$ rpki-client -vvf repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3230322e35312e36302e302f32322d3232203d3e20323031333431.roa File: 3230322e35312e36302e302f32322d3232203d3e20323031333431.roa (raw, json) Hash identifier: CxJ4hxnplLzbB6pwhFxT3HS+r/REisJiHUMYV4z0aDo= Subject key identifier: 60:55:82:2F:8A:5F:91:D0:E4:B1:77:98:3E:B7:DB:65:C9:7D:26:23 Certificate issuer: /CN=3E6B5AF231FD809FBC8E599215B14D357AC66A8C Certificate serial: 3B56B7A08CF1547B03BB4045627570E5DD027548 Authority key identifier: 3E:6B:5A:F2:31:FD:80:9F:BC:8E:59:92:15:B1:4D:35:7A:C6:6A:8C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3230322e35312e36302e302f32322d3232203d3e20323031333431.roa Signing time: Wed 25 Feb 2026 07:03:47 +0000 ROA not before: Wed 25 Feb 2026 06:58:47 +0000 ROA not after: Wed 24 Feb 2027 07:03:47 +0000 asID: 201341 IP address blocks: 202.51.60.0/22 maxlen: 22 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.crl rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 21:17:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:56:b7:a0:8c:f1:54:7b:03:bb:40:45:62:75:70:e5:dd:02:75:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E6B5AF231FD809FBC8E599215B14D357AC66A8C Validity Not Before: Feb 25 06:58:47 2026 GMT Not After : Feb 24 07:03:47 2027 GMT Subject: CN=6055822F8A5F91D0E4B177983EB7DB65C97D2623 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:2b:40:0b:82:6b:4e:11:c1:ce:13:b2:b3:d7: 36:53:83:a6:51:a9:bf:f5:25:c4:f5:87:34:a6:90: 87:38:97:14:c8:1d:e0:5b:9b:87:80:bf:36:13:55: 51:01:ab:66:3a:ea:f8:03:0b:99:b5:ba:e7:53:4f: fd:2d:df:e9:26:83:9f:59:2b:11:8b:ad:50:d6:16: e0:09:d4:d6:ad:88:44:dd:85:6d:bb:72:26:c9:b4: 35:c9:18:f4:db:0e:75:85:99:45:f8:5a:ed:30:9a: 10:7a:3f:cb:b4:6f:59:d1:f4:23:74:36:12:a9:31: a7:1b:77:0e:11:c6:86:ef:4b:18:ce:42:cc:7d:fb: 9e:eb:86:60:97:fd:51:64:d5:f2:4f:f5:1c:3d:51: 21:4e:12:ae:2e:be:fb:e9:30:09:29:93:73:c6:92: 77:17:8c:94:30:0a:60:13:db:de:3d:f7:bd:7b:11: f1:ee:42:ff:9e:be:a9:3a:40:b6:d0:50:c1:0b:26: c4:7f:6c:f6:c5:ae:89:bd:7c:a9:b4:2d:59:98:46: 55:a9:a3:d6:11:30:94:a4:4f:3e:18:13:9f:40:8e: e0:70:74:08:d2:72:2b:3e:aa:ee:db:d7:72:d8:af: df:a1:92:22:0a:14:86:e2:23:09:48:30:dd:f6:75: 6b:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:55:82:2F:8A:5F:91:D0:E4:B1:77:98:3E:B7:DB:65:C9:7D:26:23 X509v3 Authority Key Identifier: keyid:3E:6B:5A:F2:31:FD:80:9F:BC:8E:59:92:15:B1:4D:35:7A:C6:6A:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3230322e35312e36302e302f32322d3232203d3e20323031333431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.51.60.0/22 Signature Algorithm: sha256WithRSAEncryption