$ rpki-client -vvf repo-rpki.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/3230322e31302e35322e302f32342d3234203d3e20313337333633.roa File: 3230322e31302e35322e302f32342d3234203d3e20313337333633.roa (raw, json) Hash identifier: Jb/u8bvNMhmX1jZiIEI6skK1IT4rVhakPFuslj8q9Kk= Subject key identifier: 16:8F:33:0F:D4:B9:AD:37:B6:C8:3A:90:05:28:67:39:0D:FF:98:0F Certificate issuer: /CN=B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3 Certificate serial: 0FD186E621926220092D5FAF642A2D7CC9917E57 Authority key identifier: B6:EE:1F:61:D6:E8:E9:EE:C6:40:CC:C1:D7:91:DB:A1:24:99:3C:A3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/3230322e31302e35322e302f32342d3234203d3e20313337333633.roa Signing time: Mon 23 Mar 2026 07:00:00 +0000 ROA not before: Mon 23 Mar 2026 06:55:00 +0000 ROA not after: Mon 22 Mar 2027 07:00:00 +0000 asID: 137363 IP address blocks: 202.10.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3.crl rsync://repo-rpki.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Mar 2026 15:32:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:d1:86:e6:21:92:62:20:09:2d:5f:af:64:2a:2d:7c:c9:91:7e:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3 Validity Not Before: Mar 23 06:55:00 2026 GMT Not After : Mar 22 07:00:00 2027 GMT Subject: CN=168F330FD4B9AD37B6C83A90052867390DFF980F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:7f:a1:9f:58:0f:b3:7a:b5:0b:c1:d3:34:6d: 93:ef:74:46:fe:14:19:ef:b6:40:12:6e:9f:21:ca: 34:33:8a:fd:d5:70:e2:8e:73:9b:b1:ab:76:cc:d2: 67:c2:9b:d2:1a:60:36:cc:34:a6:cc:9e:af:28:32: 17:23:d4:7e:0a:fb:5c:37:97:3e:00:1b:4e:5d:9a: be:64:ec:5a:a6:64:a9:8a:74:2f:5c:f6:a5:6d:b9: d7:19:c0:a8:35:95:25:d3:1f:62:00:e5:a3:0a:c8: d7:af:10:20:0d:0c:fd:88:4f:3f:bd:15:3a:a6:5d: 20:37:fb:9f:b7:c4:36:39:98:1d:d3:01:16:25:52: a7:ba:67:76:14:e2:13:08:db:d5:fd:76:33:49:1f: 49:c4:62:ff:2e:b2:78:e9:60:7b:6d:8c:dc:50:5f: f9:4c:f8:6c:7f:82:ec:bf:ec:10:c2:59:05:aa:54: 42:e6:21:a8:27:9a:f9:d1:9c:85:4c:30:48:f4:16: 57:ff:43:a3:dc:bc:54:35:bf:eb:71:5c:9e:da:bb: 6c:0b:b3:03:94:78:41:cc:67:b3:b8:bb:51:58:0a: 97:56:d7:3c:91:1f:ea:14:96:0d:58:32:d5:76:7c: fc:db:5b:30:9e:0b:ba:47:9d:9a:77:e4:60:e2:32: 59:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:8F:33:0F:D4:B9:AD:37:B6:C8:3A:90:05:28:67:39:0D:FF:98:0F X509v3 Authority Key Identifier: keyid:B6:EE:1F:61:D6:E8:E9:EE:C6:40:CC:C1:D7:91:DB:A1:24:99:3C:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/3230322e31302e35322e302f32342d3234203d3e20313337333633.