=ADCB9F9DF56E90B39B5344118194104F46A83702 Certificate serial: 6DD5B337AEDECEC70BE780502A3A22F73B2A20DB Authority key identifier: AD:CB:9F:9D:F5:6E:90:B3:9B:53:44:11:81:94:10:4F:46:A8:37:02 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e39382e302f32342d3234203d3e203234353235.roa Signing time: Sat 04 Apr 2026 07:00:01 +0000 ROA not before: Sat 04 Apr 2026 06:55:01 +0000 ROA not after: Sat 03 Apr 2027 07:00:01 +0000 asID: 24525 IP address blocks: 114.199.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.crl rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 11:57:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:d5:b3:37:ae:de:ce:c7:0b:e7:80:50:2a:3a:22:f7:3b:2a:20:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ADCB9F9DF56E90B39B5344118194104F46A83702 Validity Not Before: Apr 4 06:55:01 2026 GMT Not After : Apr 3 07:00:01 2027 GMT Subject: CN=4F1C93E82984FD74704DAC09D43CA4E6C299A55A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:71:8c:26:bb:8b:83:6d:a2:09:9b:4d:e9:7b: 9e:7b:5a:36:4a:7d:fd:08:5b:fe:48:18:81:22:b2: b7:98:b8:69:c2:7d:05:65:5b:a1:e7:0d:96:0a:2b: b8:83:ed:b2:38:b9:85:ea:06:20:02:ad:2a:cf:11: 5b:79:6b:04:a9:0b:eb:27:7a:a0:4e:02:56:2f:ce: 48:d4:a9:92:01:56:64:a4:91:73:d3:a1:7f:f6:76: 34:7f:23:01:cb:f9:e9:49:dc:59:a4:fe:db:73:e2: 08:18:2e:c8:25:9e:8d:d7:f7:0e:0e:07:2d:f5:5f: bf:57:fe:1e:39:9e:7c:19:76:a0:73:0b:e9:47:3f: de:c8:37:48:bc:78:4d:61:1c:74:bb:bf:bd:10:a4: 20:d4:41:3d:52:f0:53:3d:87:61:96:22:bd:1d:fb: 0c:7d:61:4f:1f:9d:31:73:da:52:af:41:02:17:13: c7:b8:0c:12:28:fd:e8:f9:ef:60:c2:81:32:0b:e5: ac:c8:d1:23:ef:83:ac:46:7e:97:7a:ca:50:f2:19: 01:bc:f6:60:aa:bc:01:fb:0c:da:d8:e1:95:b0:10: 60:cf:34:9b:35:76:80:f6:2f:5d:11:79:b9:fe:d5: 00:14:77:e5:c1:23:d0:b9:bc:bf:5c:5f:cf:cb:7c: db:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:1C:93:E8:29:84:FD:74:70:4D:AC:09:D4:3C:A4:E6:C2:99:A5:5A X509v3 Authority Key Identifier: keyid:AD:CB:9F:9D:F5:6E:90:B3:9B:53:44:11:81:94:10:4F:46:A8:37:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e39382e302f32342d3234203d3e203234353235.