$ rpki-client -vvf repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3230322e35312e36302e302f32332d3233203d3e20323031333431.roa File: 3230322e35312e36302e302f32332d3233203d3e20323031333431.roa (raw, json) Hash identifier: YLdmpoGwseRdvkERTvIA0a5PWJe/uQGzq/1tFv4WuUc= Subject key identifier: 71:76:AD:C5:BF:74:B5:17:13:CE:29:5A:28:0A:25:80:13:E1:FA:B7 Certificate issuer: /CN=3E6B5AF231FD809FBC8E599215B14D357AC66A8C Certificate serial: 1A8021C11B5A948A34D9E3FBDD2EB883B58F28DD Authority key identifier: 3E:6B:5A:F2:31:FD:80:9F:BC:8E:59:92:15:B1:4D:35:7A:C6:6A:8C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3230322e35312e36302e302f32332d3233203d3e20323031333431.roa Signing time: Wed 25 Feb 2026 07:03:47 +0000 ROA not before: Wed 25 Feb 2026 06:58:47 +0000 ROA not after: Wed 24 Feb 2027 07:03:47 +0000 asID: 201341 IP address blocks: 202.51.60.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.crl rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 21:17:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:80:21:c1:1b:5a:94:8a:34:d9:e3:fb:dd:2e:b8:83:b5:8f:28:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E6B5AF231FD809FBC8E599215B14D357AC66A8C Validity Not Before: Feb 25 06:58:47 2026 GMT Not After : Feb 24 07:03:47 2027 GMT Subject: CN=7176ADC5BF74B51713CE295A280A258013E1FAB7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:53:18:18:2c:d4:ac:53:e7:eb:1e:88:97:25: 95:b6:81:ee:b7:de:54:a0:47:f6:20:1c:a3:a7:ec: a6:77:0b:b4:54:9e:0f:01:d8:5b:b4:14:0b:b3:82: 87:22:be:d8:56:b0:5e:18:f6:10:30:29:60:fd:20: 17:dd:ef:7d:05:68:bf:42:cc:b1:94:38:69:bc:95: eb:7f:f0:f9:43:e0:a9:00:42:9c:bf:35:fd:f5:ba: e5:d3:fa:68:ea:6e:e4:ab:c7:8c:fc:35:9c:13:f0: 79:ee:77:9d:e5:dd:5b:92:01:3e:8c:ee:28:a6:81: 60:dc:23:bb:e0:14:64:06:d9:4b:cc:08:9b:19:ae: 07:f9:4c:09:c9:ad:c0:79:c1:0b:90:26:f7:e8:7a: a9:f7:f9:3a:03:2a:27:13:fd:08:bf:c0:90:ff:23: 40:ad:84:f2:53:be:dc:03:84:bb:14:ed:7d:ab:40: 4b:bb:6b:bc:c5:10:2e:a0:4b:3d:0e:2a:2d:3e:7c: 73:e3:cb:75:85:5c:7b:b6:1c:4c:00:50:37:e9:8f: 58:da:79:e2:0f:e2:69:df:2c:6d:87:75:f5:e0:78: 10:3c:f9:b3:0d:0f:e1:73:f5:92:4c:9f:8a:ae:c5: 7e:bf:25:5d:0b:87:8a:26:73:53:db:96:fd:a6:0b: 90:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:76:AD:C5:BF:74:B5:17:13:CE:29:5A:28:0A:25:80:13:E1:FA:B7 X509v3 Authority Key Identifier: keyid:3E:6B:5A:F2:31:FD:80:9F:BC:8E:59:92:15:B1:4D:35:7A:C6:6A:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3230322e35312e36302e302f32332d3233203d3e20323031333431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.51.60.0/23 Signature Algorithm: sha256WithRSAEncryption