$ rpki-client -vvf repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/3230332e39392e39362e302f32342d3234203d3e203536323431.roa File: 3230332e39392e39362e302f32342d3234203d3e203536323431.roa (raw, json) Hash identifier: MZclv9K4GJgA+tCVziLM3YS62d2tX/hGsU3amrc5L0U= Subject key identifier: 5D:78:F8:00:F7:51:BB:10:41:DF:87:3C:AD:C2:80:4F:F8:44:49:69 Certificate issuer: /CN=C9B3FF3FB070C3B99526356576F10FFA3FBDF658 Certificate serial: 7F125406B15F313810916EB1D54BE39A1B8BFB4E Authority key identifier: C9:B3:FF:3F:B0:70:C3:B9:95:26:35:65:76:F1:0F:FA:3F:BD:F6:58 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/3230332e39392e39362e302f32342d3234203d3e203536323431.roa Signing time: Thu 16 Apr 2026 09:03:58 +0000 ROA not before: Thu 16 Apr 2026 08:58:58 +0000 ROA not after: Thu 15 Apr 2027 09:03:58 +0000 asID: 56241 IP address blocks: 203.99.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.crl rsync://repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 13:09:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:12:54:06:b1:5f:31:38:10:91:6e:b1:d5:4b:e3:9a:1b:8b:fb:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C9B3FF3FB070C3B99526356576F10FFA3FBDF658 Validity Not Before: Apr 16 08:58:58 2026 GMT Not After : Apr 15 09:03:58 2027 GMT Subject: CN=5D78F800F751BB1041DF873CADC2804FF8444969 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:35:d0:05:1c:69:63:6f:2d:3e:15:3d:84:90: da:1e:ee:6a:78:86:96:e6:21:99:c0:64:df:60:b8: 9b:7e:21:66:e7:7a:e2:74:7c:d2:3c:65:14:2e:31: 70:05:1d:10:8e:2b:16:3d:95:8a:70:7f:d4:3f:17: 7a:0d:e5:6a:dc:68:5f:01:01:8e:cb:ef:21:80:89: 17:0e:0d:5f:98:43:a0:e8:72:19:65:fa:be:b4:0c: 8a:fa:67:6c:26:84:8a:23:57:4f:f2:f0:cc:4d:b2: 20:e9:f7:c2:4d:9b:cd:77:65:da:cb:84:ce:2a:84: ac:5a:43:3a:4e:aa:f6:24:5a:d5:64:e8:10:d8:17: e5:e9:80:6d:4a:de:a9:b5:e1:53:4b:8c:2f:a4:09: 04:5f:c7:10:2c:34:13:ed:7a:2e:dd:86:0c:b9:2a: 50:ec:bb:1c:36:42:a6:c7:7b:ac:65:70:d8:2d:a8: f0:95:22:38:26:00:f3:26:64:fe:7e:bc:bd:71:a8: 94:a2:b4:6c:36:10:07:38:75:af:6d:a6:1f:03:93: 7c:b9:f8:2f:77:d8:ac:e8:88:27:1c:28:33:b2:92: ea:7c:73:76:62:4b:ec:b7:57:fa:1f:e7:79:c7:38: 24:26:da:e6:14:be:6d:1d:35:dc:bd:23:0c:cb:e6: 04:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:78:F8:00:F7:51:BB:10:41:DF:87:3C:AD:C2:80:4F:F8:44:49:69 X509v3 Authority Key Identifier: keyid:C9:B3:FF:3F:B0:70:C3:B9:95:26:35:65:76:F1:0F:FA:3F:BD:F6:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/3230332e39392e39362e302f32342d3234203d3e203536323431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.99.96.0/24 Signature Algorithm: sha256WithRSAEncryption 