$ rpki-client -vvf repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/3230332e39392e3130322e302f32342d3234203d3e203130313337.roa File: 3230332e39392e3130322e302f32342d3234203d3e203130313337.roa (raw, json) Hash identifier: 4C67Et4Tmkkm4HgecHix/D+upKfqIaXlX/gO10UpfVk= Subject key identifier: 50:73:07:2D:11:4B:CA:19:7C:8F:3B:35:F0:33:EC:0B:68:21:85:5D Certificate issuer: /CN=C9B3FF3FB070C3B99526356576F10FFA3FBDF658 Certificate serial: 1E9C0D644C620AF39F0B20BF93FF40DC03AE88A4 Authority key identifier: C9:B3:FF:3F:B0:70:C3:B9:95:26:35:65:76:F1:0F:FA:3F:BD:F6:58 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/3230332e39392e3130322e302f32342d3234203d3e203130313337.roa Signing time: Thu 16 Apr 2026 08:00:00 +0000 ROA not before: Thu 16 Apr 2026 07:55:00 +0000 ROA not after: Thu 15 Apr 2027 08:00:00 +0000 asID: 10137 IP address blocks: 203.99.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.crl rsync://repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 13:09:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:9c:0d:64:4c:62:0a:f3:9f:0b:20:bf:93:ff:40:dc:03:ae:88:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C9B3FF3FB070C3B99526356576F10FFA3FBDF658 Validity Not Before: Apr 16 07:55:00 2026 GMT Not After : Apr 15 08:00:00 2027 GMT Subject: CN=5073072D114BCA197C8F3B35F033EC0B6821855D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:82:88:39:a3:4c:0c:c8:c7:03:93:3d:e4:49: 6e:63:f2:97:ad:98:3b:43:81:43:bb:83:c7:85:db: 20:fb:93:8b:97:24:71:da:83:c9:c6:a3:34:6c:04: 8e:7b:db:92:78:15:4e:a1:74:df:ae:59:5b:e9:f8: f3:e1:67:3f:2b:aa:d4:56:d8:55:ee:51:2d:36:de: 17:62:0c:01:b4:22:ac:c4:dc:06:aa:aa:74:49:40: c4:fb:c4:8b:4d:01:65:f4:28:66:a6:b7:f3:d1:5f: eb:93:d7:cb:ae:47:aa:ff:61:5a:6c:98:96:20:d5: 55:82:0c:04:d7:bb:28:b3:c7:37:bd:26:7f:a8:fb: b2:6a:11:d4:16:bd:7d:00:ff:61:ab:da:4b:5f:a6: 30:ac:57:d2:fc:43:05:39:75:ae:02:e2:37:4d:37: 0f:0b:0e:22:87:df:dd:cb:1d:a1:9c:0c:22:1b:4c: 4d:3e:cb:ff:57:c0:36:39:e9:eb:6e:a7:b1:fb:0d: da:22:74:b3:46:9b:cc:53:b7:2e:04:c5:b6:25:6c: e6:25:16:26:5d:31:f7:0e:4b:cd:e0:1d:ea:96:73: 5f:68:68:5b:86:df:88:5d:84:d5:5a:03:fb:78:f5: 01:d7:9b:85:68:cb:30:58:a1:e9:80:6d:17:7c:08: 5a:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:73:07:2D:11:4B:CA:19:7C:8F:3B:35:F0:33:EC:0B:68:21:85:5D X509v3 Authority Key Identifier: keyid:C9:B3:FF:3F:B0:70:C3:B9:95:26:35:65:76:F1:0F:FA:3F:BD:F6:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/3230332e39392e3130322e302f32342d3234203d3e203130313337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.99.102.0/24 Signature Algorithm: sha256WithRSAEncryption 