$ rpki-client -vvf repo-rpki.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/3230322e3133372e342e302f32322d3234203d3e2039393035.roa File: 3230322e3133372e342e302f32322d3234203d3e2039393035.roa (raw, json) Hash identifier: frv7wPFDsQJfjHF3KUuJhLZyEvFbDKa5uNolMrk9U/c= Subject key identifier: 39:5F:B2:C4:37:F0:85:70:5A:CB:FB:A2:1F:E4:2D:73:66:EB:21:E9 Certificate issuer: /CN=782637B58B8E07EC64A0FAAE1769AF17AF0999E7 Certificate serial: 2B05547C80CB03A7EB175130FF23E8BFB4976B9D Authority key identifier: 78:26:37:B5:8B:8E:07:EC:64:A0:FA:AE:17:69:AF:17:AF:09:99:E7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/782637B58B8E07EC64A0FAAE1769AF17AF0999E7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/3230322e3133372e342e302f32322d3234203d3e2039393035.roa Signing time: Tue 17 Mar 2026 10:01:55 +0000 ROA not before: Tue 17 Mar 2026 09:56:55 +0000 ROA not after: Tue 16 Mar 2027 10:01:55 +0000 asID: 9905 IP address blocks: 202.137.4.0/22 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/782637B58B8E07EC64A0FAAE1769AF17AF0999E7.crl rsync://repo-rpki.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/782637B58B8E07EC64A0FAAE1769AF17AF0999E7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/782637B58B8E07EC64A0FAAE1769AF17AF0999E7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 09:57:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:05:54:7c:80:cb:03:a7:eb:17:51:30:ff:23:e8:bf:b4:97:6b:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=782637B58B8E07EC64A0FAAE1769AF17AF0999E7 Validity Not Before: Mar 17 09:56:55 2026 GMT Not After : Mar 16 10:01:55 2027 GMT Subject: CN=395FB2C437F085705ACBFBA21FE42D7366EB21E9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:20:1b:f1:91:09:5c:1d:a9:fa:d6:63:60:72: 3e:7f:69:77:dd:ac:b2:25:90:d2:35:6b:e4:93:0d: e2:b5:6f:45:f3:5c:36:2d:98:1a:2a:4a:a8:de:32: 0d:36:f4:48:03:c0:9f:69:4e:93:50:ae:bf:a6:99: ec:16:a4:cb:ca:81:ec:01:af:3a:39:70:d1:83:ab: 36:7b:66:68:b3:1d:0a:3d:4a:e7:a4:eb:a1:6c:ec: 35:13:4d:10:98:b9:bb:73:5a:b1:ed:95:f7:a4:a0: 25:65:fe:e0:5e:b0:3b:96:88:85:13:b3:8a:d2:d4: 0d:cd:d6:42:88:cf:63:51:f4:76:f9:e4:7d:4a:20: a6:6a:d6:01:ad:74:01:90:fc:ca:ad:6a:82:68:c5: 84:a1:92:fd:c4:04:31:f8:3d:30:c7:e6:09:a1:17: dd:0e:86:60:4d:d4:a5:0c:af:b6:c6:a3:c5:85:0a: 0e:f8:94:a4:f0:b5:f8:8b:92:39:36:d4:dc:55:83: b2:40:9f:e5:a6:4a:d8:63:f4:cf:38:7c:27:78:99: 84:8c:e6:72:59:c6:b9:6d:79:10:64:c9:56:7d:69: 57:48:30:67:cf:28:b0:95:40:73:6a:90:c2:e5:35: 0c:81:0e:9f:85:f1:84:98:ea:1c:f0:0b:12:d9:be: 41:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:5F:B2:C4:37:F0:85:70:5A:CB:FB:A2:1F:E4:2D:73:66:EB:21:E9 X509v3 Authority Key Identifier: keyid:78:26:37:B5:8B:8E:07:EC:64:A0:FA:AE:17:69:AF:17:AF:09:99:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/782637B58B8E07EC64A0FAAE1769AF17AF0999E7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/782637B58B8E07EC64A0FAAE1769AF17AF0999E7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/3230322e3133372e342e302f32322d3234203d3e2039393035.