$ rpki-client -vvf repo-rpki.idnic.net/repo/c57b90cb-8ebd-4c7b-8c31-133a8b4ed69c/0/3131382e3135312e3232332e302f32342d3234203d3e203436303332.roa File: 3131382e3135312e3232332e302f32342d3234203d3e203436303332.roa (raw, json) Hash identifier: o45xNgmjdV7JqlkFiaWnM1npwVHX93KdX+4bHjpCk7Y= Subject key identifier: 35:55:91:06:2D:EC:21:2E:59:F4:85:EA:A5:FE:7B:E7:F0:6B:9A:8A Certificate issuer: /CN=F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8 Certificate serial: 2F95BF329D3E57346A6B6F566A72662C54476103 Authority key identifier: F1:B7:1C:4F:9F:FB:EC:16:8C:86:45:DF:F7:9B:A9:06:BE:B2:3F:E8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c57b90cb-8ebd-4c7b-8c31-133a8b4ed69c/0/3131382e3135312e3232332e302f32342d3234203d3e203436303332.roa Signing time: Wed 11 Mar 2026 11:00:01 +0000 ROA not before: Wed 11 Mar 2026 10:55:01 +0000 ROA not after: Wed 10 Mar 2027 11:00:01 +0000 asID: 46032 IP address blocks: 118.151.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c57b90cb-8ebd-4c7b-8c31-133a8b4ed69c/0/F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.crl rsync://repo-rpki.idnic.net/repo/c57b90cb-8ebd-4c7b-8c31-133a8b4ed69c/0/F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Mar 2026 09:33:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:95:bf:32:9d:3e:57:34:6a:6b:6f:56:6a:72:66:2c:54:47:61:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8 Validity Not Before: Mar 11 10:55:01 2026 GMT Not After : Mar 10 11:00:01 2027 GMT Subject: CN=355591062DEC212E59F485EAA5FE7BE7F06B9A8A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:22:95:c8:9f:fc:c2:82:5a:86:ac:bd:3b:24: f9:7c:7f:34:74:e3:42:7a:c8:e1:54:c5:e8:2d:5f: 2f:43:1e:2d:24:e1:cc:6c:ef:a2:25:a7:9a:a6:af: bb:1f:3f:05:79:a9:04:c2:67:07:e7:d2:a5:68:27: 09:7f:31:bd:18:45:91:dc:0c:5f:02:e9:68:9c:b1: b3:59:ec:89:cf:11:c6:b8:1e:ea:28:f2:b2:d8:99: 7b:b4:bc:37:80:e6:5b:ae:44:c7:99:35:3c:01:72: b9:56:21:9a:16:9a:48:78:7e:55:10:6f:bc:98:52: bb:cc:d8:f2:86:da:2d:ba:00:d1:92:7f:89:9a:d5: d9:16:87:90:73:cb:bf:c1:64:f3:09:68:09:57:df: c4:5f:2f:ea:3e:74:75:e4:a2:7d:8b:ce:9d:07:12: e8:53:5e:9a:44:3c:19:54:a7:5b:3a:22:b6:59:e9: a3:ee:a2:27:0f:c6:eb:fd:23:24:6c:46:54:47:2f: 4e:86:1b:80:4f:d8:f2:8d:5b:4b:8a:48:48:2c:26: 22:7e:a2:9d:16:1a:f5:f6:1e:92:47:30:6d:85:ac: c1:53:d3:63:6e:e7:64:21:7c:38:d9:bb:49:4d:f8: 91:b7:0c:f2:44:67:66:ad:d2:68:93:7b:7d:4e:88: 38:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:55:91:06:2D:EC:21:2E:59:F4:85:EA:A5:FE:7B:E7:F0:6B:9A:8A X509v3 Authority Key Identifier: keyid:F1:B7:1C:4F:9F:FB:EC:16:8C:86:45:DF:F7:9B:A9:06:BE:B2:3F:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c57b90cb-8ebd-4c7b-8c31-133a8b4ed69c/0/F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c57b90cb-8ebd-4c7b-8c31-133a8b4ed69c/0/3131382e3135312e3232332e302f32342d3234203d3e203436303332.