$ rpki-client -vvf repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/3230322e37332e32352e302f32342d3234203d3e20313431383932.roa File: 3230322e37332e32352e302f32342d3234203d3e20313431383932.roa (raw, json) Hash identifier: 5PGTQ82qm10iiqwqCu9KXGx2jDotpMpVFWV8OCWnbmY= Subject key identifier: AB:28:D1:6F:77:2C:2B:A6:CC:00:C9:4A:9F:83:9D:35:6D:84:74:1B Certificate issuer: /CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A Certificate serial: 29D3A0585D6BE72B0F032948D7FD39655876989E Authority key identifier: 8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/3230322e37332e32352e302f32342d3234203d3e20313431383932.roa Signing time: Wed 18 Mar 2026 14:00:03 +0000 ROA not before: Wed 18 Mar 2026 13:55:03 +0000 ROA not after: Wed 17 Mar 2027 14:00:03 +0000 asID: 141892 IP address blocks: 202.73.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 04:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:d3:a0:58:5d:6b:e7:2b:0f:03:29:48:d7:fd:39:65:58:76:98:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A Validity Not Before: Mar 18 13:55:03 2026 GMT Not After : Mar 17 14:00:03 2027 GMT Subject: CN=AB28D16F772C2BA6CC00C94A9F839D356D84741B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:11:c9:40:46:30:c0:e8:0c:cd:b2:36:31:55: 3e:d6:0c:94:7d:ce:5b:f5:22:43:f3:13:94:d6:5b: 61:fb:f2:0a:50:ff:0c:43:5d:6f:81:9c:bd:98:23: 80:0f:04:d7:fd:96:d2:19:e6:d2:51:6e:07:46:29: 38:45:60:3b:20:5c:4c:6a:b4:3d:10:2e:3c:35:bb: 13:78:45:cc:5b:da:c1:d6:2d:0c:41:9f:f0:4f:9d: c7:38:7e:88:5e:5a:5b:06:c5:10:02:52:3d:36:62: d6:78:3d:0a:38:ec:f0:d8:f2:2b:c8:21:ad:e4:9c: 3c:f5:c9:24:41:59:f3:18:ff:53:de:49:4f:a6:34: f5:34:a3:a1:f9:12:49:a5:89:43:d6:45:75:4e:f9: 82:82:20:14:e5:b1:8f:5d:77:87:5d:90:d2:99:d9: 8a:df:cd:4b:85:ca:b6:c6:86:1f:d6:23:af:e0:2d: 31:e5:fc:77:23:22:82:0d:ec:ba:d6:d2:b1:ff:1c: 6d:fa:d2:49:33:0f:9f:9d:f5:4a:82:3b:f7:51:f1: 6e:3e:2d:d4:66:41:03:93:c7:87:8e:ad:7b:3b:d5: e8:50:37:83:f1:6d:b1:1b:b7:32:a5:05:20:53:56: 1d:c3:35:14:6c:3e:0d:16:00:52:ea:ab:e5:08:ec: b5:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:28:D1:6F:77:2C:2B:A6:CC:00:C9:4A:9F:83:9D:35:6D:84:74:1B X509v3 Authority Key Identifier: keyid:8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/3230322e37332e32352e302f32342d3234203d3e20313431383932.