$ rpki-client -vvf repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/3230322e38312e34382e302f32302d3234203d3e203435333132.roa File: 3230322e38312e34382e302f32302d3234203d3e203435333132.roa (raw, json) Hash identifier: mAxLf24UgqVQXBcThcN0Pf2GvWPLcFCoo7EgWqVuR8o= Subject key identifier: 33:B5:D3:D0:5A:72:7B:EE:FF:20:C6:AA:F2:98:8F:BF:90:99:52:10 Certificate issuer: /CN=154EE03198467B96315FDB527FB3BBCCA0BFC441 Certificate serial: 0FBB18C28B43172778C3879C1A0E4D6B6032040E Authority key identifier: 15:4E:E0:31:98:46:7B:96:31:5F:DB:52:7F:B3:BB:CC:A0:BF:C4:41 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154EE03198467B96315FDB527FB3BBCCA0BFC441.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/3230322e38312e34382e302f32302d3234203d3e203435333132.roa Signing time: Wed 08 Apr 2026 08:04:24 +0000 ROA not before: Wed 08 Apr 2026 07:59:24 +0000 ROA not after: Wed 07 Apr 2027 08:04:24 +0000 asID: 45312 IP address blocks: 202.81.48.0/20 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/154EE03198467B96315FDB527FB3BBCCA0BFC441.crl rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/154EE03198467B96315FDB527FB3BBCCA0BFC441.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154EE03198467B96315FDB527FB3BBCCA0BFC441.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 08:03:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:bb:18:c2:8b:43:17:27:78:c3:87:9c:1a:0e:4d:6b:60:32:04:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=154EE03198467B96315FDB527FB3BBCCA0BFC441 Validity Not Before: Apr 8 07:59:24 2026 GMT Not After : Apr 7 08:04:24 2027 GMT Subject: CN=33B5D3D05A727BEEFF20C6AAF2988FBF90995210 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:f7:ef:0e:1a:aa:57:8e:06:9c:72:03:de:52: e1:90:31:b3:51:fa:f5:3d:a7:62:13:a6:2c:4b:98: 22:f8:6a:f1:1a:df:74:25:ec:87:26:7f:c8:7b:2e: 88:0b:45:82:71:9c:c2:b6:90:ec:7a:91:ab:09:4b: de:aa:bf:a8:45:20:5f:fa:b3:32:de:c0:f3:12:d5: f3:a9:8d:ce:38:2e:51:fc:de:b4:87:0c:7b:f0:e5: 65:2b:94:94:29:9c:6f:ae:50:30:2d:7c:6f:e3:a3: 22:7b:d7:41:e2:33:43:92:be:51:9d:ce:13:71:e9: 8c:2f:89:4a:ee:e3:6f:03:57:36:47:9d:85:ae:f8: af:41:51:4b:72:02:54:c5:83:a2:a1:4d:30:d6:e0: 47:fe:64:f8:6f:ca:94:ce:e9:9d:8f:ed:25:5e:d1: 86:de:65:af:6d:2e:ca:16:aa:07:27:13:45:18:5a: ac:1c:89:f9:f2:f4:45:6d:05:c0:8b:2f:63:9f:3b: 6f:2e:7c:bd:3b:50:42:84:cd:3f:16:4a:a1:24:a3: 40:5f:79:d2:f8:b7:cb:11:5d:4e:db:8f:e5:12:5a: 8b:ba:ac:03:b5:03:00:ca:68:2e:de:16:cc:01:e9: 36:dd:a5:20:b9:fe:ce:45:ff:64:75:a1:48:ea:99: 0b:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:B5:D3:D0:5A:72:7B:EE:FF:20:C6:AA:F2:98:8F:BF:90:99:52:10 X509v3 Authority Key Identifier: keyid:15:4E:E0:31:98:46:7B:96:31:5F:DB:52:7F:B3:BB:CC:A0:BF:C4:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/154EE03198467B96315FDB527FB3BBCCA0BFC441.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154EE03198467B96315FDB527FB3BBCCA0BFC441.