$ rpki-client -vvf repo-rpki.idnic.net/repo/caecb002-24a4-4955-a333-002fdb74553f/0/3132332e3235332e3235322e302f32322d3234203d3e20313339333937.roa File: 3132332e3235332e3235322e302f32322d3234203d3e20313339333937.roa (raw, json) Hash identifier: n8F2dnayS2c7Gz6O/kRcKF07JLx6dMnMfAKcwvqnA+U= Subject key identifier: BB:28:3F:C3:E4:84:C0:56:79:D1:FF:86:7F:1A:E3:3F:E2:EA:80:9D Certificate issuer: /CN=2E83B1793FA2E18A4137A66A092163F5DABD45F0 Certificate serial: 325EAC30B47E49ABE640356B5B7E15523DE4C1E7 Authority key identifier: 2E:83:B1:79:3F:A2:E1:8A:41:37:A6:6A:09:21:63:F5:DA:BD:45:F0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E83B1793FA2E18A4137A66A092163F5DABD45F0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/caecb002-24a4-4955-a333-002fdb74553f/0/3132332e3235332e3235322e302f32322d3234203d3e20313339333937.roa Signing time: Tue 03 Feb 2026 04:00:00 +0000 ROA not before: Tue 03 Feb 2026 03:55:00 +0000 ROA not after: Tue 02 Feb 2027 04:00:00 +0000 asID: 139397 IP address blocks: 123.253.252.0/22 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/caecb002-24a4-4955-a333-002fdb74553f/0/2E83B1793FA2E18A4137A66A092163F5DABD45F0.crl rsync://repo-rpki.idnic.net/repo/caecb002-24a4-4955-a333-002fdb74553f/0/2E83B1793FA2E18A4137A66A092163F5DABD45F0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E83B1793FA2E18A4137A66A092163F5DABD45F0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:5e:ac:30:b4:7e:49:ab:e6:40:35:6b:5b:7e:15:52:3d:e4:c1:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E83B1793FA2E18A4137A66A092163F5DABD45F0 Validity Not Before: Feb 3 03:55:00 2026 GMT Not After : Feb 2 04:00:00 2027 GMT Subject: CN=BB283FC3E484C05679D1FF867F1AE33FE2EA809D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:10:cd:8d:66:cb:8e:44:78:66:40:3b:67:3d: 86:a7:6a:36:41:c2:b3:7f:1a:9e:0b:b2:9f:58:99: 3d:1f:45:78:3b:1d:21:1c:9d:90:e7:0c:38:91:92: 82:28:ca:9e:c8:1d:43:c6:a8:5e:92:8b:cf:37:9b: 76:d3:92:77:b3:12:1c:70:2d:44:22:7d:f2:72:b1: a4:9e:21:6a:49:83:94:68:82:9a:bc:11:e3:23:c6: 11:3b:c5:1d:4c:c1:85:fe:4f:d3:42:b2:df:70:26: 61:17:1e:a3:9d:b8:dc:9a:6b:40:12:c2:50:09:95: 80:f1:2c:22:d5:b9:99:06:5e:fe:b2:1f:16:6e:f1: df:86:a7:55:7c:81:87:39:c7:d7:18:7a:b3:1b:02: bf:55:59:75:49:29:90:44:cc:75:72:07:0d:93:88: a5:b8:00:1b:d3:2f:1e:82:f0:c1:b6:df:d5:46:e9: 15:d0:89:59:ca:12:c1:f8:39:6e:4c:41:77:78:ae: de:e3:a6:34:05:7a:aa:9e:2a:19:05:61:67:d1:16: c9:f0:cc:2a:f1:6b:e0:46:c7:5c:ae:74:34:5a:f0: 07:97:4e:24:1a:dd:23:b1:aa:6b:e7:04:19:6d:70: 1f:8c:9c:ec:97:98:2a:d9:b8:b5:f7:54:cc:18:9c: 5f:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:28:3F:C3:E4:84:C0:56:79:D1:FF:86:7F:1A:E3:3F:E2:EA:80:9D X509v3 Authority Key Identifier: keyid:2E:83:B1:79:3F:A2:E1:8A:41:37:A6:6A:09:21:63:F5:DA:BD:45:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/caecb002-24a4-4955-a333-002fdb74553f/0/2E83B1793FA2E18A4137A66A092163F5DABD45F0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E83B1793FA2E18A4137A66A092163F5DABD45F0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/caecb002-24a4-4955-a333-002fdb74553f/0/3132332e3235332e3235322e302f32322d3234203d3e20313339333937.