$ rpki-client -vvf repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/3131392e3131302e36382e302f32322d3234203d3e203338333230.roa File: 3131392e3131302e36382e302f32322d3234203d3e203338333230.roa (raw, json) Hash identifier: +/NKATGB5uQMThm7QeKGnVHTe5xcp8ImXTgyPu6itTk= Subject key identifier: 65:E6:FA:05:6F:A5:CB:41:E9:3F:CB:D9:D3:01:8E:DA:90:92:FE:50 Certificate issuer: /CN=C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1 Certificate serial: 58E71D5A237525120F9816ACFF2A1484B7950CF8 Authority key identifier: C8:DD:5D:84:FA:FA:BF:7E:AF:62:B3:B0:F4:E4:5A:23:31:F8:02:E1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/3131392e3131302e36382e302f32322d3234203d3e203338333230.roa Signing time: Tue 27 Jan 2026 04:00:00 +0000 ROA not before: Tue 27 Jan 2026 03:55:00 +0000 ROA not after: Tue 26 Jan 2027 04:00:00 +0000 asID: 38320 IP address blocks: 119.110.68.0/22 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.crl rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Feb 2026 09:49:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:e7:1d:5a:23:75:25:12:0f:98:16:ac:ff:2a:14:84:b7:95:0c:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1 Validity Not Before: Jan 27 03:55:00 2026 GMT Not After : Jan 26 04:00:00 2027 GMT Subject: CN=65E6FA056FA5CB41E93FCBD9D3018EDA9092FE50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:f4:8c:59:2d:69:91:0f:51:53:51:e4:60:0b: 17:9c:5b:b7:5f:16:84:61:53:e3:b9:b1:c4:d9:57: 76:42:aa:fb:0f:ea:a3:d4:0c:f2:62:42:97:ad:3b: ad:11:d6:24:07:1b:cb:da:61:98:20:86:fd:f4:d2: 7b:4c:c8:97:19:e9:e6:6d:03:4a:ee:a5:e7:1d:95: f7:36:1b:3b:cb:13:cf:21:c1:68:a2:f6:3d:86:e2: 9f:3b:c4:5d:cf:a5:75:ac:7e:6d:b4:aa:b9:0e:f7: 0b:fd:32:00:21:a8:69:5b:45:68:86:57:00:e3:a7: 65:dd:8f:4b:3f:c2:be:4e:cb:0c:9e:29:15:b8:d4: 53:ac:c7:dc:08:f6:8b:aa:1a:d8:71:75:bc:0d:1e: 23:d6:4f:98:25:4a:48:35:72:f2:10:ab:10:5a:29: 6f:e9:ad:1e:7d:0d:33:5e:f9:a4:81:24:0c:d8:7b: f6:84:8c:4b:2e:ac:84:10:36:58:ea:f4:6b:c8:1a: f2:64:38:67:b8:72:f5:a2:7a:7b:15:09:e1:96:11: bc:a2:f0:1f:f8:49:b3:b6:8c:cb:50:22:fe:8b:11: 1b:1e:79:1b:28:ec:4a:83:9b:60:4c:1b:44:0d:b9: 69:4c:b1:da:69:a3:61:d9:e7:50:45:f6:1b:f5:f7: 8a:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:E6:FA:05:6F:A5:CB:41:E9:3F:CB:D9:D3:01:8E:DA:90:92:FE:50 X509v3 Authority Key Identifier: keyid:C8:DD:5D:84:FA:FA:BF:7E:AF:62:B3:B0:F4:E4:5A:23:31:F8:02:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/3131392e3131302e36382e302f32322d3234203d3e203338333230.