$ rpki-client -vvf repo-rpki.idnic.net/repo/06a7665a-b50b-4a45-a8f9-0d69bd7d743d/0/3132332e3235332e3234382e302f32332d3234203d3e20313336383235.roa File: 3132332e3235332e3234382e302f32332d3234203d3e20313336383235.roa (raw, json) Hash identifier: QI58DXpB52DfIuMgMkSoG294cwRWUIiNYLhET6AYpiI= Subject key identifier: ED:D9:65:C2:6B:7B:E2:CE:AE:B5:38:6A:B7:DE:76:94:56:6B:91:FA Certificate issuer: /CN=25D788BD2A450C01354B9AB70826895FDFF56208 Certificate serial: 208AB96D33C51BFC51904D2125F5FCEDEEED8D2E Authority key identifier: 25:D7:88:BD:2A:45:0C:01:35:4B:9A:B7:08:26:89:5F:DF:F5:62:08 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25D788BD2A450C01354B9AB70826895FDFF56208.cer Subject info access: rsync://repo-rpki.idnic.net/repo/06a7665a-b50b-4a45-a8f9-0d69bd7d743d/0/3132332e3235332e3234382e302f32332d3234203d3e20313336383235.roa Signing time: Thu 02 Apr 2026 09:00:02 +0000 ROA not before: Thu 02 Apr 2026 08:55:02 +0000 ROA not after: Thu 01 Apr 2027 09:00:02 +0000 asID: 136825 IP address blocks: 123.253.248.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/06a7665a-b50b-4a45-a8f9-0d69bd7d743d/0/25D788BD2A450C01354B9AB70826895FDFF56208.crl rsync://repo-rpki.idnic.net/repo/06a7665a-b50b-4a45-a8f9-0d69bd7d743d/0/25D788BD2A450C01354B9AB70826895FDFF56208.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25D788BD2A450C01354B9AB70826895FDFF56208.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 08:57:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:8a:b9:6d:33:c5:1b:fc:51:90:4d:21:25:f5:fc:ed:ee:ed:8d:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25D788BD2A450C01354B9AB70826895FDFF56208 Validity Not Before: Apr 2 08:55:02 2026 GMT Not After : Apr 1 09:00:02 2027 GMT Subject: CN=EDD965C26B7BE2CEAEB5386AB7DE7694566B91FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:3f:10:e4:58:71:f0:39:c5:1c:40:9f:08:01: 41:8d:1b:97:45:ed:67:fb:67:48:e2:bd:47:a1:f3: b7:49:55:83:00:77:d6:fe:27:1d:08:b3:57:b2:8e: 94:87:62:6d:c2:28:38:cd:4d:d1:76:be:10:8e:b0: 55:e5:c8:3c:b9:e6:a7:2b:d1:1e:cc:dc:55:4b:8f: ba:4f:46:4a:6e:a2:f4:6a:de:b8:d8:5b:07:35:ab: eb:ce:f8:da:68:ac:a1:94:3e:c0:e8:fa:81:33:24: 67:53:d3:2c:5c:f1:c6:c4:32:ba:e8:1b:ea:08:00: 94:8b:74:2b:69:ab:96:a9:8a:50:ce:a9:53:25:30: 35:09:a4:98:c5:52:4d:33:00:a4:6d:aa:ad:47:46: 19:88:a5:0c:7a:cc:99:c2:46:ff:00:e1:11:6d:35: 8e:5c:c7:64:c8:b2:b9:57:7c:3a:3d:3e:e7:55:4c: cb:1a:43:95:53:62:1f:e2:28:ea:c3:2e:49:60:d8: d5:00:9e:9e:af:3e:08:7e:87:f1:4d:bd:d7:a2:c8: c4:7a:cc:88:2d:c1:a4:76:03:92:e1:66:52:f7:6d: 59:a7:ae:0b:b0:c4:db:d5:66:56:3c:4d:76:bd:31: e8:b8:de:b5:0c:e2:ff:c1:73:03:e9:2d:0e:c6:02: 32:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:D9:65:C2:6B:7B:E2:CE:AE:B5:38:6A:B7:DE:76:94:56:6B:91:FA X509v3 Authority Key Identifier: keyid:25:D7:88:BD:2A:45:0C:01:35:4B:9A:B7:08:26:89:5F:DF:F5:62:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/06a7665a-b50b-4a45-a8f9-0d69bd7d743d/0/25D788BD2A450C01354B9AB70826895FDFF56208.