$ rpki-client -vvf repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/3230332e38342e3134302e302f32342d3234203d3e20313338303737.roa File: 3230332e38342e3134302e302f32342d3234203d3e20313338303737.roa (raw, json) Hash identifier: 7UyyeOfOAAWwvi60EPh0vF8B3qR4laDvRoyaINvRTM4= Subject key identifier: 2E:B7:E5:1C:9B:18:67:71:9D:C8:75:D6:AF:F0:F9:C9:61:3A:13:D4 Certificate issuer: /CN=981E5677AC602950ABE1A442C2779E7CB0C108A9 Certificate serial: 5096BB76C4FB07B98ACA863848E8AE6DBACBCB40 Authority key identifier: 98:1E:56:77:AC:60:29:50:AB:E1:A4:42:C2:77:9E:7C:B0:C1:08:A9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/981E5677AC602950ABE1A442C2779E7CB0C108A9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/3230332e38342e3134302e302f32342d3234203d3e20313338303737.roa Signing time: Tue 03 Mar 2026 09:09:01 +0000 ROA not before: Tue 03 Mar 2026 09:04:01 +0000 ROA not after: Tue 02 Mar 2027 09:09:01 +0000 asID: 138077 IP address blocks: 203.84.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.crl rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/981E5677AC602950ABE1A442C2779E7CB0C108A9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Mar 2026 16:18:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:96:bb:76:c4:fb:07:b9:8a:ca:86:38:48:e8:ae:6d:ba:cb:cb:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=981E5677AC602950ABE1A442C2779E7CB0C108A9 Validity Not Before: Mar 3 09:04:01 2026 GMT Not After : Mar 2 09:09:01 2027 GMT Subject: CN=2EB7E51C9B1867719DC875D6AFF0F9C9613A13D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:fe:23:bf:de:4d:97:04:cb:57:c8:e5:98:7b: 9c:99:41:40:c9:b7:56:6f:64:6c:42:bc:67:af:18: b2:7b:6b:f8:07:94:75:8e:dd:57:f0:61:28:15:dc: 69:0d:c6:8a:87:7f:2c:ce:aa:ea:56:f6:e4:10:50: 4e:91:e8:9f:1c:ba:68:f1:ee:5f:2f:56:d2:9b:bc: 3a:20:e4:a6:5f:6c:72:03:c8:f6:f2:0b:34:07:32: d2:89:d2:a8:33:6b:fc:0c:4a:3c:cd:a0:1e:e7:d6: ea:56:01:87:b7:38:ae:df:6f:9e:c1:22:4a:2a:8e: fb:53:06:ed:b1:5e:82:84:ee:1f:39:89:1a:04:dc: e3:95:24:f9:89:b2:b5:ae:14:2c:a6:7d:84:08:6d: dc:9c:71:81:b8:a7:38:56:af:d0:cc:7d:f9:4a:ba: fa:9e:bd:b3:9e:26:35:53:5b:a4:c8:d5:2e:6b:58: de:b3:8e:bb:3b:c7:e7:e9:69:22:47:53:49:a6:fd: 07:2a:20:74:8e:06:ce:1e:a2:29:6d:08:ba:95:e2: ad:19:76:c5:fe:c5:d8:cc:99:25:87:11:c1:f4:0c: db:81:6f:62:01:36:ed:23:e1:87:a9:c3:8d:c9:6c: 48:75:3e:f7:4c:88:46:40:93:60:ad:05:82:34:72: e6:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:B7:E5:1C:9B:18:67:71:9D:C8:75:D6:AF:F0:F9:C9:61:3A:13:D4 X509v3 Authority Key Identifier: keyid:98:1E:56:77:AC:60:29:50:AB:E1:A4:42:C2:77:9E:7C:B0:C1:08:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/981E5677AC602950ABE1A442C2779E7CB0C108A9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/3230332e38342e3134302e302f32342d3234203d3e20313338303737.