$ rpki-client -vvf repo-rpki.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/3230322e35312e32312e302f32342d3234203d3e20313439343039.roa File: 3230322e35312e32312e302f32342d3234203d3e20313439343039.roa (raw, json) Hash identifier: x7A5/ydvWW7sOuPV1cJAWpXthBYyUBZokt+o03RLsFU= Subject key identifier: 14:AD:90:0F:F9:74:9F:59:64:29:A0:DC:18:8E:20:59:B8:AE:16:0F Certificate issuer: /CN=9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0 Certificate serial: 56A9AE2E6C6654A4D6B6E947DD9626989EEE60EF Authority key identifier: 9E:6A:67:D5:B9:D7:25:C1:F4:09:A9:FB:3B:F3:5A:07:1A:B4:20:A0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/3230322e35312e32312e302f32342d3234203d3e20313439343039.roa Signing time: Sun 01 Mar 2026 14:00:00 +0000 ROA not before: Sun 01 Mar 2026 13:55:00 +0000 ROA not after: Sun 28 Feb 2027 14:00:00 +0000 asID: 149409 IP address blocks: 202.51.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.crl rsync://repo-rpki.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 15:23:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:a9:ae:2e:6c:66:54:a4:d6:b6:e9:47:dd:96:26:98:9e:ee:60:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0 Validity Not Before: Mar 1 13:55:00 2026 GMT Not After : Feb 28 14:00:00 2027 GMT Subject: CN=14AD900FF9749F596429A0DC188E2059B8AE160F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:86:af:3b:f6:1b:ef:b2:b6:b5:de:13:29:ea: db:19:e1:e4:18:3f:8b:e5:97:ef:80:7c:28:5d:c0: bd:f5:28:e4:ff:c5:cd:82:08:e2:8e:f0:12:cf:0e: 9b:19:68:1b:19:b6:dd:da:8f:fb:33:3e:46:84:6c: a2:50:14:45:e7:46:9e:8d:79:77:c8:72:30:3e:d8: 58:b7:c5:57:7f:33:26:34:cc:f9:07:d3:2a:43:1f: 03:d6:41:d1:f3:2b:63:79:bb:f9:f1:4b:33:7d:33: ba:b0:6b:27:a7:b7:e4:f0:89:01:a6:8b:7e:3e:dd: 30:06:cd:97:9b:44:57:9e:6d:96:26:84:aa:b7:fd: b1:58:d9:4b:87:d5:33:28:68:e4:6e:e5:c2:cf:dc: f8:a6:82:92:f1:b1:0a:f0:9e:2d:5f:5b:f1:86:31: 3a:8e:3c:5d:0b:42:ed:76:d8:ea:d2:ae:06:00:e0: b3:6d:d0:f6:ee:80:95:39:f6:7a:80:09:16:9d:ec: b3:f7:7b:4d:e9:bb:51:97:a7:22:cb:64:fe:26:a1: 83:dc:8e:3c:8e:65:6e:23:bb:cb:0b:27:1d:45:6c: e3:24:77:13:78:fd:63:41:2f:0d:a5:f6:c3:f8:18: 04:04:b3:98:d3:b5:9a:4d:23:16:8a:78:06:05:cc: c3:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:AD:90:0F:F9:74:9F:59:64:29:A0:DC:18:8E:20:59:B8:AE:16:0F X509v3 Authority Key Identifier: keyid:9E:6A:67:D5:B9:D7:25:C1:F4:09:A9:FB:3B:F3:5A:07:1A:B4:20:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/3230322e35312e32312e302f32342d3234203d3e20313439343039.