$ rpki-client -vvf repo-rpki.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/3232332e32352e3130392e302f32342d3234203d3e20313439373138.roa File: 3232332e32352e3130392e302f32342d3234203d3e20313439373138.roa (raw, json) Hash identifier: aZa5Hs2uGug6GjMwLF5YwcWPnEFLLnOxavB7Mt6JmdE= Subject key identifier: B0:97:3D:8A:87:53:E6:64:5D:65:66:81:98:53:A0:4C:6C:49:CA:58 Certificate issuer: /CN=4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787 Certificate serial: 10AF895DB767DE24A6E65BAA4598EF0ED44D5BDC Authority key identifier: 4B:F1:DC:C0:BC:C5:B1:A4:B6:BE:52:6A:75:FF:33:39:7F:C3:87:87 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/3232332e32352e3130392e302f32342d3234203d3e20313439373138.roa Signing time: Sun 12 Apr 2026 13:00:02 +0000 ROA not before: Sun 12 Apr 2026 12:55:02 +0000 ROA not after: Sun 11 Apr 2027 13:00:02 +0000 asID: 149718 IP address blocks: 223.25.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.crl rsync://repo-rpki.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 23:45:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:af:89:5d:b7:67:de:24:a6:e6:5b:aa:45:98:ef:0e:d4:4d:5b:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787 Validity Not Before: Apr 12 12:55:02 2026 GMT Not After : Apr 11 13:00:02 2027 GMT Subject: CN=B0973D8A8753E6645D6566819853A04C6C49CA58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:75:f2:e5:c4:36:54:8b:15:1d:89:76:7f:80: e6:1f:e8:3b:a5:63:dc:5a:bf:94:ff:73:45:9f:9a: 66:0b:0b:8c:56:c3:2e:58:74:6e:bd:43:26:c8:61: 28:d6:2d:c1:c4:22:57:53:50:fd:c7:1c:38:a7:77: 03:a5:e7:5b:e1:54:11:a0:fd:21:2b:42:27:a8:fb: 21:80:68:50:b4:f7:f1:8c:fe:64:5d:45:9d:11:9a: b7:72:98:fc:4e:2f:d6:78:87:9a:0f:83:57:2c:8f: e0:24:02:a5:a0:14:d5:ef:a9:49:c4:f9:05:60:d3: 5f:1a:bc:48:38:d6:29:ca:7a:88:c4:84:b3:3a:7a: 2f:d4:35:7a:97:56:52:1d:fc:e1:66:0a:b9:a6:0f: ff:1f:1f:75:8d:05:56:aa:ac:a2:a3:1a:3b:7c:59: 6b:08:ee:91:20:a4:eb:6e:24:fb:76:d5:84:0d:fd: 22:f1:88:14:63:f1:8d:0f:0f:2f:94:14:7a:9d:83: c9:1d:42:bb:82:57:63:f8:51:8f:74:eb:0a:23:45: 09:5b:19:d7:04:70:3c:52:f1:71:79:c7:37:db:e8: 5b:44:ee:74:71:80:b3:a5:37:0b:2c:72:27:9b:59: 3d:80:84:18:e3:61:9a:b7:e6:a9:cf:c7:e9:16:bd: 34:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:97:3D:8A:87:53:E6:64:5D:65:66:81:98:53:A0:4C:6C:49:CA:58 X509v3 Authority Key Identifier: keyid:4B:F1:DC:C0:BC:C5:B1:A4:B6:BE:52:6A:75:FF:33:39:7F:C3:87:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/3232332e32352e3130392e302f32342d3234203d3e20313439373138.