05:18:78:90:da:19:53:28:c2:60:7a:47:d3:61:14:8c:3c:9e: 7c:51:92:ac:0c:07:1c:62:ff:7f:d3:50:c7:82:f4:73:08:f9: f8:a6:32:68:35:4f:57:df:5e:19:7d:19:7b:e6:ea:a6:d3:eb: cc:18:12:19:42:41:78:21:9c:b1:d4:69:13:c0:d1:88:ba:f3: a2:bc:25:c7:42:e0:81:f3:55:c8:96:ac:96:e8:66:ab:bf:26: 6e:c3:2f:b0:6e:d8:42:fd:00:72:d2:08:64:51:9e:71:61:df: ac:90:6b:58:aa:42:dd:b5:19:7d:0a:2e:7b:d4:da:5b:6b:27: 73:3e:04:68:46:ee:32:06:8f:1d:59:51:a6:e5:68:55:45:ba: 93:f1:cc:e2:c5:b1:6b:b1:e4:d2:00:26:77:dd:55:71:6b:81: 84:01:cf:35:be:f8:8c:56:73:8a:6a:3b:0b:79:a3:42:d5:44: 67:00:86:e8:86:33:0e:d1:bb:6a:c1:18:14:83:a2:3e:14:fe: 51:d0:5b:cf:61:ec:93:2b:13:c4:87:26:b9:12:25:4a:ae:35: 05:18:93:60:40:bf:6f:15:f0:eb:4f:66:2f:0d:12:7c:3e:d2: 91:57:b5:c7:55:0f:3e:8e:3f:79:4e:95:16:7d:24:b9:9d:cb: ba:49:ba:9d -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUHpwNZExiCvOfCyC/k/9A3AOuiKQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzlCM0ZGM0ZCMDcwQzNCOTk1MjYzNTY1NzZGMTBGRkEz RkJERjY1ODAeFw0yNjA0MTYwNzU1MDBaFw0yNzA0MTUwODAwMDBaMDMxMTAvBgNV BAMTKDUwNzMwNzJEMTE0QkNBMTk3QzhGM0IzNUYwMzNFQzBCNjgyMTg1NUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0gog5o0wMyMcDkz3kSW5j8pet mDtDgUO7g8eF2yD7k4uXJHHag8nGozRsBI5725J4FU6hdN+uWVvp+PPhZz8rqtRW 2FXuUS023hdiDAG0IqzE3AaqqnRJQMT7xItNAWX0KGamt/PRX+uT18uuR6r/YVps mJYg1VWCDATXuyizxze9Jn+o+7JqEdQWvX0A/2Gr2ktfpjCsV9L8QwU5da4C4jdN Nw8LDiKH393LHaGcDCIbTE0+y/9XwDY56etup7H7DdoidLNGm8xTty4ExbYlbOYl FiZdMfcOS83gHeqWc19oaFuG34hdhNVaA/t49QHXm4VoyzBYoemAbRd8CFrVAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUUHMHLRFLyhl8jzs18DPsC2ghhV0wHwYDVR0j BBgwFoAUybP/P7Bww7mVJjVldvEP+j+99lgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZTU5ZGI3ZS05NGY2LTQwMDItOTllZi01ZTk2ZDhlMzdlNTAvMC9DOUIzRkYzRkIw NzBDM0I5OTUyNjM1NjU3NkYxMEZGQTNGQkRGNjU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzlCM0ZGM0ZCMDcwQzNCOTk1MjYzNTY1NzZGMTBGRkEzRkJE RjY1OC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzdlNTlkYjdlLTk0ZjYtNDAwMi05 OWVmLTVlOTZkOGUzN2U1MC8wLzMyMzAzMzJlMzkzOTJlMzEzMDMyMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMDMxMzMzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMtjZjANBgkqhkiG 9w0BAQsFAAOCAQEABRh4kNoZUyjCYHpH02EUjDyefFGSrAwHHGL/f9NQx4L0cwj5 +KYyaDVPV99eGX0Ze+bqptPrzBgSGUJBeCGcsdRpE8DRiLrzorwlx0LggfNVyJas luhmq78mbsMvsG7YQv0ActIIZFGecWHfrJBrWKpC3bUZfQoue9TaW2sncz4EaEbu MgaPHVlRpuVoVUW6k/HM4sWxa7Hk0gAmd91VcWuBhAHPNb74jFZzimo7C3mjQtVE ZwCG6IYzDtG7asEYFIOiPhT+UdBbz2HskysTxIcmuRIlSq41BRiTYEC/bxXw609m Lw0SfD7SkVe1x1UPPo4/eU6VFn0kuZ3Lukm6nQ== -----END CERTIFICATE-----Generated at Fri Apr 17 16:46:16 2026 by rpki-client