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.51.21.0/24 Signature Algorithm: sha256WithRSAEncryption 18:50:e2:e5:92:ab:1c:a9:b4:13:dd:32:b9:f1:8b:ed:1e:fc: 49:4a:3e:50:93:08:94:24:93:0d:69:c1:01:76:b5:49:26:ab: 57:3f:d0:e8:7c:3f:44:41:38:8d:0e:24:aa:19:e9:aa:e7:eb: e4:a3:64:5a:d9:dd:5d:08:c8:6e:27:c8:9e:02:8c:ba:f8:d9: 1a:83:55:63:5a:c4:cf:4a:97:e5:5f:39:20:55:8f:9f:e1:b3: 95:86:37:5e:d5:14:23:bb:2d:65:2b:de:ed:a6:c6:e1:03:d1: 6b:ae:0f:02:19:bc:fc:ca:04:98:43:3f:58:72:d4:a5:ed:69: 9a:40:61:e6:e9:df:63:c8:06:49:4b:81:20:3a:0d:9b:4c:0d: 6b:d0:c5:75:d4:fc:db:30:4d:7e:ba:c4:b0:d9:d1:40:ab:85: 3f:a3:06:d0:14:e4:ba:32:98:22:17:de:50:3e:4e:60:b7:37: 6e:f5:5a:54:bb:f9:3c:9f:7e:cc:23:32:b9:c8:06:4d:a5:41: 8b:ca:0d:47:29:43:7e:09:74:19:33:9d:cd:09:9b:02:16:59: b8:d0:09:06:8c:38:27:f9:7a:05:5c:45:36:e7:ff:55:3f:ad: e7:e0:2e:6b:8f:70:6c:04:09:ef:31:42:48:63:43:c2:0a:17: 64:ce:87:40 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUVqmuLmxmVKTWtulH3ZYmmJ7uYO8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUU2QTY3RDVCOUQ3MjVDMUY0MDlBOUZCM0JGMzVBMDcx QUI0MjBBMDAeFw0yNjAzMDExMzU1MDBaFw0yNzAyMjgxNDAwMDBaMDMxMTAvBgNV BAMTKDE0QUQ5MDBGRjk3NDlGNTk2NDI5QTBEQzE4OEUyMDU5QjhBRTE2MEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQhq879hvvsra13hMp6tsZ4eQY P4vll++AfChdwL31KOT/xc2CCOKO8BLPDpsZaBsZtt3aj/szPkaEbKJQFEXnRp6N eXfIcjA+2Fi3xVd/MyY0zPkH0ypDHwPWQdHzK2N5u/nxSzN9M7qwayent+TwiQGm i34+3TAGzZebRFeebZYmhKq3/bFY2UuH1TMoaORu5cLP3PimgpLxsQrwni1fW/GG MTqOPF0LQu122OrSrgYA4LNt0PbugJU59nqACRad7LP3e03pu1GXpyLLZP4moYPc jjyOZW4ju8sLJx1FbOMkdxN4/WNBLw2l9sP4GAQEs5jTtZpNIxaKeAYFzMNTAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUFK2QD/l0n1lkKaDcGI4gWbiuFg8wHwYDVR0j BBgwFoAUnmpn1bnXJcH0Can7O/NaBxq0IKAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 OTRlNmIyZC0zZGRiLTQ2ZWItODNlZi1jOTliMjAwMzc4M2YvMC85RTZBNjdENUI5 RDcyNUMxRjQwOUE5RkIzQkYzNUEwNzFBQjQyMEEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUU2QTY3RDVCOUQ3MjVDMUY0MDlBOUZCM0JGMzVBMDcxQUI0 MjBBMC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzk5NGU2YjJkLTNkZGItNDZlYi04 M2VmLWM5OWIyMDAzNzgzZi8wLzMyMzAzMjJlMzUzMTJlMzIzMTJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMxMzQzOTM0MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMozFTANBgkqhkiG 9w0BAQsFAAOCAQEAGFDi5ZKrHKm0E90yufGL7R78SUo+UJMIlCSTDWnBAXa1SSar Vz/Q6Hw/REE4jQ4kqhnpqufr5KNkWtndXQjIbifIngKMuvjZGoNVY1rEz0qX5V85 IFWPn+GzlYY3XtUUI7stZSve7abG4QPRa64PAhm8/MoEmEM/WHLUpe1pmkBh5unf Y8gGSUuBIDoNm0wNa9DFddT82zBNfrrEsNnRQKuFP6MG0BTkujKYIhfeUD5OYLc3 bvVaVLv5PJ9+zCMyucgGTaVBi8oNRylDfgl0GTOdzQmbAhZZuNAJBow4J/l6BVxF Nuf/VT+t5+Aua49wbAQJ7zFCSGNDwgoXZM6HQA== -----END CERTIFICATE-----Generated at Mon Mar 2 17:10:52 2026 by rpki-client