$ rpki-client -vvf repo-rpki.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/3230332e3139302e3234372e302f32342d3234203d3e203234323131.roa File: 3230332e3139302e3234372e302f32342d3234203d3e203234323131.roa (raw, json) Hash identifier: 0OoYNlOze5a/9ttNe9sBQQbuE9yAtd7c5OJ+5KSdFxg= Subject key identifier: DA:80:0A:7B:B7:4F:F2:FA:A6:2F:21:12:20:14:94:EA:AB:F9:EE:A4 Certificate issuer: /CN=DC935B44A30F5AECC1B1A1508E4B812572AB769B Certificate serial: 15E46B74A9C3C01F6D05BB2848AD03AD8BF85AFF Authority key identifier: DC:93:5B:44:A3:0F:5A:EC:C1:B1:A1:50:8E:4B:81:25:72:AB:76:9B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC935B44A30F5AECC1B1A1508E4B812572AB769B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/3230332e3139302e3234372e302f32342d3234203d3e203234323131.roa Signing time: Wed 08 Apr 2026 18:00:01 +0000 ROA not before: Wed 08 Apr 2026 17:55:01 +0000 ROA not after: Wed 07 Apr 2027 18:00:01 +0000 asID: 24211 IP address blocks: 203.190.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/DC935B44A30F5AECC1B1A1508E4B812572AB769B.crl rsync://repo-rpki.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/DC935B44A30F5AECC1B1A1508E4B812572AB769B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC935B44A30F5AECC1B1A1508E4B812572AB769B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 14:43:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:e4:6b:74:a9:c3:c0:1f:6d:05:bb:28:48:ad:03:ad:8b:f8:5a:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DC935B44A30F5AECC1B1A1508E4B812572AB769B Validity Not Before: Apr 8 17:55:01 2026 GMT Not After : Apr 7 18:00:01 2027 GMT Subject: CN=DA800A7BB74FF2FAA62F2112201494EAABF9EEA4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:31:9d:0d:44:fa:12:e2:20:f0:ce:af:58:cc: a5:4c:fe:0b:05:a2:d0:e4:19:55:00:2a:43:4d:8c: 3b:09:06:5d:83:d3:fc:91:93:36:a9:fd:ca:e6:f1: 36:f1:f9:f5:48:58:2f:77:63:ba:da:30:da:aa:23: 19:5a:cb:29:f6:bc:5a:99:f1:9b:1a:c1:97:34:8c: 7d:12:cd:4d:14:37:59:9d:d2:a9:f2:08:ef:0c:08: c1:98:a3:57:31:20:12:9c:d8:14:96:6e:ca:3d:2b: 44:1f:5e:73:94:05:46:c0:1c:7b:24:b7:59:4e:5f: c8:7e:11:89:49:1d:4d:03:01:06:2b:86:eb:04:fd: 37:34:16:cb:c0:3c:93:4f:88:a8:54:37:fa:aa:5e: ee:f5:01:b8:07:f5:60:05:43:23:06:4f:f2:0b:21: 7a:f1:c1:1f:ce:3d:11:ae:42:54:a2:db:b3:5b:03: 00:be:cc:08:34:c2:42:86:b5:f3:e0:93:10:65:e4: da:f9:6e:65:82:77:03:99:e5:de:3c:7e:00:81:3d: df:3a:81:f1:27:ed:f2:8f:61:b4:a9:8f:2f:ce:40: 17:ec:f2:e7:15:ff:3c:36:80:87:92:71:98:c0:fc: 33:94:2d:8f:b6:2e:5c:d9:1d:e1:ff:af:ae:5b:8d: 4e:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:80:0A:7B:B7:4F:F2:FA:A6:2F:21:12:20:14:94:EA:AB:F9:EE:A4 X509v3 Authority Key Identifier: keyid:DC:93:5B:44:A3:0F:5A:EC:C1:B1:A1:50:8E:4B:81:25:72:AB:76:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/DC935B44A30F5AECC1B1A1508E4B812572AB769B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC935B44A30F5AECC1B1A1508E4B812572AB769B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/3230332e3139302e3234372e302f32342d3234203d3e203234323131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.190.247.0/24 Signature Algorithm: sha256WithRSAEncryption 4b:28:1f:a9:f9:47:f6:a1:c6:82:ad:b0:0d:be:f3:33:7a:4c: 2f:71:84:73:9e:2f:bc:29:13:78:18:01:61:42:ec:3f:a7:1f: c4:0f:56:0b:a1:cd:14:7c:76:81:84:3f:5d:4e:f4:7a:cd:7c: ec:3a:66:57:35:e4:71:ea:11:5c:41:98:13:72:21:1f:3a:9b: fc:41:11:30:37:59:97:54:eb:0a:e3:e5:c5:33:20:d7:4e:24: 0e:46:dc:e6:fd:8e:ea:35:61:56:2b:25:d6:e3:48:a0:30:81: 8b:fc:f1:2d:e5:04:5b:29:0c:46:5f:38:68:08:23:d9:82:4c: ae:c4:c8:11:36:41:9a:7a:48:84:45:4c:34:bd:92:d8:90:d4: cd:b8:86:d3:ff:f4:cd:5f:f8:ad:c1:26:99:a9:83:e5:72:87: 8a:97:75:59:c3:46:69:fc:79:d6:8d:6f:e1:c1:2c:ed:fe:15: f4:22:44:40:65:42:a6:bc:79:cd:44:57:67:de:18:dd:8f:d1: 71:34:76:3c:73:3c:4b:d9:83:4e:5e:c2:3b:1b:f7:93:2d:70: 2a:91:e5:50:d0:b0:f9:e9:b1:0f:2d:92:5f:74:d7:ce:21:1d: 3c:9d:39:f2:b4:e8:ba:02:2b:86:51:c1:fe:e7:74:c3:b3:53: 0e:62:03:f7 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUFeRrdKnDwB9tBbsoSK0DrYv4Wv8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREM5MzVCNDRBMzBGNUFFQ0MxQjFBMTUwOEU0QjgxMjU3 MkFCNzY5QjAeFw0yNjA0MDgxNzU1MDFaFw0yNzA0MDcxODAwMDFaMDMxMTAvBgNV BAMTKERBODAwQTdCQjc0RkYyRkFBNjJGMjExMjIwMTQ5NEVBQUJGOUVFQTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaMZ0NRPoS4iDwzq9YzKVM/gsF otDkGVUAKkNNjDsJBl2D0/yRkzap/crm8Tbx+fVIWC93Y7raMNqqIxlayyn2vFqZ 8ZsawZc0jH0SzU0UN1md0qnyCO8MCMGYo1cxIBKc2BSWbso9K0QfXnOUBUbAHHsk t1lOX8h+EYlJHU0DAQYrhusE/Tc0FsvAPJNPiKhUN/qqXu71AbgH9WAFQyMGT/IL IXrxwR/OPRGuQlSi27NbAwC+zAg0wkKGtfPgkxBl5Nr5bmWCdwOZ5d48fgCBPd86 gfEn7fKPYbSpjy/OQBfs8ucV/zw2gIeScZjA/DOULY+2LlzZHeH/r65bjU7rAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU2oAKe7dP8vqmLyESIBSU6qv57qQwHwYDVR0j BBgwFoAU3JNbRKMPWuzBsaFQjkuBJXKrdpswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 OWYwMTNmOS1iNGY3LTQ1OGMtYWFjNS0wODA0MWIzZjY1ZTYvMC9EQzkzNUI0NEEz MEY1QUVDQzFCMUExNTA4RTRCODEyNTcyQUI3NjlCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREM5MzVCNDRBMzBGNUFFQ0MxQjFBMTUwOEU0QjgxMjU3MkFC NzY5Qi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzU5ZjAxM2Y5LWI0ZjctNDU4Yy1h YWM1LTA4MDQxYjNmNjVlNi8wLzMyMzAzMzJlMzEzOTMwMmUzMjM0MzcyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMjM0MzIzMTMxLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAy773MA0GCSqG SIb3DQEBCwUAA4IBAQBLKB+p+Uf2ocaCrbANvvMzekwvcYRzni+8KRN4GAFhQuw/ px/ED1YLoc0UfHaBhD9dTvR6zXzsOmZXNeRx6hFcQZgTciEfOpv8QREwN1mXVOsK 4+XFMyDXTiQORtzm/Y7qNWFWKyXW40igMIGL/PEt5QRbKQxGXzhoCCPZgkyuxMgR NkGaekiERUw0vZLYkNTNuIbT//TNX/itwSaZqYPlcoeKl3VZw0Zp/HnWjW/hwSzt /hX0IkRAZUKmvHnNRFdn3hjdj9FxNHY8czxL2YNOXsI7G/eTLXAqkeVQ0LD56bEP LZJfdNfOIR08nTnytOi6AiuGUcH+53TDs1MOYgP3 -----END CERTIFICATE-----Generated at Fri Apr 17 18:30:06 2026 by rpki-client