$ rpki-client -vvf repo-rpki.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/3232332e32352e3131302e302f32342d3234203d3e20313336383733.roa File: 3232332e32352e3131302e302f32342d3234203d3e20313336383733.roa (raw, json) Hash identifier: zYSXmMIYnVcnyUqfnxKNKO1jJpruvRifzdtqmQbpII4= Subject key identifier: BE:58:9B:13:48:7F:3D:8B:D9:CE:E3:D7:BC:EB:6A:59:28:91:64:27 Certificate issuer: /CN=4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787 Certificate serial: 3895EBAD44394E420CF8D87E687BD95B754A13CC Authority key identifier: 4B:F1:DC:C0:BC:C5:B1:A4:B6:BE:52:6A:75:FF:33:39:7F:C3:87:87 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/3232332e32352e3131302e302f32342d3234203d3e20313336383733.roa Signing time: Mon 09 Feb 2026 05:00:02 +0000 ROA not before: Mon 09 Feb 2026 04:55:02 +0000 ROA not after: Mon 08 Feb 2027 05:00:02 +0000 asID: 136873 IP address blocks: 223.25.110.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.crl rsync://repo-rpki.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 14:30:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:95:eb:ad:44:39:4e:42:0c:f8:d8:7e:68:7b:d9:5b:75:4a:13:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787 Validity Not Before: Feb 9 04:55:02 2026 GMT Not After : Feb 8 05:00:02 2027 GMT Subject: CN=BE589B13487F3D8BD9CEE3D7BCEB6A5928916427 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:7f:03:6d:9e:cc:40:1e:fa:56:43:6c:ab:2c: 8b:fa:dd:71:85:8d:df:ac:e9:51:ef:e5:17:2b:13: 62:85:31:18:5d:cf:f8:02:9f:2a:62:c0:9e:07:cd: 7b:9b:9e:dd:73:0b:d9:4c:68:5b:3d:0f:a1:06:15: 52:76:0b:59:f1:4e:b7:15:5f:17:58:26:fb:8a:d0: 6e:8d:5b:82:c1:8e:6e:24:1d:9d:9b:fe:ea:e5:e9: 4a:e2:e9:3c:c4:90:02:49:d9:29:87:14:33:1a:5e: 1b:13:15:d9:68:b2:8e:5d:e0:b8:3b:15:60:0e:c1: d8:94:00:88:ce:21:b7:54:53:50:72:5d:49:80:bc: 6b:0c:40:b1:17:e2:3c:5a:11:18:33:f7:59:ef:e8: e9:96:1c:d2:c3:dd:b4:42:2d:97:d8:0c:53:eb:d7: 6b:d9:b5:32:c5:79:99:87:12:eb:bd:2d:67:7a:a3: 98:f4:47:d5:7a:4b:67:f7:16:bc:80:78:c0:bc:41: c5:08:48:40:c2:02:85:15:5f:ce:f4:21:48:8d:48: 7d:20:bf:f3:57:ba:21:f0:c6:82:18:f6:b3:d7:f1: 93:85:21:d5:fc:30:34:ff:55:47:32:85:ce:4f:51: 45:bd:9d:fa:b0:83:37:f3:2b:41:88:2a:2d:52:25: f0:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:58:9B:13:48:7F:3D:8B:D9:CE:E3:D7:BC:EB:6A:59:28:91:64:27 X509v3 Authority Key Identifier: keyid:4B:F1:DC:C0:BC:C5:B1:A4:B6:BE:52:6A:75:FF:33:39:7F:C3:87:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/3232332e32352e3131302e302f32342d3234203d3e20313336383733.