$ rpki-client -vvf repo-rpki.idnic.net/repo/96b1ab7f-e451-40d1-9b70-3a4022a9b4ec/0/3230322e35382e3233382e302f32332d3234203d3e203436303237.roa File: 3230322e35382e3233382e302f32332d3234203d3e203436303237.roa (raw, json) Hash identifier: QTYZMnwghFNHa1aQd9N+8qyC9Gvq+zTwaSpUCC7zHNg= Subject key identifier: F6:C1:F0:DB:3A:31:14:77:4F:4E:DB:C2:D7:BF:C5:3B:5B:F8:12:19 Certificate issuer: /CN=1631B9A0997CBC975099A6FF7E27DCA3FDC649BA Certificate serial: 0D86C9E5406225F0135F779B1C61428C309175A1 Authority key identifier: 16:31:B9:A0:99:7C:BC:97:50:99:A6:FF:7E:27:DC:A3:FD:C6:49:BA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1631B9A0997CBC975099A6FF7E27DCA3FDC649BA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/96b1ab7f-e451-40d1-9b70-3a4022a9b4ec/0/3230322e35382e3233382e302f32332d3234203d3e203436303237.roa Signing time: Thu 19 Mar 2026 02:00:01 +0000 ROA not before: Thu 19 Mar 2026 01:55:01 +0000 ROA not after: Thu 18 Mar 2027 02:00:01 +0000 asID: 46027 IP address blocks: 202.58.238.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/96b1ab7f-e451-40d1-9b70-3a4022a9b4ec/0/1631B9A0997CBC975099A6FF7E27DCA3FDC649BA.crl rsync://repo-rpki.idnic.net/repo/96b1ab7f-e451-40d1-9b70-3a4022a9b4ec/0/1631B9A0997CBC975099A6FF7E27DCA3FDC649BA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1631B9A0997CBC975099A6FF7E27DCA3FDC649BA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 02:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:86:c9:e5:40:62:25:f0:13:5f:77:9b:1c:61:42:8c:30:91:75:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1631B9A0997CBC975099A6FF7E27DCA3FDC649BA Validity Not Before: Mar 19 01:55:01 2026 GMT Not After : Mar 18 02:00:01 2027 GMT Subject: CN=F6C1F0DB3A3114774F4EDBC2D7BFC53B5BF81219 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:32:c8:e2:fc:a7:60:90:9c:cc:fa:de:7c:9e: 4c:f3:6e:42:bc:ce:a9:15:ce:a7:1e:30:ec:9c:a1: a7:54:54:f9:68:fa:bd:43:97:38:79:d4:6f:10:0c: 6b:62:5a:80:8c:ba:90:6a:81:d3:48:bc:df:96:1c: ee:4a:b8:19:e6:67:b2:ce:f3:3b:b8:58:19:a9:91: 08:ac:b5:63:65:10:ca:bf:dc:5b:22:3d:4a:0b:b6: 26:89:6d:57:00:53:18:4a:0c:42:97:55:2c:17:f8: 9b:2d:9d:31:95:49:06:19:48:f1:2a:7c:3f:14:de: 20:ff:cd:92:17:9e:57:c5:55:8c:ac:53:c8:fd:22: e2:ad:e3:cf:0b:9f:c7:a0:95:c4:64:14:fe:f9:e3: fc:82:bc:e0:86:ca:b1:d5:0d:76:be:04:2b:69:47: 1d:b2:40:f6:6a:75:5f:bf:8c:8e:b0:46:fa:28:59: a5:c8:d0:66:8a:21:99:c1:33:6f:ee:db:26:38:4a: be:ad:5d:e0:f8:22:8f:5b:52:cf:f7:e2:5b:f0:41: bc:16:7b:5e:8f:41:42:35:6e:45:29:b6:fd:90:27: 74:3c:f7:e8:22:24:b8:89:f3:20:aa:c6:7c:4e:eb: 01:41:d3:ed:f4:8c:d6:df:0d:dd:94:52:f7:6f:f5: 61:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:C1:F0:DB:3A:31:14:77:4F:4E:DB:C2:D7:BF:C5:3B:5B:F8:12:19 X509v3 Authority Key Identifier: keyid:16:31:B9:A0:99:7C:BC:97:50:99:A6:FF:7E:27:DC:A3:FD:C6:49:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/96b1ab7f-e451-40d1-9b70-3a4022a9b4ec/0/1631B9A0997CBC975099A6FF7E27DCA3FDC649BA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1631B9A0997CBC975099A6FF7E27DCA3FDC649BA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/96b1ab7f-e451-40d1-9b70-3a4022a9b4ec/0/3230322e35382e3233382e302f32332d3234203d3e203436303237.