$ rpki-client -vvf repo-rpki.idnic.net/repo/08b8c1b5-3be8-4aa7-a4c6-21bcc8f3fa40/0/3230322e3138322e35362e302f32312d3234203d3e203234323133.roa File: 3230322e3138322e35362e302f32312d3234203d3e203234323133.roa (raw, json) Hash identifier: DlnKcd87VD3rZuVTk+tNhtDr4vaeUIcVlv5lIcH6uws= Subject key identifier: A7:F4:7F:E9:A3:F0:20:4A:52:14:0C:DD:F7:86:BE:C2:1A:6D:1E:F2 Certificate issuer: /CN=3CA825E93FE8830376EF386786BF847CB239BE70 Certificate serial: 3EB8BCCA474F7560D5611BEE511A691A161A7AEE Authority key identifier: 3C:A8:25:E9:3F:E8:83:03:76:EF:38:67:86:BF:84:7C:B2:39:BE:70 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3CA825E93FE8830376EF386786BF847CB239BE70.cer Subject info access: rsync://repo-rpki.idnic.net/repo/08b8c1b5-3be8-4aa7-a4c6-21bcc8f3fa40/0/3230322e3138322e35362e302f32312d3234203d3e203234323133.roa Signing time: Mon 02 Feb 2026 23:51:30 +0000 ROA not before: Mon 02 Feb 2026 23:46:30 +0000 ROA not after: Mon 01 Feb 2027 23:51:30 +0000 asID: 24213 IP address blocks: 202.182.56.0/21 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/08b8c1b5-3be8-4aa7-a4c6-21bcc8f3fa40/0/3CA825E93FE8830376EF386786BF847CB239BE70.crl rsync://repo-rpki.idnic.net/repo/08b8c1b5-3be8-4aa7-a4c6-21bcc8f3fa40/0/3CA825E93FE8830376EF386786BF847CB239BE70.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3CA825E93FE8830376EF386786BF847CB239BE70.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 15:10:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:b8:bc:ca:47:4f:75:60:d5:61:1b:ee:51:1a:69:1a:16:1a:7a:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3CA825E93FE8830376EF386786BF847CB239BE70 Validity Not Before: Feb 2 23:46:30 2026 GMT Not After : Feb 1 23:51:30 2027 GMT Subject: CN=A7F47FE9A3F0204A52140CDDF786BEC21A6D1EF2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:07:22:78:4b:ec:51:d5:a8:f1:81:92:0b:25: 1b:3a:04:3f:1a:b7:ca:d5:4d:c8:a0:7f:62:d6:b2: 45:28:14:15:d5:43:19:3a:ad:13:1b:28:40:1e:a9: 02:92:4e:dd:a2:ec:de:26:9f:68:0f:ce:2b:0e:be: 7f:d2:3e:b9:26:ff:a4:fe:ac:2e:38:b9:9b:44:bb: 3e:c9:1c:93:02:60:ec:15:24:fe:10:a8:4c:fc:22: 2e:37:ad:36:fa:07:2a:ad:6a:c1:a5:26:a5:d6:c5: 7f:6d:82:00:05:40:70:14:de:2e:db:bd:5e:27:9c: 21:11:cb:3b:5a:e8:30:14:f5:02:2c:86:a9:af:66: 6c:c6:18:a5:e6:b1:fc:54:8a:07:c7:30:a2:ac:7d: ab:a7:78:58:dd:cb:47:40:60:ad:79:c4:20:81:cb: 51:2a:4a:bc:59:5f:01:f2:ac:c6:c9:3c:3a:85:da: 76:bc:0f:0c:2d:73:6e:c0:c5:ed:47:8e:c0:f2:46: 48:66:33:b5:38:f0:65:9f:cb:23:a8:c1:bd:09:a3: 41:0d:83:2f:e3:3a:90:61:a0:d9:ea:ba:70:ca:55: 37:b5:81:fe:8d:01:ea:4c:5a:30:76:75:c1:83:6d: 10:f9:91:7d:71:58:15:68:41:35:d8:2f:6e:d1:03: 39:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:F4:7F:E9:A3:F0:20:4A:52:14:0C:DD:F7:86:BE:C2:1A:6D:1E:F2 X509v3 Authority Key Identifier: keyid:3C:A8:25:E9:3F:E8:83:03:76:EF:38:67:86:BF:84:7C:B2:39:BE:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/08b8c1b5-3be8-4aa7-a4c6-21bcc8f3fa40/0/3CA825E93FE8830376EF386786BF847CB239BE70.