$ rpki-client -vvf repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3230332e3135332e32342e302f32322d3232203d3e203234353235.roa File: 3230332e3135332e32342e302f32322d3232203d3e203234353235.roa (raw, json) Hash identifier: gSX7jnen7XM0Qa63g6rD9OV19gv4toe/mR80mUBOEGU= Subject key identifier: 85:B1:02:1A:70:A2:AD:51:D3:BC:78:D7:30:58:2B:6C:8A:08:CE:C6 Certificate issuer: /CN=ADCB9F9DF56E90B39B5344118194104F46A83702 Certificate serial: 6A36E2444EC2CC0911401C6FB39A0CAD27760A94 Authority key identifier: AD:CB:9F:9D:F5:6E:90:B3:9B:53:44:11:81:94:10:4F:46:A8:37:02 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3230332e3135332e32342e302f32322d3232203d3e203234353235.roa Signing time: Tue 24 Mar 2026 08:01:32 +0000 ROA not before: Tue 24 Mar 2026 07:56:32 +0000 ROA not after: Tue 23 Mar 2027 08:01:32 +0000 asID: 24525 IP address blocks: 203.153.24.0/22 maxlen: 22 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.crl rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 20:48:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:36:e2:44:4e:c2:cc:09:11:40:1c:6f:b3:9a:0c:ad:27:76:0a:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ADCB9F9DF56E90B39B5344118194104F46A83702 Validity Not Before: Mar 24 07:56:32 2026 GMT Not After : Mar 23 08:01:32 2027 GMT Subject: CN=85B1021A70A2AD51D3BC78D730582B6C8A08CEC6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:3d:cc:57:33:42:a8:8b:f1:20:c8:30:9f:1e: 79:63:18:43:f0:47:1c:84:e4:15:ce:32:b4:a0:4b: 8b:51:de:19:22:be:75:28:6d:ef:90:b6:5c:b8:fe: e6:9a:5f:fb:a8:28:94:64:86:10:48:9c:12:04:52: ee:a4:62:f0:17:d0:1b:3d:e6:cd:71:20:75:04:2a: 40:c7:b3:b8:8c:77:31:9d:6c:91:7a:ee:57:95:b8: a8:2e:3e:b4:f0:74:6b:34:7e:a3:4e:7f:6f:b1:65: 26:fb:22:df:09:99:65:9b:aa:35:8c:23:7d:d6:63: 62:cc:62:6d:f5:d6:76:98:2f:43:19:5b:81:e4:9e: 7d:c9:44:25:1d:bc:3a:f4:90:6b:95:d3:25:ec:95: 8e:ad:ec:0b:98:e1:5b:15:df:44:c2:8b:b0:43:d3: cf:50:38:f1:e4:3b:de:4f:d3:95:a3:05:41:33:63: d6:c3:9b:92:22:c6:da:d3:34:ba:68:c2:5c:4f:2a: 62:3f:3c:60:fa:59:5e:a8:ed:fc:56:a0:8b:ba:a2: 3e:d7:fb:27:9d:5a:40:db:9d:63:ea:70:b1:e1:76: 21:96:df:a3:75:23:56:02:26:f1:b2:ee:ab:c2:20: 8d:8e:67:f1:54:88:d9:00:a8:0c:1f:4b:75:16:68: 7f:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:B1:02:1A:70:A2:AD:51:D3:BC:78:D7:30:58:2B:6C:8A:08:CE:C6 X509v3 Authority Key Identifier: keyid:AD:CB:9F:9D:F5:6E:90:B3:9B:53:44:11:81:94:10:4F:46:A8:37:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3230332e3135332e32342e302f32322d3232203d3e203234353235.