$ rpki-client -vvf repo-rpki.idnic.net/repo/0463ae7c-a6ff-4fd8-96f2-0ba1880133c7/0/3230332e3131342e3232372e302f32342d3234203d3e203435373033.roa File: 3230332e3131342e3232372e302f32342d3234203d3e203435373033.roa (raw, json) Hash identifier: xjVKQyiKRL8omA2w04jtrwyS2CBtDtklYDfHd9DTDQk= Subject key identifier: 24:A5:D6:CB:D3:CA:6A:3E:2F:5A:92:22:32:AA:03:E4:CA:1F:84:51 Certificate issuer: /CN=B7959E04EF090801395CE53E099D09F7AF2EF81B Certificate serial: 56237E99EA5F0B26261347E6B32DE2E4AAF9B7FE Authority key identifier: B7:95:9E:04:EF:09:08:01:39:5C:E5:3E:09:9D:09:F7:AF:2E:F8:1B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B7959E04EF090801395CE53E099D09F7AF2EF81B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0463ae7c-a6ff-4fd8-96f2-0ba1880133c7/0/3230332e3131342e3232372e302f32342d3234203d3e203435373033.roa Signing time: Fri 17 Apr 2026 04:00:00 +0000 ROA not before: Fri 17 Apr 2026 03:55:00 +0000 ROA not after: Fri 16 Apr 2027 04:00:00 +0000 asID: 45703 IP address blocks: 203.114.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0463ae7c-a6ff-4fd8-96f2-0ba1880133c7/0/B7959E04EF090801395CE53E099D09F7AF2EF81B.crl rsync://repo-rpki.idnic.net/repo/0463ae7c-a6ff-4fd8-96f2-0ba1880133c7/0/B7959E04EF090801395CE53E099D09F7AF2EF81B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B7959E04EF090801395CE53E099D09F7AF2EF81B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 14:34:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:23:7e:99:ea:5f:0b:26:26:13:47:e6:b3:2d:e2:e4:aa:f9:b7:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B7959E04EF090801395CE53E099D09F7AF2EF81B Validity Not Before: Apr 17 03:55:00 2026 GMT Not After : Apr 16 04:00:00 2027 GMT Subject: CN=24A5D6CBD3CA6A3E2F5A922232AA03E4CA1F8451 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:4d:9f:fc:8f:84:df:4b:28:7b:b5:39:d8:09: af:f6:c5:86:19:6a:29:12:82:24:b4:8e:d5:f4:a1: bf:cb:a4:39:ac:37:90:9a:66:35:af:f6:a7:cb:49: 35:6f:ec:68:bd:e2:bf:1e:1d:68:de:eb:b7:38:92: f3:15:8d:40:39:05:cc:85:e9:6c:06:2a:14:6e:ad: e7:a8:5c:f0:d2:77:b9:1a:6d:75:88:8b:31:4b:3c: 69:fe:f5:80:1f:c0:8e:c2:a3:c5:4a:d4:d3:11:9e: da:5f:d7:b4:50:a7:cd:a1:cf:23:e4:56:87:ed:d7: 21:15:48:74:49:86:1d:ba:99:9c:b8:94:00:90:fa: 69:19:7f:98:4e:6a:6e:90:94:c1:a1:b4:61:e4:16: 90:72:0b:8d:87:be:e5:56:6a:ff:7a:37:58:89:41: b6:33:31:55:99:ca:ac:d4:fd:66:8d:ca:e5:4f:a1: de:ac:3a:5e:ba:f0:8f:cf:36:0b:24:db:05:4b:87: 25:3a:a8:47:c4:df:cc:d7:c7:9f:fd:c2:19:8b:9e: 24:30:d2:e3:51:30:78:d4:94:dc:a9:2f:c8:70:28: 03:af:07:25:63:f1:49:64:bc:10:07:70:4d:87:37: ed:25:e1:d8:5f:17:f9:c3:a0:d2:27:b6:22:f0:5a: 0f:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:A5:D6:CB:D3:CA:6A:3E:2F:5A:92:22:32:AA:03:E4:CA:1F:84:51 X509v3 Authority Key Identifier: keyid:B7:95:9E:04:EF:09:08:01:39:5C:E5:3E:09:9D:09:F7:AF:2E:F8:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0463ae7c-a6ff-4fd8-96f2-0ba1880133c7/0/B7959E04EF090801395CE53E099D09F7AF2EF81B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B7959E04EF090801395CE53E099D09F7AF2EF81B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0463ae7c-a6ff-4fd8-96f2-0ba1880133c7/0/3230332e3131342e3232372e302f32342d3234203d3e203435373033.