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 223.25.109.0/24 Signature Algorithm: sha256WithRSAEncryption 7a:93:4e:b0:9d:85:84:7c:d2:9d:70:b0:0e:f5:50:85:58:1c: 67:b0:ed:c9:bb:be:d8:4a:16:36:fe:4a:32:60:38:c9:35:ef: b3:67:d6:93:2a:7a:d1:f1:08:29:a2:94:da:b8:c2:84:06:36: 12:62:d4:51:6e:a2:21:cc:98:53:82:e3:6a:0f:07:ed:5a:2d: e5:fd:4c:56:7a:c8:ef:a4:93:8e:1d:80:53:1c:ab:12:11:68: ee:7b:68:c0:b2:3f:ca:06:a9:f6:aa:de:d4:0c:0b:6f:ae:68: 3f:45:db:77:7e:66:93:3c:d6:1f:70:4c:8a:87:55:2d:93:8f: ea:27:50:bb:7d:5b:bd:00:a9:f1:d3:e1:83:7d:31:1f:02:65: e6:b8:d5:22:05:70:0f:d1:ea:21:83:e2:d4:f9:04:af:e1:d0: 09:1b:0c:7a:cb:e3:30:c9:77:52:df:8e:25:74:08:30:b3:e2: fc:5c:2e:96:8a:c3:95:f4:cd:68:3c:bd:90:f5:6d:fd:5c:86: 18:db:d6:0b:65:00:9f:6b:80:ce:eb:d3:9c:05:5c:f6:81:db: 06:30:bc:03:57:56:c1:2b:07:4b:a4:6f:3e:30:5e:f9:24:92: 2b:95:27:5c:dc:27:85:34:d1:62:03:c0:b0:46:7f:eb:11:7f: ff:2d:5d:17 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUEK+JXbdn3iSm5luqRZjvDtRNW9wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEJGMURDQzBCQ0M1QjFBNEI2QkU1MjZBNzVGRjMzMzk3 RkMzODc4NzAeFw0yNjA0MTIxMjU1MDJaFw0yNzA0MTExMzAwMDJaMDMxMTAvBgNV BAMTKEIwOTczRDhBODc1M0U2NjQ1RDY1NjY4MTk4NTNBMDRDNkM0OUNBNTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8dfLlxDZUixUdiXZ/gOYf6Dul Y9xav5T/c0WfmmYLC4xWwy5YdG69QybIYSjWLcHEIldTUP3HHDindwOl51vhVBGg /SErQieo+yGAaFC09/GM/mRdRZ0RmrdymPxOL9Z4h5oPg1csj+AkAqWgFNXvqUnE +QVg018avEg41inKeojEhLM6ei/UNXqXVlId/OFmCrmmD/8fH3WNBVaqrKKjGjt8 WWsI7pEgpOtuJPt21YQN/SLxiBRj8Y0PDy+UFHqdg8kdQruCV2P4UY906wojRQlb GdcEcDxS8XF5xzfb6FtE7nRxgLOlNwssciebWT2AhBjjYZq35qnPx+kWvTTVAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUsJc9iodT5mRdZWaBmFOgTGxJylgwHwYDVR0j BBgwFoAUS/HcwLzFsaS2vlJqdf8zOX/Dh4cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZDI1NDQxOS01M2JlLTRhZDQtYmY3Zi0yOWY4OTEyNTIzZDAvMC80QkYxRENDMEJD QzVCMUE0QjZCRTUyNkE3NUZGMzMzOTdGQzM4Nzg3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEJGMURDQzBCQ0M1QjFBNEI2QkU1MjZBNzVGRjMzMzk3RkMz ODc4Ny5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzhkMjU0NDE5LTUzYmUtNGFkNC1i ZjdmLTI5Zjg5MTI1MjNkMC8wLzMyMzIzMzJlMzIzNTJlMzEzMDM5MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNDM5MzczMTM4LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA3xltMA0GCSqG SIb3DQEBCwUAA4IBAQB6k06wnYWEfNKdcLAO9VCFWBxnsO3Ju77YShY2/koyYDjJ Ne+zZ9aTKnrR8QgpopTauMKEBjYSYtRRbqIhzJhTguNqDwftWi3l/UxWesjvpJOO HYBTHKsSEWjue2jAsj/KBqn2qt7UDAtvrmg/Rdt3fmaTPNYfcEyKh1Utk4/qJ1C7 fVu9AKnx0+GDfTEfAmXmuNUiBXAP0eohg+LU+QSv4dAJGwx6y+MwyXdS344ldAgw s+L8XC6WisOV9M1oPL2Q9W39XIYY29YLZQCfa4DO69OcBVz2gdsGMLwDV1bBKwdL pG8+MF75JJIrlSdc3CeFNNFiA8CwRn/rEX//LV0X -----END CERTIFICATE-----Generated at Fri Apr 17 23:44:14 2026 by rpki-client