$ rpki-client -vvf repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/3230322e3135302e3136382e302f32332d3233203d3e203435373235.roa File: 3230322e3135302e3136382e302f32332d3233203d3e203435373235.roa (raw, json) Hash identifier: buuz3h7IUSUE3vmqxkV+mh5MrWZbR7xAWRgxwVNkyjA= Subject key identifier: BD:BA:68:28:0F:8F:D6:7E:95:8D:47:A5:BA:E0:04:17:C0:0D:1D:6D Certificate issuer: /CN=BE7F813F3C6CA289A9CDAC5630975B7627458103 Certificate serial: 015C71033467C8A22A451CE827AB12858076D830 Authority key identifier: BE:7F:81:3F:3C:6C:A2:89:A9:CD:AC:56:30:97:5B:76:27:45:81:03 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE7F813F3C6CA289A9CDAC5630975B7627458103.cer Subject info access: rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/3230322e3135302e3136382e302f32332d3233203d3e203435373235.roa Signing time: Sun 08 Mar 2026 16:00:02 +0000 ROA not before: Sun 08 Mar 2026 15:55:02 +0000 ROA not after: Sun 07 Mar 2027 16:00:02 +0000 asID: 45725 IP address blocks: 202.150.168.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/BE7F813F3C6CA289A9CDAC5630975B7627458103.crl rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/BE7F813F3C6CA289A9CDAC5630975B7627458103.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE7F813F3C6CA289A9CDAC5630975B7627458103.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 30 Mar 2026 01:32:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:5c:71:03:34:67:c8:a2:2a:45:1c:e8:27:ab:12:85:80:76:d8:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE7F813F3C6CA289A9CDAC5630975B7627458103 Validity Not Before: Mar 8 15:55:02 2026 GMT Not After : Mar 7 16:00:02 2027 GMT Subject: CN=BDBA68280F8FD67E958D47A5BAE00417C00D1D6D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:32:4b:c1:6c:7c:a5:3b:c6:ee:76:58:77:26: 80:0f:57:d1:a5:05:75:18:b9:95:c8:03:ea:39:d5: a6:cb:7c:b3:a4:ef:10:cf:92:16:ef:4d:b8:f2:1e: f4:5d:11:7d:ff:6f:e6:b5:66:3d:db:21:e8:c3:07: ab:2a:e6:53:1b:89:e9:ae:9e:a3:3d:23:9e:74:1f: 5f:51:cf:08:58:c2:9d:59:7d:3b:df:9d:ce:25:ea: b2:20:11:21:57:ae:68:20:50:07:e1:3e:34:b3:b3: 16:f7:b2:05:0a:f4:e0:94:1d:63:72:23:39:11:f5: a8:3b:0b:a7:9c:c4:1d:8e:88:49:b5:61:eb:6e:dd: 71:eb:2f:bb:60:c7:85:a5:fb:5a:ac:f3:6d:c0:2c: cc:24:b1:5c:57:56:8f:b9:97:9f:a6:f7:90:50:18: 71:c8:46:eb:d9:e4:39:a8:44:f6:5a:a8:cf:3d:3a: de:52:51:ae:96:30:08:a7:ae:0e:97:91:8d:5f:83: 2f:04:fb:b3:87:ed:cd:d6:6f:4a:d0:65:27:3d:b2: 1c:ca:4f:19:25:a5:b0:2c:b9:d0:e8:16:eb:ba:5e: bf:9e:fa:40:f8:93:4a:c1:6b:3d:a9:2a:23:98:a6: f7:2e:30:64:d6:75:4d:db:9d:8f:f7:66:8e:00:c7: 36:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:BA:68:28:0F:8F:D6:7E:95:8D:47:A5:BA:E0:04:17:C0:0D:1D:6D X509v3 Authority Key Identifier: keyid:BE:7F:81:3F:3C:6C:A2:89:A9:CD:AC:56:30:97:5B:76:27:45:81:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/BE7F813F3C6CA289A9CDAC5630975B7627458103.