$ rpki-client -vvf repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/3230322e3136392e3234382e302f32342d3234203d3e20313432333834.roa File: 3230322e3136392e3234382e302f32342d3234203d3e20313432333834.roa (raw, json) Hash identifier: MR5apkRFfEqJsMkq5oipA9pEvq1JhLUYoPwVR2eYhw4= Subject key identifier: 4C:5F:09:25:C5:C2:01:F9:F8:96:B2:46:6E:71:53:B8:36:49:64:77 Certificate issuer: /CN=342061B97FF97E5180511F38B0A0DCBAB1CE0325 Certificate serial: 5E1A035A5BE742A81503EF685A1021D955BF018B Authority key identifier: 34:20:61:B9:7F:F9:7E:51:80:51:1F:38:B0:A0:DC:BA:B1:CE:03:25 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/342061B97FF97E5180511F38B0A0DCBAB1CE0325.cer Subject info access: rsync://repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/3230322e3136392e3234382e302f32342d3234203d3e20313432333834.roa Signing time: Sat 11 Apr 2026 03:00:00 +0000 ROA not before: Sat 11 Apr 2026 02:55:00 +0000 ROA not after: Sat 10 Apr 2027 03:00:00 +0000 asID: 142384 IP address blocks: 202.169.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/342061B97FF97E5180511F38B0A0DCBAB1CE0325.crl rsync://repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/342061B97FF97E5180511F38B0A0DCBAB1CE0325.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/342061B97FF97E5180511F38B0A0DCBAB1CE0325.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 16:12:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:1a:03:5a:5b:e7:42:a8:15:03:ef:68:5a:10:21:d9:55:bf:01:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=342061B97FF97E5180511F38B0A0DCBAB1CE0325 Validity Not Before: Apr 11 02:55:00 2026 GMT Not After : Apr 10 03:00:00 2027 GMT Subject: CN=4C5F0925C5C201F9F896B2466E7153B836496477 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:71:22:a2:82:a1:b5:07:9c:31:66:e8:b1:f8: 03:6e:a3:be:5a:be:a9:c3:80:b5:e3:29:7a:d0:77: 9e:32:59:32:09:51:6a:ee:21:a3:34:f0:b9:82:79: b7:fd:17:90:ef:82:6e:ce:30:35:7a:6e:30:87:96: 93:7a:d3:ba:24:aa:90:10:bc:ee:e2:a1:53:cc:99: 1e:7d:93:41:76:a3:b6:d4:06:20:22:6d:9c:ef:4b: 99:0e:08:28:7b:0a:bc:52:1e:71:87:0f:93:f6:88: b7:19:44:64:ba:ff:96:b9:1a:cd:c0:8f:53:21:40: 07:9b:ed:b2:f7:71:46:37:75:da:07:44:8a:96:d3: 75:89:de:ae:4e:b0:08:6d:67:92:31:5e:34:af:eb: 78:00:39:58:a4:e0:b5:08:96:6a:a4:ed:27:04:ed: 78:13:c2:22:da:b7:85:21:a4:27:a8:e2:c5:2f:c9: a1:14:26:b1:59:02:1c:d7:19:33:58:d4:ae:f6:43: 94:f7:73:b3:40:f6:8e:c5:80:59:e7:68:e9:b1:59: 2b:62:0f:da:2f:5d:a4:59:5c:6a:19:1e:20:90:b9: e2:1e:07:48:f6:b6:ef:c0:8a:29:f3:50:2a:63:39: 13:87:6c:44:be:9d:81:74:aa:30:34:5b:d5:c3:50: 75:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:5F:09:25:C5:C2:01:F9:F8:96:B2:46:6E:71:53:B8:36:49:64:77 X509v3 Authority Key Identifier: keyid:34:20:61:B9:7F:F9:7E:51:80:51:1F:38:B0:A0:DC:BA:B1:CE:03:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/342061B97FF97E5180511F38B0A0DCBAB1CE0325.