$ rpki-client -vvf repo-rpki.idnic.net/repo/7cd323be-837d-4244-846c-7d2393a9a009/0/3230322e3132352e38322e302f32332d3233203d3e20313430343433.roa File: 3230322e3132352e38322e302f32332d3233203d3e20313430343433.roa (raw, json) Hash identifier: zH8II0djv1yY36R5xHqNkk+BiNvhcAhJUPvDhr8yQkU= Subject key identifier: 71:D7:54:54:A3:A4:53:CA:8D:75:52:28:20:F6:B9:3E:95:88:32:56 Certificate issuer: /CN=B0928A45D014D8D5FAD50314E828086F12B15610 Certificate serial: 7D37E2F21DE75A7BD50F8672E1E0FE9821A9D6AB Authority key identifier: B0:92:8A:45:D0:14:D8:D5:FA:D5:03:14:E8:28:08:6F:12:B1:56:10 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0928A45D014D8D5FAD50314E828086F12B15610.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7cd323be-837d-4244-846c-7d2393a9a009/0/3230322e3132352e38322e302f32332d3233203d3e20313430343433.roa Signing time: Tue 17 Mar 2026 06:00:01 +0000 ROA not before: Tue 17 Mar 2026 05:55:01 +0000 ROA not after: Tue 16 Mar 2027 06:00:01 +0000 asID: 140443 IP address blocks: 202.125.82.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7cd323be-837d-4244-846c-7d2393a9a009/0/B0928A45D014D8D5FAD50314E828086F12B15610.crl rsync://repo-rpki.idnic.net/repo/7cd323be-837d-4244-846c-7d2393a9a009/0/B0928A45D014D8D5FAD50314E828086F12B15610.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0928A45D014D8D5FAD50314E828086F12B15610.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 11:01:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:37:e2:f2:1d:e7:5a:7b:d5:0f:86:72:e1:e0:fe:98:21:a9:d6:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B0928A45D014D8D5FAD50314E828086F12B15610 Validity Not Before: Mar 17 05:55:01 2026 GMT Not After : Mar 16 06:00:01 2027 GMT Subject: CN=71D75454A3A453CA8D75522820F6B93E95883256 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:a3:95:36:dd:1b:82:c2:c2:be:c5:33:c4:19: a4:53:2f:b1:e6:15:a1:57:74:e7:b3:bc:dd:c2:1e: 86:65:25:dd:15:82:6f:10:36:87:ee:4e:03:b2:31: 86:94:32:21:c1:13:11:a0:d5:b7:fb:e1:12:cd:a6: 8b:e2:26:59:cb:bb:57:9b:3d:34:68:08:ff:4c:d3: 73:d8:73:09:1d:bd:1b:50:49:5f:83:cc:39:d8:cb: 52:17:cf:6e:e5:c9:54:4f:4c:f1:1f:a4:64:97:e4: f9:1f:27:74:3b:48:44:ac:23:2d:a0:6a:db:78:ff: 89:9c:ed:04:84:c5:e7:27:e2:bb:8e:17:bd:38:f9: d9:f7:da:e5:7d:a1:3e:aa:a8:0e:98:60:b8:8c:4a: 11:eb:df:9d:1e:c4:62:9f:e9:11:7c:f5:9e:89:99: 60:c6:e4:e4:3c:0b:e2:a2:e1:e8:15:5a:de:a5:53: 58:7d:0f:e9:5b:24:e4:f6:cf:7d:cd:fd:54:7f:a2: d8:ee:88:b6:f3:a8:4c:7d:77:72:3e:36:52:4c:ac: d8:85:f0:b1:0b:42:49:ff:f7:d3:b8:df:58:5c:ea: f5:49:55:cd:ea:c8:dc:77:d0:27:8e:90:d9:75:bc: 92:bd:ce:8d:f6:b5:0a:9b:2d:e6:fb:bf:5c:d6:b9: a5:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:D7:54:54:A3:A4:53:CA:8D:75:52:28:20:F6:B9:3E:95:88:32:56 X509v3 Authority Key Identifier: keyid:B0:92:8A:45:D0:14:D8:D5:FA:D5:03:14:E8:28:08:6F:12:B1:56:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7cd323be-837d-4244-846c-7d2393a9a009/0/B0928A45D014D8D5FAD50314E828086F12B15610.