$ rpki-client -vvf repo-rpki.idnic.net/repo/7cd323be-837d-4244-846c-7d2393a9a009/0/3230322e3132352e38322e302f32342d3234203d3e20313430343433.roa File: 3230322e3132352e38322e302f32342d3234203d3e20313430343433.roa (raw, json) Hash identifier: DqrSh4xXq+uXrVXofRpxHfxtFLrzYuCKUSJwN6gZ5WU= Subject key identifier: D4:E5:E0:67:7B:69:2F:42:0A:D8:01:D9:D9:9F:FC:A8:43:E5:3C:19 Certificate issuer: /CN=B0928A45D014D8D5FAD50314E828086F12B15610 Certificate serial: 1A9C7B6291444FE2EA3450DFEDD3EF1B92D32EC0 Authority key identifier: B0:92:8A:45:D0:14:D8:D5:FA:D5:03:14:E8:28:08:6F:12:B1:56:10 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0928A45D014D8D5FAD50314E828086F12B15610.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7cd323be-837d-4244-846c-7d2393a9a009/0/3230322e3132352e38322e302f32342d3234203d3e20313430343433.roa Signing time: Tue 17 Mar 2026 05:00:00 +0000 ROA not before: Tue 17 Mar 2026 04:55:00 +0000 ROA not after: Tue 16 Mar 2027 05:00:00 +0000 asID: 140443 IP address blocks: 202.125.82.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7cd323be-837d-4244-846c-7d2393a9a009/0/B0928A45D014D8D5FAD50314E828086F12B15610.crl rsync://repo-rpki.idnic.net/repo/7cd323be-837d-4244-846c-7d2393a9a009/0/B0928A45D014D8D5FAD50314E828086F12B15610.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0928A45D014D8D5FAD50314E828086F12B15610.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 11:01:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:9c:7b:62:91:44:4f:e2:ea:34:50:df:ed:d3:ef:1b:92:d3:2e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B0928A45D014D8D5FAD50314E828086F12B15610 Validity Not Before: Mar 17 04:55:00 2026 GMT Not After : Mar 16 05:00:00 2027 GMT Subject: CN=D4E5E0677B692F420AD801D9D99FFCA843E53C19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:84:9f:3c:11:1d:8f:46:27:6d:c0:db:b7:4d: 7f:03:be:a2:fd:83:c5:f4:84:af:59:41:37:5d:a3: 3b:5c:10:09:e1:04:f3:9d:32:03:4c:79:f0:a5:57: d1:53:b5:3e:46:ac:bc:9d:db:d4:da:f7:47:ba:a0: d1:36:4a:1b:2f:fc:84:eb:62:58:28:87:73:12:96: 67:5b:6c:de:c6:bb:ae:a0:da:85:39:29:1a:8b:fc: 3c:31:c0:98:a8:b3:35:84:4c:8b:9a:bb:95:69:5f: 0a:a6:ec:78:5d:b5:47:bd:ee:1c:39:a0:c5:e3:9b: 24:c3:f0:cb:50:79:87:e9:ff:42:5e:32:d9:d3:c0: 3a:03:43:78:95:d1:80:90:48:16:61:f6:35:17:3c: e7:d0:ed:26:0b:9f:12:ef:ca:b4:80:fd:f9:5e:5d: 7c:a4:64:da:f7:ca:7c:05:79:23:45:39:7e:dd:39: fe:38:bf:39:2c:58:0b:25:ce:f5:62:3e:be:63:77: 0f:53:cf:aa:f6:b8:fe:c0:ce:6e:17:c4:90:ea:b4: 8d:e8:08:96:e9:ff:0d:31:7c:43:03:b2:e3:6f:11: c1:84:00:d3:59:8f:4c:1f:7a:fd:df:b5:50:86:d1: a1:22:8f:ff:cf:51:9f:38:77:6e:ab:9e:2a:b9:47: 99:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:E5:E0:67:7B:69:2F:42:0A:D8:01:D9:D9:9F:FC:A8:43:E5:3C:19 X509v3 Authority Key Identifier: keyid:B0:92:8A:45:D0:14:D8:D5:FA:D5:03:14:E8:28:08:6F:12:B1:56:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7cd323be-837d-4244-846c-7d2393a9a009/0/B0928A45D014D8D5FAD50314E828086F12B15610.