$ rpki-client -vvf repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/3230332e39392e39372e302f32342d3234203d3e203130313337.roa File: 3230332e39392e39372e302f32342d3234203d3e203130313337.roa (raw, json) Hash identifier: Ww/jNd61B9A1/46Fmq9/EbBn/KqfNGTttbLAchHUnzk= Subject key identifier: C6:E8:97:91:AE:8F:2D:33:3B:84:35:3B:32:9A:1A:6E:5E:04:2F:04 Certificate issuer: /CN=C9B3FF3FB070C3B99526356576F10FFA3FBDF658 Certificate serial: 2E9B923AC9A6E28E14A0D7F37C01334F93FEFD34 Authority key identifier: C9:B3:FF:3F:B0:70:C3:B9:95:26:35:65:76:F1:0F:FA:3F:BD:F6:58 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/3230332e39392e39372e302f32342d3234203d3e203130313337.roa Signing time: Thu 16 Apr 2026 09:03:58 +0000 ROA not before: Thu 16 Apr 2026 08:58:58 +0000 ROA not after: Thu 15 Apr 2027 09:03:58 +0000 asID: 10137 IP address blocks: 203.99.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.crl rsync://repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 13:09:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:9b:92:3a:c9:a6:e2:8e:14:a0:d7:f3:7c:01:33:4f:93:fe:fd:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C9B3FF3FB070C3B99526356576F10FFA3FBDF658 Validity Not Before: Apr 16 08:58:58 2026 GMT Not After : Apr 15 09:03:58 2027 GMT Subject: CN=C6E89791AE8F2D333B84353B329A1A6E5E042F04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:4a:06:c2:af:e2:a8:b5:83:1b:b3:f8:38:de: c0:03:c1:58:51:85:21:73:76:d9:b0:47:92:99:c0: 2d:fe:b0:f7:9f:7d:ae:0b:81:ca:27:46:93:fe:b6: 71:a8:68:66:d7:9e:7b:73:33:80:7a:04:73:f7:fd: 6e:15:7c:ec:39:04:01:77:5d:8a:af:2c:fa:d3:8b: f3:a7:23:6b:84:41:64:51:90:18:2c:1b:6b:27:63: 10:ca:bd:80:67:d5:07:ce:66:03:4a:f8:47:0b:e3: 81:d8:6a:7c:bf:7f:f8:3d:fd:f8:2b:bf:0d:bd:9e: 1a:77:97:b2:ff:c1:b8:30:15:e6:23:a7:2a:e8:c9: 82:9e:3b:87:58:31:9a:6a:55:6a:a4:a5:74:ad:1d: 51:f0:4b:bb:75:66:f1:9c:ac:c2:19:21:07:a8:f7: a3:22:8b:38:86:a7:db:aa:22:9c:f4:91:b2:b7:72: c1:1f:1a:30:c3:0d:27:95:4a:eb:09:33:99:66:05: 90:23:b6:97:5f:9e:52:6d:b3:43:5e:a3:01:fc:56: 24:d9:b4:7b:20:ef:94:c8:9d:16:ab:9a:40:50:10: e6:5f:90:82:8a:ce:c5:d8:73:4c:b2:4b:27:1a:19: 6f:2d:e7:0b:ba:60:33:90:13:f8:f4:30:5c:0f:ec: ee:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:E8:97:91:AE:8F:2D:33:3B:84:35:3B:32:9A:1A:6E:5E:04:2F:04 X509v3 Authority Key Identifier: keyid:C9:B3:FF:3F:B0:70:C3:B9:95:26:35:65:76:F1:0F:FA:3F:BD:F6:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/3230332e39392e39372e302f32342d3234203d3e203130313337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.99.97.0/24 Signature Algorithm: sha256WithRSAEncryption 