$ rpki-client -vvf repo-rpki.idnic.net/repo/0463ae7c-a6ff-4fd8-96f2-0ba1880133c7/0/3230332e3131342e3232362e302f32332d3233203d3e203435373033.roa File: 3230332e3131342e3232362e302f32332d3233203d3e203435373033.roa (raw, json) Hash identifier: tCgoCFfwm3gMyc1YIpgy5ipxLMqn6hK8mmQlZrxd9Cw= Subject key identifier: 4F:C8:BB:8E:42:71:90:7F:2B:BE:C3:47:68:A9:E2:D2:2A:A7:39:DE Certificate issuer: /CN=B7959E04EF090801395CE53E099D09F7AF2EF81B Certificate serial: 66BE331E75C265AA5CDBBEE8E003CC3732EBFB7F Authority key identifier: B7:95:9E:04:EF:09:08:01:39:5C:E5:3E:09:9D:09:F7:AF:2E:F8:1B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B7959E04EF090801395CE53E099D09F7AF2EF81B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0463ae7c-a6ff-4fd8-96f2-0ba1880133c7/0/3230332e3131342e3232362e302f32332d3233203d3e203435373033.roa Signing time: Fri 17 Apr 2026 04:00:00 +0000 ROA not before: Fri 17 Apr 2026 03:55:00 +0000 ROA not after: Fri 16 Apr 2027 04:00:00 +0000 asID: 45703 IP address blocks: 203.114.226.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0463ae7c-a6ff-4fd8-96f2-0ba1880133c7/0/B7959E04EF090801395CE53E099D09F7AF2EF81B.crl rsync://repo-rpki.idnic.net/repo/0463ae7c-a6ff-4fd8-96f2-0ba1880133c7/0/B7959E04EF090801395CE53E099D09F7AF2EF81B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B7959E04EF090801395CE53E099D09F7AF2EF81B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 14:34:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:be:33:1e:75:c2:65:aa:5c:db:be:e8:e0:03:cc:37:32:eb:fb:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B7959E04EF090801395CE53E099D09F7AF2EF81B Validity Not Before: Apr 17 03:55:00 2026 GMT Not After : Apr 16 04:00:00 2027 GMT Subject: CN=4FC8BB8E4271907F2BBEC34768A9E2D22AA739DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:cc:df:b4:9f:ff:73:be:b6:b3:1a:9d:4b:f1: 5a:d0:30:35:47:a9:87:4a:54:a6:87:bc:90:af:ea: cb:e6:35:f8:9a:54:17:fc:ea:39:79:fd:12:89:3a: fe:98:0e:59:9c:28:bd:2d:37:cb:55:22:54:0c:cb: eb:42:c1:60:5d:76:84:e5:d8:5b:78:1a:cd:32:81: 1e:dc:b5:90:a1:fc:4e:92:e7:c3:a3:36:7a:90:14: c1:9c:a0:5c:ca:4d:29:e3:84:de:08:00:ad:54:d8: 88:2f:61:04:85:f0:9a:c6:0d:1a:1f:ee:48:0c:cb: 5e:48:2e:1f:2c:c2:4f:6e:dc:80:ea:e2:25:9d:a8: 96:3c:08:77:14:95:4c:7a:7e:de:34:7f:8c:b4:0b: 99:15:61:c9:6a:61:a7:31:07:24:f2:81:2f:f1:72: 1b:17:28:e6:2b:4f:88:e0:5f:9c:3d:2b:df:a5:02: 41:29:03:47:99:d9:3c:c5:d3:ef:6a:cd:c1:ee:0e: c4:89:7b:18:98:66:6c:85:19:6b:06:db:cd:67:c9: 99:14:f3:3c:53:5f:20:2f:8a:0c:cc:f7:fa:8f:17: 8b:9f:e5:dc:ba:d4:f9:bb:55:4f:40:6d:c1:ae:12: fc:24:cc:0d:db:6b:13:0f:16:48:0d:e8:34:eb:c5: 8a:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:C8:BB:8E:42:71:90:7F:2B:BE:C3:47:68:A9:E2:D2:2A:A7:39:DE X509v3 Authority Key Identifier: keyid:B7:95:9E:04:EF:09:08:01:39:5C:E5:3E:09:9D:09:F7:AF:2E:F8:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0463ae7c-a6ff-4fd8-96f2-0ba1880133c7/0/B7959E04EF090801395CE53E099D09F7AF2EF81B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B7959E04EF090801395CE53E099D09F7AF2EF81B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0463ae7c-a6ff-4fd8-96f2-0ba1880133c7/0/3230332e3131342e3232362e302f32332d3233203d3e203435373033.