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0928A45D014D8D5FAD50314E828086F12B15610.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7cd323be-837d-4244-846c-7d2393a9a009/0/3230322e3132352e38322e302f32342d3234203d3e20313430343433.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.125.82.0/24 Signature Algorithm: sha256WithRSAEncryption 1e:92:1b:a0:2f:d4:0d:04:87:c7:e0:09:e4:d1:28:b4:f6:29: 38:7d:dd:00:29:53:45:f0:2d:a8:db:2e:82:27:59:4f:fb:43: a4:3f:35:cf:57:d2:2f:5f:5a:11:b7:6c:67:cb:d8:14:d9:15: 47:a8:8c:fc:ec:3c:e8:39:89:37:94:ed:1d:2b:2b:7e:c9:14: 26:9e:16:32:3c:3e:f3:c9:d2:e3:85:a3:3f:a5:b7:80:c4:dc: ff:f1:a0:35:b6:c7:14:88:9c:84:a4:33:f3:b0:3b:48:cf:32: 1b:da:2a:1e:b5:e9:4a:1e:87:84:0b:83:7a:e2:bb:53:81:54: 0d:7a:72:a3:14:05:b1:95:58:82:23:d8:6f:10:ea:50:2c:59: 29:19:67:5a:10:b7:1a:ec:b6:ba:fd:28:a6:c5:9c:70:ae:39: 63:c0:ea:a0:ed:3c:48:24:68:41:3d:db:ec:5e:78:68:d7:c9: 9c:97:0e:8f:27:07:61:c9:88:0c:88:30:be:f7:e9:af:64:20: d2:d8:82:66:ac:72:5e:ad:19:ed:02:75:90:3b:d2:03:69:8a: af:b9:d7:c1:5a:ad:9b:d4:e8:4c:30:68:5e:35:e6:41:7b:e1: e0:b7:84:81:8f:87:e0:16:b4:bf:41:93:70:46:af:5a:b6:57: 24:14:c8:44 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUGpx7YpFET+LqNFDf7dPvG5LTLsAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjA5MjhBNDVEMDE0RDhENUZBRDUwMzE0RTgyODA4NkYx MkIxNTYxMDAeFw0yNjAzMTcwNDU1MDBaFw0yNzAzMTYwNTAwMDBaMDMxMTAvBgNV BAMTKEQ0RTVFMDY3N0I2OTJGNDIwQUQ4MDFEOUQ5OUZGQ0E4NDNFNTNDMTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuhJ88ER2PRidtwNu3TX8DvqL9 g8X0hK9ZQTddoztcEAnhBPOdMgNMefClV9FTtT5GrLyd29Ta90e6oNE2Shsv/ITr Ylgoh3MSlmdbbN7Gu66g2oU5KRqL/DwxwJioszWETIuau5VpXwqm7HhdtUe97hw5 oMXjmyTD8MtQeYfp/0JeMtnTwDoDQ3iV0YCQSBZh9jUXPOfQ7SYLnxLvyrSA/fle XXykZNr3ynwFeSNFOX7dOf44vzksWAslzvViPr5jdw9Tz6r2uP7Azm4XxJDqtI3o CJbp/w0xfEMDsuNvEcGEANNZj0wfev3ftVCG0aEij//PUZ84d26rniq5R5mdAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU1OXgZ3tpL0IK2AHZ2Z/8qEPlPBkwHwYDVR0j BBgwFoAUsJKKRdAU2NX61QMU6CgIbxKxVhAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 Y2QzMjNiZS04MzdkLTQyNDQtODQ2Yy03ZDIzOTNhOWEwMDkvMC9CMDkyOEE0NUQw MTREOEQ1RkFENTAzMTRFODI4MDg2RjEyQjE1NjEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjA5MjhBNDVEMDE0RDhENUZBRDUwMzE0RTgyODA4NkYxMkIx NTYxMC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzdjZDMyM2JlLTgzN2QtNDI0NC04 NDZjLTdkMjM5M2E5YTAwOS8wLzMyMzAzMjJlMzEzMjM1MmUzODMyMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNDMwMzQzNDMzLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyn1SMA0GCSqG SIb3DQEBCwUAA4IBAQAekhugL9QNBIfH4Ank0Si09ik4fd0AKVNF8C2o2y6CJ1lP +0OkPzXPV9IvX1oRt2xny9gU2RVHqIz87DzoOYk3lO0dKyt+yRQmnhYyPD7zydLj haM/pbeAxNz/8aA1tscUiJyEpDPzsDtIzzIb2ioetelKHoeEC4N64rtTgVQNenKj FAWxlViCI9hvEOpQLFkpGWdaELca7La6/SimxZxwrjljwOqg7TxIJGhBPdvsXnho 18mclw6PJwdhyYgMiDC+9+mvZCDS2IJmrHJerRntAnWQO9IDaYqvudfBWq2b1OhM MGheNeZBe+Hgt4SBj4fgFrS/QZNwRq9atlckFMhE -----END CERTIFICATE-----Generated at Thu Mar 26 20:46:13 2026 by rpki-client