$ rpki-client -vvf repo-rpki.idnic.net/repo/074f214a-bf55-4048-845d-20675fb5f2a4/0/3230322e3136302e3133392e302f32342d3234203d3e20313439363735.roa File: 3230322e3136302e3133392e302f32342d3234203d3e20313439363735.roa (raw, json) Hash identifier: wdcIB7gQXhtVlKAgRBcM3DzhzYw/wfKPtk4+7Go8Wg4= Subject key identifier: 3D:56:E6:07:EC:B1:2D:AB:C5:FC:FB:19:FA:84:20:90:35:1E:96:5A Certificate issuer: /CN=027DBEC91021154263BB0CF1565833705023D987 Certificate serial: 1C5746C3FCF733F91E617AAD14F26E5022B3E81F Authority key identifier: 02:7D:BE:C9:10:21:15:42:63:BB:0C:F1:56:58:33:70:50:23:D9:87 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/027DBEC91021154263BB0CF1565833705023D987.cer Subject info access: rsync://repo-rpki.idnic.net/repo/074f214a-bf55-4048-845d-20675fb5f2a4/0/3230322e3136302e3133392e302f32342d3234203d3e20313439363735.roa Signing time: Mon 23 Feb 2026 14:03:10 +0000 ROA not before: Mon 23 Feb 2026 13:58:10 +0000 ROA not after: Mon 22 Feb 2027 14:03:10 +0000 asID: 149675 IP address blocks: 202.160.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/074f214a-bf55-4048-845d-20675fb5f2a4/0/027DBEC91021154263BB0CF1565833705023D987.crl rsync://repo-rpki.idnic.net/repo/074f214a-bf55-4048-845d-20675fb5f2a4/0/027DBEC91021154263BB0CF1565833705023D987.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/027DBEC91021154263BB0CF1565833705023D987.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 16:15:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:57:46:c3:fc:f7:33:f9:1e:61:7a:ad:14:f2:6e:50:22:b3:e8:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=027DBEC91021154263BB0CF1565833705023D987 Validity Not Before: Feb 23 13:58:10 2026 GMT Not After : Feb 22 14:03:10 2027 GMT Subject: CN=3D56E607ECB12DABC5FCFB19FA842090351E965A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:30:c9:4c:9b:4c:5e:96:0c:a9:d0:47:7e:ec: 34:a6:78:45:cd:86:8c:7e:7a:26:c9:8e:3e:03:f7: f5:f1:e5:7a:85:e7:06:f8:99:ba:47:54:93:48:5f: 57:94:0f:77:d8:81:59:e7:70:4c:7b:28:8c:ab:ae: de:22:35:3f:c8:d2:7d:d2:14:ef:6e:54:ff:e5:5e: 1a:96:cc:f4:91:e9:c9:41:e5:60:64:a5:12:19:90: 7a:f6:d8:31:84:cc:00:9a:85:c1:05:71:88:04:17: bd:c5:a8:0c:09:ca:36:1d:33:fe:fb:f7:59:b8:0c: 5d:33:11:74:6b:e7:9e:15:0f:9c:23:82:02:bf:96: ca:91:2f:e9:f4:0b:6a:b2:68:ff:d2:fc:e7:5b:71: 15:11:eb:3c:40:d2:00:8c:c7:1f:83:34:52:f6:c2: df:2f:bd:89:1e:e0:8f:db:a3:ef:61:9f:d9:1a:e2: 22:57:be:7a:2f:d2:5c:32:b3:9c:f9:8c:35:cc:4d: 86:e4:33:84:e3:4d:d9:0d:3b:31:f3:c7:d7:4b:e8: 6d:ec:2b:6b:4d:75:e4:82:42:90:a5:06:b4:8e:f5: dd:7c:27:5e:1a:0a:6a:36:4b:3a:78:70:be:7e:16: b2:a0:89:ed:83:97:0f:ad:10:12:6a:fe:b4:cd:bd: 4a:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:56:E6:07:EC:B1:2D:AB:C5:FC:FB:19:FA:84:20:90:35:1E:96:5A X509v3 Authority Key Identifier: keyid:02:7D:BE:C9:10:21:15:42:63:BB:0C:F1:56:58:33:70:50:23:D9:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/074f214a-bf55-4048-845d-20675fb5f2a4/0/027DBEC91021154263BB0CF1565833705023D987.