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.10.52.0/24 Signature Algorithm: sha256WithRSAEncryption 0e:dd:29:57:01:7b:ce:95:81:93:07:20:a8:17:cb:7e:ca:6d: f1:9e:dd:e5:a4:2f:93:a9:e1:1c:d1:a0:0a:39:df:16:de:cb: 1d:46:cb:a8:f3:aa:5e:5c:d4:32:62:38:c4:c9:3a:5f:91:33: 1b:79:d5:d1:db:99:a1:dd:19:8f:a8:06:ab:ae:c7:54:5f:7a: b7:34:ff:dd:69:43:cf:34:9c:e6:58:b7:08:ef:65:54:50:41: 1d:08:e4:e7:6e:b0:3b:92:0b:72:bb:81:bb:a1:71:ae:b5:93: a8:77:32:01:22:29:d8:b6:91:3c:be:37:72:c5:37:95:ad:0e: a2:7a:b2:37:d6:40:66:1d:dd:e6:ef:5c:17:29:f0:26:c3:72: 6e:cf:04:2e:05:7b:6e:1c:f9:ae:be:78:cc:c2:73:23:db:2a: 7c:b4:85:8b:f0:f4:8d:b9:d1:11:ce:e6:bc:3d:5c:97:0d:6e: 01:a3:16:ec:32:9e:ed:39:a8:e2:33:5e:81:df:bc:e5:96:f2: 39:cb:8a:2b:99:28:3d:04:d1:35:8c:a7:b3:46:f3:70:03:63: 72:af:6c:4c:ff:10:c5:fa:49:be:59:02:b4:5e:f3:de:0e:c5: 71:5a:14:4c:bf:de:a4:61:fb:e9:57:ed:46:44:9f:fe:35:f7: ac:9a:e1:d4 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUD9GG5iGSYiAJLV+vZCotfMmRflcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjZFRTFGNjFENkU4RTlFRUM2NDBDQ0MxRDc5MURCQTEy NDk5M0NBMzAeFw0yNjAzMjMwNjU1MDBaFw0yNzAzMjIwNzAwMDBaMDMxMTAvBgNV BAMTKDE2OEYzMzBGRDRCOUFEMzdCNkM4M0E5MDA1Mjg2NzM5MERGRjk4MEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHf6GfWA+zerULwdM0bZPvdEb+ FBnvtkASbp8hyjQziv3VcOKOc5uxq3bM0mfCm9IaYDbMNKbMnq8oMhcj1H4K+1w3 lz4AG05dmr5k7FqmZKmKdC9c9qVtudcZwKg1lSXTH2IA5aMKyNevECANDP2ITz+9 FTqmXSA3+5+3xDY5mB3TARYlUqe6Z3YU4hMI29X9djNJH0nEYv8usnjpYHttjNxQ X/lM+Gx/guy/7BDCWQWqVELmIagnmvnRnIVMMEj0Flf/Q6PcvFQ1v+txXJ7au2wL swOUeEHMZ7O4u1FYCpdW1zyRH+oUlg1YMtV2fPzbWzCeC7pHnZp35GDiMll9AgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUFo8zD9S5rTe2yDqQBShnOQ3/mA8wHwYDVR0j BBgwFoAUtu4fYdbo6e7GQMzB15HboSSZPKMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MTA4NWI0YS1mNTczLTQyZjMtODI1Yy0xY2YwYzg3MmIxNTIvMC9CNkVFMUY2MUQ2 RThFOUVFQzY0MENDQzFENzkxREJBMTI0OTkzQ0EzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjZFRTFGNjFENkU4RTlFRUM2NDBDQ0MxRDc5MURCQTEyNDk5 M0NBMy5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2QxMDg1YjRhLWY1NzMtNDJmMy04 MjVjLTFjZjBjODcyYjE1Mi8wLzMyMzAzMjJlMzEzMDJlMzUzMjJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMxMzMzNzMzMzYzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMoKNDANBgkqhkiG 9w0BAQsFAAOCAQEADt0pVwF7zpWBkwcgqBfLfspt8Z7d5aQvk6nhHNGgCjnfFt7L HUbLqPOqXlzUMmI4xMk6X5EzG3nV0duZod0Zj6gGq67HVF96tzT/3WlDzzSc5li3 CO9lVFBBHQjk526wO5ILcruBu6FxrrWTqHcyASIp2LaRPL43csU3la0OonqyN9ZA Zh3d5u9cFynwJsNybs8ELgV7bhz5rr54zMJzI9sqfLSFi/D0jbnREc7mvD1clw1u AaMW7DKe7Tmo4jNegd+85ZbyOcuKK5koPQTRNYyns0bzcANjcq9sTP8QxfpJvlkC tF7z3g7FcVoUTL/epGH76VftRkSf/jX3rJrh1A== -----END CERTIFICATE-----Generated at Tue Mar 24 16:31:17 2026 by rpki-client