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3CA825E93FE8830376EF386786BF847CB239BE70.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/08b8c1b5-3be8-4aa7-a4c6-21bcc8f3fa40/0/3230322e3138322e35362e302f32312d3234203d3e203234323133.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.182.56.0/21 Signature Algorithm: sha256WithRSAEncryption 6b:c9:48:c9:d8:d8:88:1b:5e:1e:ef:5b:a5:b5:2f:8f:a6:af: bb:d1:60:47:18:c4:a5:34:77:50:f8:a7:cd:c8:fc:1e:cc:fa: 7e:a9:a4:e2:e6:d9:4b:da:6a:bd:67:c2:4c:23:f7:d6:2f:d6: bf:fd:80:a5:d9:25:c3:5d:57:66:22:72:28:51:6c:b5:d9:23: 94:42:cb:80:c7:c1:01:cb:a3:35:d0:8f:0a:4f:44:22:5b:98: d6:85:5e:a1:96:2f:23:ee:6c:ce:fd:af:29:3e:e4:a9:a1:8f: f7:36:31:6c:9c:1a:d6:54:cf:ee:c3:9c:23:1c:d8:35:64:e8: e8:f6:1b:65:f2:02:fa:da:3f:63:03:48:3f:8f:e5:97:d0:68: 46:9a:49:d7:b8:47:90:a3:14:51:95:05:ba:3a:4d:56:58:5e: 7b:e9:89:e0:63:92:a9:55:11:27:08:46:65:33:12:8d:af:76: f9:36:57:45:ee:7a:28:4a:84:2c:30:da:2e:6b:e9:e1:30:45: c6:e3:d0:39:44:d0:d2:a5:20:37:28:da:77:38:c8:6f:e9:a4: 3c:1d:ca:d4:4a:10:54:aa:a3:58:8a:b7:4d:ec:a6:85:67:c8: 30:7b:fb:0f:12:6b:ac:ae:71:99:83:55:35:eb:d4:c2:19:73: 6d:6b:15:97 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUPri8ykdPdWDVYRvuURppGhYaeu4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0NBODI1RTkzRkU4ODMwMzc2RUYzODY3ODZCRjg0N0NC MjM5QkU3MDAeFw0yNjAyMDIyMzQ2MzBaFw0yNzAyMDEyMzUxMzBaMDMxMTAvBgNV BAMTKEE3RjQ3RkU5QTNGMDIwNEE1MjE0MENEREY3ODZCRUMyMUE2RDFFRjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+ByJ4S+xR1ajxgZILJRs6BD8a t8rVTcigf2LWskUoFBXVQxk6rRMbKEAeqQKSTt2i7N4mn2gPzisOvn/SPrkm/6T+ rC44uZtEuz7JHJMCYOwVJP4QqEz8Ii43rTb6ByqtasGlJqXWxX9tggAFQHAU3i7b vV4nnCERyzta6DAU9QIshqmvZmzGGKXmsfxUigfHMKKsfauneFjdy0dAYK15xCCB y1EqSrxZXwHyrMbJPDqF2na8Dwwtc27Axe1HjsDyRkhmM7U48GWfyyOowb0Jo0EN gy/jOpBhoNnqunDKVTe1gf6NAepMWjB2dcGDbRD5kX1xWBVoQTXYL27RAzknAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUp/R/6aPwIEpSFAzd94a+whptHvIwHwYDVR0j BBgwFoAUPKgl6T/ogwN27zhnhr+EfLI5vnAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w OGI4YzFiNS0zYmU4LTRhYTctYTRjNi0yMWJjYzhmM2ZhNDAvMC8zQ0E4MjVFOTNG RTg4MzAzNzZFRjM4Njc4NkJGODQ3Q0IyMzlCRTcwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0NBODI1RTkzRkU4ODMwMzc2RUYzODY3ODZCRjg0N0NCMjM5 QkU3MC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzA4YjhjMWI1LTNiZTgtNGFhNy1h NGM2LTIxYmNjOGYzZmE0MC8wLzMyMzAzMjJlMzEzODMyMmUzNTM2MmUzMDJmMzIz MTJkMzIzNDIwM2QzZTIwMzIzNDMyMzEzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA8q2ODANBgkqhkiG 9w0BAQsFAAOCAQEAa8lIydjYiBteHu9bpbUvj6avu9FgRxjEpTR3UPinzcj8Hsz6 fqmk4ubZS9pqvWfCTCP31i/Wv/2Apdklw11XZiJyKFFstdkjlELLgMfBAcujNdCP Ck9EIluY1oVeoZYvI+5szv2vKT7kqaGP9zYxbJwa1lTP7sOcIxzYNWTo6PYbZfIC +to/YwNIP4/ll9BoRppJ17hHkKMUUZUFujpNVlhee+mJ4GOSqVURJwhGZTMSja92 +TZXRe56KEqELDDaLmvp4TBFxuPQOUTQ0qUgNyjadzjIb+mkPB3K1EoQVKqjWIq3 TeymhWfIMHv7DxJrrK5xmYNVNevUwhlzbWsVlw== -----END CERTIFICATE-----Generated at Mon Mar 2 15:05:48 2026 by rpki-client