$ rpki-client -vvf repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/3230322e3135342e34302e302f32322d3234203d3e2034343334.roa File: 3230322e3135342e34302e302f32322d3234203d3e2034343334.roa (raw, json) Hash identifier: B/aeYIIgy+EoO/5waYOnuPzL78uV655/u3tXP6nYKIY= Subject key identifier: 37:F6:74:32:99:6A:A7:44:B2:8D:C3:C6:64:5C:62:5C:58:57:B3:77 Certificate issuer: /CN=10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6 Certificate serial: 745A7668498D9020CFD41B135970CEE22AF16A53 Authority key identifier: 10:F0:0F:AE:6F:0B:93:AB:DC:95:62:8A:CE:3C:3C:18:9A:E9:27:F6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/3230322e3135342e34302e302f32322d3234203d3e2034343334.roa Signing time: Sat 11 Apr 2026 02:23:05 +0000 ROA not before: Sat 11 Apr 2026 02:18:05 +0000 ROA not after: Sat 10 Apr 2027 02:23:05 +0000 asID: 4434 IP address blocks: 202.154.40.0/22 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.crl rsync://repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 05:18:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:5a:76:68:49:8d:90:20:cf:d4:1b:13:59:70:ce:e2:2a:f1:6a:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6 Validity Not Before: Apr 11 02:18:05 2026 GMT Not After : Apr 10 02:23:05 2027 GMT Subject: CN=37F67432996AA744B28DC3C6645C625C5857B377 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:b2:98:ea:2c:33:61:68:60:dd:20:d7:a5:c6: 8a:6c:14:8f:cb:2c:96:81:5c:7e:b5:23:06:27:b8: 01:f2:68:a3:1f:b4:fc:f8:db:53:77:38:35:8a:c0: 6a:b2:99:ca:c3:6b:b0:33:43:dc:df:9f:3c:7f:21: dc:9f:5b:25:27:a4:63:27:9e:1e:ef:5b:ed:ea:36: 60:c6:1c:e7:0c:f0:53:73:38:6c:9c:7b:83:b0:9d: a6:6e:aa:06:42:66:86:e8:ea:47:1b:21:a1:42:19: 29:79:f9:fd:fa:eb:16:9f:75:b1:5a:a0:a3:98:54: 7a:eb:00:fc:45:a3:69:3b:57:12:d1:40:51:9c:62: 01:eb:ed:b1:2a:ed:00:11:b5:1e:24:82:86:e7:83: d7:4a:3a:26:ac:d2:57:d0:3c:03:ee:4e:d8:bc:8b: 57:d5:87:f3:42:3e:3d:6b:39:96:6c:59:d7:e2:7b: ae:66:22:b4:d2:d0:c3:8e:07:6b:1a:a6:ba:a2:64: 7d:f4:55:6e:69:a5:24:61:46:be:50:e6:ca:d7:8c: f3:71:90:26:b4:71:6d:ec:ab:7a:69:80:26:68:1d: 5b:76:c5:1b:e0:a0:49:56:ab:9e:38:bb:f0:10:4d: 18:dd:80:a1:40:94:7c:a2:7d:66:01:22:19:30:a7: 59:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:F6:74:32:99:6A:A7:44:B2:8D:C3:C6:64:5C:62:5C:58:57:B3:77 X509v3 Authority Key Identifier: keyid:10:F0:0F:AE:6F:0B:93:AB:DC:95:62:8A:CE:3C:3C:18:9A:E9:27:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/3230322e3135342e34302e302f32322d3234203d3e2034343334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.154.40.0/22 Signature Algorithm: sha256WithRSAEncryption 