$ rpki-client -vvf repo-rpki.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/3230322e3133372e31322e302f32322d3234203d3e2039393035.roa File: 3230322e3133372e31322e302f32322d3234203d3e2039393035.roa (raw, json) Hash identifier: /Y/DVUiyYlaUQOxtLczQK9LVXrVULMYUuOkFYwSLldQ= Subject key identifier: 30:92:F3:7F:E6:A9:27:D1:79:79:8E:7E:A5:5F:77:97:75:B9:DA:AB Certificate issuer: /CN=782637B58B8E07EC64A0FAAE1769AF17AF0999E7 Certificate serial: 4DF8B1A42BBD0C1B4866AF7188522155B6C82AC9 Authority key identifier: 78:26:37:B5:8B:8E:07:EC:64:A0:FA:AE:17:69:AF:17:AF:09:99:E7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/782637B58B8E07EC64A0FAAE1769AF17AF0999E7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/3230322e3133372e31322e302f32322d3234203d3e2039393035.roa Signing time: Tue 17 Mar 2026 10:01:55 +0000 ROA not before: Tue 17 Mar 2026 09:56:55 +0000 ROA not after: Tue 16 Mar 2027 10:01:55 +0000 asID: 9905 IP address blocks: 202.137.12.0/22 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/782637B58B8E07EC64A0FAAE1769AF17AF0999E7.crl rsync://repo-rpki.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/782637B58B8E07EC64A0FAAE1769AF17AF0999E7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/782637B58B8E07EC64A0FAAE1769AF17AF0999E7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 09:57:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:f8:b1:a4:2b:bd:0c:1b:48:66:af:71:88:52:21:55:b6:c8:2a:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=782637B58B8E07EC64A0FAAE1769AF17AF0999E7 Validity Not Before: Mar 17 09:56:55 2026 GMT Not After : Mar 16 10:01:55 2027 GMT Subject: CN=3092F37FE6A927D179798E7EA55F779775B9DAAB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:d1:d1:86:f2:73:c1:74:d7:3a:9a:6d:49:84: f8:b2:d8:8e:1f:81:6a:b3:a9:f6:ab:43:de:ae:19: df:09:f2:69:99:7f:dd:5e:77:b5:54:cd:04:dc:2d: c0:b6:b6:27:24:78:fb:f1:22:e4:53:27:3b:5d:b3: 6f:09:28:c3:ab:10:08:25:62:fd:77:a9:e2:17:c4: 1c:22:0e:c1:87:e3:fe:30:40:bc:55:b3:17:32:57: 18:44:e2:58:bf:0b:2d:cd:a7:fb:7e:89:6e:11:cc: 2d:1f:52:1c:90:22:53:a4:d3:c2:ba:85:14:fd:c7: e9:78:3b:0d:1d:3c:90:53:86:4c:cd:a4:44:58:39: fb:f2:86:53:e0:ec:63:a4:ae:de:3d:ff:11:f8:88: 06:a7:8f:24:40:1d:b8:2d:f8:7e:5f:1c:26:38:39: 52:49:c2:d2:49:43:8e:60:d2:40:33:69:37:bc:f7: f9:68:d3:95:3f:e2:65:05:8d:d6:9d:c0:c1:d4:63: b7:99:9b:20:f4:04:40:f8:43:24:cf:3f:e5:1b:14: 83:0c:a8:54:92:8b:a2:0e:db:62:f8:7e:77:06:4f: d3:36:48:82:98:91:43:2e:10:33:b2:54:72:24:78: 92:a9:f6:44:78:18:ee:77:47:e7:bf:3a:8b:bd:29: de:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:92:F3:7F:E6:A9:27:D1:79:79:8E:7E:A5:5F:77:97:75:B9:DA:AB X509v3 Authority Key Identifier: keyid:78:26:37:B5:8B:8E:07:EC:64:A0:FA:AE:17:69:AF:17:AF:09:99:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/782637B58B8E07EC64A0FAAE1769AF17AF0999E7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/782637B58B8E07EC64A0FAAE1769AF17AF0999E7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/3230322e3133372e31322e302f32322d3234203d3e2039393035.