$ rpki-client -vvf repo-rpki.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/3230322e3133372e31362e302f32322d3234203d3e2039393035.roa File: 3230322e3133372e31362e302f32322d3234203d3e2039393035.roa (raw, json) Hash identifier: jOZR3e5IEiUYgCEZ+Kld1l4UfsEi12vGHwMRIAP4myo= Subject key identifier: 53:6A:D5:72:30:84:96:3A:46:EE:3E:63:FB:50:6A:C9:71:27:1E:95 Certificate issuer: /CN=782637B58B8E07EC64A0FAAE1769AF17AF0999E7 Certificate serial: 04CCA7A268C70B0A886CF800CDBAD037C29C9C08 Authority key identifier: 78:26:37:B5:8B:8E:07:EC:64:A0:FA:AE:17:69:AF:17:AF:09:99:E7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/782637B58B8E07EC64A0FAAE1769AF17AF0999E7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/3230322e3133372e31362e302f32322d3234203d3e2039393035.roa Signing time: Tue 17 Mar 2026 16:00:01 +0000 ROA not before: Tue 17 Mar 2026 15:55:01 +0000 ROA not after: Tue 16 Mar 2027 16:00:01 +0000 asID: 9905 IP address blocks: 202.137.16.0/22 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/782637B58B8E07EC64A0FAAE1769AF17AF0999E7.crl rsync://repo-rpki.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/782637B58B8E07EC64A0FAAE1769AF17AF0999E7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/782637B58B8E07EC64A0FAAE1769AF17AF0999E7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 09:57:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:cc:a7:a2:68:c7:0b:0a:88:6c:f8:00:cd:ba:d0:37:c2:9c:9c:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=782637B58B8E07EC64A0FAAE1769AF17AF0999E7 Validity Not Before: Mar 17 15:55:01 2026 GMT Not After : Mar 16 16:00:01 2027 GMT Subject: CN=536AD5723084963A46EE3E63FB506AC971271E95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:1d:bf:17:32:d0:6d:17:df:b6:d7:d5:a8:9f: ab:25:8b:c9:9f:2b:7d:ed:6c:fa:19:64:35:39:94: 71:63:15:c2:5d:81:31:88:db:80:3d:ce:ac:97:24: 9b:54:7d:c9:7f:ed:34:fd:5e:57:d6:72:d0:53:ea: ce:bc:e1:e1:6c:33:6e:34:1b:66:2f:6b:d0:e6:14: 8d:a1:f7:e8:56:12:63:5c:50:2d:4d:95:17:f5:fb: 2b:c0:ab:9b:4e:8d:e1:8e:31:45:e9:79:9f:d8:78: a3:05:87:0c:8c:62:72:7b:60:df:d6:91:66:d8:3f: 34:79:67:7c:b5:20:6f:3f:d8:d9:03:ba:4d:f4:7e: bf:24:16:58:93:d2:c6:49:06:9c:69:db:de:64:0a: 4d:61:6a:48:3e:c3:b6:76:17:c2:11:11:22:63:c7: 25:b7:9c:21:06:9c:c7:6d:b8:de:17:a1:2a:8e:c5: 7e:fa:26:91:05:89:cb:54:68:b9:97:73:bb:5a:81: 6b:83:cb:89:0a:9d:c6:d8:46:af:df:1d:5d:98:ad: a6:59:60:6b:81:f7:c1:f4:be:82:ff:cf:83:ad:8b: 44:1a:87:c0:72:ac:1c:6d:aa:02:b4:2b:72:99:ad: 52:e2:b4:46:bf:21:5b:d4:48:4f:19:fc:5e:5d:36: c9:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:6A:D5:72:30:84:96:3A:46:EE:3E:63:FB:50:6A:C9:71:27:1E:95 X509v3 Authority Key Identifier: keyid:78:26:37:B5:8B:8E:07:EC:64:A0:FA:AE:17:69:AF:17:AF:09:99:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/782637B58B8E07EC64A0FAAE1769AF17AF0999E7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/782637B58B8E07EC64A0FAAE1769AF17AF0999E7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/3230322e3133372e31362e302f32322d3234203d3e2039393035.