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.153.24.0/22 Signature Algorithm: sha256WithRSAEncryption 3d:0d:1c:f2:ee:4e:30:71:18:38:c6:16:a2:ee:7a:c6:36:0a: e0:12:f0:ec:b7:cf:db:8a:ed:bf:2a:e9:c8:81:0a:c9:2c:98: f8:fe:cc:a1:a5:cf:23:6c:27:b8:e8:bb:0c:bd:80:11:7f:2b: 43:29:65:65:d9:97:86:b8:f4:07:86:68:3d:ba:cf:3a:c8:8a: be:cd:30:05:a5:19:45:7d:55:90:0d:61:37:4f:df:7e:33:bb: 28:ae:d7:88:70:ca:44:b8:34:35:25:c4:94:55:eb:b4:99:f3: f4:e9:ad:48:ec:29:88:44:c8:c3:07:f4:f4:9c:ce:1e:ec:22: 8f:5e:8b:0f:a1:d6:17:07:f8:07:4c:47:2f:42:e7:a0:ce:dc: 60:33:4f:8f:c9:3b:ba:30:87:83:ad:8f:84:fc:8b:dd:5e:1b: 25:e7:42:a2:8e:0d:14:a6:97:3d:21:a1:7c:34:72:3a:41:a1: 4e:cd:54:bf:ef:e6:4e:83:48:9e:b2:3f:92:77:c4:b6:f4:79: f7:e2:81:6a:28:24:4a:eb:3d:fe:11:9f:cb:c2:20:9a:ee:47: a9:36:66:57:d3:d8:7c:7a:03:68:54:fe:ec:87:bb:87:6c:52: 02:9b:a7:c3:10:14:ca:65:f0:af:00:62:ea:24:34:9e:f6:24: c3:3c:14:0a -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUajbiRE7CzAkRQBxvs5oMrSd2CpQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQURDQjlGOURGNTZFOTBCMzlCNTM0NDExODE5NDEwNEY0 NkE4MzcwMjAeFw0yNjAzMjQwNzU2MzJaFw0yNzAzMjMwODAxMzJaMDMxMTAvBgNV BAMTKDg1QjEwMjFBNzBBMkFENTFEM0JDNzhENzMwNTgyQjZDOEEwOENFQzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTPcxXM0Koi/EgyDCfHnljGEPw RxyE5BXOMrSgS4tR3hkivnUobe+Qtly4/uaaX/uoKJRkhhBInBIEUu6kYvAX0Bs9 5s1xIHUEKkDHs7iMdzGdbJF67leVuKguPrTwdGs0fqNOf2+xZSb7It8JmWWbqjWM I33WY2LMYm311naYL0MZW4Hknn3JRCUdvDr0kGuV0yXslY6t7AuY4VsV30TCi7BD 089QOPHkO95P05WjBUEzY9bDm5IixtrTNLpowlxPKmI/PGD6WV6o7fxWoIu6oj7X +yedWkDbnWPqcLHhdiGW36N1I1YCJvGy7qvCII2OZ/FUiNkAqAwfS3UWaH+ZAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUhbECGnCirVHTvHjXMFgrbIoIzsYwHwYDVR0j BBgwFoAUrcufnfVukLObU0QRgZQQT0aoNwIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MWY0ZmQzOC03ODI2LTQyMDEtOWY5Yi0xZDdjNzZhYTI0ZGQvMC9BRENCOUY5REY1 NkU5MEIzOUI1MzQ0MTE4MTk0MTA0RjQ2QTgzNzAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQURDQjlGOURGNTZFOTBCMzlCNTM0NDExODE5NDEwNEY0NkE4 MzcwMi5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2QxZjRmZDM4LTc4MjYtNDIwMS05 ZjliLTFkN2M3NmFhMjRkZC8wLzMyMzAzMzJlMzEzNTMzMmUzMjM0MmUzMDJmMzIz MjJkMzIzMjIwM2QzZTIwMzIzNDM1MzIzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAsuZGDANBgkqhkiG 9w0BAQsFAAOCAQEAPQ0c8u5OMHEYOMYWou56xjYK4BLw7LfP24rtvyrpyIEKySyY +P7MoaXPI2wnuOi7DL2AEX8rQyllZdmXhrj0B4ZoPbrPOsiKvs0wBaUZRX1VkA1h N0/ffjO7KK7XiHDKRLg0NSXElFXrtJnz9OmtSOwpiETIwwf09JzOHuwij16LD6HW Fwf4B0xHL0LnoM7cYDNPj8k7ujCHg62PhPyL3V4bJedCoo4NFKaXPSGhfDRyOkGh Ts1Uv+/mToNInrI/knfEtvR59+KBaigkSus9/hGfy8Igmu5HqTZmV9PYfHoDaFT+ 7Ie7h2xSApunwxAUymXwrwBi6iQ0nvYkwzwUCg== -----END CERTIFICATE-----Generated at Thu Mar 26 20:38:21 2026 by rpki-client