$ rpki-client -vvf repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3230322e35322e31302e302f32342d3234203d3e203137363731.roa File: 3230322e35322e31302e302f32342d3234203d3e203137363731.roa (raw, json) Hash identifier: j2hsl3YC5TaAkPbOx8E7xKZ37P7mxNvDZM5UoYUBEd0= Subject key identifier: D1:12:5B:45:C0:DC:ED:A9:75:30:F1:68:00:73:C0:B7:E5:74:47:45 Certificate issuer: /CN=D0C90407CCD53717DFEA21D51A8921F20564AB25 Certificate serial: 71AA7069125F328E2532B6DB5AEFF6CB247C6311 Authority key identifier: D0:C9:04:07:CC:D5:37:17:DF:EA:21:D5:1A:89:21:F2:05:64:AB:25 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C90407CCD53717DFEA21D51A8921F20564AB25.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3230322e35322e31302e302f32342d3234203d3e203137363731.roa Signing time: Thu 16 Apr 2026 11:03:25 +0000 ROA not before: Thu 16 Apr 2026 10:58:25 +0000 ROA not after: Thu 15 Apr 2027 11:03:25 +0000 asID: 17671 IP address blocks: 202.52.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/D0C90407CCD53717DFEA21D51A8921F20564AB25.crl rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/D0C90407CCD53717DFEA21D51A8921F20564AB25.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C90407CCD53717DFEA21D51A8921F20564AB25.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 04:26:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:aa:70:69:12:5f:32:8e:25:32:b6:db:5a:ef:f6:cb:24:7c:63:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D0C90407CCD53717DFEA21D51A8921F20564AB25 Validity Not Before: Apr 16 10:58:25 2026 GMT Not After : Apr 15 11:03:25 2027 GMT Subject: CN=D1125B45C0DCEDA97530F1680073C0B7E5744745 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:86:59:32:02:b5:23:35:fd:5e:45:0f:09:34: 49:8f:69:d7:88:e2:9d:9a:fe:a8:02:4a:50:da:2f: ce:c6:3b:de:a7:17:27:41:5e:1f:f8:6d:fc:a8:74: 67:e7:33:b6:83:e5:ce:84:5f:46:dc:0f:3c:9e:5d: b2:cc:33:e2:4c:a2:d5:73:d2:93:12:0b:7c:98:78: 2a:a2:d3:4a:67:07:e3:81:5c:85:6f:43:62:32:b7: 93:8c:7e:53:76:6f:5b:f2:19:dc:02:a3:3f:2a:dd: 17:de:e4:2a:8d:ad:12:6c:cc:73:ad:5f:4d:ad:5b: 6a:ab:3b:10:c7:91:0b:9a:30:bc:d2:46:48:bd:41: 0b:70:15:03:2c:a8:a6:bf:20:7d:b8:b1:6a:3a:a9: 32:64:73:e8:fe:5c:62:9a:3a:5e:00:3e:51:7d:5b: a7:00:99:60:55:72:05:f3:5d:60:0f:5c:f6:f1:e6: ee:e5:34:8e:8c:80:37:eb:94:b1:04:5c:ee:d2:73: 12:25:5a:68:19:f8:86:fe:8e:30:e3:3b:c3:4b:fc: 16:f7:2b:12:92:05:3a:ea:e5:3d:8b:99:81:7d:e0: 52:d1:61:81:8f:4c:25:de:94:a6:d6:14:de:34:ed: 50:42:fa:74:28:41:44:ba:e9:38:e6:92:aa:db:7d: 28:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:12:5B:45:C0:DC:ED:A9:75:30:F1:68:00:73:C0:B7:E5:74:47:45 X509v3 Authority Key Identifier: keyid:D0:C9:04:07:CC:D5:37:17:DF:EA:21:D5:1A:89:21:F2:05:64:AB:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/D0C90407CCD53717DFEA21D51A8921F20564AB25.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C90407CCD53717DFEA21D51A8921F20564AB25.