$ rpki-client -vvf repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/3230322e37332e32362e302f32342d3234203d3e20313431383932.roa File: 3230322e37332e32362e302f32342d3234203d3e20313431383932.roa (raw, json) Hash identifier: rG7dqYKT5nt6ouasj9v32371Q08WX8SI0GPAVSyDUks= Subject key identifier: A3:7B:F7:C9:7B:13:FA:E5:52:DD:BD:62:6A:C0:06:2D:5D:59:1C:F0 Certificate issuer: /CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A Certificate serial: 695FDB2D46AC4CAA4E97F1A851C1E6795FD81318 Authority key identifier: 8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/3230322e37332e32362e302f32342d3234203d3e20313431383932.roa Signing time: Wed 18 Mar 2026 14:00:03 +0000 ROA not before: Wed 18 Mar 2026 13:55:03 +0000 ROA not after: Wed 17 Mar 2027 14:00:03 +0000 asID: 141892 IP address blocks: 202.73.26.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 04:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:5f:db:2d:46:ac:4c:aa:4e:97:f1:a8:51:c1:e6:79:5f:d8:13:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A Validity Not Before: Mar 18 13:55:03 2026 GMT Not After : Mar 17 14:00:03 2027 GMT Subject: CN=A37BF7C97B13FAE552DDBD626AC0062D5D591CF0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:6e:57:65:f0:76:84:0a:18:4d:97:2f:c5:fa: 7a:87:41:ad:d1:71:d0:e2:15:07:f5:07:da:45:1b: 7f:2c:63:d8:03:e1:f2:0d:74:60:e0:3a:07:ea:e5: 80:33:bb:a8:1b:a1:36:c0:68:87:f9:7c:5c:1a:35: 29:43:d0:8c:d7:85:e7:3c:97:e3:ee:74:09:d8:11: 15:be:c6:b1:fa:c2:cd:42:a2:6c:06:c8:99:af:61: 84:aa:f9:90:fb:7a:4d:5b:7f:2f:fc:c4:b9:85:32: 8d:c7:23:52:5c:d3:b1:15:62:60:42:81:1c:c1:8d: 61:bd:66:93:04:b8:5a:cd:9f:a9:fa:32:d8:4b:97: ec:8e:d4:5b:cd:c2:bc:ae:fd:9d:cf:2c:10:67:0a: cd:db:74:ad:16:85:42:9c:a3:ae:eb:7e:e4:aa:52: ba:82:07:4d:8a:d3:23:e2:f9:19:84:e1:b8:3c:6a: e7:79:d7:4a:82:06:90:78:a2:52:3d:70:9f:83:ce: 4d:dd:33:9d:54:18:ec:0c:14:60:04:46:73:f6:c1: 72:2a:2d:85:7a:81:76:c7:d3:ba:d2:8b:1f:f6:4a: c4:ee:17:8a:85:72:1c:5c:02:5d:77:32:0e:db:b4: bc:ec:84:77:2a:3d:1d:6b:c1:28:17:29:fd:be:58: fb:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:7B:F7:C9:7B:13:FA:E5:52:DD:BD:62:6A:C0:06:2D:5D:59:1C:F0 X509v3 Authority Key Identifier: keyid:8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/3230322e37332e32362e302f32342d3234203d3e20313431383932.