$ rpki-client -vvf repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3130312e3132382e3130382e302f32322d3234203d3e20313335343738.roa File: 3130312e3132382e3130382e302f32322d3234203d3e20313335343738.roa (raw, json) Hash identifier: qamw0sj0irY9Jf439/KJnhg8hESjYK1SKLkasParuH4= Subject key identifier: 99:5E:1F:49:5B:6A:88:F4:C6:76:01:07:54:4C:38:D5:76:45:B5:46 Certificate issuer: /CN=7E2CF346D5DE840DC0EE944C918EDC5137D6998A Certificate serial: 435D089F49F6CC9D65C43FEC1AEB97F17BF84279 Authority key identifier: 7E:2C:F3:46:D5:DE:84:0D:C0:EE:94:4C:91:8E:DC:51:37:D6:99:8A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3130312e3132382e3130382e302f32322d3234203d3e20313335343738.roa Signing time: Wed 18 Feb 2026 08:00:00 +0000 ROA not before: Wed 18 Feb 2026 07:55:00 +0000 ROA not after: Wed 17 Feb 2027 08:00:00 +0000 asID: 135478 IP address blocks: 101.128.108.0/22 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.crl rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 04:37:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:5d:08:9f:49:f6:cc:9d:65:c4:3f:ec:1a:eb:97:f1:7b:f8:42:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7E2CF346D5DE840DC0EE944C918EDC5137D6998A Validity Not Before: Feb 18 07:55:00 2026 GMT Not After : Feb 17 08:00:00 2027 GMT Subject: CN=995E1F495B6A88F4C6760107544C38D57645B546 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c7:66:7c:5e:7e:f1:4b:50:04:b3:9e:31:8f: 2e:ff:52:b2:73:3c:df:8e:a4:73:e2:be:f4:93:c7: 91:b8:6e:a5:23:67:d0:2b:af:0c:ee:a5:73:aa:1e: e4:3f:5c:a8:a8:79:9a:fd:d6:50:e8:1c:d1:c5:8b: ac:af:8c:02:fe:0c:98:b7:04:89:32:ae:77:1d:b8: 62:bb:9d:e3:0a:04:8c:84:0d:af:bf:14:c4:31:12: d0:f1:ec:7c:b3:7a:c6:c7:98:ed:4e:0d:64:e3:4b: 79:ca:34:65:30:81:84:e0:6e:d5:77:0e:3c:a3:e7: ff:de:4e:76:a3:ce:7c:22:52:b9:df:fd:37:69:48: da:b1:f6:a6:40:98:74:ea:2d:9b:41:5e:81:4f:3c: be:54:fa:15:26:4f:05:f1:d1:c6:a2:3b:55:ea:29: 3e:47:b9:c1:8d:35:1a:18:ec:b6:55:b9:66:f3:7b: a7:51:9a:4e:06:df:a4:cd:bc:e7:a1:de:bc:7f:b0: 94:74:14:7f:79:7a:e4:09:18:41:48:df:b3:ed:34: d1:68:0c:ca:5e:21:25:49:25:88:3c:cd:1e:d8:01: 82:9e:cd:78:a0:db:f9:92:c7:6e:6b:d1:4d:d7:db: 04:94:16:61:08:13:08:19:0e:16:19:90:29:4d:d7: d1:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:5E:1F:49:5B:6A:88:F4:C6:76:01:07:54:4C:38:D5:76:45:B5:46 X509v3 Authority Key Identifier: keyid:7E:2C:F3:46:D5:DE:84:0D:C0:EE:94:4C:91:8E:DC:51:37:D6:99:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3130312e3132382e3130382e302f32322d3234203d3e20313335343738.