$ rpki-client -vvf repo-rpki.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/3230322e37372e3131322e302f32322d3234203d3e2039393035.roa File: 3230322e37372e3131322e302f32322d3234203d3e2039393035.roa (raw, json) Hash identifier: nY4EMgsLYptvpWChb6ReOWCMwETm5k2+pQmz29y2fSE= Subject key identifier: 17:52:C7:C1:95:E6:42:DF:A6:31:08:67:C1:EA:FF:4A:FB:4B:01:2D Certificate issuer: /CN=782637B58B8E07EC64A0FAAE1769AF17AF0999E7 Certificate serial: 63231DB77F31F15A628E409061CF3B05842E6299 Authority key identifier: 78:26:37:B5:8B:8E:07:EC:64:A0:FA:AE:17:69:AF:17:AF:09:99:E7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/782637B58B8E07EC64A0FAAE1769AF17AF0999E7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/3230322e37372e3131322e302f32322d3234203d3e2039393035.roa Signing time: Tue 17 Mar 2026 23:00:01 +0000 ROA not before: Tue 17 Mar 2026 22:55:01 +0000 ROA not after: Tue 16 Mar 2027 23:00:01 +0000 asID: 9905 IP address blocks: 202.77.112.0/22 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/782637B58B8E07EC64A0FAAE1769AF17AF0999E7.crl rsync://repo-rpki.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/782637B58B8E07EC64A0FAAE1769AF17AF0999E7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/782637B58B8E07EC64A0FAAE1769AF17AF0999E7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 09:57:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:23:1d:b7:7f:31:f1:5a:62:8e:40:90:61:cf:3b:05:84:2e:62:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=782637B58B8E07EC64A0FAAE1769AF17AF0999E7 Validity Not Before: Mar 17 22:55:01 2026 GMT Not After : Mar 16 23:00:01 2027 GMT Subject: CN=1752C7C195E642DFA6310867C1EAFF4AFB4B012D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:3f:8c:54:53:88:0d:08:d4:13:16:6f:81:c9: 6e:43:ec:c3:02:d5:21:96:fd:e9:a9:e3:7d:3c:5d: 41:a2:7f:22:e1:5b:6c:16:43:ec:fd:bf:ec:3b:b7: 3e:74:97:89:2f:be:f1:6f:fe:ce:60:75:7a:ea:52: ed:db:f5:1d:2f:50:40:f1:f2:13:58:56:eb:d8:43: 6b:93:12:59:ca:b9:c3:5c:1e:ff:63:02:8b:5b:a8: 45:98:a6:c8:1d:b7:12:85:62:28:2e:b8:74:f1:b6: b5:e1:1b:68:78:88:fb:26:b8:1a:ee:0c:ea:5e:89: f0:95:e0:58:b4:dd:d2:9c:b1:52:ea:68:e6:f6:67: 2e:d7:67:e5:82:a7:a4:af:51:02:7b:81:57:56:19: 5c:e6:3a:d5:e3:44:8c:31:3f:ea:a2:3a:d2:ca:0d: ad:6d:b5:85:9c:fb:d3:11:03:22:c2:80:20:8c:cf: 5f:30:83:24:1f:f7:69:40:d7:df:36:9d:14:00:81: 8c:02:e9:51:ad:c1:d3:22:fc:ed:f7:dc:f2:1b:2f: 21:4b:38:23:cf:27:13:46:aa:bb:04:cb:b2:e7:d8: 79:4e:49:df:ad:92:a1:c4:cd:99:df:7b:9a:80:dc: dc:d7:17:e1:0d:78:ce:ab:30:9d:d7:80:50:a4:58: a1:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:52:C7:C1:95:E6:42:DF:A6:31:08:67:C1:EA:FF:4A:FB:4B:01:2D X509v3 Authority Key Identifier: keyid:78:26:37:B5:8B:8E:07:EC:64:A0:FA:AE:17:69:AF:17:AF:09:99:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/782637B58B8E07EC64A0FAAE1769AF17AF0999E7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/782637B58B8E07EC64A0FAAE1769AF17AF0999E7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/3230322e37372e3131322e302f32322d3234203d3e2039393035.