$ rpki-client -vvf repo-rpki.idnic.net/repo/19205e7c-a881-4873-9188-e521b6af529c/0/3131392e3233352e3230382e302f32302d3234203d3e20313331313131.roa File: 3131392e3233352e3230382e302f32302d3234203d3e20313331313131.roa (raw, json) Hash identifier: twSGwt6Fotgsl0DbfHgg9x8SNLnHsi/QE3YaQYCzzMs= Subject key identifier: 5E:A8:3E:FF:A6:0B:34:CA:7D:B0:1F:28:2F:8A:BE:40:15:D5:93:14 Certificate issuer: /CN=C1AF8C999E9D06DADEBC387D78B305AB8716DC2F Certificate serial: 48B93D1C10DAE0E44D47AECEE89408831A860236 Authority key identifier: C1:AF:8C:99:9E:9D:06:DA:DE:BC:38:7D:78:B3:05:AB:87:16:DC:2F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/19205e7c-a881-4873-9188-e521b6af529c/0/3131392e3233352e3230382e302f32302d3234203d3e20313331313131.roa Signing time: Wed 11 Mar 2026 12:00:02 +0000 ROA not before: Wed 11 Mar 2026 11:55:02 +0000 ROA not after: Wed 10 Mar 2027 12:00:02 +0000 asID: 131111 IP address blocks: 119.235.208.0/20 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/19205e7c-a881-4873-9188-e521b6af529c/0/C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.crl rsync://repo-rpki.idnic.net/repo/19205e7c-a881-4873-9188-e521b6af529c/0/C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Mar 2026 19:25:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:b9:3d:1c:10:da:e0:e4:4d:47:ae:ce:e8:94:08:83:1a:86:02:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C1AF8C999E9D06DADEBC387D78B305AB8716DC2F Validity Not Before: Mar 11 11:55:02 2026 GMT Not After : Mar 10 12:00:02 2027 GMT Subject: CN=5EA83EFFA60B34CA7DB01F282F8ABE4015D59314 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:2b:7c:a2:62:4e:1c:c9:80:02:fb:7b:54:0d: 1e:78:d3:56:0b:fd:9a:04:a3:52:5c:6a:07:8e:44: 55:59:88:ea:52:76:c1:42:f7:13:49:8b:27:ea:e3: be:7c:b7:c0:ad:2a:7c:19:e6:a3:cb:a8:72:b5:0f: c1:58:58:da:9e:63:72:4e:16:bf:3d:48:93:fc:08: 8b:2b:07:34:59:42:21:53:4c:74:03:91:6c:db:11: ac:de:91:be:6f:98:92:19:9d:a9:f6:e1:a0:9e:74: 0e:b4:a3:8f:de:e0:ba:d4:11:17:1a:d9:10:9e:7c: cd:13:38:48:f1:be:09:f7:96:52:cc:2f:f6:5c:72: b8:bd:ff:bd:32:e8:99:fa:6f:70:37:8a:6d:36:71: da:31:c6:b3:7a:e3:c0:67:b3:70:d3:77:69:d3:63: f2:5d:b1:f9:cb:64:1d:b5:74:97:83:b4:15:fc:f9: a1:44:aa:ff:54:27:da:6b:76:b6:4b:1a:24:73:27: 86:00:69:db:64:c6:27:73:b6:c2:e6:22:56:96:64: b8:dc:72:3d:1e:81:21:b0:43:4a:b6:f4:4d:63:2d: 84:bf:17:e5:bc:98:d3:48:dd:25:b0:2e:11:69:e2: 74:11:95:1e:30:01:36:2f:c0:94:c8:b4:23:4c:b7: 32:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:A8:3E:FF:A6:0B:34:CA:7D:B0:1F:28:2F:8A:BE:40:15:D5:93:14 X509v3 Authority Key Identifier: keyid:C1:AF:8C:99:9E:9D:06:DA:DE:BC:38:7D:78:B3:05:AB:87:16:DC:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/19205e7c-a881-4873-9188-e521b6af529c/0/C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/19205e7c-a881-4873-9188-e521b6af529c/0/3131392e3233352e3230382e302f32302d3234203d3e20313331313131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 