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/3230322e38312e34382e302f32302d3234203d3e203435333132.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.81.48.0/20 Signature Algorithm: sha256WithRSAEncryption 23:c3:d1:b5:56:02:70:87:0e:5b:22:b0:46:4b:93:3d:bf:de: 41:8f:7f:a8:01:ab:0d:05:a9:97:49:f9:c6:5e:2d:d3:a8:7b: 07:38:2b:e1:f3:37:2b:90:e2:89:d5:ab:16:eb:4c:4c:34:bc: 8c:31:5a:85:56:a5:ed:13:f8:20:c3:81:ff:bc:b7:ee:55:6f: 31:16:7f:c7:70:6f:6b:56:95:94:ff:c3:9c:7e:98:7f:b9:f8: fc:5c:6e:15:3d:ad:54:8b:84:72:76:f2:84:5a:b6:a8:cf:c6: 21:c6:2c:59:b3:6c:cf:b2:d8:75:8e:6e:11:8a:22:b8:91:4e: 21:fc:4c:c9:69:73:c6:83:01:92:7a:3d:cd:94:53:47:86:3f: 72:84:19:a2:58:17:9e:64:e8:fd:76:67:d2:28:cb:26:4f:99: 3e:c2:0f:44:97:69:e4:66:e3:73:bd:1c:e6:da:96:2e:a8:ca: ec:d4:3c:88:2c:19:13:40:b8:42:27:7a:cb:c5:13:91:21:00: cc:a1:00:a3:f7:69:bb:0b:5c:10:34:3c:13:4a:5b:34:a9:b8: 1c:40:df:cd:27:75:3a:35:f6:16:ae:63:1a:d8:9c:0d:70:e3: cb:0f:1b:86:3c:6d:28:de:b9:43:ca:b8:77:61:6d:46:03:d4: b2:ba:61:fd -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUD7sYwotDFyd4w4ecGg5Na2AyBA4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTU0RUUwMzE5ODQ2N0I5NjMxNUZEQjUyN0ZCM0JCQ0NB MEJGQzQ0MTAeFw0yNjA0MDgwNzU5MjRaFw0yNzA0MDcwODA0MjRaMDMxMTAvBgNV BAMTKDMzQjVEM0QwNUE3MjdCRUVGRjIwQzZBQUYyOTg4RkJGOTA5OTUyMTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH9+8OGqpXjgaccgPeUuGQMbNR +vU9p2ITpixLmCL4avEa33Ql7Icmf8h7LogLRYJxnMK2kOx6kasJS96qv6hFIF/6 szLewPMS1fOpjc44LlH83rSHDHvw5WUrlJQpnG+uUDAtfG/joyJ710HiM0OSvlGd zhNx6YwviUru428DVzZHnYWu+K9BUUtyAlTFg6KhTTDW4Ef+ZPhvypTO6Z2P7SVe 0YbeZa9tLsoWqgcnE0UYWqwcifny9EVtBcCLL2OfO28ufL07UEKEzT8WSqEko0Bf edL4t8sRXU7bj+USWou6rAO1AwDKaC7eFswB6TbdpSC5/s5F/2R1oUjqmQuZAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUM7XT0Fpye+7/IMaq8piPv5CZUhAwHwYDVR0j BBgwFoAUFU7gMZhGe5YxX9tSf7O7zKC/xEEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NjIxZjc1My1hODhlLTRlZGYtYTMwNi1iZDkzZDVhMzhmZWEvMC8xNTRFRTAzMTk4 NDY3Qjk2MzE1RkRCNTI3RkIzQkJDQ0EwQkZDNDQxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTU0RUUwMzE5ODQ2N0I5NjMxNUZEQjUyN0ZCM0JCQ0NBMEJG QzQ0MS5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2M2MjFmNzUzLWE4OGUtNGVkZi1h MzA2LWJkOTNkNWEzOGZlYS8wLzMyMzAzMjJlMzgzMTJlMzQzODJlMzAyZjMyMzAy ZDMyMzQyMDNkM2UyMDM0MzUzMzMxMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBATKUTAwDQYJKoZIhvcN AQELBQADggEBACPD0bVWAnCHDlsisEZLkz2/3kGPf6gBqw0FqZdJ+cZeLdOoewc4 K+HzNyuQ4onVqxbrTEw0vIwxWoVWpe0T+CDDgf+8t+5VbzEWf8dwb2tWlZT/w5x+ mH+5+PxcbhU9rVSLhHJ28oRatqjPxiHGLFmzbM+y2HWObhGKIriRTiH8TMlpc8aD AZJ6Pc2UU0eGP3KEGaJYF55k6P12Z9IoyyZPmT7CD0SXaeRm43O9HObali6oyuzU PIgsGRNAuEInesvFE5EhAMyhAKP3absLXBA0PBNKWzSpuBxA380ndTo19hauYxrY nA1w48sPG4Y8bSjeuUPKuHdhbUYD1LK6Yf0= -----END CERTIFICATE-----Generated at Fri Apr 17 19:29:26 2026 by rpki-client