$ rpki-client -vvf repo-rpki.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/3230322e3137392e3139302e302f32332d3233203d3e203338373530.roa File: 3230322e3137392e3139302e302f32332d3233203d3e203338373530.roa (raw, json) Hash identifier: rnA3IRzyMf7VcTsuO0dzhmCjtb5X6HqSJSiPqAsj3W0= Subject key identifier: 82:F7:DA:1F:0A:D3:1A:D4:9D:73:1B:84:81:2B:93:3F:57:0D:94:AF Certificate issuer: /CN=D55BE8217A22212F977BD95B41F7C9EE9DE3201B Certificate serial: 3B73DD063D3B3CE0A4EA0705C76FA9B6A48034AC Authority key identifier: D5:5B:E8:21:7A:22:21:2F:97:7B:D9:5B:41:F7:C9:EE:9D:E3:20:1B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D55BE8217A22212F977BD95B41F7C9EE9DE3201B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/3230322e3137392e3139302e302f32332d3233203d3e203338373530.roa Signing time: Thu 26 Mar 2026 04:34:19 +0000 ROA not before: Thu 26 Mar 2026 04:29:19 +0000 ROA not after: Thu 25 Mar 2027 04:34:19 +0000 asID: 38750 IP address blocks: 202.179.190.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/D55BE8217A22212F977BD95B41F7C9EE9DE3201B.crl rsync://repo-rpki.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/D55BE8217A22212F977BD95B41F7C9EE9DE3201B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D55BE8217A22212F977BD95B41F7C9EE9DE3201B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 10:24:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:73:dd:06:3d:3b:3c:e0:a4:ea:07:05:c7:6f:a9:b6:a4:80:34:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D55BE8217A22212F977BD95B41F7C9EE9DE3201B Validity Not Before: Mar 26 04:29:19 2026 GMT Not After : Mar 25 04:34:19 2027 GMT Subject: CN=82F7DA1F0AD31AD49D731B84812B933F570D94AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:b7:40:c9:4c:3b:88:17:64:80:57:a9:67:b8: c7:98:c2:30:29:e8:06:02:25:98:17:6a:4c:4b:65: 2c:83:a0:3a:8b:7c:26:04:12:ca:e8:8a:2f:63:d9: 37:b7:c8:e6:6d:98:9b:3c:bb:8a:99:c9:d8:87:20: 81:dd:55:bf:38:3c:52:ca:72:83:af:ad:7b:1c:1b: 87:54:52:a9:ca:38:b9:7a:31:9a:f9:bc:4c:ed:86: 05:de:6f:2e:e1:a2:39:23:9e:14:b5:c7:23:8a:74: 1a:b7:77:2d:e2:4d:6c:4a:20:0e:e5:12:1d:dd:e3: 5c:b2:b5:7a:fa:c2:29:d9:36:91:4c:a1:13:f9:b1: 41:59:86:92:eb:c5:55:33:d2:9d:93:2a:c5:d3:13: 6e:ed:70:6a:b2:86:71:be:ce:32:97:be:16:7f:8a: 6c:f1:31:a1:d1:04:ee:04:4e:34:d4:40:e9:80:30: 42:f4:05:33:7c:0f:75:22:f3:17:e4:db:f3:d8:02: f7:a3:8e:1c:96:27:30:9d:7b:22:4a:4c:00:b4:7a: d0:be:d4:2d:bf:2e:1b:8c:1d:76:ea:05:f5:21:37: 2d:96:54:63:8f:5d:1a:89:60:c0:3b:2d:19:31:c2: 43:3a:d8:4f:23:10:88:77:9f:cc:4e:7b:32:bd:88: b2:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:F7:DA:1F:0A:D3:1A:D4:9D:73:1B:84:81:2B:93:3F:57:0D:94:AF X509v3 Authority Key Identifier: keyid:D5:5B:E8:21:7A:22:21:2F:97:7B:D9:5B:41:F7:C9:EE:9D:E3:20:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/D55BE8217A22212F977BD95B41F7C9EE9DE3201B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D55BE8217A22212F977BD95B41F7C9EE9DE3201B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/3230322e3137392e3139302e302f32332d3233203d3e203338373530.