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 114.199.98.0/24 Signature Algorithm: sha256WithRSAEncryption 61:b4:2f:38:9b:72:d2:aa:2f:4a:8b:0f:3c:fc:c0:d0:69:0f: a2:03:53:22:be:04:7c:56:2a:d8:82:8b:98:ac:df:6c:6d:4d: 30:07:5a:ea:6c:48:a8:98:55:6c:28:16:ef:c2:9d:f0:83:de: 7b:64:b5:33:6f:c9:2e:4d:c3:84:df:70:28:50:c8:9b:9b:50: e3:28:2a:17:11:a7:11:f4:69:6c:c1:19:c9:b6:3f:9c:09:33: e0:47:a6:65:4d:86:10:3c:ae:fd:81:2c:df:d6:31:59:07:3d: e2:7f:3d:69:36:3e:85:a8:8a:19:25:c4:38:05:b4:da:00:83: 98:18:ce:f2:cb:93:08:0e:cd:ad:0d:4b:0f:ca:e9:e5:40:d3: c7:30:0f:13:ef:00:f5:6c:24:f1:02:c2:ca:38:f0:ac:4d:1b: 1d:87:58:71:e1:2c:19:63:a7:ca:ca:e4:ae:1c:93:6a:50:53: 09:23:40:94:96:4a:f6:3b:3a:80:ab:e6:50:a6:56:45:11:6b: dc:b8:d0:ca:48:71:12:ef:a8:35:4a:ad:41:98:08:ac:6a:73: 0e:d5:a5:69:04:93:dd:de:bd:ee:65:ac:98:74:30:82:d6:da: 4f:23:2e:83:01:fc:ea:28:d1:c2:6e:cc:aa:77:84:17:34:ff: 63:f1:5d:d9 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUbdWzN67ezscL54BQKjoi9zsqINswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQURDQjlGOURGNTZFOTBCMzlCNTM0NDExODE5NDEwNEY0 NkE4MzcwMjAeFw0yNjA0MDQwNjU1MDFaFw0yNzA0MDMwNzAwMDFaMDMxMTAvBgNV BAMTKDRGMUM5M0U4Mjk4NEZENzQ3MDREQUMwOUQ0M0NBNEU2QzI5OUE1NUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHcYwmu4uDbaIJm03pe557WjZK ff0IW/5IGIEisreYuGnCfQVlW6HnDZYKK7iD7bI4uYXqBiACrSrPEVt5awSpC+sn eqBOAlYvzkjUqZIBVmSkkXPToX/2djR/IwHL+elJ3Fmk/ttz4ggYLsglno3X9w4O By31X79X/h45nnwZdqBzC+lHP97IN0i8eE1hHHS7v70QpCDUQT1S8FM9h2GWIr0d +wx9YU8fnTFz2lKvQQIXE8e4DBIo/ej572DCgTIL5azI0SPvg6xGfpd6ylDyGQG8 9mCqvAH7DNrY4ZWwEGDPNJs1doD2L10Rebn+1QAUd+XBI9C5vL9cX8/LfNvjAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUTxyT6CmE/XRwTawJ1Dyk5sKZpVowHwYDVR0j BBgwFoAUrcufnfVukLObU0QRgZQQT0aoNwIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MWY0ZmQzOC03ODI2LTQyMDEtOWY5Yi0xZDdjNzZhYTI0ZGQvMC9BRENCOUY5REY1 NkU5MEIzOUI1MzQ0MTE4MTk0MTA0RjQ2QTgzNzAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQURDQjlGOURGNTZFOTBCMzlCNTM0NDExODE5NDEwNEY0NkE4 MzcwMi5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2QxZjRmZDM4LTc4MjYtNDIwMS05 ZjliLTFkN2M3NmFhMjRkZC8wLzMxMzEzNDJlMzEzOTM5MmUzOTM4MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzIzNDM1MzIzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHLHYjANBgkqhkiG 9w0BAQsFAAOCAQEAYbQvOJty0qovSosPPPzA0GkPogNTIr4EfFYq2IKLmKzfbG1N MAda6mxIqJhVbCgW78Kd8IPee2S1M2/JLk3DhN9wKFDIm5tQ4ygqFxGnEfRpbMEZ ybY/nAkz4EemZU2GEDyu/YEs39YxWQc94n89aTY+haiKGSXEOAW02gCDmBjO8suT CA7NrQ1LD8rp5UDTxzAPE+8A9Wwk8QLCyjjwrE0bHYdYceEsGWOnysrkrhyTalBT CSNAlJZK9js6gKvmUKZWRRFr3LjQykhxEu+oNUqtQZgIrGpzDtWlaQST3d697mWs mHQwgtbaTyMugwH86ijRwm7MqneEFzT/Y/Fd2Q== -----END CERTIFICATE-----Generated at Sun Apr 19 13:03:08 2026 by rpki-client