$ rpki-client -vvf repo-rpki.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/3230322e37372e3132302e302f32322d3234203d3e2039393035.roa File: 3230322e37372e3132302e302f32322d3234203d3e2039393035.roa (raw, json) Hash identifier: +q816oVa/BVgBKrNtiUs/MpeOErhGH2crAVyZIdv8ME= Subject key identifier: 11:29:E0:FD:74:E6:CA:66:94:20:D6:E4:9B:35:09:C4:62:91:37:36 Certificate issuer: /CN=782637B58B8E07EC64A0FAAE1769AF17AF0999E7 Certificate serial: 2CF26BF57B9A197E1A283C885953C594BE4EA5D7 Authority key identifier: 78:26:37:B5:8B:8E:07:EC:64:A0:FA:AE:17:69:AF:17:AF:09:99:E7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/782637B58B8E07EC64A0FAAE1769AF17AF0999E7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/3230322e37372e3132302e302f32322d3234203d3e2039393035.roa Signing time: Tue 17 Mar 2026 23:00:01 +0000 ROA not before: Tue 17 Mar 2026 22:55:01 +0000 ROA not after: Tue 16 Mar 2027 23:00:01 +0000 asID: 9905 IP address blocks: 202.77.120.0/22 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/782637B58B8E07EC64A0FAAE1769AF17AF0999E7.crl rsync://repo-rpki.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/782637B58B8E07EC64A0FAAE1769AF17AF0999E7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/782637B58B8E07EC64A0FAAE1769AF17AF0999E7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 09:57:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:f2:6b:f5:7b:9a:19:7e:1a:28:3c:88:59:53:c5:94:be:4e:a5:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=782637B58B8E07EC64A0FAAE1769AF17AF0999E7 Validity Not Before: Mar 17 22:55:01 2026 GMT Not After : Mar 16 23:00:01 2027 GMT Subject: CN=1129E0FD74E6CA669420D6E49B3509C462913736 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:c0:34:3b:63:48:8d:59:76:d4:f9:1a:82:86: a8:17:a1:02:8a:b8:bd:30:b0:8c:5e:f8:52:df:a7: da:e7:2f:8a:63:29:c1:f7:79:45:6b:39:59:09:b5: 8e:20:23:36:7f:cf:ea:86:27:04:a9:ac:14:4f:b6: 38:f1:d4:a9:c9:8f:20:db:e4:b4:05:67:f4:f4:5f: 1e:9e:a1:62:50:bc:c2:f6:c5:b5:5c:e2:d8:e5:9d: f8:20:9b:23:b9:dc:53:6a:9f:4f:29:d4:18:06:d9: d2:28:f4:de:52:98:54:a9:a7:de:06:5f:38:a4:ae: 3f:91:af:fe:59:d1:2d:d0:24:bd:95:e4:27:c1:0a: 17:1a:6e:a7:1a:5b:d2:24:53:d0:47:8f:8d:e3:68: 8a:d5:39:7a:9d:3e:d9:d7:ab:a2:f8:03:93:ed:94: d3:3f:91:81:d5:5d:f6:2f:e2:17:b0:48:5f:85:68: 1d:6d:cd:a6:05:05:45:6f:68:ce:33:41:83:53:1d: 91:c2:13:f0:12:ea:55:7a:eb:ba:75:98:25:99:a9: 32:0a:32:57:b4:de:40:71:9f:51:8d:6f:83:7e:5e: 9c:71:91:17:5b:f3:1d:a1:f7:8a:03:ce:cd:6b:7d: 42:37:4f:11:f5:da:1c:6e:16:28:41:79:96:b4:ce: b9:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:29:E0:FD:74:E6:CA:66:94:20:D6:E4:9B:35:09:C4:62:91:37:36 X509v3 Authority Key Identifier: keyid:78:26:37:B5:8B:8E:07:EC:64:A0:FA:AE:17:69:AF:17:AF:09:99:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/782637B58B8E07EC64A0FAAE1769AF17AF0999E7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/782637B58B8E07EC64A0FAAE1769AF17AF0999E7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/3230322e37372e3132302e302f32322d3234203d3e2039393035.