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 123.253.252.0/22 Signature Algorithm: sha256WithRSAEncryption 4b:1b:9e:6b:5a:13:dd:55:2c:90:8a:d3:73:42:39:6a:ca:b1: 7c:c7:39:dd:24:1c:39:f4:43:4c:b8:7e:08:a0:3c:5d:68:4a: ee:40:84:bc:a6:25:db:14:83:c7:31:f6:3f:65:38:13:0d:60: 6b:41:25:a8:73:66:ad:21:3b:28:b2:ea:f0:3a:4e:98:2d:c8: 88:df:fb:5f:ee:45:49:06:66:7b:82:be:fd:0d:e8:bd:d5:5a: 51:a3:ec:b2:b9:18:52:68:1b:35:e6:2b:3c:f4:ce:f1:60:81: de:45:dc:76:23:9f:a0:69:67:d4:3c:27:6c:7d:ea:e6:58:50: 1d:e0:01:72:0c:27:f9:ca:59:45:ac:91:32:83:db:07:a5:5a: 49:92:db:ec:17:5d:04:dc:43:42:a7:17:76:df:7b:02:3d:4b: 53:2b:30:41:59:94:80:23:34:9a:d7:11:b9:89:d1:7a:03:fa: 91:ac:b2:08:39:0c:11:de:56:c2:61:aa:ce:c7:b2:de:6f:40: e0:09:17:fa:dc:81:38:3f:82:6d:75:ca:0f:ca:33:66:a7:89: 2a:a3:2c:61:34:3e:aa:95:b2:73:ce:ce:74:fd:c7:9f:72:4c: 27:cb:93:58:35:15:ee:08:15:d0:42:4d:18:27:f3:05:22:33: d6:59:2b:f7 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUMl6sMLR+SavmQDVrW34VUj3kwecwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkU4M0IxNzkzRkEyRTE4QTQxMzdBNjZBMDkyMTYzRjVE QUJENDVGMDAeFw0yNjAyMDMwMzU1MDBaFw0yNzAyMDIwNDAwMDBaMDMxMTAvBgNV BAMTKEJCMjgzRkMzRTQ4NEMwNTY3OUQxRkY4NjdGMUFFMzNGRTJFQTgwOUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDEM2NZsuORHhmQDtnPYanajZB wrN/Gp4Lsp9YmT0fRXg7HSEcnZDnDDiRkoIoyp7IHUPGqF6Si883m3bTknezEhxw LUQiffJysaSeIWpJg5Rogpq8EeMjxhE7xR1MwYX+T9NCst9wJmEXHqOduNyaa0AS wlAJlYDxLCLVuZkGXv6yHxZu8d+Gp1V8gYc5x9cYerMbAr9VWXVJKZBEzHVyBw2T iKW4ABvTLx6C8MG239VG6RXQiVnKEsH4OW5MQXd4rt7jpjQFeqqeKhkFYWfRFsnw zCrxa+BGx1yudDRa8AeXTiQa3SOxqmvnBBltcB+MnOyXmCrZuLX3VMwYnF+1AgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUuyg/w+SEwFZ50f+GfxrjP+LqgJ0wHwYDVR0j BBgwFoAULoOxeT+i4YpBN6ZqCSFj9dq9RfAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YWVjYjAwMi0yNGE0LTQ5NTUtYTMzMy0wMDJmZGI3NDU1M2YvMC8yRTgzQjE3OTNG QTJFMThBNDEzN0E2NkEwOTIxNjNGNURBQkQ0NUYwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkU4M0IxNzkzRkEyRTE4QTQxMzdBNjZBMDkyMTYzRjVEQUJE NDVGMC5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2NhZWNiMDAyLTI0YTQtNDk1NS1h MzMzLTAwMmZkYjc0NTUzZi8wLzMxMzIzMzJlMzIzNTMzMmUzMjM1MzIyZTMwMmYz MjMyMmQzMjM0MjAzZDNlMjAzMTMzMzkzMzM5Mzcucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7/fwwDQYJ KoZIhvcNAQELBQADggEBAEsbnmtaE91VLJCK03NCOWrKsXzHOd0kHDn0Q0y4fgig PF1oSu5AhLymJdsUg8cx9j9lOBMNYGtBJahzZq0hOyiy6vA6TpgtyIjf+1/uRUkG ZnuCvv0N6L3VWlGj7LK5GFJoGzXmKzz0zvFggd5F3HYjn6BpZ9Q8J2x96uZYUB3g AXIMJ/nKWUWskTKD2welWkmS2+wXXQTcQ0KnF3bfewI9S1MrMEFZlIAjNJrXEbmJ 0XoD+pGssgg5DBHeVsJhqs7Hst5vQOAJF/rcgTg/gm11yg/KM2aniSqjLGE0PqqV snPOznT9x59yTCfLk1g1Fe4IFdBCTRgn8wUiM9ZZK/c= -----END CERTIFICATE-----Generated at Mon Mar 2 21:27:32 2026 by rpki-client