$ rpki-client -vvf repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3230332e38392e3134362e302f32332d3234203d3e2039333431.roa File: 3230332e38392e3134362e302f32332d3234203d3e2039333431.roa (raw, json) Hash identifier: hiaJ42gy764HJzsHlw+T53WX84mLUQHhAIlCW0UvGig= Subject key identifier: 5C:09:DB:6A:B6:5B:D3:CF:B8:B4:CB:A3:A0:92:19:BB:B5:1E:DB:40 Certificate issuer: /CN=61566F205F7037962069571320603B274357CC6D Certificate serial: 088936CC9C5AB9AED4516BBE3EEC0E772CC0890C Authority key identifier: 61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3230332e38392e3134362e302f32332d3234203d3e2039333431.roa Signing time: Thu 26 Mar 2026 01:00:02 +0000 ROA not before: Thu 26 Mar 2026 00:55:02 +0000 ROA not after: Thu 25 Mar 2027 01:00:02 +0000 asID: 9341 IP address blocks: 203.89.146.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 02:05:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:89:36:cc:9c:5a:b9:ae:d4:51:6b:be:3e:ec:0e:77:2c:c0:89:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61566F205F7037962069571320603B274357CC6D Validity Not Before: Mar 26 00:55:02 2026 GMT Not After : Mar 25 01:00:02 2027 GMT Subject: CN=5C09DB6AB65BD3CFB8B4CBA3A09219BBB51EDB40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:68:8f:ea:0d:80:e8:13:62:10:c7:7b:2c:f9: a2:5c:ea:11:75:f9:d9:45:48:ab:1e:1f:5c:8f:4e: 5e:44:d0:66:aa:af:8f:47:58:a8:31:7c:22:c1:cf: 02:4d:c7:ad:71:28:06:41:33:79:32:fd:2a:32:25: 62:49:5d:61:ae:c3:0c:9b:62:2c:bb:2e:9d:ca:23: 42:8f:71:ee:e8:fb:63:50:59:99:61:d7:2b:f2:c2: 25:c9:1d:e2:4f:62:f2:ac:99:42:a5:0f:63:06:b1: 72:40:9d:c6:12:9d:f3:36:dc:7d:37:25:1d:a0:4b: eb:bb:01:66:a9:fb:cb:de:41:bb:e3:24:f8:ba:16: 32:34:8f:f4:9f:45:b5:de:17:56:da:ce:36:58:d1: b8:7f:fe:65:65:2e:4a:14:cf:bd:e7:b7:c2:be:64: af:d8:df:91:93:8d:c5:4f:fa:2f:e6:e5:7b:b2:f8: 7c:87:a2:6a:9d:63:99:b0:62:11:f3:49:32:12:7c: 84:37:a9:27:b1:c7:1d:7a:7d:19:6d:3e:af:9a:96: c3:54:4e:e1:c0:91:21:ea:cc:1f:ed:a5:71:11:0c: 6f:4d:d6:87:7a:88:1d:c7:71:7b:31:14:04:66:b1: cf:01:6b:0e:8b:d5:ab:1a:29:ff:d1:0c:32:72:2d: 34:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:09:DB:6A:B6:5B:D3:CF:B8:B4:CB:A3:A0:92:19:BB:B5:1E:DB:40 X509v3 Authority Key Identifier: keyid:61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3230332e38392e3134362e302f32332d3234203d3e2039333431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.89.146.0/23 Signature Algorithm: sha256WithRSAEncryption 0d:a4:f4:3f:70:d7:d2:76:2c:fe:09:77:ed:54:52:21:db:fa: c5:04:a7:a4:74:17:26:fd:fa:30:57:f5:29:ca:a1:f7:53:a3: