$ rpki-client -vvf repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/3230332e39392e3131322e302f32342d3234203d3e203536323431.roa File: 3230332e39392e3131322e302f32342d3234203d3e203536323431.roa (raw, json) Hash identifier: 1LaVLKJydCdtnkBShHGTk6ZlOayh5GtE/ZWlv15AvXg= Subject key identifier: 48:C8:C4:73:83:C2:E2:12:D4:50:4E:5D:65:C6:52:DF:77:A8:3D:65 Certificate issuer: /CN=C9B3FF3FB070C3B99526356576F10FFA3FBDF658 Certificate serial: 4417D6F4B81E9FD8C52DF522E1004E27390FCDEF Authority key identifier: C9:B3:FF:3F:B0:70:C3:B9:95:26:35:65:76:F1:0F:FA:3F:BD:F6:58 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/3230332e39392e3131322e302f32342d3234203d3e203536323431.roa Signing time: Thu 16 Apr 2026 08:00:00 +0000 ROA not before: Thu 16 Apr 2026 07:55:00 +0000 ROA not after: Thu 15 Apr 2027 08:00:00 +0000 asID: 56241 IP address blocks: 203.99.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.crl rsync://repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 13:09:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:17:d6:f4:b8:1e:9f:d8:c5:2d:f5:22:e1:00:4e:27:39:0f:cd:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C9B3FF3FB070C3B99526356576F10FFA3FBDF658 Validity Not Before: Apr 16 07:55:00 2026 GMT Not After : Apr 15 08:00:00 2027 GMT Subject: CN=48C8C47383C2E212D4504E5D65C652DF77A83D65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:de:e2:ec:50:38:02:f3:3e:e3:9b:19:9f:ae: 0e:ab:19:e4:db:90:07:f2:fa:ac:a4:7a:b4:11:1f: b1:04:ee:34:05:95:63:7c:95:c3:9d:27:7a:da:f3: b0:50:36:83:34:3e:b9:7c:7c:be:e5:4b:e5:03:65: 5f:aa:36:e4:d5:df:51:4e:0b:7c:78:af:3b:06:23: 95:e4:ff:39:9b:04:63:c2:3f:66:3e:b8:51:4a:fb: c7:c4:d8:27:1e:dc:74:bd:4c:f0:3f:07:52:46:a9: 7a:2a:16:39:82:b2:c1:67:de:b8:7d:45:08:9f:a8: 1e:c2:c2:57:ee:f9:42:ed:68:91:db:28:a5:5f:bb: 9a:21:ad:64:7a:c1:9d:a3:d9:23:76:f2:c5:f8:aa: 36:e9:af:97:cf:fe:96:31:ee:bd:21:7e:fa:78:95: 58:ce:15:82:cb:b7:83:10:c6:1c:2e:d1:73:11:4f: ca:ed:6a:e7:66:31:e3:29:7c:40:15:8a:a9:cb:6c: 5e:81:bd:75:8b:b4:11:11:e0:cb:7b:92:a4:7b:d0: 29:52:21:6b:7a:5c:8f:6b:d5:c6:78:35:d9:cb:31: 17:0b:46:9e:46:f3:c5:d9:40:43:c3:9f:6c:17:3c: 65:53:0e:d7:cd:f6:57:5c:1f:d0:a5:be:2b:f3:5b: 70:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:C8:C4:73:83:C2:E2:12:D4:50:4E:5D:65:C6:52:DF:77:A8:3D:65 X509v3 Authority Key Identifier: keyid:C9:B3:FF:3F:B0:70:C3:B9:95:26:35:65:76:F1:0F:FA:3F:BD:F6:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/3230332e39392e3131322e302f32342d3234203d3e203536323431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.99.112.0/24 Signature Algorithm: sha256WithRSAEncryption