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 223.25.110.0/24 Signature Algorithm: sha256WithRSAEncryption 75:39:8e:c2:c3:fb:75:94:c5:f9:2f:40:c9:2c:13:a6:ba:b3: 7e:17:cb:64:4b:1d:60:5c:d8:a3:62:aa:a5:55:be:bd:4b:a1: 62:cc:5b:52:dd:24:ce:70:d1:16:e0:5a:14:69:a8:29:b9:05: b4:b7:4f:a3:9b:5a:ef:7a:4b:c1:9f:25:7e:8e:4a:85:58:ca: 5b:f1:f5:eb:8b:39:79:7c:39:c3:51:e6:cb:6d:f8:34:dc:0d: 75:8e:46:9c:17:6c:6e:23:bf:b4:a5:78:d2:de:19:36:20:99: 6a:7a:c3:1f:9b:7f:dd:20:d9:d0:83:9b:ce:14:03:3a:55:60: bf:c3:e1:42:8e:ef:85:b8:7d:a0:e8:15:8e:c1:1d:57:4b:4b: 9d:2c:39:ee:c9:4f:7f:10:bc:86:86:c3:2a:b9:29:cd:99:b6: 90:58:c6:f9:76:9b:10:8a:b9:39:04:7b:12:5a:ad:6a:f6:b9: c0:f2:ff:99:3a:1d:09:83:e2:5e:4d:0a:ce:07:1b:59:1c:1c: d0:1a:ff:ee:a9:b9:6e:d6:4a:da:ee:17:73:27:b8:fd:2e:c8: 26:80:45:4a:fa:d3:33:75:ca:c0:69:a1:de:2d:7b:18:3b:58: c4:31:86:0b:04:4f:fe:ff:6f:7d:c1:19:68:bf:a1:c4:e0:92: 56:2f:bc:30 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUOJXrrUQ5TkIM+Nh+aHvZW3VKE8wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEJGMURDQzBCQ0M1QjFBNEI2QkU1MjZBNzVGRjMzMzk3 RkMzODc4NzAeFw0yNjAyMDkwNDU1MDJaFw0yNzAyMDgwNTAwMDJaMDMxMTAvBgNV BAMTKEJFNTg5QjEzNDg3RjNEOEJEOUNFRTNEN0JDRUI2QTU5Mjg5MTY0MjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNfwNtnsxAHvpWQ2yrLIv63XGF jd+s6VHv5RcrE2KFMRhdz/gCnypiwJ4HzXubnt1zC9lMaFs9D6EGFVJ2C1nxTrcV XxdYJvuK0G6NW4LBjm4kHZ2b/url6Uri6TzEkAJJ2SmHFDMaXhsTFdloso5d4Lg7 FWAOwdiUAIjOIbdUU1ByXUmAvGsMQLEX4jxaERgz91nv6OmWHNLD3bRCLZfYDFPr 12vZtTLFeZmHEuu9LWd6o5j0R9V6S2f3FryAeMC8QcUISEDCAoUVX870IUiNSH0g v/NXuiHwxoIY9rPX8ZOFIdX8MDT/VUcyhc5PUUW9nfqwgzfzK0GIKi1SJfDdAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUvlibE0h/PYvZzuPXvOtqWSiRZCcwHwYDVR0j BBgwFoAUS/HcwLzFsaS2vlJqdf8zOX/Dh4cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZDI1NDQxOS01M2JlLTRhZDQtYmY3Zi0yOWY4OTEyNTIzZDAvMC80QkYxRENDMEJD QzVCMUE0QjZCRTUyNkE3NUZGMzMzOTdGQzM4Nzg3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEJGMURDQzBCQ0M1QjFBNEI2QkU1MjZBNzVGRjMzMzk3RkMz ODc4Ny5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzhkMjU0NDE5LTUzYmUtNGFkNC1i ZjdmLTI5Zjg5MTI1MjNkMC8wLzMyMzIzMzJlMzIzNTJlMzEzMTMwMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzM2MzgzNzMzLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA3xluMA0GCSqG SIb3DQEBCwUAA4IBAQB1OY7Cw/t1lMX5L0DJLBOmurN+F8tkSx1gXNijYqqlVb69 S6FizFtS3STOcNEW4FoUaagpuQW0t0+jm1rvekvBnyV+jkqFWMpb8fXrizl5fDnD UebLbfg03A11jkacF2xuI7+0pXjS3hk2IJlqesMfm3/dINnQg5vOFAM6VWC/w+FC ju+FuH2g6BWOwR1XS0udLDnuyU9/ELyGhsMquSnNmbaQWMb5dpsQirk5BHsSWq1q 9rnA8v+ZOh0Jg+JeTQrOBxtZHBzQGv/uqblu1kra7hdzJ7j9LsgmgEVK+tMzdcrA aaHeLXsYO1jEMYYLBE/+/299wRlov6HE4JJWL7ww -----END CERTIFICATE-----Generated at Mon Mar 2 17:16:17 2026 by rpki-client