81:8f:a0:53:a8:a5:ee:ab:16:b6:76:d3:14:43:ec:c2:99:4e: 3c:46:d7:8b:65:b2:01:1e:f3:1d:31:0b:32:a4:6f:f3:ff:8f: 62:c1:07:6b:ab:9c:5d:8f:1f:5b:8c:3f:48:55:7a:04:97:b2: d6:48:e5:3f:c5:75:c4:91:54:a6:b9:6e:f5:c1:c9:ac:d8:82: 19:ad:1b:d7:f6:0c:f7:bc:d2:53:38:d6:21:0c:4d:c5:98:95: 02:9c:ec:2d:d9:b1:4a:69:3c:6a:c3:2f:60:9b:11:8b:e5:fc: 5e:42:15:52:10:38:82:fe:f9:80:b9:20:27:87:1b:87:d9:82: 81:25:4d:78:10:dd:3c:4a:d4:a4:0c:74:8e:3a:01:19:38:86: 1e:f1:bf:9b:76:26:52:1b:4e:02:24:97:a2:c9:c8:92:79:12: 71:90:c6:4d:04:df:8c:9c:2e:fe:21:88:2b:f1:9f:3b:7e:7d: e7:ad:f8:e0:f8:e4:a0:46:7d:5e:55:86:85:35:71:71:ea:a2: fd:6e:73:22:a5:32:6b:1d:cb:0c:93:5c:a1:62:8d:e1:f1:ff: 7d:39:fa:a3:72:9c:7e:b0:ae:2f:25:e9:2b:62:f4:44:c3:68: cd:6f:c8:51:ea:57:0e:7e:79:90:40:36:e7:8c:07:9b:1c:70: 48:eb:7a:15 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUfxJUBrFfMTgQkW6x1UvjmhuL+04wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzlCM0ZGM0ZCMDcwQzNCOTk1MjYzNTY1NzZGMTBGRkEz RkJERjY1ODAeFw0yNjA0MTYwODU4NThaFw0yNzA0MTUwOTAzNThaMDMxMTAvBgNV BAMTKDVENzhGODAwRjc1MUJCMTA0MURGODczQ0FEQzI4MDRGRjg0NDQ5NjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/NdAFHGljby0+FT2EkNoe7mp4 hpbmIZnAZN9guJt+IWbneuJ0fNI8ZRQuMXAFHRCOKxY9lYpwf9Q/F3oN5WrcaF8B AY7L7yGAiRcODV+YQ6Dochll+r60DIr6Z2wmhIojV0/y8MxNsiDp98JNm813ZdrL hM4qhKxaQzpOqvYkWtVk6BDYF+XpgG1K3qm14VNLjC+kCQRfxxAsNBPtei7dhgy5 KlDsuxw2QqbHe6xlcNgtqPCVIjgmAPMmZP5+vL1xqJSitGw2EAc4da9tph8Dk3y5 +C932KzoiCccKDOykup8c3ZiS+y3V/of53nHOCQm2uYUvm0dNdy9IwzL5gTZAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUXXj4APdRuxBB34c8rcKAT/hESWkwHwYDVR0j BBgwFoAUybP/P7Bww7mVJjVldvEP+j+99lgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZTU5ZGI3ZS05NGY2LTQwMDItOTllZi01ZTk2ZDhlMzdlNTAvMC9DOUIzRkYzRkIw NzBDM0I5OTUyNjM1NjU3NkYxMEZGQTNGQkRGNjU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzlCM0ZGM0ZCMDcwQzNCOTk1MjYzNTY1NzZGMTBGRkEzRkJE RjY1OC5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzdlNTlkYjdlLTk0ZjYtNDAwMi05 OWVmLTVlOTZkOGUzN2U1MC8wLzMyMzAzMzJlMzkzOTJlMzkzNjJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDM1MzYzMjM0MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADLY2AwDQYJKoZIhvcN AQELBQADggEBAIGPoFOope6rFrZ20xRD7MKZTjxG14tlsgEe8x0xCzKkb/P/j2LB B2urnF2PH1uMP0hVegSXstZI5T/FdcSRVKa5bvXByazYghmtG9f2DPe80lM41iEM TcWYlQKc7C3ZsUppPGrDL2CbEYvl/F5CFVIQOIL++YC5ICeHG4fZgoElTXgQ3TxK 1KQMdI46ARk4hh7xv5t2JlIbTgIkl6LJyJJ5EnGQxk0E34ycLv4hiCvxnzt+feet +OD45KBGfV5VhoU1cXHqov1ucyKlMmsdywyTXKFijeHx/305+qNynH6wri8l6Sti 9ETDaM1vyFHqVw5+eZBANueMB5sccEjrehU= -----END CERTIFICATE-----Generated at Fri Apr 17 16:18:34 2026 by rpki-client