69:ba:e4:a6:e4:29:bd:c4:15:a4:4d:1e:6d:55:87:a8:b5:3c: f4:5c:9e:12:6b:cf:c9:98:f3:24:ad:e8:40:1a:f3:1e:57:2d: 18:57:c8:60:90:5f:da:08:fa:14:6e:df:17:a9:b3:fd:18:f2: 12:c7:41:58:32:f9:9f:86:01:d4:30:e6:d9:8e:14:80:99:09: 2e:9d:02:97:27:ac:7f:81:57:f2:93:14:23:29:45:e0:1b:6a: 1c:6c:b2:61:a7:c1:fe:f8:01:f7:20:1b:ba:0b:9c:21:0e:14: 1f:fc:49:60:e5:8f:0a:d7:e1:13:e3:8d:23:05:f3:a0:53:0c: e3:db:5f:fa:26:22:0e:d1:81:27:93:86:86:2a:f7:ed:c6:51: e6:65:f0:d9:04:f8:9b:46:f1:0c:8c:47:9d:a1:1f:6c:07:e0: 4e:de:27:96:cf:d7:dd:ca:4c:8e:10:95:01:5f:72:4c:3f:aa: e0:2e:4c:1f:18:ad:bb:13:88:1b:75:b6:fc:d2:4d:f9:1e:cd: e6:b3:39:64:40:82:58:18:99:43:53:7a:08:d2:e0:ff:8a:fe: d1:02:b3:5d:53:51:27:f9:16:b5:d3:0c:25:2e:8a:da:14:48: a3:d7:a3:22:2a:40:5e:26:78:78:fb:14:a6:c5:c6:27:62:63: 7c:df:85:af -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIULpuSOsmm4o4UoNfzfAEzT5P+/TQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzlCM0ZGM0ZCMDcwQzNCOTk1MjYzNTY1NzZGMTBGRkEz RkJERjY1ODAeFw0yNjA0MTYwODU4NThaFw0yNzA0MTUwOTAzNThaMDMxMTAvBgNV BAMTKEM2RTg5NzkxQUU4RjJEMzMzQjg0MzUzQjMyOUExQTZFNUUwNDJGMDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiSgbCr+KotYMbs/g43sADwVhR hSFzdtmwR5KZwC3+sPeffa4LgconRpP+tnGoaGbXnntzM4B6BHP3/W4VfOw5BAF3 XYqvLPrTi/OnI2uEQWRRkBgsG2snYxDKvYBn1QfOZgNK+EcL44HYany/f/g9/fgr vw29nhp3l7L/wbgwFeYjpyroyYKeO4dYMZpqVWqkpXStHVHwS7t1ZvGcrMIZIQeo 96MiiziGp9uqIpz0kbK3csEfGjDDDSeVSusJM5lmBZAjtpdfnlJts0NeowH8ViTZ tHsg75TInRarmkBQEOZfkIKKzsXYc0yySycaGW8t5wu6YDOQE/j0MFwP7O6DAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUxuiXka6PLTM7hDU7Mpoabl4ELwQwHwYDVR0j BBgwFoAUybP/P7Bww7mVJjVldvEP+j+99lgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZTU5ZGI3ZS05NGY2LTQwMDItOTllZi01ZTk2ZDhlMzdlNTAvMC9DOUIzRkYzRkIw NzBDM0I5OTUyNjM1NjU3NkYxMEZGQTNGQkRGNjU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzlCM0ZGM0ZCMDcwQzNCOTk1MjYzNTY1NzZGMTBGRkEzRkJE RjY1OC5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzdlNTlkYjdlLTk0ZjYtNDAwMi05 OWVmLTVlOTZkOGUzN2U1MC8wLzMyMzAzMzJlMzkzOTJlMzkzNzJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMxMzAzMTMzMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADLY2EwDQYJKoZIhvcN AQELBQADggEBAGm65KbkKb3EFaRNHm1Vh6i1PPRcnhJrz8mY8ySt6EAa8x5XLRhX yGCQX9oI+hRu3xeps/0Y8hLHQVgy+Z+GAdQw5tmOFICZCS6dApcnrH+BV/KTFCMp ReAbahxssmGnwf74AfcgG7oLnCEOFB/8SWDljwrX4RPjjSMF86BTDOPbX/omIg7R gSeThoYq9+3GUeZl8NkE+JtG8QyMR52hH2wH4E7eJ5bP193KTI4QlQFfckw/quAu TB8YrbsTiBt1tvzSTfkezeazOWRAglgYmUNTegjS4P+K/tECs11TUSf5FrXTDCUu itoUSKPXoyIqQF4meHj7FKbFxidiY3zfha8= -----END CERTIFICATE-----Generated at Fri Apr 17 16:41:09 2026 by rpki-client