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.73.26.0/24 Signature Algorithm: sha256WithRSAEncryption 50:94:45:00:c1:a0:2e:ca:f4:ba:43:8d:d6:2c:ac:85:3b:1a: 26:1f:0c:c5:6f:63:a0:6a:3e:39:16:97:b1:50:5d:09:18:c8: 2e:a2:1c:cd:09:58:b9:ef:0e:dc:8d:61:d5:8f:cd:13:12:ec: 44:a6:44:80:b3:51:25:ae:ca:53:46:3a:3a:f4:8a:e2:f9:6a: eb:3e:8b:a3:0f:18:9a:09:33:e3:bc:f7:25:29:49:01:d9:69: 2a:83:0e:9b:dd:4c:c6:b5:8d:32:75:22:ae:c7:6a:93:1d:7a: de:05:79:ef:75:68:6c:3d:e8:39:41:76:96:a5:da:35:8f:b9: fd:4c:eb:ae:34:91:4f:a7:46:d8:0c:a6:0d:1b:23:2b:e0:24: 8e:e7:29:a7:49:77:2a:58:01:b6:de:0e:52:10:38:b3:7e:79: cb:bf:1e:c3:12:65:8d:62:48:b5:8b:79:15:7e:fa:5e:ce:12: 72:e7:60:60:c3:f3:c2:48:00:55:7e:56:00:5c:43:fa:b4:4a: 03:ac:98:ad:b5:8e:ae:29:9f:08:4e:fa:d9:a4:fd:5c:34:50: 9e:5b:37:53:43:de:fc:cd:77:39:3e:64:df:6a:3e:8d:d5:d3: a0:85:1b:1c:ba:be:84:03:b7:92:d2:78:33:d9:5a:3b:e1:7b: 67:0e:6c:15 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUaV/bLUasTKpOl/GoUcHmeV/YExgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBCNzU4 QkY1MEY2QTAeFw0yNjAzMTgxMzU1MDNaFw0yNzAzMTcxNDAwMDNaMDMxMTAvBgNV BAMTKEEzN0JGN0M5N0IxM0ZBRTU1MkREQkQ2MjZBQzAwNjJENUQ1OTFDRjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2bldl8HaEChhNly/F+nqHQa3R cdDiFQf1B9pFG38sY9gD4fINdGDgOgfq5YAzu6gboTbAaIf5fFwaNSlD0IzXhec8 l+PudAnYERW+xrH6ws1ComwGyJmvYYSq+ZD7ek1bfy/8xLmFMo3HI1Jc07EVYmBC gRzBjWG9ZpMEuFrNn6n6MthLl+yO1FvNwryu/Z3PLBBnCs3bdK0WhUKco67rfuSq UrqCB02K0yPi+RmE4bg8aud510qCBpB4olI9cJ+Dzk3dM51UGOwMFGAERnP2wXIq LYV6gXbH07rSix/2SsTuF4qFchxcAl13Mg7btLzshHcqPR1rwSgXKf2+WPvrAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUo3v3yXsT+uVS3b1iasAGLV1ZHPAwHwYDVR0j BBgwFoAUj4TW/ur4xdPF0T8QG8cLdYv1D2owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y N2Q5Zjg1MS03ZTczLTQzODQtOTUwZS04YmU4ZTE1ZmQzZWUvMC84Rjg0RDZGRUVB RjhDNUQzQzVEMTNGMTAxQkM3MEI3NThCRjUwRjZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBCNzU4QkY1 MEY2QS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI3ZDlmODUxLTdlNzMtNDM4NC05 NTBlLThiZThlMTVmZDNlZS8wLzMyMzAzMjJlMzczMzJlMzIzNjJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMxMzQzMTM4MzkzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMpJGjANBgkqhkiG 9w0BAQsFAAOCAQEAUJRFAMGgLsr0ukON1iyshTsaJh8MxW9joGo+ORaXsVBdCRjI LqIczQlYue8O3I1h1Y/NExLsRKZEgLNRJa7KU0Y6OvSK4vlq6z6Low8Ymgkz47z3 JSlJAdlpKoMOm91MxrWNMnUirsdqkx163gV573VobD3oOUF2lqXaNY+5/UzrrjSR T6dG2AymDRsjK+Akjucpp0l3KlgBtt4OUhA4s355y78ewxJljWJItYt5FX76Xs4S cudgYMPzwkgAVX5WAFxD+rRKA6yYrbWOrimfCE762aT9XDRQnls3U0Pe/M13OT5k 32o+jdXToIUbHLq+hAO3ktJ4M9laO+F7Zw5sFQ== -----END CERTIFICATE-----Generated at Fri Mar 27 05:08:09 2026 by rpki-client