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.114.226.0/23 Signature Algorithm: sha256WithRSAEncryption 24:a1:a7:2d:55:ab:66:91:3a:ca:84:22:2f:a4:e4:6d:0c:e3: 24:92:e3:62:73:d9:a3:00:61:e9:26:ea:be:81:3a:e9:af:db: 85:ac:f3:66:31:12:d6:46:54:62:90:c7:09:e0:f5:cb:6b:7b: 0e:ea:02:39:25:41:2b:15:05:df:01:dd:7e:66:be:64:97:da: 1f:cd:36:b0:e8:69:59:61:91:59:c8:eb:c2:a4:f2:89:00:b3: 71:24:db:a8:e3:88:37:bb:50:05:99:a8:f9:e8:ef:cb:30:cb: 28:74:38:f2:0e:b3:db:09:4a:2f:91:4c:1a:af:58:ab:21:6f: 85:6e:01:90:e7:39:86:ac:e0:fb:c9:da:2c:5d:92:6e:36:f6: 80:ed:8c:28:7c:0b:aa:e8:cd:a5:10:e1:6c:72:4b:68:2a:5a: 21:6a:8d:8a:05:dd:51:f7:cf:1b:4c:72:17:69:28:c9:06:13: 56:90:ea:29:7f:9a:ec:1f:e4:b3:87:f0:21:cf:3f:e1:13:17: d6:6c:e4:2d:2f:4c:e7:a1:9d:da:f5:ee:90:01:2b:23:c6:17: c2:38:42:39:ee:36:3c:7a:13:06:5d:08:15:5f:83:dc:91:04: ad:d9:65:16:31:7c:ac:1f:45:45:b7:96:f9:5c:12:00:0a:01: 61:49:49:ac -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUZr4zHnXCZapc277o4APMNzLr+38wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjc5NTlFMDRFRjA5MDgwMTM5NUNFNTNFMDk5RDA5RjdB RjJFRjgxQjAeFw0yNjA0MTcwMzU1MDBaFw0yNzA0MTYwNDAwMDBaMDMxMTAvBgNV BAMTKDRGQzhCQjhFNDI3MTkwN0YyQkJFQzM0NzY4QTlFMkQyMkFBNzM5REUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRzN+0n/9zvrazGp1L8VrQMDVH qYdKVKaHvJCv6svmNfiaVBf86jl5/RKJOv6YDlmcKL0tN8tVIlQMy+tCwWBddoTl 2Ft4Gs0ygR7ctZCh/E6S58OjNnqQFMGcoFzKTSnjhN4IAK1U2IgvYQSF8JrGDRof 7kgMy15ILh8swk9u3IDq4iWdqJY8CHcUlUx6ft40f4y0C5kVYclqYacxByTygS/x chsXKOYrT4jgX5w9K9+lAkEpA0eZ2TzF0+9qzcHuDsSJexiYZmyFGWsG281nyZkU 8zxTXyAvigzM9/qPF4uf5dy61Pm7VU9AbcGuEvwkzA3baxMPFkgN6DTrxYovAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUT8i7jkJxkH8rvsNHaKni0iqnOd4wHwYDVR0j BBgwFoAUt5WeBO8JCAE5XOU+CZ0J968u+BswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NDYzYWU3Yy1hNmZmLTRmZDgtOTZmMi0wYmExODgwMTMzYzcvMC9CNzk1OUUwNEVG MDkwODAxMzk1Q0U1M0UwOTlEMDlGN0FGMkVGODFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjc5NTlFMDRFRjA5MDgwMTM5NUNFNTNFMDk5RDA5RjdBRjJF RjgxQi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzA0NjNhZTdjLWE2ZmYtNGZkOC05 NmYyLTBiYTE4ODAxMzNjNy8wLzMyMzAzMzJlMzEzMTM0MmUzMjMyMzYyZTMwMmYz MjMzMmQzMjMzMjAzZDNlMjAzNDM1MzczMDMzLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBy3LiMA0GCSqG SIb3DQEBCwUAA4IBAQAkoactVatmkTrKhCIvpORtDOMkkuNic9mjAGHpJuq+gTrp r9uFrPNmMRLWRlRikMcJ4PXLa3sO6gI5JUErFQXfAd1+Zr5kl9ofzTaw6GlZYZFZ yOvCpPKJALNxJNuo44g3u1AFmaj56O/LMMsodDjyDrPbCUovkUwar1irIW+FbgGQ 5zmGrOD7ydosXZJuNvaA7YwofAuq6M2lEOFscktoKlohao2KBd1R988bTHIXaSjJ BhNWkOopf5rsH+Szh/Ahzz/hExfWbOQtL0znoZ3a9e6QASsjxhfCOEI57jY8ehMG XQgVX4PckQSt2WUWMXysH0VFt5b5XBIACgFhSUms -----END CERTIFICATE-----Generated at Sun Apr 19 15:32:34 2026 by rpki-client