$ rpki-client -vvf repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3230322e31302e34332e302f32342d3234203d3e203538343837.roa File: 3230322e31302e34332e302f32342d3234203d3e203538343837.roa (raw, json) Hash identifier: HtPDPigIXI0bzC3OL2xfk6csIubv4i8rPNFcq6A7FIA= Subject key identifier: 89:7B:69:D1:5A:89:B4:2A:66:35:67:0A:26:39:71:7E:EA:AF:4E:7D Certificate issuer: /CN=B6F1322321412EFD041A6C2C0B297A1092AABE6E Certificate serial: 13A512E677B588A2290428ABE4FEB646A430596A Authority key identifier: B6:F1:32:23:21:41:2E:FD:04:1A:6C:2C:0B:29:7A:10:92:AA:BE:6E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F1322321412EFD041A6C2C0B297A1092AABE6E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3230322e31302e34332e302f32342d3234203d3e203538343837.roa Signing time: Thu 12 Feb 2026 11:02:41 +0000 ROA not before: Thu 12 Feb 2026 10:57:41 +0000 ROA not after: Thu 11 Feb 2027 11:02:41 +0000 asID: 58487 IP address blocks: 202.10.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/B6F1322321412EFD041A6C2C0B297A1092AABE6E.crl rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/B6F1322321412EFD041A6C2C0B297A1092AABE6E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F1322321412EFD041A6C2C0B297A1092AABE6E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 16:38:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:a5:12:e6:77:b5:88:a2:29:04:28:ab:e4:fe:b6:46:a4:30:59:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B6F1322321412EFD041A6C2C0B297A1092AABE6E Validity Not Before: Feb 12 10:57:41 2026 GMT Not After : Feb 11 11:02:41 2027 GMT Subject: CN=897B69D15A89B42A6635670A2639717EEAAF4E7D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:d6:4a:4e:bb:97:c7:7e:8d:5a:d6:c0:83:d7: 02:17:ef:fd:b5:04:b3:1c:a4:29:02:6e:f0:45:73: f5:9a:b8:a6:37:3d:9d:08:63:c4:39:51:97:67:de: f2:64:7b:aa:d4:13:0f:de:c8:70:78:5f:b8:7d:59: e5:fa:56:c5:b2:ea:d7:14:e6:e5:d9:c4:25:24:a4: a6:43:2f:22:4e:fd:ba:c4:52:81:05:ae:09:35:4d: 2b:3f:4e:0f:ad:57:95:cc:b1:9f:a4:0a:24:38:37: 92:d9:d5:85:7e:ae:cb:13:70:7a:38:a3:93:84:41: d2:e1:4d:bc:a7:1c:13:1e:b4:bd:00:09:1a:5e:37: 7f:b6:41:ed:05:64:d3:e8:87:ae:e8:3e:b4:1c:41: e5:b1:a0:85:5a:78:7d:8c:e4:b2:93:40:b7:6c:73: 82:7f:79:bb:15:f8:0d:d2:c5:62:d5:44:b2:ae:3e: 9b:44:e7:d3:1d:e9:10:eb:5e:07:ab:59:78:ec:44: 5e:7a:7f:07:14:c5:98:39:73:46:15:4a:de:a4:f1: a9:61:63:8e:1e:d5:01:e2:87:e2:45:33:a4:09:9f: bc:57:d9:0d:53:7a:1f:50:ec:98:22:3a:69:d9:8a: 5e:1b:aa:da:bf:94:a0:60:d2:fd:2c:3d:75:c8:9e: 5b:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:7B:69:D1:5A:89:B4:2A:66:35:67:0A:26:39:71:7E:EA:AF:4E:7D X509v3 Authority Key Identifier: keyid:B6:F1:32:23:21:41:2E:FD:04:1A:6C:2C:0B:29:7A:10:92:AA:BE:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/B6F1322321412EFD041A6C2C0B297A1092AABE6E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F1322321412EFD041A6C2C0B297A1092AABE6E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3230322e31302e34332e302f32342d3234203d3e203538343837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.10.43.0/24 