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.179.190.0/23 Signature Algorithm: sha256WithRSAEncryption 8d:e7:83:5e:6b:77:01:50:ec:b0:a1:71:e1:c1:e0:89:2b:74: 67:ca:02:1d:b5:e1:1d:a4:0f:c3:7f:e7:45:c6:51:d7:48:1d: b6:b0:b1:b8:94:b1:f0:5d:09:9c:4d:17:d5:5b:83:d1:8b:d9: 07:58:e2:aa:0f:13:6a:79:3f:11:df:1f:3c:23:d3:58:f9:7f: 5f:0d:94:7b:84:a3:09:a1:ea:ac:05:ba:85:13:f4:9f:f4:b5: 7e:0f:93:93:60:62:f5:7f:2c:be:16:0d:ec:c2:e0:03:37:0d: 86:55:a3:7a:51:fb:f9:8c:78:5c:1d:82:8a:5e:91:12:8a:d8: ba:fd:cd:33:0c:be:1c:76:01:cf:4f:fb:07:7b:c5:e5:9e:b4: 45:43:a6:d0:4f:b4:63:da:c1:d2:b5:72:14:d2:d9:42:70:d2: 32:7c:c6:4b:f8:20:94:fc:88:6f:c5:62:4e:ed:33:d3:66:a9: 6c:93:e8:da:c4:78:fe:db:5e:97:b7:d0:e2:2a:ae:ff:4e:0d: b4:ba:7b:48:26:82:2f:25:8d:a2:9d:ac:5f:3b:6f:44:45:c9: a6:98:20:e2:02:42:f6:73:32:ce:6a:04:c7:ac:15:b4:5d:65: c5:2d:1d:14:d3:ca:6c:65:c0:49:98:08:b5:78:f8:64:ac:66: 62:01:0c:cd -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUO3PdBj07POCk6gcFx2+ptqSANKwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDU1QkU4MjE3QTIyMjEyRjk3N0JEOTVCNDFGN0M5RUU5 REUzMjAxQjAeFw0yNjAzMjYwNDI5MTlaFw0yNzAzMjUwNDM0MTlaMDMxMTAvBgNV BAMTKDgyRjdEQTFGMEFEMzFBRDQ5RDczMUI4NDgxMkI5MzNGNTcwRDk0QUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdt0DJTDuIF2SAV6lnuMeYwjAp 6AYCJZgXakxLZSyDoDqLfCYEEsroii9j2Te3yOZtmJs8u4qZydiHIIHdVb84PFLK coOvrXscG4dUUqnKOLl6MZr5vEzthgXeby7hojkjnhS1xyOKdBq3dy3iTWxKIA7l Eh3d41yytXr6winZNpFMoRP5sUFZhpLrxVUz0p2TKsXTE27tcGqyhnG+zjKXvhZ/ imzxMaHRBO4ETjTUQOmAMEL0BTN8D3Ui8xfk2/PYAvejjhyWJzCdeyJKTAC0etC+ 1C2/LhuMHXbqBfUhNy2WVGOPXRqJYMA7LRkxwkM62E8jEIh3n8xOezK9iLK3AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUgvfaHwrTGtSdcxuEgSuTP1cNlK8wHwYDVR0j BBgwFoAU1VvoIXoiIS+Xe9lbQffJ7p3jIBswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MGY1Y2ZkYi03OTg3LTQzNTEtYmMyZS02NmMyNGY0OWY0NDAvMC9ENTVCRTgyMTdB MjIyMTJGOTc3QkQ5NUI0MUY3QzlFRTlERTMyMDFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDU1QkU4MjE3QTIyMjEyRjk3N0JEOTVCNDFGN0M5RUU5REUz MjAxQi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzcwZjVjZmRiLTc5ODctNDM1MS1i YzJlLTY2YzI0ZjQ5ZjQ0MC8wLzMyMzAzMjJlMzEzNzM5MmUzMTM5MzAyZTMwMmYz MjMzMmQzMjMzMjAzZDNlMjAzMzM4MzczNTMwLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQByrO+MA0GCSqG SIb3DQEBCwUAA4IBAQCN54Nea3cBUOywoXHhweCJK3RnygIdteEdpA/Df+dFxlHX SB22sLG4lLHwXQmcTRfVW4PRi9kHWOKqDxNqeT8R3x88I9NY+X9fDZR7hKMJoeqs BbqFE/Sf9LV+D5OTYGL1fyy+Fg3swuADNw2GVaN6Ufv5jHhcHYKKXpESiti6/c0z DL4cdgHPT/sHe8XlnrRFQ6bQT7Rj2sHStXIU0tlCcNIyfMZL+CCU/IhvxWJO7TPT Zqlsk+jaxHj+216Xt9DiKq7/Tg20untIJoIvJY2inaxfO29ERcmmmCDiAkL2czLO agTHrBW0XWXFLR0U08psZcBJmAi1ePhkrGZiAQzN -----END CERTIFICATE-----Generated at Thu Mar 26 17:58:54 2026 by rpki-client