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE7F813F3C6CA289A9CDAC5630975B7627458103.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/3230322e3135302e3136382e302f32332d3233203d3e203435373235.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.150.168.0/23 Signature Algorithm: sha256WithRSAEncryption c4:68:fa:22:6e:01:ba:0e:76:67:91:60:41:16:6d:93:25:2e: 2f:2c:c7:ca:cf:a5:c6:29:51:22:cd:81:dc:03:a8:7f:82:f6: a8:f8:51:62:78:81:86:62:8b:fa:4c:9f:0c:08:a2:ab:87:9e: a2:e3:06:32:f7:be:0a:95:05:c2:87:8d:37:f9:9e:82:fc:68: 4a:f3:11:11:9a:cd:f0:80:24:c4:e1:c0:1f:3d:e4:7e:f9:1a: 26:a3:e4:da:55:0e:da:2a:55:d1:92:52:a6:eb:17:48:f1:dd: 7f:5d:1c:ff:cc:33:8d:ed:d9:89:c5:e6:f2:ce:5f:5e:a1:f6: 9e:5c:af:e7:cf:59:f5:9e:6f:2e:2c:6a:7d:46:71:2f:5c:e8: c3:a2:8d:49:42:77:49:46:59:00:e6:15:98:2e:7c:3a:0b:be: ba:1d:d5:d5:3a:f7:d9:b6:4c:73:8a:7f:71:e0:3e:f3:e4:84: f1:c2:ce:33:aa:99:0a:5c:25:bf:91:b5:26:25:43:e2:f0:33: f3:eb:d6:f0:71:f7:68:ba:5f:43:ad:ae:71:78:85:47:35:ae: 5d:86:f1:fc:ee:46:68:27:da:a8:94:ba:be:02:2f:7a:39:6e: 5d:4e:10:e5:00:a9:f5:14:d0:0c:70:bf:70:18:79:ab:f2:db: 57:8a:ef:fc -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUAVxxAzRnyKIqRRzoJ6sShYB22DAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkU3RjgxM0YzQzZDQTI4OUE5Q0RBQzU2MzA5NzVCNzYy NzQ1ODEwMzAeFw0yNjAzMDgxNTU1MDJaFw0yNzAzMDcxNjAwMDJaMDMxMTAvBgNV BAMTKEJEQkE2ODI4MEY4RkQ2N0U5NThENDdBNUJBRTAwNDE3QzAwRDFENkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoMkvBbHylO8budlh3JoAPV9Gl BXUYuZXIA+o51abLfLOk7xDPkhbvTbjyHvRdEX3/b+a1Zj3bIejDB6sq5lMbiemu nqM9I550H19RzwhYwp1ZfTvfnc4l6rIgESFXrmggUAfhPjSzsxb3sgUK9OCUHWNy IzkR9ag7C6ecxB2OiEm1Yetu3XHrL7tgx4Wl+1qs823ALMwksVxXVo+5l5+m95BQ GHHIRuvZ5DmoRPZaqM89Ot5SUa6WMAinrg6XkY1fgy8E+7OH7c3Wb0rQZSc9shzK TxklpbAsudDoFuu6Xr+e+kD4k0rBaz2pKiOYpvcuMGTWdU3bnY/3Zo4AxzabAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUvbpoKA+P1n6VjUeluuAEF8ANHW0wHwYDVR0j BBgwFoAUvn+BPzxsoompzaxWMJdbdidFgQMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NDQyMTZkOC03MGNlLTQ5MDgtYTcyYi1lYzI3M2Y0M2JiYzIvMC9CRTdGODEzRjND NkNBMjg5QTlDREFDNTYzMDk3NUI3NjI3NDU4MTAzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkU3RjgxM0YzQzZDQTI4OUE5Q0RBQzU2MzA5NzVCNzYyNzQ1 ODEwMy5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzY0NDIxNmQ4LTcwY2UtNDkwOC1h NzJiLWVjMjczZjQzYmJjMi8wLzMyMzAzMjJlMzEzNTMwMmUzMTM2MzgyZTMwMmYz MjMzMmQzMjMzMjAzZDNlMjAzNDM1MzczMjM1LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBypaoMA0GCSqG SIb3DQEBCwUAA4IBAQDEaPoibgG6DnZnkWBBFm2TJS4vLMfKz6XGKVEizYHcA6h/ gvao+FFieIGGYov6TJ8MCKKrh56i4wYy974KlQXCh403+Z6C/GhK8xERms3wgCTE 4cAfPeR++Romo+TaVQ7aKlXRklKm6xdI8d1/XRz/zDON7dmJxebyzl9eofaeXK/n z1n1nm8uLGp9RnEvXOjDoo1JQndJRlkA5hWYLnw6C766HdXVOvfZtkxzin9x4D7z 5ITxws4zqpkKXCW/kbUmJUPi8DPz69bwcfdoul9Dra5xeIVHNa5dhvH87kZoJ9qo lLq+Ai96OW5dThDlAKn1FNAMcL9wGHmr8ttXiu/8 -----END CERTIFICATE-----Generated at Fri Mar 27 01:17:20 2026 by rpki-client