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/027DBEC91021154263BB0CF1565833705023D987.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/074f214a-bf55-4048-845d-20675fb5f2a4/0/3230322e3136302e3133392e302f32342d3234203d3e20313439363735.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.160.139.0/24 Signature Algorithm: sha256WithRSAEncryption b9:07:e5:5b:b0:90:ea:38:70:4c:ac:e2:6f:81:88:fc:27:0e: d7:06:6c:25:47:4d:54:7e:74:e0:db:e1:12:b7:6b:b4:4b:fe: 0e:56:8a:e0:1b:41:b8:56:86:d6:ee:31:10:5e:2c:c9:79:e8: 0a:1c:de:23:34:e2:67:5a:8d:9f:af:71:23:6e:d1:6e:e5:5c: f9:9f:13:2f:2c:c6:d0:22:ba:51:8c:78:d8:c9:96:e6:9f:da: b4:fb:ae:86:d1:5e:f2:ec:99:29:a3:c8:b3:d0:9f:23:53:ff: 6a:8f:93:44:ab:c4:dd:9a:5d:67:51:2c:04:66:b1:4c:c7:8e: ee:d7:73:1b:9e:ee:49:4a:73:ae:f9:80:c0:33:5a:94:1a:a5: 9e:b2:83:28:d7:57:d7:e7:ca:6c:6c:c6:e2:29:cd:19:83:3e: 6e:36:4a:f7:50:82:88:34:bd:07:e3:6b:fb:ee:7e:08:1e:74: c5:77:58:df:ce:78:a8:ea:1d:0a:9e:f3:43:b1:f8:94:ef:59: 22:eb:d1:60:cb:cc:8c:2b:75:e0:0e:88:16:d2:76:54:55:2e: 35:1d:5b:7c:13:0f:9f:d3:68:46:73:88:f5:dd:a4:90:15:25: 52:d9:60:6b:9e:04:28:11:8e:f4:53:9c:b4:01:f4:27:de:7a: 63:33:e2:b0 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUHFdGw/z3M/keYXqtFPJuUCKz6B8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDI3REJFQzkxMDIxMTU0MjYzQkIwQ0YxNTY1ODMzNzA1 MDIzRDk4NzAeFw0yNjAyMjMxMzU4MTBaFw0yNzAyMjIxNDAzMTBaMDMxMTAvBgNV BAMTKDNENTZFNjA3RUNCMTJEQUJDNUZDRkIxOUZBODQyMDkwMzUxRTk2NUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHMMlMm0xelgyp0Ed+7DSmeEXN hox+eibJjj4D9/Xx5XqF5wb4mbpHVJNIX1eUD3fYgVnncEx7KIyrrt4iNT/I0n3S FO9uVP/lXhqWzPSR6clB5WBkpRIZkHr22DGEzACahcEFcYgEF73FqAwJyjYdM/77 91m4DF0zEXRr554VD5wjggK/lsqRL+n0C2qyaP/S/OdbcRUR6zxA0gCMxx+DNFL2 wt8vvYke4I/bo+9hn9ka4iJXvnov0lwys5z5jDXMTYbkM4TjTdkNOzHzx9dL6G3s K2tNdeSCQpClBrSO9d18J14aCmo2Szp4cL5+FrKgie2Dlw+tEBJq/rTNvUrtAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUPVbmB+yxLavF/PsZ+oQgkDUellowHwYDVR0j BBgwFoAUAn2+yRAhFUJjuwzxVlgzcFAj2YcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NzRmMjE0YS1iZjU1LTQwNDgtODQ1ZC0yMDY3NWZiNWYyYTQvMC8wMjdEQkVDOTEw MjExNTQyNjNCQjBDRjE1NjU4MzM3MDUwMjNEOTg3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDI3REJFQzkxMDIxMTU0MjYzQkIwQ0YxNTY1ODMzNzA1MDIz RDk4Ny5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzA3NGYyMTRhLWJmNTUtNDA0OC04 NDVkLTIwNjc1ZmI1ZjJhNC8wLzMyMzAzMjJlMzEzNjMwMmUzMTMzMzkyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzkzNjM3MzUucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADKoIswDQYJ KoZIhvcNAQELBQADggEBALkH5VuwkOo4cEys4m+BiPwnDtcGbCVHTVR+dODb4RK3 a7RL/g5WiuAbQbhWhtbuMRBeLMl56Aoc3iM04mdajZ+vcSNu0W7lXPmfEy8sxtAi ulGMeNjJluaf2rT7robRXvLsmSmjyLPQnyNT/2qPk0SrxN2aXWdRLARmsUzHju7X cxue7klKc675gMAzWpQapZ6ygyjXV9fnymxsxuIpzRmDPm42SvdQgog0vQfja/vu fggedMV3WN/OeKjqHQqe80Ox+JTvWSLr0WDLzIwrdeAOiBbSdlRVLjUdW3wTD5/T aEZziPXdpJAVJVLZYGueBCgRjvRTnLQB9CfeemMz4rA= -----END CERTIFICATE-----Generated at Mon Mar 2 13:39:34 2026 by rpki-client