Signature Algorithm: sha256WithRSAEncryption 92:7b:31:0a:fa:ea:bd:57:49:19:a1:21:75:90:00:13:68:02: 1f:60:c7:17:d4:f9:1d:d0:17:a3:95:a0:f7:2f:fe:8a:49:74: 84:37:d2:d7:46:7d:c8:64:82:b0:74:ed:fc:19:49:fe:1b:83: 47:4c:33:91:a8:47:1b:a6:e3:5f:42:6d:50:4b:57:e7:6b:6c: 2c:40:fe:25:e9:ba:e1:19:b9:35:a3:2b:11:83:b4:62:56:56: 88:1c:50:ad:9c:3c:0d:3f:64:86:24:60:9b:63:09:f9:2b:45: 79:13:6d:ee:c6:dd:9c:aa:1c:52:25:d8:4b:be:7e:db:67:f6: b1:ae:83:b7:62:6d:2c:d8:58:e7:f3:11:a9:1b:43:21:08:ce: 59:39:a4:8b:62:8f:e1:f1:2b:2b:a8:70:99:ac:e0:e0:e6:ee: 49:f8:f3:2b:ff:f2:fd:e4:cc:c2:f8:cf:d6:75:81:3b:6a:d4: 67:ee:50:76:45:00:4e:2a:fa:55:f7:67:02:e5:ea:cb:05:e9: 53:6d:ea:6a:f8:fd:4f:ca:88:06:9e:e9:05:ad:d0:e9:54:67: 63:c9:57:7c:54:bb:1e:60:47:73:40:c7:68:2c:37:cf:ae:e5: 93:e9:8b:88:b6:e3:f5:67:31:bc:df:8b:44:51:31:7d:6c:4d: 0a:66:b3:c3 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUE6US5ne1iKIpBCir5P62RqQwWWowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjZGMTMyMjMyMTQxMkVGRDA0MUE2QzJDMEIyOTdBMTA5 MkFBQkU2RTAeFw0yNjAyMTIxMDU3NDFaFw0yNzAyMTExMTAyNDFaMDMxMTAvBgNV BAMTKDg5N0I2OUQxNUE4OUI0MkE2NjM1NjcwQTI2Mzk3MTdFRUFBRjRFN0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC01kpOu5fHfo1a1sCD1wIX7/21 BLMcpCkCbvBFc/WauKY3PZ0IY8Q5UZdn3vJke6rUEw/eyHB4X7h9WeX6VsWy6tcU 5uXZxCUkpKZDLyJO/brEUoEFrgk1TSs/Tg+tV5XMsZ+kCiQ4N5LZ1YV+rssTcHo4 o5OEQdLhTbynHBMetL0ACRpeN3+2Qe0FZNPoh67oPrQcQeWxoIVaeH2M5LKTQLds c4J/ebsV+A3SxWLVRLKuPptE59Md6RDrXgerWXjsRF56fwcUxZg5c0YVSt6k8alh Y44e1QHih+JFM6QJn7xX2Q1Teh9Q7JgiOmnZil4bqtq/lKBg0v0sPXXInlvLAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUiXtp0VqJtCpmNWcKJjlxfuqvTn0wHwYDVR0j BBgwFoAUtvEyIyFBLv0EGmwsCyl6EJKqvm4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZDhmMDYwZi1lNGIzLTRhNGUtOTdmZC1mNjFhYjE3ZGVlZWQvMC9CNkYxMzIyMzIx NDEyRUZEMDQxQTZDMkMwQjI5N0ExMDkyQUFCRTZFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjZGMTMyMjMyMTQxMkVGRDA0MUE2QzJDMEIyOTdBMTA5MkFB QkU2RS5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzJkOGYwNjBmLWU0YjMtNGE0ZS05 N2ZkLWY2MWFiMTdkZWVlZC8wLzMyMzAzMjJlMzEzMDJlMzQzMzJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDM1MzgzNDM4Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADKCiswDQYJKoZIhvcN AQELBQADggEBAJJ7MQr66r1XSRmhIXWQABNoAh9gxxfU+R3QF6OVoPcv/opJdIQ3 0tdGfchkgrB07fwZSf4bg0dMM5GoRxum419CbVBLV+drbCxA/iXpuuEZuTWjKxGD tGJWVogcUK2cPA0/ZIYkYJtjCfkrRXkTbe7G3ZyqHFIl2Eu+fttn9rGug7dibSzY WOfzEakbQyEIzlk5pItij+HxKyuocJms4ODm7kn48yv/8v3kzML4z9Z1gTtq1Gfu UHZFAE4q+lX3ZwLl6ssF6VNt6mr4/U/KiAae6QWt0OlUZ2PJV3xUux5gR3NAx2gs N8+u5ZPpi4i24/VnMbzfi0RRMX1sTQpms8M= -----END CERTIFICATE-----Generated at Mon Mar 2 08:01:56 2026 by rpki-client