$ rpki-client -vvf repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/3230322e3135302e3137302e302f32332d3233203d3e203435373235.roa File: 3230322e3135302e3137302e302f32332d3233203d3e203435373235.roa (raw, json) Hash identifier: i2j5dGLqguTNRyVVnTnQvwJftdD5JJkqTrPIfWKddps= Subject key identifier: 02:EB:61:C9:96:DE:BE:0D:50:D2:D5:2D:EE:40:4E:12:12:EE:9F:B4 Certificate issuer: /CN=BE7F813F3C6CA289A9CDAC5630975B7627458103 Certificate serial: 1E016DAED5BD77AFC3A5609DEA90F3A02D80A610 Authority key identifier: BE:7F:81:3F:3C:6C:A2:89:A9:CD:AC:56:30:97:5B:76:27:45:81:03 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE7F813F3C6CA289A9CDAC5630975B7627458103.cer Subject info access: rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/3230322e3135302e3137302e302f32332d3233203d3e203435373235.roa Signing time: Sun 08 Mar 2026 16:00:02 +0000 ROA not before: Sun 08 Mar 2026 15:55:02 +0000 ROA not after: Sun 07 Mar 2027 16:00:02 +0000 asID: 45725 IP address blocks: 202.150.170.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/BE7F813F3C6CA289A9CDAC5630975B7627458103.crl rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/BE7F813F3C6CA289A9CDAC5630975B7627458103.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE7F813F3C6CA289A9CDAC5630975B7627458103.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 21:55:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:01:6d:ae:d5:bd:77:af:c3:a5:60:9d:ea:90:f3:a0:2d:80:a6:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE7F813F3C6CA289A9CDAC5630975B7627458103 Validity Not Before: Mar 8 15:55:02 2026 GMT Not After : Mar 7 16:00:02 2027 GMT Subject: CN=02EB61C996DEBE0D50D2D52DEE404E1212EE9FB4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:99:48:f2:7d:12:19:21:7a:37:e2:f2:30:dd: 5d:ed:69:4d:c1:73:f2:fa:f1:d3:41:02:58:32:58: 6b:0e:85:93:1d:ef:ad:07:32:c5:4b:8e:86:9c:92: 5a:4a:ba:01:c0:47:90:ad:67:6f:70:4a:e6:d0:72: 05:c5:3d:3f:3d:d8:3d:11:9b:70:dc:c6:97:df:4d: bb:de:76:b9:50:81:28:4e:9d:74:8a:cc:ea:f3:2a: 32:68:21:df:8b:6c:a0:3e:d4:db:e2:78:f4:41:22: 94:64:91:61:4f:4b:f2:1e:59:0b:2b:1d:98:6b:00: 5c:fd:f0:36:db:0f:91:8e:88:0d:ff:6c:30:43:d0: fe:0a:be:89:50:54:80:18:95:f3:d4:1b:f4:51:52: 48:fd:71:06:6e:54:c9:e1:d6:20:b6:66:cf:3c:61: e3:84:94:36:ae:eb:bd:7d:c0:86:dd:2e:f7:a4:8c: 48:89:e1:cc:c7:65:c7:ad:3c:4e:42:8a:05:4c:51: ab:50:82:de:d3:9c:22:d3:8b:5b:c0:26:40:1c:81: 05:9f:a9:a2:c4:8c:a8:53:87:d7:bc:25:8c:c8:1e: 12:9a:78:29:35:8c:5a:99:fd:8e:93:a3:3d:de:64: 32:66:83:d1:2a:5f:09:0c:47:66:10:86:3b:61:96: ac:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:EB:61:C9:96:DE:BE:0D:50:D2:D5:2D:EE:40:4E:12:12:EE:9F:B4 X509v3 Authority Key Identifier: keyid:BE:7F:81:3F:3C:6C:A2:89:A9:CD:AC:56:30:97:5B:76:27:45:81:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/BE7F813F3C6CA289A9CDAC5630975B7627458103.