$ rpki-client -vvf repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3230322e35312e36302e302f32342d3234203d3e20323031333431.roa File: 3230322e35312e36302e302f32342d3234203d3e20323031333431.roa (raw, json) Hash identifier: kpYH6pkPfG3ly0aK9MFNOJx2Os8AcuGthnzkfl0MEeU= Subject key identifier: 67:04:F5:A5:DD:4B:94:D5:55:59:FD:DC:6A:F6:C6:04:D9:CF:7A:DE Certificate issuer: /CN=3E6B5AF231FD809FBC8E599215B14D357AC66A8C Certificate serial: 7A27DBB58F08620AF245980A551F9B1F5859F52A Authority key identifier: 3E:6B:5A:F2:31:FD:80:9F:BC:8E:59:92:15:B1:4D:35:7A:C6:6A:8C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3230322e35312e36302e302f32342d3234203d3e20323031333431.roa Signing time: Wed 25 Feb 2026 07:03:46 +0000 ROA not before: Wed 25 Feb 2026 06:58:46 +0000 ROA not after: Wed 24 Feb 2027 07:03:46 +0000 asID: 201341 IP address blocks: 202.51.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.crl rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 21:17:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:27:db:b5:8f:08:62:0a:f2:45:98:0a:55:1f:9b:1f:58:59:f5:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E6B5AF231FD809FBC8E599215B14D357AC66A8C Validity Not Before: Feb 25 06:58:46 2026 GMT Not After : Feb 24 07:03:46 2027 GMT Subject: CN=6704F5A5DD4B94D55559FDDC6AF6C604D9CF7ADE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:1e:48:0a:9a:48:1c:b6:b2:9e:6e:89:c5:b5: 0e:03:40:bb:3c:c1:2b:ec:9e:0f:0f:14:81:9c:69: 1c:37:f5:3f:4f:2c:29:26:89:8f:17:b3:33:3a:d5: e7:cc:58:22:60:dd:20:fd:08:60:05:99:76:ce:0c: 9d:48:57:93:30:eb:92:9e:4b:c1:94:8b:f5:36:e0: 75:cb:aa:7e:51:d3:9e:14:36:eb:89:98:f6:8a:90: e7:14:ce:50:c8:e4:ab:92:a6:f9:b3:ef:72:b9:d8: 18:e9:90:55:6e:cf:4d:55:da:dd:e1:e5:86:45:21: 8b:2e:d9:c2:8b:c0:e7:be:93:71:3c:7d:58:24:7d: 71:bd:d3:ba:fb:6e:e9:41:69:e7:13:43:be:ac:a1: c5:25:40:78:1a:79:1e:45:5e:cd:35:08:62:6b:6c: 14:bb:b6:b1:85:9c:8b:01:94:8b:df:c8:16:bd:74: 31:55:d9:3f:7f:9a:8f:6f:09:58:65:ee:65:e4:ac: 4c:31:77:d8:aa:32:da:d0:6e:81:a4:58:01:3f:f5: 58:55:b5:59:29:b7:f9:f8:94:4b:48:fb:32:c8:78: a4:e7:81:b7:07:0d:29:7f:8a:80:60:ce:96:a8:6d: 90:9f:45:40:32:5e:9d:8f:b8:d0:19:4f:6c:0e:27: 35:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:04:F5:A5:DD:4B:94:D5:55:59:FD:DC:6A:F6:C6:04:D9:CF:7A:DE X509v3 Authority Key Identifier: keyid:3E:6B:5A:F2:31:FD:80:9F:BC:8E:59:92:15:B1:4D:35:7A:C6:6A:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3230322e35312e36302e302f32342d3234203d3e20323031333431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.51.60.0/24 Signature Algorithm: sha256WithRSAEncryption