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0928A45D014D8D5FAD50314E828086F12B15610.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7cd323be-837d-4244-846c-7d2393a9a009/0/3230322e3132352e38322e302f32332d3233203d3e20313430343433.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.125.82.0/23 Signature Algorithm: sha256WithRSAEncryption 82:f3:20:84:93:72:0d:5b:e9:90:e1:a0:82:11:c6:d8:35:10: fa:36:96:f3:b1:25:33:5a:a7:b0:7e:90:39:96:13:7a:07:a4: 68:34:2a:0d:d1:88:98:93:bc:22:77:67:ea:55:0b:eb:29:f2: 82:1c:fb:d5:c2:09:ad:cd:9c:8b:b8:b8:98:26:b0:1f:d7:2e: 9c:df:14:fa:32:4e:6b:68:96:79:95:be:e8:f8:85:fc:0b:c3: e5:d2:d6:b0:28:52:c2:d6:0c:c1:ef:3c:40:8c:58:1b:63:77: 3a:df:33:4e:46:1e:c9:4b:95:f9:c9:b5:e3:36:7b:9d:e3:42: f9:fa:f7:5f:40:d5:b5:38:4d:7a:d4:24:83:81:46:d2:d4:8c: 83:54:7f:9d:73:97:a1:77:43:7e:65:16:2c:a4:a1:7b:e8:49: 8b:c0:c8:93:76:41:5c:84:f4:2b:87:0b:20:f3:e5:19:fe:f9: 47:d6:6b:ce:33:f7:04:74:ec:cc:56:4f:6a:f9:39:fc:57:67: e5:3c:01:bb:d7:c9:e3:61:62:e0:e2:5f:bb:0e:1f:94:c1:55: 09:6e:33:53:c4:bd:7a:87:ea:4c:17:af:3d:54:6b:5e:91:28: 5c:8a:55:ee:db:2f:7d:55:44:5a:a3:cd:cc:65:77:0b:54:01: fa:2d:bd:0f -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUfTfi8h3nWnvVD4Zy4eD+mCGp1qswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjA5MjhBNDVEMDE0RDhENUZBRDUwMzE0RTgyODA4NkYx MkIxNTYxMDAeFw0yNjAzMTcwNTU1MDFaFw0yNzAzMTYwNjAwMDFaMDMxMTAvBgNV BAMTKDcxRDc1NDU0QTNBNDUzQ0E4RDc1NTIyODIwRjZCOTNFOTU4ODMyNTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpo5U23RuCwsK+xTPEGaRTL7Hm FaFXdOezvN3CHoZlJd0Vgm8QNofuTgOyMYaUMiHBExGg1bf74RLNpoviJlnLu1eb PTRoCP9M03PYcwkdvRtQSV+DzDnYy1IXz27lyVRPTPEfpGSX5PkfJ3Q7SESsIy2g att4/4mc7QSExecn4ruOF704+dn32uV9oT6qqA6YYLiMShHr350exGKf6RF89Z6J mWDG5OQ8C+Ki4egVWt6lU1h9D+lbJOT2z33N/VR/otjuiLbzqEx9d3I+NlJMrNiF 8LELQkn/99O431hc6vVJVc3qyNx30CeOkNl1vJK9zo32tQqbLeb7v1zWuaXBAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUcddUVKOkU8qNdVIoIPa5PpWIMlYwHwYDVR0j BBgwFoAUsJKKRdAU2NX61QMU6CgIbxKxVhAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 Y2QzMjNiZS04MzdkLTQyNDQtODQ2Yy03ZDIzOTNhOWEwMDkvMC9CMDkyOEE0NUQw MTREOEQ1RkFENTAzMTRFODI4MDg2RjEyQjE1NjEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjA5MjhBNDVEMDE0RDhENUZBRDUwMzE0RTgyODA4NkYxMkIx NTYxMC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzdjZDMyM2JlLTgzN2QtNDI0NC04 NDZjLTdkMjM5M2E5YTAwOS8wLzMyMzAzMjJlMzEzMjM1MmUzODMyMmUzMDJmMzIz MzJkMzIzMzIwM2QzZTIwMzEzNDMwMzQzNDMzLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQByn1SMA0GCSqG SIb3DQEBCwUAA4IBAQCC8yCEk3INW+mQ4aCCEcbYNRD6NpbzsSUzWqewfpA5lhN6 B6RoNCoN0YiYk7wid2fqVQvrKfKCHPvVwgmtzZyLuLiYJrAf1y6c3xT6Mk5raJZ5 lb7o+IX8C8Pl0tawKFLC1gzB7zxAjFgbY3c63zNORh7JS5X5ybXjNnud40L5+vdf QNW1OE161CSDgUbS1IyDVH+dc5ehd0N+ZRYspKF76EmLwMiTdkFchPQrhwsg8+UZ /vlH1mvOM/cEdOzMVk9q+Tn8V2flPAG718njYWLg4l+7Dh+UwVUJbjNTxL16h+pM F689VGtekShcilXu2y99VURao83MZXcLVAH6Lb0P -----END CERTIFICATE-----Generated at Thu Mar 26 18:35:46 2026 by rpki-client