b2:64:7c:27:96:05:59:35:cd:ca:39:07:30:aa:70:df:fd:d2: 34:87:53:39:e3:0d:81:aa:67:28:f2:d7:fb:04:6f:b3:ea:c8: 46:da:78:b2:50:50:2e:25:6a:e6:dd:f0:d7:19:79:3b:8a:02: 6a:d0:d2:9d:de:4a:a6:95:f5:4a:4c:1b:91:8a:73:3f:fa:d7: 74:be:47:ac:74:94:f1:b0:75:ad:c0:3d:35:08:b4:52:33:d5: 99:61:fe:9d:58:4c:a4:d0:b6:f3:13:ba:fc:1d:36:39:b4:a8: 9f:13:d2:ea:64:2a:1c:fa:08:3f:bb:f0:9c:63:e3:5d:58:39: 8e:86:7e:8a:a3:c4:34:46:6c:dd:54:f1:59:a9:b8:9e:dc:ea: 98:41:2d:d8:45:38:26:38:f5:d4:fb:50:c5:d4:1e:5a:14:39: ff:47:ff:83:7e:47:fa:7f:eb:a3:7e:f7:96:76:5d:d5:f1:f0: a0:75:57:99:5c:7d:87:ca:06:3a:de:c6:8d:e8:75:d6:83:64: ad:20:5c:7a:20:e0:3a:cd:0a:1c:e8:9e:e9:5c:fd:b7:66:a7: aa:c6:e3:45:f9:59:a3:0f:62:37:d0:3d:31:3a:97:10:60:04: 1d:77:9a:21:06:ef:bb:eb:eb:3d:80:b4:15:da:6c:04:14:76: f2:c8:58:e5 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUGoAhwRtalIo02eP73S64g7WPKN0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0U2QjVBRjIzMUZEODA5RkJDOEU1OTkyMTVCMTREMzU3 QUM2NkE4QzAeFw0yNjAyMjUwNjU4NDdaFw0yNzAyMjQwNzAzNDdaMDMxMTAvBgNV BAMTKDcxNzZBREM1QkY3NEI1MTcxM0NFMjk1QTI4MEEyNTgwMTNFMUZBQjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXUxgYLNSsU+frHoiXJZW2ge63 3lSgR/YgHKOn7KZ3C7RUng8B2Fu0FAuzgocivthWsF4Y9hAwKWD9IBfd730FaL9C zLGUOGm8let/8PlD4KkAQpy/Nf31uuXT+mjqbuSrx4z8NZwT8Hnud53l3VuSAT6M 7iimgWDcI7vgFGQG2UvMCJsZrgf5TAnJrcB5wQuQJvfoeqn3+ToDKicT/Qi/wJD/ I0CthPJTvtwDhLsU7X2rQEu7a7zFEC6gSz0OKi0+fHPjy3WFXHu2HEwAUDfpj1ja eeIP4mnfLG2HdfXgeBA8+bMND+Fz9ZJMn4quxX6/JV0Lh4omc1Pblv2mC5DVAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUcXatxb90tRcTzilaKAolgBPh+rcwHwYDVR0j BBgwFoAUPmta8jH9gJ+8jlmSFbFNNXrGaowwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZTU0MDE2NC0zZDQ2LTQ3OTQtYmY1NS1iNmIxMzRkOWFiMTMvMC8zRTZCNUFGMjMx RkQ4MDlGQkM4RTU5OTIxNUIxNEQzNTdBQzY2QThDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0U2QjVBRjIzMUZEODA5RkJDOEU1OTkyMTVCMTREMzU3QUM2 NkE4Qy5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2JlNTQwMTY0LTNkNDYtNDc5NC1i ZjU1LWI2YjEzNGQ5YWIxMy8wLzMyMzAzMjJlMzUzMTJlMzYzMDJlMzAyZjMyMzMy ZDMyMzMyMDNkM2UyMDMyMzAzMTMzMzQzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAcozPDANBgkqhkiG 9w0BAQsFAAOCAQEAsmR8J5YFWTXNyjkHMKpw3/3SNIdTOeMNgapnKPLX+wRvs+rI Rtp4slBQLiVq5t3w1xl5O4oCatDSnd5KppX1SkwbkYpzP/rXdL5HrHSU8bB1rcA9 NQi0UjPVmWH+nVhMpNC28xO6/B02ObSonxPS6mQqHPoIP7vwnGPjXVg5joZ+iqPE NEZs3VTxWam4ntzqmEEt2EU4Jjj11PtQxdQeWhQ5/0f/g35H+n/ro373lnZd1fHw oHVXmVx9h8oGOt7Gjeh11oNkrSBceiDgOs0KHOie6Vz9t2anqsbjRflZow9iN9A9 MTqXEGAEHXeaIQbvu+vrPYC0FdpsBBR28shY5Q== -----END CERTIFICATE-----Generated at Mon Mar 2 12:50:40 2026 by rpki-client