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.137.4.0/22 Signature Algorithm: sha256WithRSAEncryption 01:1d:51:fc:cb:7b:9e:f3:67:40:41:54:a9:fd:9e:80:41:e8: 0c:01:a2:38:41:aa:08:9c:a5:ed:0f:29:28:80:9f:44:d4:96: 72:4f:9c:8e:e4:65:62:45:db:d3:e4:bf:7b:40:c0:46:01:7c: 18:51:e4:72:3b:02:ec:b5:57:f8:a6:62:ec:14:a1:ad:49:a8: bc:72:bd:5a:58:0c:c0:c5:58:60:97:29:fc:7a:2b:6d:54:ee: b7:b4:8c:34:33:10:85:16:89:1b:49:8c:f4:db:ee:3a:af:fc: d5:ec:86:e7:eb:8e:67:42:e3:5f:c4:2a:46:ad:9a:62:4f:ed: f6:e0:29:88:de:5b:b4:c2:56:6c:23:86:06:87:93:b0:5f:48: 13:ec:52:86:38:c7:b5:26:46:0a:79:0c:f4:cf:f5:72:c1:44: b4:44:df:d1:71:ca:30:a6:be:84:d8:0e:73:a3:7b:b4:94:cd: 18:ef:d9:b1:c6:b4:34:5a:60:b9:7a:29:cc:7f:ca:8c:a2:fd: 46:0f:bb:d9:e7:79:85:45:f9:ee:a6:dd:6e:a2:e6:35:13:d0: 25:6e:3f:be:84:f2:25:9e:f2:50:3c:6f:ee:d6:81:66:d6:08: da:65:37:e8:3a:ff:d0:fd:b3:ff:56:aa:04:0d:b6:75:3e:79: 9f:dd:4a:20 -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgIUKwVUfIDLA6frF1Ew/yPov7SXa50wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzgyNjM3QjU4QjhFMDdFQzY0QTBGQUFFMTc2OUFGMTdB RjA5OTlFNzAeFw0yNjAzMTcwOTU2NTVaFw0yNzAzMTYxMDAxNTVaMDMxMTAvBgNV BAMTKDM5NUZCMkM0MzdGMDg1NzA1QUNCRkJBMjFGRTQyRDczNjZFQjIxRTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrIBvxkQlcHan61mNgcj5/aXfd rLIlkNI1a+STDeK1b0XzXDYtmBoqSqjeMg029EgDwJ9pTpNQrr+mmewWpMvKgewB rzo5cNGDqzZ7ZmizHQo9Suek66Fs7DUTTRCYubtzWrHtlfekoCVl/uBesDuWiIUT s4rS1A3N1kKIz2NR9Hb55H1KIKZq1gGtdAGQ/MqtaoJoxYShkv3EBDH4PTDH5gmh F90OhmBN1KUMr7bGo8WFCg74lKTwtfiLkjk21NxVg7JAn+WmSthj9M84fCd4mYSM 5nJZxrlteRBkyVZ9aVdIMGfPKLCVQHNqkMLlNQyBDp+F8YSY6hzwCxLZvkGHAgMB AAGjggItMIICKTAdBgNVHQ4EFgQUOV+yxDfwhXBay/uiH+Qtc2brIekwHwYDVR0j BBgwFoAUeCY3tYuOB+xkoPquF2mvF68JmecwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 OWMwNWVlMy03ZmM4LTQ0MDctYjJjMC1jYjQwYmZjZmI4NjYvMC83ODI2MzdCNThC OEUwN0VDNjRBMEZBQUUxNzY5QUYxN0FGMDk5OUU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzgyNjM3QjU4QjhFMDdFQzY0QTBGQUFFMTc2OUFGMTdBRjA5 OTlFNy5jZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzljMDVlZTMtN2ZjOC00NDA3LWIy YzAtY2I0MGJmY2ZiODY2LzAvMzIzMDMyMmUzMTMzMzcyZTM0MmUzMDJmMzIzMjJk MzIzNDIwM2QzZTIwMzkzOTMwMzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBALKiQQwDQYJKoZIhvcNAQEL BQADggEBAAEdUfzLe57zZ0BBVKn9noBB6AwBojhBqgicpe0PKSiAn0TUlnJPnI7k ZWJF29Pkv3tAwEYBfBhR5HI7Auy1V/imYuwUoa1JqLxyvVpYDMDFWGCXKfx6K21U 7re0jDQzEIUWiRtJjPTb7jqv/NXshufrjmdC41/EKkatmmJP7fbgKYjeW7TCVmwj hgaHk7BfSBPsUoY4x7UmRgp5DPTP9XLBRLRE39FxyjCmvoTYDnOje7SUzRjv2bHG tDRaYLl6Kcx/yoyi/UYPu9nneYVF+e6m3W6i5jUT0CVuP76E8iWe8lA8b+7WgWbW CNplN+g6/9D9s/9WqgQNtnU+eZ/dSiA= -----END CERTIFICATE-----Generated at Thu Mar 26 17:02:25 2026 by rpki-client