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.77.112.0/22 Signature Algorithm: sha256WithRSAEncryption 54:06:36:27:f0:d7:4b:21:8a:86:84:20:f8:89:fa:91:2d:f9: 3d:18:5f:40:d6:89:9a:61:51:22:db:ee:e7:6e:82:90:19:cc: 1d:f3:f5:8e:8c:ff:3c:b0:44:2e:32:fe:92:54:86:93:d5:05: 19:96:80:88:99:c7:fb:2e:d8:ad:d4:ea:6f:40:1d:0d:72:0a: f1:0b:67:32:9e:f8:6e:28:89:8e:22:fd:70:62:db:24:45:f1: e9:0f:cb:c4:a7:8a:14:a9:38:f8:20:69:04:f4:8b:4d:e1:da: 3c:03:d1:0f:fd:aa:3c:47:0a:08:38:5b:ee:9e:a7:e0:8d:a3: c0:af:87:fb:70:5d:62:b4:2e:21:a1:f7:73:a7:ac:fb:82:08: 8b:63:5a:c0:62:62:4e:33:b6:7b:4b:aa:11:b3:bb:98:46:db: b0:32:61:d1:06:6d:2a:58:11:01:c6:58:87:77:9e:f9:14:03: 1c:7d:21:bd:ab:18:04:b8:84:ab:38:fe:2e:99:68:c9:9a:55: 3c:9a:db:8f:9c:f0:9c:72:ba:c4:c1:88:a7:fd:48:42:14:64: 61:df:f6:b8:b2:96:af:1e:c8:c2:a2:7a:31:c9:eb:d0:72:70: dd:aa:c0:a2:83:c4:8d:9a:43:6c:29:c9:c1:76:14:51:9c:c1: f8:c0:a6:0f -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUYyMdt38x8VpijkCQYc87BYQuYpkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzgyNjM3QjU4QjhFMDdFQzY0QTBGQUFFMTc2OUFGMTdB RjA5OTlFNzAeFw0yNjAzMTcyMjU1MDFaFw0yNzAzMTYyMzAwMDFaMDMxMTAvBgNV BAMTKDE3NTJDN0MxOTVFNjQyREZBNjMxMDg2N0MxRUFGRjRBRkI0QjAxMkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0P4xUU4gNCNQTFm+ByW5D7MMC 1SGW/emp4308XUGifyLhW2wWQ+z9v+w7tz50l4kvvvFv/s5gdXrqUu3b9R0vUEDx 8hNYVuvYQ2uTElnKucNcHv9jAotbqEWYpsgdtxKFYiguuHTxtrXhG2h4iPsmuBru DOpeifCV4Fi03dKcsVLqaOb2Zy7XZ+WCp6SvUQJ7gVdWGVzmOtXjRIwxP+qiOtLK Da1ttYWc+9MRAyLCgCCMz18wgyQf92lA1982nRQAgYwC6VGtwdMi/O333PIbLyFL OCPPJxNGqrsEy7Ln2HlOSd+tkqHEzZnfe5qA3NzXF+ENeM6rMJ3XgFCkWKEBAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUF1LHwZXmQt+mMQhnwer/SvtLAS0wHwYDVR0j BBgwFoAUeCY3tYuOB+xkoPquF2mvF68JmecwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 OWMwNWVlMy03ZmM4LTQ0MDctYjJjMC1jYjQwYmZjZmI4NjYvMC83ODI2MzdCNThC OEUwN0VDNjRBMEZBQUUxNzY5QUYxN0FGMDk5OUU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzgyNjM3QjU4QjhFMDdFQzY0QTBGQUFFMTc2OUFGMTdBRjA5 OTlFNy5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzc5YzA1ZWUzLTdmYzgtNDQwNy1i MmMwLWNiNDBiZmNmYjg2Ni8wLzMyMzAzMjJlMzczNzJlMzEzMTMyMmUzMDJmMzIz MjJkMzIzNDIwM2QzZTIwMzkzOTMwMzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBALKTXAwDQYJKoZIhvcN AQELBQADggEBAFQGNifw10shioaEIPiJ+pEt+T0YX0DWiZphUSLb7udugpAZzB3z 9Y6M/zywRC4y/pJUhpPVBRmWgIiZx/su2K3U6m9AHQ1yCvELZzKe+G4oiY4i/XBi 2yRF8ekPy8SnihSpOPggaQT0i03h2jwD0Q/9qjxHCgg4W+6ep+CNo8Cvh/twXWK0 LiGh93OnrPuCCItjWsBiYk4ztntLqhGzu5hG27AyYdEGbSpYEQHGWId3nvkUAxx9 Ib2rGAS4hKs4/i6ZaMmaVTya24+c8JxyusTBiKf9SEIUZGHf9riylq8eyMKiejHJ 69BycN2qwKKDxI2aQ2wpycF2FFGcwfjApg8= -----END CERTIFICATE-----Generated at Thu Mar 26 13:34:42 2026 by rpki-client