d4:82:e4:50:a0:38:3e:e2:0d:78:a7:4e:a7:04:8e:3b:84:1b: c5:ff:e9:57:6f:a9:29:29:64:58:b5:3c:08:5f:a1:8f:12:c9: 8e:f6:5b:a3:a5:43:6a:6f:16:8d:93:66:e6:74:58:c5:c4:3e: e8:33:49:9c:cc:3d:09:d8:21:8b:22:47:7b:39:cb:18:16:2a: 07:fb:f5:e2:a7:00:95:0d:94:91:58:98:3e:93:bd:66:78:35: f4:45:01:08:5a:ae:81:30:55:20:17:39:14:e7:a7:0a:83:77: 12:84:1e:51:b4:46:6a:49:e4:9a:f2:a4:59:37:47:ed:f6:f6: 21:a2:d2:20:7b:05:be:df:36:10:50:d6:26:44:9b:7d:27:0b: eb:24:12:61:fa:4b:db:09:fc:ce:51:81:f5:87:9f:3b:84:47: c8:80:1e:f7:69:a0:23:3f:9f:d5:72:4a:b1:d9:19:4e:13:57: b9:de:63:be:df:68:73:e5:db:c1:3b:c5:6c:ea:31:1b:03:f9: cd:ce:ec:e9:6b:93:26:66:0f:0b:19:0f:12:a6:fc:b6:69:de: 81:16:b1:36:a4:49:9c:b3:36:58:89:38:7b:df:a8:29:10:8e: dd:3c:ff:f6:68:44:90:e9:83:e4:9c:c0:3e:e8:89:12:9f:47: 41:99:0f:8f -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIURBfW9Lgen9jFLfUi4QBOJzkPze8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzlCM0ZGM0ZCMDcwQzNCOTk1MjYzNTY1NzZGMTBGRkEz RkJERjY1ODAeFw0yNjA0MTYwNzU1MDBaFw0yNzA0MTUwODAwMDBaMDMxMTAvBgNV BAMTKDQ4QzhDNDczODNDMkUyMTJENDUwNEU1RDY1QzY1MkRGNzdBODNENjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDc3uLsUDgC8z7jmxmfrg6rGeTb kAfy+qykerQRH7EE7jQFlWN8lcOdJ3ra87BQNoM0Prl8fL7lS+UDZV+qNuTV31FO C3x4rzsGI5Xk/zmbBGPCP2Y+uFFK+8fE2Cce3HS9TPA/B1JGqXoqFjmCssFn3rh9 RQifqB7Cwlfu+ULtaJHbKKVfu5ohrWR6wZ2j2SN28sX4qjbpr5fP/pYx7r0hfvp4 lVjOFYLLt4MQxhwu0XMRT8rtaudmMeMpfEAViqnLbF6BvXWLtBER4Mt7kqR70ClS IWt6XI9r1cZ4NdnLMRcLRp5G88XZQEPDn2wXPGVTDtfN9ldcH9ClvivzW3CxAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUSMjEc4PC4hLUUE5dZcZS33eoPWUwHwYDVR0j BBgwFoAUybP/P7Bww7mVJjVldvEP+j+99lgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZTU5ZGI3ZS05NGY2LTQwMDItOTllZi01ZTk2ZDhlMzdlNTAvMC9DOUIzRkYzRkIw NzBDM0I5OTUyNjM1NjU3NkYxMEZGQTNGQkRGNjU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzlCM0ZGM0ZCMDcwQzNCOTk1MjYzNTY1NzZGMTBGRkEzRkJE RjY1OC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzdlNTlkYjdlLTk0ZjYtNDAwMi05 OWVmLTVlOTZkOGUzN2U1MC8wLzMyMzAzMzJlMzkzOTJlMzEzMTMyMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzUzNjMyMzQzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMtjcDANBgkqhkiG 9w0BAQsFAAOCAQEA1ILkUKA4PuINeKdOpwSOO4Qbxf/pV2+pKSlkWLU8CF+hjxLJ jvZbo6VDam8WjZNm5nRYxcQ+6DNJnMw9CdghiyJHeznLGBYqB/v14qcAlQ2UkViY PpO9Zng19EUBCFqugTBVIBc5FOenCoN3EoQeUbRGaknkmvKkWTdH7fb2IaLSIHsF vt82EFDWJkSbfScL6yQSYfpL2wn8zlGB9YefO4RHyIAe92mgIz+f1XJKsdkZThNX ud5jvt9oc+XbwTvFbOoxGwP5zc7s6WuTJmYPCxkPEqb8tmnegRaxNqRJnLM2WIk4 e9+oKRCO3Tz/9mhEkOmD5JzAPuiJEp9HQZkPjw== -----END CERTIFICATE-----Generated at Fri Apr 17 16:22:46 2026 by rpki-client