119.235.208.0/20 Signature Algorithm: sha256WithRSAEncryption 60:8b:6d:35:f7:ee:f4:3c:a5:ce:f9:be:fa:c6:04:f8:17:a1: fe:bc:fe:33:02:83:92:38:bc:89:b4:31:78:96:6a:77:81:65: 97:64:77:e8:6b:30:68:9a:5d:7e:05:91:4a:fa:d6:80:d2:8a: d3:27:fb:3c:14:76:ef:60:00:78:8f:9d:36:8b:c5:e2:67:8d: 48:21:a4:88:b8:ad:5b:65:dd:e1:12:e9:75:b8:7a:52:1e:cf: b1:7e:70:f6:bd:cf:25:fb:f4:d2:41:a1:4c:b7:28:c7:e2:af: 8c:2a:24:74:d6:ec:fd:83:c0:25:db:cd:ee:f1:9f:57:58:7e: f1:0a:3b:69:17:0b:3d:2b:6c:b0:ef:66:91:3f:5c:6a:3c:79: 52:88:f2:f3:2e:06:5f:b6:71:95:be:27:13:6b:14:b8:1b:b4: f2:40:d1:26:a7:80:f9:8d:17:3f:3b:52:25:6e:03:b0:02:97: a7:d1:51:77:46:08:a0:01:10:10:c2:dd:4e:14:f1:7a:55:08: ea:ea:4d:62:ee:8f:41:6e:98:4a:59:d6:e0:e9:8a:52:1b:46: 21:b6:83:50:8f:80:30:78:0f:f3:09:86:8c:0d:a0:25:ef:5c: 80:2b:3b:96:74:b6:d0:c1:53:33:a7:70:47:a7:3b:ac:8a:b3: c2:33:20:61 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUSLk9HBDa4ORNR67O6JQIgxqGAjYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzFBRjhDOTk5RTlEMDZEQURFQkMzODdENzhCMzA1QUI4 NzE2REMyRjAeFw0yNjAzMTExMTU1MDJaFw0yNzAzMTAxMjAwMDJaMDMxMTAvBgNV BAMTKDVFQTgzRUZGQTYwQjM0Q0E3REIwMUYyODJGOEFCRTQwMTVENTkzMTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2K3yiYk4cyYAC+3tUDR5401YL /ZoEo1JcageORFVZiOpSdsFC9xNJiyfq4758t8CtKnwZ5qPLqHK1D8FYWNqeY3JO Fr89SJP8CIsrBzRZQiFTTHQDkWzbEazekb5vmJIZnan24aCedA60o4/e4LrUERca 2RCefM0TOEjxvgn3llLML/Zccri9/70y6Jn6b3A3im02cdoxxrN648Bns3DTd2nT Y/JdsfnLZB21dJeDtBX8+aFEqv9UJ9prdrZLGiRzJ4YAadtkxidztsLmIlaWZLjc cj0egSGwQ0q29E1jLYS/F+W8mNNI3SWwLhFp4nQRlR4wATYvwJTItCNMtzL9AgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUXqg+/6YLNMp9sB8oL4q+QBXVkxQwHwYDVR0j BBgwFoAUwa+MmZ6dBtrevDh9eLMFq4cW3C8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x OTIwNWU3Yy1hODgxLTQ4NzMtOTE4OC1lNTIxYjZhZjUyOWMvMC9DMUFGOEM5OTlF OUQwNkRBREVCQzM4N0Q3OEIzMDVBQjg3MTZEQzJGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzFBRjhDOTk5RTlEMDZEQURFQkMzODdENzhCMzA1QUI4NzE2 REMyRi5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE5MjA1ZTdjLWE4ODEtNDg3My05 MTg4LWU1MjFiNmFmNTI5Yy8wLzMxMzEzOTJlMzIzMzM1MmUzMjMwMzgyZTMwMmYz MjMwMmQzMjM0MjAzZDNlMjAzMTMzMzEzMTMxMzEucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAR369AwDQYJ KoZIhvcNAQELBQADggEBAGCLbTX37vQ8pc75vvrGBPgXof68/jMCg5I4vIm0MXiW aneBZZdkd+hrMGiaXX4FkUr61oDSitMn+zwUdu9gAHiPnTaLxeJnjUghpIi4rVtl 3eES6XW4elIez7F+cPa9zyX79NJBoUy3KMfir4wqJHTW7P2DwCXbze7xn1dYfvEK O2kXCz0rbLDvZpE/XGo8eVKI8vMuBl+2cZW+JxNrFLgbtPJA0SangPmNFz87UiVu A7ACl6fRUXdGCKABEBDC3U4U8XpVCOrqTWLuj0FumEpZ1uDpilIbRiG2g1CPgDB4 D/MJhowNoCXvXIArO5Z0ttDBUzOncEenO6yKs8IzIGE= -----END CERTIFICATE-----Generated at Fri Mar 20 20:29:55 2026 by rpki-client