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.77.120.0/22 Signature Algorithm: sha256WithRSAEncryption 0c:79:d8:03:85:36:89:17:9f:53:56:0c:80:0c:d5:f2:2f:da: 06:65:e6:b9:3f:b4:d2:fa:42:d7:c0:9c:b4:76:c6:a1:9b:14: 33:4d:e6:65:1c:1a:d2:52:42:83:46:dc:bf:50:2e:32:77:f8: 03:65:1b:55:b4:cc:f2:32:2b:4c:14:28:ed:43:68:01:ea:f3: 90:ac:bb:1a:38:3b:e1:20:93:68:2c:b8:b2:8c:51:97:65:d5: 43:ac:56:2d:df:bb:b2:57:d0:d3:26:6e:b1:16:e0:25:3c:98: 0a:e8:0a:af:c7:ac:e5:c4:62:ee:18:a0:d3:bc:6c:c5:00:b3: ae:71:37:e2:a3:b4:7d:1b:1d:3c:50:54:9b:34:67:11:07:4a: 4e:ed:9a:89:22:d7:78:8d:3c:1a:97:55:7f:e2:6e:f8:04:30: 68:0d:1f:06:c4:73:d9:ca:34:57:e0:b5:a9:b9:74:4a:de:67: bc:4f:82:b9:29:22:50:ef:01:03:ad:2c:92:c1:23:1f:98:32: 92:7b:6b:3f:39:dd:ca:b6:56:5a:7f:2d:af:e9:e8:78:3a:4a: ff:7a:7b:0e:86:c7:40:b6:90:b9:54:6c:2b:d3:44:b2:1f:b3: 1f:ed:8d:a2:e0:df:53:98:79:ee:af:8c:9c:61:c4:77:d9:ed: 46:2e:66:f9 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIULPJr9XuaGX4aKDyIWVPFlL5OpdcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzgyNjM3QjU4QjhFMDdFQzY0QTBGQUFFMTc2OUFGMTdB RjA5OTlFNzAeFw0yNjAzMTcyMjU1MDFaFw0yNzAzMTYyMzAwMDFaMDMxMTAvBgNV BAMTKDExMjlFMEZENzRFNkNBNjY5NDIwRDZFNDlCMzUwOUM0NjI5MTM3MzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhwDQ7Y0iNWXbU+RqChqgXoQKK uL0wsIxe+FLfp9rnL4pjKcH3eUVrOVkJtY4gIzZ/z+qGJwSprBRPtjjx1KnJjyDb 5LQFZ/T0Xx6eoWJQvML2xbVc4tjlnfggmyO53FNqn08p1BgG2dIo9N5SmFSpp94G Xzikrj+Rr/5Z0S3QJL2V5CfBChcabqcaW9IkU9BHj43jaIrVOXqdPtnXq6L4A5Pt lNM/kYHVXfYv4hewSF+FaB1tzaYFBUVvaM4zQYNTHZHCE/AS6lV667p1mCWZqTIK Mle03kBxn1GNb4N+XpxxkRdb8x2h94oDzs1rfUI3TxH12hxuFihBeZa0zrnJAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUESng/XTmymaUINbkmzUJxGKRNzYwHwYDVR0j BBgwFoAUeCY3tYuOB+xkoPquF2mvF68JmecwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 OWMwNWVlMy03ZmM4LTQ0MDctYjJjMC1jYjQwYmZjZmI4NjYvMC83ODI2MzdCNThC OEUwN0VDNjRBMEZBQUUxNzY5QUYxN0FGMDk5OUU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzgyNjM3QjU4QjhFMDdFQzY0QTBGQUFFMTc2OUFGMTdBRjA5 OTlFNy5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzc5YzA1ZWUzLTdmYzgtNDQwNy1i MmMwLWNiNDBiZmNmYjg2Ni8wLzMyMzAzMjJlMzczNzJlMzEzMjMwMmUzMDJmMzIz MjJkMzIzNDIwM2QzZTIwMzkzOTMwMzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBALKTXgwDQYJKoZIhvcN AQELBQADggEBAAx52AOFNokXn1NWDIAM1fIv2gZl5rk/tNL6QtfAnLR2xqGbFDNN 5mUcGtJSQoNG3L9QLjJ3+ANlG1W0zPIyK0wUKO1DaAHq85Csuxo4O+Egk2gsuLKM UZdl1UOsVi3fu7JX0NMmbrEW4CU8mAroCq/HrOXEYu4YoNO8bMUAs65xN+KjtH0b HTxQVJs0ZxEHSk7tmoki13iNPBqXVX/ibvgEMGgNHwbEc9nKNFfgtam5dEreZ7xP grkpIlDvAQOtLJLBIx+YMpJ7az853cq2Vlp/La/p6Hg6Sv96ew6Gx0C2kLlUbCvT RLIfsx/tjaLg31OYee6vjJxhxHfZ7UYuZvk= -----END CERTIFICATE-----Generated at Thu Mar 26 16:54:38 2026 by rpki-client