0f:a5:e9:21:e4:b9:ef:13:a5:5b:4e:a5:9c:56:b8:05:d0:36: ed:f4:27:b3:9f:bb:5b:fb:58:b3:b0:2f:fa:74:63:3d:1c:74: 28:ac:29:40:7f:77:22:59:4f:32:c8:f4:84:db:39:e9:5d:40: 2c:ea:6f:66:e7:bb:7b:03:ba:a9:a9:2c:79:1e:e6:fc:13:df: 8e:9c:ab:62:16:5b:4e:a1:de:87:48:be:9d:c6:04:d4:9d:f6: 35:f4:f6:1e:39:81:15:94:97:41:f4:63:ac:e6:26:1d:c8:e3: 80:32:ac:99:46:b3:be:ce:7c:fe:a6:d7:12:e1:9e:8d:e1:e0: 76:95:5d:74:20:e6:ef:2b:47:92:32:fa:ad:d4:1d:63:bc:fa: ec:d3:c5:dc:6c:3c:a5:38:26:fe:21:e6:60:f5:aa:a5:75:f3: 09:b4:96:f1:f8:4c:b2:d1:38:b4:10:12:a7:c2:4c:03:46:1e: 4a:18:08:fa:9f:8e:21:f3:45:03:04:7d:d0:57:e0:b6:96:cc: 13:d1:d7:fa:56:24:b1:eb:4b:42:a7:89:a9:61:27:1f:ec:40: 96:22:34:79:28:c1:96:09:b8:ad:8d:79:80:da:38:b3:a5:c8: 72:de:cd:0d:68:8b:92:23:46:f7:68:c5:6e:8d:62:82:9d:08: 61:ea:1b:31 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUdFp2aEmNkCDP1BsTWXDO4irxalMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTBGMDBGQUU2RjBCOTNBQkRDOTU2MjhBQ0UzQzNDMTg5 QUU5MjdGNjAeFw0yNjA0MTEwMjE4MDVaFw0yNzA0MTAwMjIzMDVaMDMxMTAvBgNV BAMTKDM3RjY3NDMyOTk2QUE3NDRCMjhEQzNDNjY0NUM2MjVDNTg1N0IzNzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKspjqLDNhaGDdINelxopsFI/L LJaBXH61IwYnuAHyaKMftPz421N3ODWKwGqymcrDa7AzQ9zfnzx/IdyfWyUnpGMn nh7vW+3qNmDGHOcM8FNzOGyce4OwnaZuqgZCZobo6kcbIaFCGSl5+f366xafdbFa oKOYVHrrAPxFo2k7VxLRQFGcYgHr7bEq7QARtR4kgobng9dKOias0lfQPAPuTti8 i1fVh/NCPj1rOZZsWdfie65mIrTS0MOOB2saprqiZH30VW5ppSRhRr5Q5srXjPNx kCa0cW3sq3ppgCZoHVt2xRvgoElWq544u/AQTRjdgKFAlHyifWYBIhkwp1k5AgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUN/Z0Mplqp0SyjcPGZFxiXFhXs3cwHwYDVR0j BBgwFoAUEPAPrm8Lk6vclWKKzjw8GJrpJ/YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YzBjMTRhOS0zYTc3LTQ5ZTItOTE5NC00OGQwOTEzNDU4YjIvMC8xMEYwMEZBRTZG MEI5M0FCREM5NTYyOEFDRTNDM0MxODlBRTkyN0Y2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTBGMDBGQUU2RjBCOTNBQkRDOTU2MjhBQ0UzQzNDMTg5QUU5 MjdGNi5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzVjMGMxNGE5LTNhNzctNDllMi05 MTk0LTQ4ZDA5MTM0NThiMi8wLzMyMzAzMjJlMzEzNTM0MmUzNDMwMmUzMDJmMzIz MjJkMzIzNDIwM2QzZTIwMzQzNDMzMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBALKmigwDQYJKoZIhvcN AQELBQADggEBAA+l6SHkue8TpVtOpZxWuAXQNu30J7Ofu1v7WLOwL/p0Yz0cdCis KUB/dyJZTzLI9ITbOeldQCzqb2bnu3sDuqmpLHke5vwT346cq2IWW06h3odIvp3G BNSd9jX09h45gRWUl0H0Y6zmJh3I44AyrJlGs77OfP6m1xLhno3h4HaVXXQg5u8r R5Iy+q3UHWO8+uzTxdxsPKU4Jv4h5mD1qqV18wm0lvH4TLLROLQQEqfCTANGHkoY CPqfjiHzRQMEfdBX4LaWzBPR1/pWJLHrS0KnialhJx/sQJYiNHkowZYJuK2NeYDa OLOlyHLezQ1oi5IjRvdoxW6NYoKdCGHqGzE= -----END CERTIFICATE-----Generated at Fri Apr 17 22:40:36 2026 by rpki-client