a0:9c:41:e6:30:a3:4c:62:f1:62:a4:04:87:e0:c9:59:d5:0e: 21:40:0f:3a:d4:6c:34:f2:99:49:1a:f8:e4:8f:87:8f:ad:63: 2a:3a:dc:7f:2c:ad:d3:cc:b0:d0:e5:b2:fe:76:c2:bd:27:fe: 6b:ad:df:db:c9:2e:81:43:00:a5:1b:0a:bd:a5:ea:12:7c:b2: 3e:2a:10:fe:f4:ab:e2:41:92:cc:bf:58:21:2c:0b:84:6d:29: 39:2e:5a:35:29:05:14:56:01:6a:68:c0:ab:10:0a:92:e8:8d: 2c:fe:e9:a0:9b:d3:ce:e6:90:8e:b6:21:7c:da:42:e9:c0:74: 85:1c:28:82:ed:8f:a5:b5:5f:de:f4:12:64:72:e0:14:7a:84: 7a:2f:6c:61:d2:40:67:f3:b1:8d:26:cd:11:c9:4d:f7:38:cc: 02:28:d3:52:f5:ac:b6:3e:cd:75:c2:fd:82:18:16:15:88:8a: f9:70:93:eb:24:90:18:86:d1:7b:0e:8b:1b:37:1a:89:d8:d2: c0:80:1e:76:bf:8f:4e:64:67:cc:8c:19:a6:e5:ee:cb:3a:a3: 18:00:42:6d:13:0a:4f:65:30:d6:8e:1c:4a:15:80:e0:cf:bd: a2:56:9b:d4:b5:f3:a3:2d:a8:11:73:e2:5b:c4:47:5b:03:78: 64:fb:10:99 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUO1a3oIzxVHsDu0BFYnVw5d0CdUgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0U2QjVBRjIzMUZEODA5RkJDOEU1OTkyMTVCMTREMzU3 QUM2NkE4QzAeFw0yNjAyMjUwNjU4NDdaFw0yNzAyMjQwNzAzNDdaMDMxMTAvBgNV BAMTKDYwNTU4MjJGOEE1RjkxRDBFNEIxNzc5ODNFQjdEQjY1Qzk3RDI2MjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8K0ALgmtOEcHOE7Kz1zZTg6ZR qb/1JcT1hzSmkIc4lxTIHeBbm4eAvzYTVVEBq2Y66vgDC5m1uudTT/0t3+kmg59Z KxGLrVDWFuAJ1NatiETdhW27cibJtDXJGPTbDnWFmUX4Wu0wmhB6P8u0b1nR9CN0 NhKpMacbdw4RxobvSxjOQsx9+57rhmCX/VFk1fJP9Rw9USFOEq4uvvvpMAkpk3PG kncXjJQwCmAT29499717EfHuQv+evqk6QLbQUMELJsR/bPbFrom9fKm0LVmYRlWp o9YRMJSkTz4YE59AjuBwdAjScis+qu7b13LYr9+hkiIKFIbiIwlIMN32dWs/AgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUYFWCL4pfkdDksXeYPrfbZcl9JiMwHwYDVR0j BBgwFoAUPmta8jH9gJ+8jlmSFbFNNXrGaowwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZTU0MDE2NC0zZDQ2LTQ3OTQtYmY1NS1iNmIxMzRkOWFiMTMvMC8zRTZCNUFGMjMx RkQ4MDlGQkM4RTU5OTIxNUIxNEQzNTdBQzY2QThDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0U2QjVBRjIzMUZEODA5RkJDOEU1OTkyMTVCMTREMzU3QUM2 NkE4Qy5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2JlNTQwMTY0LTNkNDYtNDc5NC1i ZjU1LWI2YjEzNGQ5YWIxMy8wLzMyMzAzMjJlMzUzMTJlMzYzMDJlMzAyZjMyMzIy ZDMyMzIyMDNkM2UyMDMyMzAzMTMzMzQzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAsozPDANBgkqhkiG 9w0BAQsFAAOCAQEAoJxB5jCjTGLxYqQEh+DJWdUOIUAPOtRsNPKZSRr45I+Hj61j Kjrcfyyt08yw0OWy/nbCvSf+a63f28kugUMApRsKvaXqEnyyPioQ/vSr4kGSzL9Y ISwLhG0pOS5aNSkFFFYBamjAqxAKkuiNLP7poJvTzuaQjrYhfNpC6cB0hRwogu2P pbVf3vQSZHLgFHqEei9sYdJAZ/OxjSbNEclN9zjMAijTUvWstj7NdcL9ghgWFYiK +XCT6ySQGIbRew6LGzcaidjSwIAedr+PTmRnzIwZpuXuyzqjGABCbRMKT2Uw1o4c ShWA4M+9olab1LXzoy2oEXPiW8RHWwN4ZPsQmQ== -----END CERTIFICATE-----Generated at Mon Mar 2 17:30:13 2026 by rpki-client