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 119.110.68.0/22 Signature Algorithm: sha256WithRSAEncryption 10:2b:e3:58:67:59:97:3d:88:5c:15:a5:70:36:fd:cb:a7:ce: 51:33:24:22:3d:cc:75:30:6f:91:4c:c9:01:1a:2e:f4:f1:62: a9:79:98:93:f2:5f:d2:6d:50:68:c0:9a:42:c4:04:cb:a3:ed: bd:a0:8d:65:37:2f:ea:d1:86:1a:b6:1d:1e:e5:da:76:df:3b: 49:30:b9:be:5c:f6:0e:a4:61:06:a6:cf:fd:b1:ba:65:3c:a5: 98:43:e4:d4:ed:da:3e:5e:72:99:a4:7c:5e:45:f0:0d:b6:f8: 91:14:63:89:3d:16:28:99:26:89:ca:d3:cb:41:9c:bf:93:58: 46:ad:8b:1c:3b:3a:84:d4:dd:17:91:30:07:04:2c:e7:7d:f1: 41:1b:cd:11:a7:51:55:0b:50:8a:21:b6:93:92:84:c5:49:9e: 80:c1:ca:00:51:91:84:0d:94:24:93:0b:d9:4f:cc:eb:10:89: 6e:72:84:6f:dd:06:cc:c1:80:fa:6c:e8:44:d0:46:06:fc:e9: ab:da:92:c7:8b:06:1c:16:21:36:62:62:34:e3:9f:ce:95:bf: 7a:ce:56:3a:68:96:6d:57:0b:36:dc:aa:22:92:89:5b:5d:af: 13:d0:82:f8:a5:76:e0:60:69:c1:d6:2d:33:46:80:f1:fa:2e: d6:61:03:47 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUWOcdWiN1JRIPmBas/yoUhLeVDPgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzhERDVEODRGQUZBQkY3RUFGNjJCM0IwRjRFNDVBMjMz MUY4MDJFMTAeFw0yNjAxMjcwMzU1MDBaFw0yNzAxMjYwNDAwMDBaMDMxMTAvBgNV BAMTKDY1RTZGQTA1NkZBNUNCNDFFOTNGQ0JEOUQzMDE4RURBOTA5MkZFNTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDT9IxZLWmRD1FTUeRgCxecW7df FoRhU+O5scTZV3ZCqvsP6qPUDPJiQpetO60R1iQHG8vaYZgghv300ntMyJcZ6eZt A0rupecdlfc2GzvLE88hwWii9j2G4p87xF3PpXWsfm20qrkO9wv9MgAhqGlbRWiG VwDjp2Xdj0s/wr5OywyeKRW41FOsx9wI9ouqGthxdbwNHiPWT5glSkg1cvIQqxBa KW/prR59DTNe+aSBJAzYe/aEjEsurIQQNljq9GvIGvJkOGe4cvWiensVCeGWEbyi 8B/4SbO2jMtQIv6LERseeRso7EqDm2BMG0QNuWlMsdppo2HZ51BF9hv194rZAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUZeb6BW+ly0HpP8vZ0wGO2pCS/lAwHwYDVR0j BBgwFoAUyN1dhPr6v36vYrOw9ORaIzH4AuEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h OTQ1Yjg2ZS0wODk1LTQ3NTktYTc3Yy1hMDZjZTE0ZTI0M2MvMC9DOERENUQ4NEZB RkFCRjdFQUY2MkIzQjBGNEU0NUEyMzMxRjgwMkUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzhERDVEODRGQUZBQkY3RUFGNjJCM0IwRjRFNDVBMjMzMUY4 MDJFMS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E5NDViODZlLTA4OTUtNDc1OS1h NzdjLWEwNmNlMTRlMjQzYy8wLzMxMzEzOTJlMzEzMTMwMmUzNjM4MmUzMDJmMzIz MjJkMzIzNDIwM2QzZTIwMzMzODMzMzIzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAnduRDANBgkqhkiG 9w0BAQsFAAOCAQEAECvjWGdZlz2IXBWlcDb9y6fOUTMkIj3MdTBvkUzJARou9PFi qXmYk/Jf0m1QaMCaQsQEy6PtvaCNZTcv6tGGGrYdHuXadt87STC5vlz2DqRhBqbP /bG6ZTylmEPk1O3aPl5ymaR8XkXwDbb4kRRjiT0WKJkmicrTy0Gcv5NYRq2LHDs6 hNTdF5EwBwQs533xQRvNEadRVQtQiiG2k5KExUmegMHKAFGRhA2UJJML2U/M6xCJ bnKEb90GzMGA+mzoRNBGBvzpq9qSx4sGHBYhNmJiNOOfzpW/es5WOmiWbVcLNtyq IpKJW12vE9CC+KV24GBpwdYtM0aA8fou1mEDRw== -----END CERTIFICATE-----Generated at Fri Feb 20 01:39:33 2026 by rpki-client