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.137.16.0/22 Signature Algorithm: sha256WithRSAEncryption 17:87:ed:5f:90:99:ab:23:c8:4c:65:56:8d:8d:c5:e0:34:73: e2:19:34:22:9c:bd:13:1e:26:30:0e:a2:f2:53:69:ff:5f:77: d9:e6:9d:6f:2c:ab:22:38:81:b7:f3:62:47:d1:de:de:75:bc: 6f:26:e5:5e:c9:c5:ac:de:cd:9a:74:de:57:12:35:57:70:64: 7f:14:5f:24:e4:64:53:2f:30:37:1c:99:de:5c:48:4b:c7:3e: 22:d9:34:b9:e1:66:f0:09:fe:66:8b:0c:45:b3:0c:c0:2d:15: 26:51:16:a2:03:ff:50:b9:fb:4e:84:30:40:d1:ca:ad:9e:9c: c5:c8:fb:43:4c:e5:0c:ee:6e:4c:66:2a:40:c8:82:a6:4b:25: 90:f7:9e:9d:64:4a:dd:e1:1f:9b:57:29:82:03:be:93:98:01: c1:bf:1c:5d:14:f4:f6:16:77:99:0f:b3:dd:b1:66:77:44:bc: b5:bc:0d:3b:95:79:b6:11:60:29:46:ff:9e:46:54:28:14:09: 25:64:29:2c:50:66:3b:79:80:27:58:3c:55:d0:57:90:e5:be: 08:d1:a7:4d:bf:e7:26:47:db:37:cb:50:6d:60:a7:f1:ca:5e: 0d:7d:ad:c9:34:32:a8:45:5c:20:e6:a7:48:36:17:42:2f:aa: 1c:54:cc:d0 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUBMynomjHCwqIbPgAzbrQN8KcnAgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzgyNjM3QjU4QjhFMDdFQzY0QTBGQUFFMTc2OUFGMTdB RjA5OTlFNzAeFw0yNjAzMTcxNTU1MDFaFw0yNzAzMTYxNjAwMDFaMDMxMTAvBgNV BAMTKDUzNkFENTcyMzA4NDk2M0E0NkVFM0U2M0ZCNTA2QUM5NzEyNzFFOTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsHb8XMtBtF9+219Won6sli8mf K33tbPoZZDU5lHFjFcJdgTGI24A9zqyXJJtUfcl/7TT9XlfWctBT6s684eFsM240 G2Yva9DmFI2h9+hWEmNcUC1NlRf1+yvAq5tOjeGOMUXpeZ/YeKMFhwyMYnJ7YN/W kWbYPzR5Z3y1IG8/2NkDuk30fr8kFliT0sZJBpxp295kCk1hakg+w7Z2F8IRESJj xyW3nCEGnMdtuN4XoSqOxX76JpEFictUaLmXc7tagWuDy4kKncbYRq/fHV2YraZZ YGuB98H0voL/z4Oti0Qah8ByrBxtqgK0K3KZrVLitEa/IVvUSE8Z/F5dNskbAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUU2rVcjCEljpG7j5j+1BqyXEnHpUwHwYDVR0j BBgwFoAUeCY3tYuOB+xkoPquF2mvF68JmecwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 OWMwNWVlMy03ZmM4LTQ0MDctYjJjMC1jYjQwYmZjZmI4NjYvMC83ODI2MzdCNThC OEUwN0VDNjRBMEZBQUUxNzY5QUYxN0FGMDk5OUU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzgyNjM3QjU4QjhFMDdFQzY0QTBGQUFFMTc2OUFGMTdBRjA5 OTlFNy5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzc5YzA1ZWUzLTdmYzgtNDQwNy1i MmMwLWNiNDBiZmNmYjg2Ni8wLzMyMzAzMjJlMzEzMzM3MmUzMTM2MmUzMDJmMzIz MjJkMzIzNDIwM2QzZTIwMzkzOTMwMzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBALKiRAwDQYJKoZIhvcN AQELBQADggEBABeH7V+QmasjyExlVo2NxeA0c+IZNCKcvRMeJjAOovJTaf9fd9nm nW8sqyI4gbfzYkfR3t51vG8m5V7JxazezZp03lcSNVdwZH8UXyTkZFMvMDccmd5c SEvHPiLZNLnhZvAJ/maLDEWzDMAtFSZRFqID/1C5+06EMEDRyq2enMXI+0NM5Qzu bkxmKkDIgqZLJZD3np1kSt3hH5tXKYIDvpOYAcG/HF0U9PYWd5kPs92xZndEvLW8 DTuVebYRYClG/55GVCgUCSVkKSxQZjt5gCdYPFXQV5DlvgjRp02/5yZH2zfLUG1g p/HKXg19rck0MqhFXCDmp0g2F0IvqhxUzNA= -----END CERTIFICATE-----Generated at Thu Mar 26 14:15:32 2026 by rpki-client