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.84.140.0/24 Signature Algorithm: sha256WithRSAEncryption 7c:b5:b1:7b:dc:b2:f5:be:b6:8a:bf:42:d5:d9:9f:ad:6a:17: 71:49:38:5d:48:d0:ee:c3:bf:b4:21:b0:bc:c5:c8:f4:c2:9c: 3f:e4:da:35:8f:18:0f:1a:09:e9:1e:11:94:ff:36:4b:68:ff: f8:d6:1d:53:8a:95:5b:aa:76:25:4f:47:2f:06:2f:6d:35:45: bc:bd:c5:e6:14:f1:fa:17:f9:8d:af:56:1b:6b:07:bd:21:fb: 06:d8:fd:86:ce:dd:76:4b:90:dc:c7:cf:4c:e7:e0:92:c4:14: 5a:f0:18:9d:0f:62:5c:62:14:95:80:63:2d:89:ac:2e:e7:3d: 22:30:0c:e4:9e:a4:21:a2:8d:da:a6:6a:7c:d1:76:b0:d7:ae: 9e:4f:da:ec:dd:a0:5a:86:c2:cf:31:03:ec:fc:a8:96:e9:9a: da:3f:b3:fe:18:a3:ad:26:02:9e:67:99:81:79:c1:ce:8c:50: e3:0a:b4:26:99:f2:08:4c:81:d8:22:f8:e8:9e:25:22:14:77: e7:da:59:d3:97:19:70:24:c2:d2:1e:a6:bd:c7:34:61:8b:f7: 25:c6:8f:6f:b9:39:c0:02:08:ef:b2:cb:61:13:f5:6d:71:7a: 1a:94:9c:82:bd:6c:5d:76:ad:69:6a:1f:c3:1c:f7:21:2e:3d: 07:ef:2a:3b -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUUJa7dsT7B7mKyoY4SOiubbrLy0AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTgxRTU2NzdBQzYwMjk1MEFCRTFBNDQyQzI3NzlFN0NC MEMxMDhBOTAeFw0yNjAzMDMwOTA0MDFaFw0yNzAzMDIwOTA5MDFaMDMxMTAvBgNV BAMTKDJFQjdFNTFDOUIxODY3NzE5REM4NzVENkFGRjBGOUM5NjEzQTEzRDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC/iO/3k2XBMtXyOWYe5yZQUDJ t1ZvZGxCvGevGLJ7a/gHlHWO3VfwYSgV3GkNxoqHfyzOqupW9uQQUE6R6J8cumjx 7l8vVtKbvDog5KZfbHIDyPbyCzQHMtKJ0qgza/wMSjzNoB7n1upWAYe3OK7fb57B IkoqjvtTBu2xXoKE7h85iRoE3OOVJPmJsrWuFCymfYQIbdyccYG4pzhWr9DMfflK uvqevbOeJjVTW6TI1S5rWN6zjrs7x+fpaSJHU0mm/QcqIHSOBs4eoiltCLqV4q0Z dsX+xdjMmSWHEcH0DNuBb2IBNu0j4Yepw43JbEh1PvdMiEZAk2CtBYI0cuYZAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQULrflHJsYZ3GdyHXWr/D5yWE6E9QwHwYDVR0j BBgwFoAUmB5Wd6xgKVCr4aRCwneefLDBCKkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NzkyMmY4OS0zZTliLTRiMjEtOTE4Ni1hNjQ4YzJkYTNmN2IvMC85ODFFNTY3N0FD NjAyOTUwQUJFMUE0NDJDMjc3OUU3Q0IwQzEwOEE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTgxRTU2NzdBQzYwMjk1MEFCRTFBNDQyQzI3NzlFN0NCMEMx MDhBOS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E3OTIyZjg5LTNlOWItNGIyMS05 MTg2LWE2NDhjMmRhM2Y3Yi8wLzMyMzAzMzJlMzgzNDJlMzEzNDMwMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzM4MzAzNzM3LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAy1SMMA0GCSqG SIb3DQEBCwUAA4IBAQB8tbF73LL1vraKv0LV2Z+tahdxSThdSNDuw7+0IbC8xcj0 wpw/5No1jxgPGgnpHhGU/zZLaP/41h1TipVbqnYlT0cvBi9tNUW8vcXmFPH6F/mN r1Ybawe9IfsG2P2Gzt12S5Dcx89M5+CSxBRa8BidD2JcYhSVgGMtiawu5z0iMAzk nqQhoo3apmp80Xaw166eT9rs3aBahsLPMQPs/KiW6ZraP7P+GKOtJgKeZ5mBecHO jFDjCrQmmfIITIHYIvjoniUiFHfn2lnTlxlwJMLSHqa9xzRhi/clxo9vuTnAAgjv ssthE/VtcXoalJyCvWxddq1pah/DHPchLj0H7yo7 -----END CERTIFICATE-----Generated at Wed Mar 4 13:09:30 2026 by rpki-client