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 118.151.223.0/24 Signature Algorithm: sha256WithRSAEncryption 58:55:3d:b1:44:88:0c:09:ec:9b:fb:fe:06:c4:88:4d:04:f5: a3:61:47:c6:6c:b4:80:cd:71:cb:8c:fe:bb:6f:9f:6c:6f:71: 68:7f:0d:3d:e1:fd:30:fe:21:9a:c7:8e:71:66:95:be:0c:ff: 78:53:28:66:95:da:94:96:ec:68:28:bd:51:03:4d:7a:d0:1c: aa:b8:46:40:50:c1:47:3f:4a:a4:2e:bc:9f:fe:be:a7:25:36: ef:33:2a:5e:90:c0:e9:eb:86:be:61:00:b8:15:6d:6f:43:b7: 5f:e8:e3:b2:dd:99:46:dd:c1:e9:1c:ec:0f:d6:db:5b:0a:07: 8e:e5:14:25:8b:8f:46:0c:ef:4f:3f:6e:3b:2e:2d:aa:14:58: 59:5d:a7:23:ef:4c:da:8f:f2:3a:d8:16:b9:82:d2:e8:8b:5c: ae:6f:13:0a:9e:d4:c4:a5:68:4c:19:05:59:cb:21:a2:b3:3c: 70:63:04:34:a1:18:63:a7:47:09:e2:a5:a5:6e:b6:f9:c9:87: a9:e8:ef:08:73:82:3a:77:a1:f5:69:e8:fb:62:ca:dd:e4:be: ea:94:e8:a1:87:07:6c:fd:03:a2:5d:ee:50:18:25:cc:e9:28: 85:55:e3:16:01:54:96:54:cc:db:3f:60:08:41:94:b9:be:0a: 7e:11:8c:ba -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUL5W/Mp0+VzRqa29WanJmLFRHYQMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjFCNzFDNEY5RkZCRUMxNjhDODY0NURGRjc5QkE5MDZC RUIyM0ZFODAeFw0yNjAzMTExMDU1MDFaFw0yNzAzMTAxMTAwMDFaMDMxMTAvBgNV BAMTKDM1NTU5MTA2MkRFQzIxMkU1OUY0ODVFQUE1RkU3QkU3RjA2QjlBOEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMIpXIn/zCglqGrL07JPl8fzR0 40J6yOFUxegtXy9DHi0k4cxs76Ilp5qmr7sfPwV5qQTCZwfn0qVoJwl/Mb0YRZHc DF8C6WicsbNZ7InPEca4Huoo8rLYmXu0vDeA5luuRMeZNTwBcrlWIZoWmkh4flUQ b7yYUrvM2PKG2i26ANGSf4ma1dkWh5Bzy7/BZPMJaAlX38RfL+o+dHXkon2Lzp0H EuhTXppEPBlUp1s6IrZZ6aPuoicPxuv9IyRsRlRHL06GG4BP2PKNW0uKSEgsJiJ+ op0WGvX2HpJHMG2FrMFT02Nu52QhfDjZu0lN+JG3DPJEZ2at0miTe31OiDjXAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUNVWRBi3sIS5Z9IXqpf575/BrmoowHwYDVR0j BBgwFoAU8bccT5/77BaMhkXf95upBr6yP+gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NTdiOTBjYi04ZWJkLTRjN2ItOGMzMS0xMzNhOGI0ZWQ2OWMvMC9GMUI3MUM0RjlG RkJFQzE2OEM4NjQ1REZGNzlCQTkwNkJFQjIzRkU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjFCNzFDNEY5RkZCRUMxNjhDODY0NURGRjc5QkE5MDZCRUIy M0ZFOC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2M1N2I5MGNiLThlYmQtNGM3Yi04 YzMxLTEzM2E4YjRlZDY5Yy8wLzMxMzEzODJlMzEzNTMxMmUzMjMyMzMyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzNDM2MzAzMzMyLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAdpffMA0GCSqG SIb3DQEBCwUAA4IBAQBYVT2xRIgMCeyb+/4GxIhNBPWjYUfGbLSAzXHLjP67b59s b3Fofw094f0w/iGax45xZpW+DP94UyhmldqUluxoKL1RA0160ByquEZAUMFHP0qk Lryf/r6nJTbvMypekMDp64a+YQC4FW1vQ7df6OOy3ZlG3cHpHOwP1ttbCgeO5RQl i49GDO9PP247Li2qFFhZXacj70zaj/I62Ba5gtLoi1yubxMKntTEpWhMGQVZyyGi szxwYwQ0oRhjp0cJ4qWlbrb5yYep6O8Ic4I6d6H1aej7Ysrd5L7qlOihhwds/QOi Xe5QGCXM6SiFVeMWAVSWVMzbP2AIQZS5vgp+EYy6 -----END CERTIFICATE-----Generated at Thu Mar 19 13:25:26 2026 by rpki-client