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/342061B97FF97E5180511F38B0A0DCBAB1CE0325.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/3230322e3136392e3234382e302f32342d3234203d3e20313432333834.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.169.248.0/24 Signature Algorithm: sha256WithRSAEncryption 93:e5:a4:cf:44:96:d6:dd:53:de:9c:0b:bd:11:ac:b4:98:7e: 18:90:4d:32:4a:2b:c4:2c:d8:23:c8:1c:77:aa:c4:26:eb:d0: e0:f4:11:7e:64:e8:e0:aa:9a:b0:69:f2:3d:59:da:24:fc:3f: 25:c6:50:47:4d:72:0c:f4:e7:2f:48:84:0a:0c:9c:65:da:f5: b1:9a:6d:2c:a1:4f:75:97:a7:f0:16:d7:15:da:80:10:31:3e: 0e:87:47:b5:dd:3c:99:ce:cf:ea:69:95:10:ac:39:f8:d8:74: 47:88:f4:91:2a:13:52:17:6c:2c:3d:0a:62:97:6d:1e:22:31: 8c:1f:91:92:a5:68:b3:26:43:77:37:5c:60:fd:1d:ab:c6:07: 43:eb:54:6d:bc:82:03:cd:a8:03:f6:5a:0c:90:d2:2b:41:dc: 0b:cb:9f:42:fc:2d:7c:44:03:d0:10:39:27:42:87:ae:8e:3e: 93:58:78:3d:40:f4:be:63:ad:a1:99:40:b9:57:b5:95:40:b1: d7:5f:90:ec:88:60:31:e9:95:37:37:db:90:40:df:4c:25:6c: 65:f7:12:5f:08:e9:6b:e4:4e:21:af:9d:fa:a5:c7:8d:e3:78: 9c:59:0c:aa:97:e8:64:54:54:78:34:59:08:ea:95:f2:5e:c1: 5d:27:a7:4d -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUXhoDWlvnQqgVA+9oWhAh2VW/AYswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzQyMDYxQjk3RkY5N0U1MTgwNTExRjM4QjBBMERDQkFC MUNFMDMyNTAeFw0yNjA0MTEwMjU1MDBaFw0yNzA0MTAwMzAwMDBaMDMxMTAvBgNV BAMTKDRDNUYwOTI1QzVDMjAxRjlGODk2QjI0NjZFNzE1M0I4MzY0OTY0NzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRcSKigqG1B5wxZuix+ANuo75a vqnDgLXjKXrQd54yWTIJUWruIaM08LmCebf9F5Dvgm7OMDV6bjCHlpN607okqpAQ vO7ioVPMmR59k0F2o7bUBiAibZzvS5kOCCh7CrxSHnGHD5P2iLcZRGS6/5a5Gs3A j1MhQAeb7bL3cUY3ddoHRIqW03WJ3q5OsAhtZ5IxXjSv63gAOVik4LUIlmqk7ScE 7XgTwiLat4UhpCeo4sUvyaEUJrFZAhzXGTNY1K72Q5T3c7NA9o7FgFnnaOmxWSti D9ovXaRZXGoZHiCQueIeB0j2tu/AiinzUCpjOROHbES+nYF0qjA0W9XDUHXfAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUTF8JJcXCAfn4lrJGbnFTuDZJZHcwHwYDVR0j BBgwFoAUNCBhuX/5flGAUR84sKDcurHOAyUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h Y2I5YTRiOS00YWUzLTQ2N2EtYjkxOS00MTBlMTQyYjY3OWYvMC8zNDIwNjFCOTdG Rjk3RTUxODA1MTFGMzhCMEEwRENCQUIxQ0UwMzI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzQyMDYxQjk3RkY5N0U1MTgwNTExRjM4QjBBMERDQkFCMUNF MDMyNS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2FjYjlhNGI5LTRhZTMtNDY3YS1i OTE5LTQxMGUxNDJiNjc5Zi8wLzMyMzAzMjJlMzEzNjM5MmUzMjM0MzgyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzIzMzM4MzQucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADKqfgwDQYJ KoZIhvcNAQELBQADggEBAJPlpM9EltbdU96cC70RrLSYfhiQTTJKK8Qs2CPIHHeq xCbr0OD0EX5k6OCqmrBp8j1Z2iT8PyXGUEdNcgz05y9IhAoMnGXa9bGabSyhT3WX p/AW1xXagBAxPg6HR7XdPJnOz+pplRCsOfjYdEeI9JEqE1IXbCw9CmKXbR4iMYwf kZKlaLMmQ3c3XGD9HavGB0PrVG28ggPNqAP2WgyQ0itB3AvLn0L8LXxEA9AQOSdC h66OPpNYeD1A9L5jraGZQLlXtZVAsddfkOyIYDHplTc325BA30wlbGX3El8I6Wvk TiGvnfqlx43jeJxZDKqX6GRUVHg0WQjqlfJewV0np00= -----END CERTIFICATE-----Generated at Sat Apr 18 00:37:13 2026 by rpki-client