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.58.238.0/23 Signature Algorithm: sha256WithRSAEncryption c5:4a:d3:d7:11:7a:b6:81:9a:3d:69:b8:e2:1d:8b:90:b6:b1: 02:c4:d8:84:80:cf:8e:41:ca:89:d1:aa:07:05:ed:fb:7e:6d: 8d:1e:76:86:b8:33:83:80:98:1a:57:14:e9:1a:88:48:4b:6a: 7b:d7:8c:76:43:6e:cb:bd:36:53:23:5c:19:dd:66:b0:44:53: f7:3e:2e:c3:12:9d:6a:98:e2:a8:20:bb:54:16:c0:4a:b9:1c: 45:22:b0:42:d5:aa:7c:fc:07:10:f9:9e:b1:70:f7:3a:da:f0: dd:e3:f5:2b:7b:39:5e:fc:1e:51:f8:c9:4d:57:9a:c6:38:c7: 89:0f:a8:f4:47:5d:f5:08:b1:70:e0:63:d7:c0:53:ee:ea:32: 86:70:72:a8:41:65:46:b5:4d:92:37:1c:75:3c:02:1d:a3:b7: 6c:55:8b:e1:10:27:82:02:29:6f:d1:09:15:a5:6e:d1:cd:0a: 8f:8d:16:e1:72:b7:f8:ab:7f:40:6b:4f:58:08:62:fb:62:fb: ee:31:f7:cc:f1:27:83:8a:d3:31:f3:ea:ae:37:06:85:dd:4d: 8e:65:19:d5:29:e1:8b:0e:c3:1f:4a:49:d3:76:f1:cf:a2:66: 7a:24:0d:78:ff:92:b0:bb:da:bf:7d:9e:f6:58:80:4b:11:1e: 6e:43:98:c3 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUDYbJ5UBiJfATX3ebHGFCjDCRdaEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTYzMUI5QTA5OTdDQkM5NzUwOTlBNkZGN0UyN0RDQTNG REM2NDlCQTAeFw0yNjAzMTkwMTU1MDFaFw0yNzAzMTgwMjAwMDFaMDMxMTAvBgNV BAMTKEY2QzFGMERCM0EzMTE0Nzc0RjRFREJDMkQ3QkZDNTNCNUJGODEyMTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFMsji/KdgkJzM+t58nkzzbkK8 zqkVzqceMOycoadUVPlo+r1Dlzh51G8QDGtiWoCMupBqgdNIvN+WHO5KuBnmZ7LO 8zu4WBmpkQistWNlEMq/3FsiPUoLtiaJbVcAUxhKDEKXVSwX+JstnTGVSQYZSPEq fD8U3iD/zZIXnlfFVYysU8j9IuKt488Ln8eglcRkFP754/yCvOCGyrHVDXa+BCtp Rx2yQPZqdV+/jI6wRvooWaXI0GaKIZnBM2/u2yY4Sr6tXeD4Io9bUs/34lvwQbwW e16PQUI1bkUptv2QJ3Q89+giJLiJ8yCqxnxO6wFB0+30jNbfDd2UUvdv9WG3AgMB AAGjggIyMIICLjAdBgNVHQ4EFgQU9sHw2zoxFHdPTtvC17/FO1v4EhkwHwYDVR0j BBgwFoAUFjG5oJl8vJdQmab/fifco/3GSbowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NmIxYWI3Zi1lNDUxLTQwZDEtOWI3MC0zYTQwMjJhOWI0ZWMvMC8xNjMxQjlBMDk5 N0NCQzk3NTA5OUE2RkY3RTI3RENBM0ZEQzY0OUJBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTYzMUI5QTA5OTdDQkM5NzUwOTlBNkZGN0UyN0RDQTNGREM2 NDlCQS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzk2YjFhYjdmLWU0NTEtNDBkMS05 YjcwLTNhNDAyMmE5YjRlYy8wLzMyMzAzMjJlMzUzODJlMzIzMzM4MmUzMDJmMzIz MzJkMzIzNDIwM2QzZTIwMzQzNjMwMzIzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAco67jANBgkqhkiG 9w0BAQsFAAOCAQEAxUrT1xF6toGaPWm44h2LkLaxAsTYhIDPjkHKidGqBwXt+35t jR52hrgzg4CYGlcU6RqISEtqe9eMdkNuy702UyNcGd1msERT9z4uwxKdapjiqCC7 VBbASrkcRSKwQtWqfPwHEPmesXD3Otrw3eP1K3s5XvweUfjJTVeaxjjHiQ+o9Edd 9QixcOBj18BT7uoyhnByqEFlRrVNkjccdTwCHaO3bFWL4RAnggIpb9EJFaVu0c0K j40W4XK3+Kt/QGtPWAhi+2L77jH3zPEng4rTMfPqrjcGhd1NjmUZ1Snhiw7DH0pJ 03bxz6JmeiQNeP+SsLvav32e9liASxEebkOYww== -----END CERTIFICATE-----Generated at Thu Mar 26 16:56:14 2026 by rpki-client