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25D788BD2A450C01354B9AB70826895FDFF56208.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/06a7665a-b50b-4a45-a8f9-0d69bd7d743d/0/3132332e3235332e3234382e302f32332d3234203d3e20313336383235.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 123.253.248.0/23 Signature Algorithm: sha256WithRSAEncryption 98:6a:2e:b2:4b:83:8c:6b:93:d1:bb:70:a4:cd:c6:ef:aa:27: 87:2e:46:61:dd:fc:b5:c3:af:b9:46:24:6f:67:f8:5c:a0:57: a7:04:96:89:c2:ec:26:78:e6:3d:79:17:5b:5c:70:68:e0:5a: 44:64:50:43:6a:bb:1c:a4:cf:4d:ba:5d:30:cc:38:2f:02:de: 1e:12:ee:08:2d:6d:25:00:7c:f1:f0:2c:2e:44:2c:56:d0:bd: f3:e7:0a:a3:d9:9c:40:e7:49:7c:ad:53:1f:63:08:ab:02:60: 12:33:68:3c:4d:f9:de:7b:41:88:4f:03:e4:43:40:47:1b:91: 89:29:d5:51:c8:7e:bb:61:3c:c9:e3:8c:77:de:ea:c3:06:42: cd:fa:5b:1f:65:b9:00:01:4b:20:84:f2:48:98:c9:28:61:73: bd:d0:3a:26:64:de:2a:85:70:96:3d:74:76:0f:3e:2d:0f:9c: d5:8d:bb:a2:0a:c8:3b:36:13:e8:f4:15:45:1b:c9:3d:4c:37: 7a:2e:93:8d:9d:cc:30:d8:26:a8:9d:21:5d:58:58:c2:56:15: 29:62:c9:72:57:3b:f3:da:b2:eb:43:85:b7:2b:45:61:c5:b1: c3:c0:d8:4b:c4:f2:26:7f:ff:2f:07:fd:9f:dd:d9:d0:c2:14: d6:68:14:32 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUIIq5bTPFG/xRkE0hJfX87e7tjS4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjVENzg4QkQyQTQ1MEMwMTM1NEI5QUI3MDgyNjg5NUZE RkY1NjIwODAeFw0yNjA0MDIwODU1MDJaFw0yNzA0MDEwOTAwMDJaMDMxMTAvBgNV BAMTKEVERDk2NUMyNkI3QkUyQ0VBRUI1Mzg2QUI3REU3Njk0NTY2QjkxRkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLPxDkWHHwOcUcQJ8IAUGNG5dF 7Wf7Z0jivUeh87dJVYMAd9b+Jx0Is1eyjpSHYm3CKDjNTdF2vhCOsFXlyDy55qcr 0R7M3FVLj7pPRkpuovRq3rjYWwc1q+vO+NporKGUPsDo+oEzJGdT0yxc8cbEMrro G+oIAJSLdCtpq5apilDOqVMlMDUJpJjFUk0zAKRtqq1HRhmIpQx6zJnCRv8A4RFt NY5cx2TIsrlXfDo9PudVTMsaQ5VTYh/iKOrDLklg2NUAnp6vPgh+h/FNvdeiyMR6 zIgtwaR2A5LhZlL3bVmnrguwxNvVZlY8TXa9Mei43rUM4v/BcwPpLQ7GAjI5AgMB AAGjggI2MIICMjAdBgNVHQ4EFgQU7dllwmt74s6utThqt952lFZrkfowHwYDVR0j BBgwFoAUJdeIvSpFDAE1S5q3CCaJX9/1YggwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NmE3NjY1YS1iNTBiLTRhNDUtYThmOS0wZDY5YmQ3ZDc0M2QvMC8yNUQ3ODhCRDJB NDUwQzAxMzU0QjlBQjcwODI2ODk1RkRGRjU2MjA4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjVENzg4QkQyQTQ1MEMwMTM1NEI5QUI3MDgyNjg5NUZERkY1 NjIwOC5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzA2YTc2NjVhLWI1MGItNGE0NS1h OGY5LTBkNjliZDdkNzQzZC8wLzMxMzIzMzJlMzIzNTMzMmUzMjM0MzgyZTMwMmYz MjMzMmQzMjM0MjAzZDNlMjAzMTMzMzYzODMyMzUucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAF7/fgwDQYJ KoZIhvcNAQELBQADggEBAJhqLrJLg4xrk9G7cKTNxu+qJ4cuRmHd/LXDr7lGJG9n +FygV6cElonC7CZ45j15F1tccGjgWkRkUENquxykz026XTDMOC8C3h4S7ggtbSUA fPHwLC5ELFbQvfPnCqPZnEDnSXytUx9jCKsCYBIzaDxN+d57QYhPA+RDQEcbkYkp 1VHIfrthPMnjjHfe6sMGQs36Wx9luQABSyCE8kiYyShhc73QOiZk3iqFcJY9dHYP Pi0PnNWNu6IKyDs2E+j0FUUbyT1MN3ouk42dzDDYJqidIV1YWMJWFSliyXJXO/Pa sutDhbcrRWHFscPA2EvE8iZ//y8H/Z/d2dDCFNZoFDI= -----END CERTIFICATE-----Generated at Sat Apr 18 01:53:46 2026 by rpki-client