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.137.12.0/22 Signature Algorithm: sha256WithRSAEncryption 73:06:40:10:56:e5:1a:60:18:4d:fd:0d:ce:b2:9e:79:2a:b7: 0a:d1:3b:93:ed:7d:99:3d:60:bc:62:fb:37:50:39:f2:b2:17: 25:bb:f3:63:dd:92:43:fb:a1:ed:52:fc:cf:96:64:f2:ce:ca: 90:45:d1:4b:d1:7d:83:8e:05:01:d7:ac:b9:82:02:07:b0:5f: 04:42:26:1b:b7:14:98:9a:30:a7:dd:6a:76:46:62:5d:2a:cd: 29:a5:67:11:af:1e:f1:43:a2:06:a5:d4:a7:f3:f9:ef:6f:dc: 14:a0:2e:72:f7:94:28:3b:35:ec:76:3c:f7:66:c3:19:81:60: 7f:f2:7a:43:39:8c:90:d2:9b:32:5e:8a:d5:34:63:6b:1f:a4: b9:12:31:59:94:37:31:c3:78:13:42:a7:9d:41:8c:d8:c3:55: 33:62:1d:2d:1d:3c:e1:5f:24:70:3d:71:cc:89:70:65:0c:a1: b0:49:6c:e6:bf:1f:ee:94:04:34:ca:03:74:97:30:95:20:e8: e9:2b:98:d3:63:91:07:6b:8c:83:8c:83:75:23:c4:97:63:68: 01:35:fa:86:f7:e2:cc:61:00:e5:de:4a:a6:79:f1:86:cb:d5: 0a:19:6e:78:f2:d2:87:cb:0c:c1:81:4e:0f:61:4b:14:b6:0e: 89:4d:c5:da -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUTfixpCu9DBtIZq9xiFIhVbbIKskwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzgyNjM3QjU4QjhFMDdFQzY0QTBGQUFFMTc2OUFGMTdB RjA5OTlFNzAeFw0yNjAzMTcwOTU2NTVaFw0yNzAzMTYxMDAxNTVaMDMxMTAvBgNV BAMTKDMwOTJGMzdGRTZBOTI3RDE3OTc5OEU3RUE1NUY3Nzk3NzVCOURBQUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDm0dGG8nPBdNc6mm1JhPiy2I4f gWqzqfarQ96uGd8J8mmZf91ed7VUzQTcLcC2tickePvxIuRTJztds28JKMOrEAgl Yv13qeIXxBwiDsGH4/4wQLxVsxcyVxhE4li/Cy3Np/t+iW4RzC0fUhyQIlOk08K6 hRT9x+l4Ow0dPJBThkzNpERYOfvyhlPg7GOkrt49/xH4iAanjyRAHbgt+H5fHCY4 OVJJwtJJQ45g0kAzaTe89/lo05U/4mUFjdadwMHUY7eZmyD0BED4QyTPP+UbFIMM qFSSi6IO22L4fncGT9M2SIKYkUMuEDOyVHIkeJKp9kR4GO53R+e/Oou9Kd5zAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUMJLzf+apJ9F5eY5+pV93l3W52qswHwYDVR0j BBgwFoAUeCY3tYuOB+xkoPquF2mvF68JmecwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 OWMwNWVlMy03ZmM4LTQ0MDctYjJjMC1jYjQwYmZjZmI4NjYvMC83ODI2MzdCNThC OEUwN0VDNjRBMEZBQUUxNzY5QUYxN0FGMDk5OUU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzgyNjM3QjU4QjhFMDdFQzY0QTBGQUFFMTc2OUFGMTdBRjA5 OTlFNy5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzc5YzA1ZWUzLTdmYzgtNDQwNy1i MmMwLWNiNDBiZmNmYjg2Ni8wLzMyMzAzMjJlMzEzMzM3MmUzMTMyMmUzMDJmMzIz MjJkMzIzNDIwM2QzZTIwMzkzOTMwMzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBALKiQwwDQYJKoZIhvcN AQELBQADggEBAHMGQBBW5RpgGE39Dc6ynnkqtwrRO5PtfZk9YLxi+zdQOfKyFyW7 82PdkkP7oe1S/M+WZPLOypBF0UvRfYOOBQHXrLmCAgewXwRCJhu3FJiaMKfdanZG Yl0qzSmlZxGvHvFDogal1Kfz+e9v3BSgLnL3lCg7Nex2PPdmwxmBYH/yekM5jJDS mzJeitU0Y2sfpLkSMVmUNzHDeBNCp51BjNjDVTNiHS0dPOFfJHA9ccyJcGUMobBJ bOa/H+6UBDTKA3SXMJUg6OkrmNNjkQdrjIOMg3UjxJdjaAE1+ob34sxhAOXeSqZ5 8YbL1QoZbnjy0ofLDMGBTg9hSxS2DolNxdo= -----END CERTIFICATE-----Generated at Thu Mar 26 16:07:33 2026 by rpki-client