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE7F813F3C6CA289A9CDAC5630975B7627458103.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/3230322e3135302e3137302e302f32332d3233203d3e203435373235.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.150.170.0/23 Signature Algorithm: sha256WithRSAEncryption 1e:a4:be:80:29:83:51:60:fd:86:72:75:18:35:0a:7e:9d:c0: 53:8c:f2:f4:24:37:84:41:21:00:b7:64:08:04:07:bf:1e:7c: 0d:46:6d:6c:05:45:4f:1c:bc:3b:cf:10:28:aa:a5:d3:6b:4e: 93:cc:6f:9b:57:75:3f:a8:d8:f1:8b:03:7c:47:f2:03:e5:71: 9d:cd:79:66:5c:93:1f:c9:d1:f2:32:ab:13:8a:d8:c1:7b:48: b3:ad:e4:d9:95:02:d5:f7:f7:82:65:76:00:3a:ed:61:75:4a: be:ae:7a:5a:de:55:3a:94:af:05:15:2d:53:5c:7a:ac:bd:51: 2d:82:b3:a4:8a:34:f3:4b:f9:07:46:1a:44:4d:79:69:5e:99: fc:cf:c9:42:e4:2a:3c:9c:cb:96:29:b8:e9:51:09:4d:4b:dd: ca:d8:e1:20:dd:9d:29:ad:b3:e3:fe:61:7b:55:d2:3d:97:e2: d8:4c:b1:56:79:71:33:58:1d:9d:bc:28:92:9e:14:91:4b:b2: 99:84:b9:68:f5:56:50:06:b6:fd:bd:3f:0d:79:96:7b:78:bc: fc:46:6d:56:06:26:f8:7a:e1:cd:22:1f:47:4e:ae:20:2e:f2: 11:9f:36:a0:1f:0c:28:4f:69:30:24:a4:0a:09:cf:a7:ce:e9: 7a:d3:64:db -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUHgFtrtW9d6/DpWCd6pDzoC2AphAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkU3RjgxM0YzQzZDQTI4OUE5Q0RBQzU2MzA5NzVCNzYy NzQ1ODEwMzAeFw0yNjAzMDgxNTU1MDJaFw0yNzAzMDcxNjAwMDJaMDMxMTAvBgNV BAMTKDAyRUI2MUM5OTZERUJFMEQ1MEQyRDUyREVFNDA0RTEyMTJFRTlGQjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbmUjyfRIZIXo34vIw3V3taU3B c/L68dNBAlgyWGsOhZMd760HMsVLjoacklpKugHAR5CtZ29wSubQcgXFPT892D0R m3DcxpffTbvedrlQgShOnXSKzOrzKjJoId+LbKA+1NviePRBIpRkkWFPS/IeWQsr HZhrAFz98DbbD5GOiA3/bDBD0P4KvolQVIAYlfPUG/RRUkj9cQZuVMnh1iC2Zs88 YeOElDau6719wIbdLvekjEiJ4czHZcetPE5CigVMUatQgt7TnCLTi1vAJkAcgQWf qaLEjKhTh9e8JYzIHhKaeCk1jFqZ/Y6Toz3eZDJmg9EqXwkMR2YQhjthlqxXAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUAuthyZbevg1Q0tUt7kBOEhLun7QwHwYDVR0j BBgwFoAUvn+BPzxsoompzaxWMJdbdidFgQMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NDQyMTZkOC03MGNlLTQ5MDgtYTcyYi1lYzI3M2Y0M2JiYzIvMC9CRTdGODEzRjND NkNBMjg5QTlDREFDNTYzMDk3NUI3NjI3NDU4MTAzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkU3RjgxM0YzQzZDQTI4OUE5Q0RBQzU2MzA5NzVCNzYyNzQ1 ODEwMy5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzY0NDIxNmQ4LTcwY2UtNDkwOC1h NzJiLWVjMjczZjQzYmJjMi8wLzMyMzAzMjJlMzEzNTMwMmUzMTM3MzAyZTMwMmYz MjMzMmQzMjMzMjAzZDNlMjAzNDM1MzczMjM1LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBypaqMA0GCSqG SIb3DQEBCwUAA4IBAQAepL6AKYNRYP2GcnUYNQp+ncBTjPL0JDeEQSEAt2QIBAe/ HnwNRm1sBUVPHLw7zxAoqqXTa06TzG+bV3U/qNjxiwN8R/ID5XGdzXlmXJMfydHy MqsTitjBe0izreTZlQLV9/eCZXYAOu1hdUq+rnpa3lU6lK8FFS1TXHqsvVEtgrOk ijTzS/kHRhpETXlpXpn8z8lC5Co8nMuWKbjpUQlNS93K2OEg3Z0prbPj/mF7VdI9 l+LYTLFWeXEzWB2dvCiSnhSRS7KZhLlo9VZQBrb9vT8NeZZ7eLz8Rm1WBib4euHN Ih9HTq4gLvIRnzagHwwoT2kwJKQKCc+nzul602Tb -----END CERTIFICATE-----Generated at Thu Mar 26 19:11:09 2026 by rpki-client