c7:2a:9f:89:58:9d:25:fd:13:6f:d5:37:c8:5a:c1:15:d1:48: a1:bf:01:f5:5a:ba:dd:06:85:ff:da:d7:12:3e:41:82:de:20: c3:ab:e9:cc:d3:d4:ae:ab:97:e2:00:8e:52:5b:a3:6d:1e:58: 06:9b:ff:6b:34:ae:46:94:90:09:c5:8d:96:c2:1c:84:57:93: 4d:af:5e:fd:6e:72:c7:1c:7d:5f:c2:34:2b:90:5a:9e:ea:08: 6d:46:7e:f3:19:2f:5a:77:8d:22:d1:a2:42:44:1d:36:a5:98: 79:20:9d:b0:f0:36:5b:8d:31:40:87:2c:f1:13:64:57:15:c9: 06:dc:ff:aa:ad:2c:79:bd:0e:18:a3:a3:cc:f6:16:8b:c5:54: 26:27:8c:6a:ac:1f:1c:d0:40:43:25:c8:81:95:f8:67:0c:ea: 68:6d:77:e8:d4:13:b9:b4:ee:8c:7e:ca:5c:e2:99:77:10:0a: 90:23:5a:c9:bd:f5:95:91:06:31:28:b2:4c:c1:92:8e:0b:7c: 3b:41:e4:09:7c:48:81:c7:57:23:c8:e9:97:49:ac:82:eb:36: 2c:df:ce:1d:cf:aa:d2:d2:99:03:2b:28:6a:bf:66:ee:6f:d7: 60:1e:a8:7c:cb:1e:b4:c8:ee:81:d3:9b:2b:7b:c9:00:85:1f: 33:eb:6a:39 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUeifbtY8IYgryRZgKVR+bH1hZ9SowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0U2QjVBRjIzMUZEODA5RkJDOEU1OTkyMTVCMTREMzU3 QUM2NkE4QzAeFw0yNjAyMjUwNjU4NDZaFw0yNzAyMjQwNzAzNDZaMDMxMTAvBgNV BAMTKDY3MDRGNUE1REQ0Qjk0RDU1NTU5RkREQzZBRjZDNjA0RDlDRjdBREUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCHkgKmkgctrKebonFtQ4DQLs8 wSvsng8PFIGcaRw39T9PLCkmiY8XszM61efMWCJg3SD9CGAFmXbODJ1IV5Mw65Ke S8GUi/U24HXLqn5R054UNuuJmPaKkOcUzlDI5KuSpvmz73K52BjpkFVuz01V2t3h 5YZFIYsu2cKLwOe+k3E8fVgkfXG907r7bulBaecTQ76socUlQHgaeR5FXs01CGJr bBS7trGFnIsBlIvfyBa9dDFV2T9/mo9vCVhl7mXkrEwxd9iqMtrQboGkWAE/9VhV tVkpt/n4lEtI+zLIeKTngbcHDSl/ioBgzpaobZCfRUAyXp2PuNAZT2wOJzUzAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUZwT1pd1LlNVVWf3cavbGBNnPet4wHwYDVR0j BBgwFoAUPmta8jH9gJ+8jlmSFbFNNXrGaowwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZTU0MDE2NC0zZDQ2LTQ3OTQtYmY1NS1iNmIxMzRkOWFiMTMvMC8zRTZCNUFGMjMx RkQ4MDlGQkM4RTU5OTIxNUIxNEQzNTdBQzY2QThDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0U2QjVBRjIzMUZEODA5RkJDOEU1OTkyMTVCMTREMzU3QUM2 NkE4Qy5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2JlNTQwMTY0LTNkNDYtNDc5NC1i ZjU1LWI2YjEzNGQ5YWIxMy8wLzMyMzAzMjJlMzUzMTJlMzYzMDJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMyMzAzMTMzMzQzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMozPDANBgkqhkiG 9w0BAQsFAAOCAQEAxyqfiVidJf0Tb9U3yFrBFdFIob8B9Vq63QaF/9rXEj5Bgt4g w6vpzNPUrquX4gCOUlujbR5YBpv/azSuRpSQCcWNlsIchFeTTa9e/W5yxxx9X8I0 K5BanuoIbUZ+8xkvWneNItGiQkQdNqWYeSCdsPA2W40xQIcs8RNkVxXJBtz/qq0s eb0OGKOjzPYWi8VUJieMaqwfHNBAQyXIgZX4ZwzqaG136NQTubTujH7KXOKZdxAK kCNayb31lZEGMSiyTMGSjgt8O0HkCXxIgcdXI8jpl0msgus2LN/OHc+q0tKZAyso ar9m7m/XYB6ofMsetMjugdObK3vJAIUfM+tqOQ== -----END CERTIFICATE-----Generated at Mon Mar 2 14:10:17 2026 by rpki-client