ae:ca:83:eb:5f:86:52:e7:7a:8b:74:fe:a6:f1:8a:89:59:43: be:e2:27:0d:c4:bf:cd:2a:6d:d9:0c:ed:f8:8c:73:a4:9d:86: de:a7:8f:f6:ac:f0:e4:d6:77:b3:77:cc:b3:0d:40:64:c8:bb: d9:22:88:18:d8:92:8e:ed:ae:20:17:dd:f1:38:a9:4d:ee:09: 1a:13:dd:68:31:12:1d:78:47:97:73:d7:a6:e9:e1:ff:e3:84: 20:79:6b:f6:30:a0:7c:b5:3a:08:cf:51:2c:34:35:0b:07:c6: 95:5d:80:fa:08:a0:bf:5c:1e:37:00:60:fb:77:60:84:27:68: e7:d1:2c:39:90:4e:c6:48:92:21:46:3a:77:9c:be:25:a7:d9: e2:9e:fa:38:8c:4a:3c:b8:18:4b:aa:49:19:f7:07:88:2d:d8: 2e:fd:af:41:2d:c0:9e:68:38:1f:bc:07:c4:1f:90:63:e8:d4: 8b:ae:7d:70:3b:99:de:de:15:7d:97:fb:cd:80:16:06:2a:e7: bf:bd:61:6f:40:ee:10:9d:f9:e2:5c:09:f5:1d:09:b0:98:53: d6:fa:16:80 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUCIk2zJxaua7UUWu+PuwOdyzAiQwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjE1NjZGMjA1RjcwMzc5NjIwNjk1NzEzMjA2MDNCMjc0 MzU3Q0M2RDAeFw0yNjAzMjYwMDU1MDJaFw0yNzAzMjUwMTAwMDJaMDMxMTAvBgNV BAMTKDVDMDlEQjZBQjY1QkQzQ0ZCOEI0Q0JBM0EwOTIxOUJCQjUxRURCNDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8aI/qDYDoE2IQx3ss+aJc6hF1 +dlFSKseH1yPTl5E0Gaqr49HWKgxfCLBzwJNx61xKAZBM3ky/SoyJWJJXWGuwwyb Yiy7Lp3KI0KPce7o+2NQWZlh1yvywiXJHeJPYvKsmUKlD2MGsXJAncYSnfM23H03 JR2gS+u7AWap+8veQbvjJPi6FjI0j/SfRbXeF1bazjZY0bh//mVlLkoUz73nt8K+ ZK/Y35GTjcVP+i/m5Xuy+HyHomqdY5mwYhHzSTISfIQ3qSexxx16fRltPq+alsNU TuHAkSHqzB/tpXERDG9N1od6iB3HcXsxFARmsc8Baw6L1asaKf/RDDJyLTSvAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUXAnbarZb08+4tMujoJIZu7Ue20AwHwYDVR0j BBgwFoAUYVZvIF9wN5YgaVcTIGA7J0NXzG0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 M2JkY2JhZS0yZTlkLTRmM2YtOGFiOS0zNDI0ZTQ0ODQ4NGUvMC82MTU2NkYyMDVG NzAzNzk2MjA2OTU3MTMyMDYwM0IyNzQzNTdDQzZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjE1NjZGMjA1RjcwMzc5NjIwNjk1NzEzMjA2MDNCMjc0MzU3 Q0M2RC5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzczYmRjYmFlLTJlOWQtNGYzZi04 YWI5LTM0MjRlNDQ4NDg0ZS8wLzMyMzAzMzJlMzgzOTJlMzEzNDM2MmUzMDJmMzIz MzJkMzIzNDIwM2QzZTIwMzkzMzM0MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAHLWZIwDQYJKoZIhvcN AQELBQADggEBAA2k9D9w19J2LP4Jd+1UUiHb+sUEp6R0Fyb9+jBX9SnKofdTo67K g+tfhlLneot0/qbxiolZQ77iJw3Ev80qbdkM7fiMc6Sdht6nj/as8OTWd7N3zLMN QGTIu9kiiBjYko7triAX3fE4qU3uCRoT3WgxEh14R5dz16bp4f/jhCB5a/YwoHy1 OgjPUSw0NQsHxpVdgPoIoL9cHjcAYPt3YIQnaOfRLDmQTsZIkiFGOnecviWn2eKe +jiMSjy4GEuqSRn3B4gt2C79r0EtwJ5oOB+8B8QfkGPo1IuufXA7md7eFX2X+82A FgYq57+9YW9A7hCd+eJcCfUdCbCYU9b6FoA= -----END CERTIFICATE-----Generated at Thu Mar 26 14:12:59 2026 by rpki-client