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.73.25.0/24 Signature Algorithm: sha256WithRSAEncryption 15:49:c8:e3:dc:ca:9e:47:08:84:5c:18:20:40:20:f7:88:e0: 5e:6d:fe:8a:34:cd:26:8a:6c:d4:0b:60:da:76:84:61:0f:72: 6a:bb:1b:65:27:6a:ff:4d:f0:1c:da:c3:b5:64:e8:6d:22:20: e7:36:5b:da:8a:7a:e9:ec:bd:6c:1f:1e:6c:df:23:dd:3e:58: 21:17:9d:46:d8:86:f5:26:4c:13:d3:3c:86:e4:dc:28:32:6e: 7b:ce:a1:eb:94:7d:53:e0:94:79:33:6b:10:26:9f:aa:9e:d2: 31:cd:f4:f0:63:1c:eb:24:a2:36:5b:d0:91:00:1c:03:dd:4b: 30:4a:55:81:f9:d3:b3:8e:c1:ee:5e:b7:b7:3a:51:78:de:f2: 7f:d7:4d:8c:ef:ca:cd:0d:f4:06:42:c0:16:00:44:8d:a0:be: 30:f0:7c:3a:62:ff:11:c7:15:97:cf:54:f3:06:38:d4:6f:dd: cd:40:42:cb:51:dc:1a:8f:5b:5e:ad:74:cd:ad:dd:c6:8d:8f: bf:f2:0c:c9:f9:f7:36:7a:da:eb:29:fa:ce:74:27:e4:3e:2e: 20:45:32:8e:f9:84:3a:19:04:9e:cf:9d:69:d5:b9:48:0c:14: 41:4f:23:7f:8c:c9:51:7c:94:7f:85:04:e4:63:54:96:36:26: 0c:2e:e3:c2 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUKdOgWF1r5ysPAylI1/05ZVh2mJ4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBCNzU4 QkY1MEY2QTAeFw0yNjAzMTgxMzU1MDNaFw0yNzAzMTcxNDAwMDNaMDMxMTAvBgNV BAMTKEFCMjhEMTZGNzcyQzJCQTZDQzAwQzk0QTlGODM5RDM1NkQ4NDc0MUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpEclARjDA6AzNsjYxVT7WDJR9 zlv1IkPzE5TWW2H78gpQ/wxDXW+BnL2YI4APBNf9ltIZ5tJRbgdGKThFYDsgXExq tD0QLjw1uxN4Rcxb2sHWLQxBn/BPncc4foheWlsGxRACUj02YtZ4PQo47PDY8ivI Ia3knDz1ySRBWfMY/1PeSU+mNPU0o6H5EkmliUPWRXVO+YKCIBTlsY9dd4ddkNKZ 2YrfzUuFyrbGhh/WI6/gLTHl/HcjIoIN7LrW0rH/HG360kkzD5+d9UqCO/dR8W4+ LdRmQQOTx4eOrXs71ehQN4PxbbEbtzKlBSBTVh3DNRRsPg0WAFLqq+UI7LXdAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUqyjRb3csK6bMAMlKn4OdNW2EdBswHwYDVR0j BBgwFoAUj4TW/ur4xdPF0T8QG8cLdYv1D2owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y N2Q5Zjg1MS03ZTczLTQzODQtOTUwZS04YmU4ZTE1ZmQzZWUvMC84Rjg0RDZGRUVB RjhDNUQzQzVEMTNGMTAxQkM3MEI3NThCRjUwRjZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBCNzU4QkY1 MEY2QS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI3ZDlmODUxLTdlNzMtNDM4NC05 NTBlLThiZThlMTVmZDNlZS8wLzMyMzAzMjJlMzczMzJlMzIzNTJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMxMzQzMTM4MzkzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMpJGTANBgkqhkiG 9w0BAQsFAAOCAQEAFUnI49zKnkcIhFwYIEAg94jgXm3+ijTNJops1Atg2naEYQ9y arsbZSdq/03wHNrDtWTobSIg5zZb2op66ey9bB8ebN8j3T5YIRedRtiG9SZME9M8 huTcKDJue86h65R9U+CUeTNrECafqp7SMc308GMc6ySiNlvQkQAcA91LMEpVgfnT s47B7l63tzpReN7yf9dNjO/KzQ30BkLAFgBEjaC+MPB8OmL/EccVl89U8wY41G/d zUBCy1HcGo9bXq10za3dxo2Pv/IMyfn3Nnra6yn6znQn5D4uIEUyjvmEOhkEns+d adW5SAwUQU8jf4zJUXyUf4UE5GNUljYmDC7jwg== -----END CERTIFICATE-----Generated at Thu Mar 26 23:46:43 2026 by rpki-client