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.114.227.0/24 Signature Algorithm: sha256WithRSAEncryption 7e:c4:e3:cd:19:2e:a7:93:ef:cc:65:2e:a1:b3:d0:3f:65:23: c8:27:61:46:2d:d3:9d:68:ae:3d:6c:46:6a:55:5c:44:4b:96: 41:4f:c9:4a:1e:ad:e8:64:98:44:86:48:60:f1:f2:21:19:62: dd:4c:7f:7c:f3:db:50:fd:b5:d4:55:39:39:18:5d:31:7c:87: be:b9:2f:e4:7d:83:35:ab:60:bb:5d:55:44:21:6c:35:a6:0e: 9c:27:41:c5:ac:6d:be:10:c4:d7:d7:a8:36:66:27:b0:f5:89: b9:28:dd:db:f8:90:5f:1c:b0:81:60:2e:7d:69:ba:ae:c1:2d: e0:c1:8a:fc:35:d5:2e:70:16:cf:fb:a5:82:4f:9d:f6:b2:e7: e5:f3:2c:b9:f2:4a:1d:f1:46:f3:2b:c1:5f:ed:db:3c:b8:4a: 3b:37:03:f8:6e:e1:5d:26:bd:e0:94:c8:63:9a:33:8d:62:b1: af:ab:c8:43:0d:f8:e3:d3:2d:9d:fe:8d:84:15:b7:75:14:fe: 69:01:82:a5:50:1e:2e:4d:b3:4b:82:59:33:aa:95:d4:a7:2e: 89:e3:b3:89:1b:57:97:35:d7:8e:85:30:40:a8:be:4a:d8:79: 60:ea:c8:86:cd:6d:79:71:31:a8:17:10:3d:c3:99:76:78:50: 61:23:86:ec -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUViN+mepfCyYmE0fmsy3i5Kr5t/4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjc5NTlFMDRFRjA5MDgwMTM5NUNFNTNFMDk5RDA5RjdB RjJFRjgxQjAeFw0yNjA0MTcwMzU1MDBaFw0yNzA0MTYwNDAwMDBaMDMxMTAvBgNV BAMTKDI0QTVENkNCRDNDQTZBM0UyRjVBOTIyMjMyQUEwM0U0Q0ExRjg0NTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoTZ/8j4TfSyh7tTnYCa/2xYYZ aikSgiS0jtX0ob/LpDmsN5CaZjWv9qfLSTVv7Gi94r8eHWje67c4kvMVjUA5BcyF 6WwGKhRureeoXPDSd7kabXWIizFLPGn+9YAfwI7Co8VK1NMRntpf17RQp82hzyPk Voft1yEVSHRJhh26mZy4lACQ+mkZf5hOam6QlMGhtGHkFpByC42HvuVWav96N1iJ QbYzMVWZyqzU/WaNyuVPod6sOl668I/PNgsk2wVLhyU6qEfE38zXx5/9whmLniQw 0uNRMHjUlNypL8hwKAOvByVj8UlkvBAHcE2HN+0l4dhfF/nDoNIntiLwWg+RAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUJKXWy9PKaj4vWpIiMqoD5MofhFEwHwYDVR0j BBgwFoAUt5WeBO8JCAE5XOU+CZ0J968u+BswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NDYzYWU3Yy1hNmZmLTRmZDgtOTZmMi0wYmExODgwMTMzYzcvMC9CNzk1OUUwNEVG MDkwODAxMzk1Q0U1M0UwOTlEMDlGN0FGMkVGODFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjc5NTlFMDRFRjA5MDgwMTM5NUNFNTNFMDk5RDA5RjdBRjJF RjgxQi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzA0NjNhZTdjLWE2ZmYtNGZkOC05 NmYyLTBiYTE4ODAxMzNjNy8wLzMyMzAzMzJlMzEzMTM0MmUzMjMyMzcyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzNDM1MzczMDMzLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAy3LjMA0GCSqG SIb3DQEBCwUAA4IBAQB+xOPNGS6nk+/MZS6hs9A/ZSPIJ2FGLdOdaK49bEZqVVxE S5ZBT8lKHq3oZJhEhkhg8fIhGWLdTH9889tQ/bXUVTk5GF0xfIe+uS/kfYM1q2C7 XVVEIWw1pg6cJ0HFrG2+EMTX16g2Ziew9Ym5KN3b+JBfHLCBYC59abquwS3gwYr8 NdUucBbP+6WCT532sufl8yy58kod8UbzK8Ff7ds8uEo7NwP4buFdJr3glMhjmjON YrGvq8hDDfjj0y2d/o2EFbd1FP5pAYKlUB4uTbNLglkzqpXUpy6J47OJG1eXNdeO hTBAqL5K2Hlg6siGzW15cTGoFxA9w5l2eFBhI4bs -----END CERTIFICATE-----Generated at Sun Apr 19 15:32:45 2026 by rpki-client