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3230322e35322e31302e302f32342d3234203d3e203137363731.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.52.10.0/24 Signature Algorithm: sha256WithRSAEncryption a5:0d:f9:76:07:8e:72:32:7c:47:14:cf:f1:84:a9:8f:63:c2: b1:7d:ce:3a:96:f0:e7:dd:99:40:af:65:72:a7:e8:06:af:8e: f5:25:13:04:58:aa:08:a8:4f:09:10:f3:2d:0b:52:30:1a:3c: 9a:e2:81:cb:f1:f1:c0:55:fc:29:84:09:29:1d:44:72:cb:7a: c9:e4:76:66:18:c5:53:3c:98:53:fd:86:0b:93:84:55:dc:9d: e7:fb:0b:d9:82:da:6c:26:a1:da:7e:52:02:28:b7:88:a7:32: 92:70:03:88:0e:27:d0:d0:f8:2a:49:82:f3:aa:9d:b0:ba:b2: ef:6a:18:c4:a8:62:4d:ef:76:a7:2a:62:14:e0:2f:e5:3c:fe: 3f:32:a3:0f:42:73:d3:1f:db:08:2c:fe:d2:8d:2a:5b:d9:5e: 1b:0f:07:93:ce:c6:fb:50:b9:83:e7:2a:a6:53:39:c0:c0:37: 35:e9:90:63:3b:0e:e4:2f:5c:75:5d:1c:d0:06:66:4c:45:2f: 4b:8d:df:52:fe:61:a6:45:83:b4:8d:8c:7f:e9:4d:aa:34:30: 57:29:3b:2d:8b:3a:98:64:74:60:09:e7:8c:54:07:be:5e:e9: dc:2d:02:37:0f:2c:47:80:f9:11:8e:b9:5f:41:04:b2:7a:46: 04:6e:9e:c0 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUcapwaRJfMo4lMrbbWu/2yyR8YxEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDBDOTA0MDdDQ0Q1MzcxN0RGRUEyMUQ1MUE4OTIxRjIw NTY0QUIyNTAeFw0yNjA0MTYxMDU4MjVaFw0yNzA0MTUxMTAzMjVaMDMxMTAvBgNV BAMTKEQxMTI1QjQ1QzBEQ0VEQTk3NTMwRjE2ODAwNzNDMEI3RTU3NDQ3NDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAhlkyArUjNf1eRQ8JNEmPadeI 4p2a/qgCSlDaL87GO96nFydBXh/4bfyodGfnM7aD5c6EX0bcDzyeXbLMM+JMotVz 0pMSC3yYeCqi00pnB+OBXIVvQ2Iyt5OMflN2b1vyGdwCoz8q3Rfe5CqNrRJszHOt X02tW2qrOxDHkQuaMLzSRki9QQtwFQMsqKa/IH24sWo6qTJkc+j+XGKaOl4APlF9 W6cAmWBVcgXzXWAPXPbx5u7lNI6MgDfrlLEEXO7ScxIlWmgZ+Ib+jjDjO8NL/Bb3 KxKSBTrq5T2LmYF94FLRYYGPTCXelKbWFN407VBC+nQoQUS66TjmkqrbfSibAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQU0RJbRcDc7al1MPFoAHPAt+V0R0UwHwYDVR0j BBgwFoAU0MkEB8zVNxff6iHVGokh8gVkqyUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 Y2ViZjExNi1mZTJhLTQ5MWItYWFjOC0yMjBlYWQwYjU0ZTIvMC9EMEM5MDQwN0ND RDUzNzE3REZFQTIxRDUxQTg5MjFGMjA1NjRBQjI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDBDOTA0MDdDQ0Q1MzcxN0RGRUEyMUQ1MUE4OTIxRjIwNTY0 QUIyNS5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzhjZWJmMTE2LWZlMmEtNDkxYi1h YWM4LTIyMGVhZDBiNTRlMi8wLzMyMzAzMjJlMzUzMjJlMzEzMDJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMxMzczNjM3MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADKNAowDQYJKoZIhvcN AQELBQADggEBAKUN+XYHjnIyfEcUz/GEqY9jwrF9zjqW8OfdmUCvZXKn6AavjvUl EwRYqgioTwkQ8y0LUjAaPJrigcvx8cBV/CmECSkdRHLLesnkdmYYxVM8mFP9hguT hFXcnef7C9mC2mwmodp+UgIot4inMpJwA4gOJ9DQ+CpJgvOqnbC6su9qGMSoYk3v dqcqYhTgL+U8/j8yow9Cc9Mf2wgs/tKNKlvZXhsPB5POxvtQuYPnKqZTOcDANzXp kGM7DuQvXHVdHNAGZkxFL0uN31L+YaZFg7SNjH/pTao0MFcpOy2LOphkdGAJ54xU B75e6dwtAjcPLEeA+RGOuV9BBLJ6RgRunsA= -----END CERTIFICATE-----Generated at Fri Apr 17 20:53:03 2026 by rpki-client