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 101.128.108.0/22 Signature Algorithm: sha256WithRSAEncryption 11:ed:1d:95:c7:c3:6a:04:13:6c:de:2b:43:74:f0:75:f9:04: 0a:87:0d:04:c1:0b:85:bf:f6:4a:ae:7f:1e:e0:29:ff:7d:55: 92:9f:4d:05:20:72:8f:18:f2:3d:be:31:46:de:6a:e2:bb:15: f4:c3:13:21:86:79:d5:87:85:00:7c:6d:53:8a:c4:2f:cd:5c: 17:c3:31:fb:63:df:97:a1:99:d1:dd:84:95:72:32:3a:cb:b7: 6c:46:f3:91:d4:a8:25:a1:9b:13:da:6c:f1:da:17:c9:0e:43: e6:99:7b:10:d5:9d:dc:ad:c8:fc:01:cb:24:c3:dd:29:2e:92: fb:e6:0d:70:94:fc:b6:98:ba:cc:cd:54:60:d6:f5:5c:a2:31: 69:2e:b3:c9:a7:22:ff:f8:4f:ce:ff:26:f1:eb:42:25:bd:05: 98:dc:ad:11:8f:8e:e6:93:f4:62:0a:32:da:88:72:95:d7:f5: 27:79:2b:20:1f:4a:bc:ef:cd:f7:85:e3:a3:fa:01:e7:8d:f3: d1:c1:de:18:f8:5f:28:e1:61:bf:c1:5e:7a:73:e3:bb:0d:21: 04:95:b5:6f:a6:83:22:55:6b:1d:8d:86:d5:ff:07:29:1d:e7: 61:5e:c3:fc:0a:29:d4:c0:e8:ce:b7:8b:d7:4b:3b:08:5f:55: 8b:0a:08:c9 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUQ10In0n2zJ1lxD/sGuuX8Xv4QnkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0UyQ0YzNDZENURFODQwREMwRUU5NDRDOTE4RURDNTEz N0Q2OTk4QTAeFw0yNjAyMTgwNzU1MDBaFw0yNzAyMTcwODAwMDBaMDMxMTAvBgNV BAMTKDk5NUUxRjQ5NUI2QTg4RjRDNjc2MDEwNzU0NEMzOEQ1NzY0NUI1NDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyx2Z8Xn7xS1AEs54xjy7/UrJz PN+OpHPivvSTx5G4bqUjZ9ArrwzupXOqHuQ/XKioeZr91lDoHNHFi6yvjAL+DJi3 BIkyrncduGK7neMKBIyEDa+/FMQxEtDx7HyzesbHmO1ODWTjS3nKNGUwgYTgbtV3 Djyj5//eTnajznwiUrnf/TdpSNqx9qZAmHTqLZtBXoFPPL5U+hUmTwXx0caiO1Xq KT5HucGNNRoY7LZVuWbze6dRmk4G36TNvOeh3rx/sJR0FH95euQJGEFI37PtNNFo DMpeISVJJYg8zR7YAYKezXig2/mSx25r0U3X2wSUFmEIEwgZDhYZkClN19FnAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUmV4fSVtqiPTGdgEHVEw41XZFtUYwHwYDVR0j BBgwFoAUfizzRtXehA3A7pRMkY7cUTfWmYowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YTcwMjcyNi1iMmM2LTQ2ZmMtODI5Ny0yZGJkZWM2ZDZkNWQvMC83RTJDRjM0NkQ1 REU4NDBEQzBFRTk0NEM5MThFREM1MTM3RDY5OThBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0UyQ0YzNDZENURFODQwREMwRUU5NDRDOTE4RURDNTEzN0Q2 OTk4QS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2VhNzAyNzI2LWIyYzYtNDZmYy04 Mjk3LTJkYmRlYzZkNmQ1ZC8wLzMxMzAzMTJlMzEzMjM4MmUzMTMwMzgyZTMwMmYz MjMyMmQzMjM0MjAzZDNlMjAzMTMzMzUzNDM3Mzgucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJlgGwwDQYJ KoZIhvcNAQELBQADggEBABHtHZXHw2oEE2zeK0N08HX5BAqHDQTBC4W/9kqufx7g Kf99VZKfTQUgco8Y8j2+MUbeauK7FfTDEyGGedWHhQB8bVOKxC/NXBfDMftj35eh mdHdhJVyMjrLt2xG85HUqCWhmxPabPHaF8kOQ+aZexDVndytyPwByyTD3Skukvvm DXCU/LaYuszNVGDW9VyiMWkus8mnIv/4T87/JvHrQiW9BZjcrRGPjuaT9GIKMtqI cpXX9Sd5KyAfSrzvzfeF46P6AeeN89HB3hj4XyjhYb/BXnpz47sNIQSVtW+mgyJV ax2NhtX/Bykd52Few/wKKdTA6M63i9dLOwhfVYsKCMk= -----END CERTIFICATE-----Generated at Mon Mar 2 14:16:00 2026 by rpki-client