$ rpki-client -vvf repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3230332e3135332e32382e302f32342d3234203d3e203234353235.roa File: 3230332e3135332e32382e302f32342d3234203d3e203234353235.roa (raw, json) Hash identifier: ipk91Stwg/Tgd2Lq8qbwBszUurXuJk5qbpj2TLpxXAw= Subject key identifier: 3F:59:53:40:16:89:33:C4:31:FD:97:36:7E:70:1D:E2:29:7B:EF:FF Certificate issuer: /CN=ADCB9F9DF56E90B39B5344118194104F46A83702 Certificate serial: 197F916B9B11DD693239B0C3E35DE1483C995B3D Authority key identifier: AD:CB:9F:9D:F5:6E:90:B3:9B:53:44:11:81:94:10:4F:46:A8:37:02 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3230332e3135332e32382e302f32342d3234203d3e203234353235.roa Signing time: Sat 04 Apr 2026 10:00:03 +0000 ROA not before: Sat 04 Apr 2026 09:55:03 +0000 ROA not after: Sat 03 Apr 2027 10:00:03 +0000 asID: 24525 IP address blocks: 203.153.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.crl rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 11:57:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:7f:91:6b:9b:11:dd:69:32:39:b0:c3:e3:5d:e1:48:3c:99:5b:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ADCB9F9DF56E90B39B5344118194104F46A83702 Validity Not Before: Apr 4 09:55:03 2026 GMT Not After : Apr 3 10:00:03 2027 GMT Subject: CN=3F595340168933C431FD97367E701DE2297BEFFF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:9c:dc:71:8c:f2:a0:55:fe:79:40:44:bc:c9: 02:1b:8d:d2:4c:46:fa:67:37:2d:15:ba:3f:ae:dc: f7:56:f2:42:e9:83:17:20:78:8a:f9:66:3d:3f:f6: f4:88:aa:f4:10:d2:fe:ce:12:3d:74:c8:2d:b1:16: 21:ff:19:ac:0d:88:82:a8:cc:a2:19:a9:86:c5:86: fe:63:94:36:14:8a:a4:31:58:db:03:10:ed:9d:90: b4:8a:97:c4:8b:79:e8:a1:be:e9:d4:72:cc:04:20: 61:3f:c5:1d:68:32:a1:cb:e6:9d:43:ac:59:98:55: 8c:85:7b:81:0f:52:78:5a:03:eb:03:8b:fb:c8:f7: 13:72:ee:d5:88:87:ba:2a:c1:8d:02:0c:0d:d7:87: 21:74:7d:b0:28:00:6d:e7:a3:7f:b3:09:77:04:51: f7:e9:36:06:06:7f:c2:d1:59:76:b3:a3:d1:fc:de: b1:22:f2:d6:2b:df:0e:a2:61:b8:3c:2a:b2:4a:15: 3c:91:24:4a:72:8f:65:90:7d:9d:bf:55:3c:bf:91: 72:53:fa:d6:ce:42:cc:53:9d:90:fe:3e:a0:d3:18: 5b:35:b9:d8:13:34:8d:86:ac:49:dd:25:33:76:12: 5d:66:3c:9b:d8:23:4d:83:2a:d3:3f:c7:d3:a2:a7: fd:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:59:53:40:16:89:33:C4:31:FD:97:36:7E:70:1D:E2:29:7B:EF:FF X509v3 Authority Key Identifier: keyid:AD:CB:9F:9D:F5:6E:90:B3:9B:53:44:11:81:94:10:4F:46:A8:37:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3230332e3135332e32382e302f32342d3234203d3e203234353235.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.153.28.0/24 Signature Algorithm: sha256WithRSAEncryption 45:eb:55:fe:ab:60:61:42:89:15:80:00:c2:28:6f:f8:26:c1: 80:10:a6:61:1f:04:78:8a:31:08:d4:64:a2:e3:54:d2:fb:a1: 37:dd:59:95:16:e9:db:aa:98:e5:0b:e3:a5:9c:0b:ed:11:ea: 7f:bb:77:eb:4e:0a:86:e7:d1:c4:90:2b:8d:4f:32:ae:7f:d2: 86:e9:b0:de:8a:56:7a:37:41:ab:2b:83:16:af:c9:c4:ff:2c: 97:74:32:08:8c:95:70:e7:64:6b:04:5f:a2:8d:aa:a7:33:61: 28:9c:f4:b8:71:6f:01:78:99:b7:c2:c4:2c:21:84:32:a4:f4: b0:d3:53:55:06:6b:17:39:5d:db:25:45:a3:04:27:a9:d3:94: f6:06:b8:a4:f6:31:47:cc:85:87:e5:93:8b:c6:61:83:1a:16: 72:37:15:1e:7d:72:12:27:30:f4:04:1a:f8:6f:73:87:09:fd: 4e:94:49:64:4e:35:28:1b:36:7b:65:18:0d:b2:03:86:f0:a9: 67:a1:69:db:49:fa:df:36:c9:e4:de:2f:4a:e9:2b:fa:1e:ab: fb:c8:81:a6:21:11:bc:58:20:d6:85:a8:f8:25:db:11:46:4c: c6:14:bd:fc:8d:35:79:b0:66:68:52:55:77:ca:cc:47:78:76: 59:0a:38:b9 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUGX+Ra5sR3WkyObDD413hSDyZWz0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQURDQjlGOURGNTZFOTBCMzlCNTM0NDExODE5NDEwNEY0 NkE4MzcwMjAeFw0yNjA0MDQwOTU1MDNaFw0yNzA0MDMxMDAwMDNaMDMxMTAvBgNV BAMTKDNGNTk1MzQwMTY4OTMzQzQzMUZEOTczNjdFNzAxREUyMjk3QkVGRkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEnNxxjPKgVf55QES8yQIbjdJM RvpnNy0Vuj+u3PdW8kLpgxcgeIr5Zj0/9vSIqvQQ0v7OEj10yC2xFiH/GawNiIKo zKIZqYbFhv5jlDYUiqQxWNsDEO2dkLSKl8SLeeihvunUcswEIGE/xR1oMqHL5p1D rFmYVYyFe4EPUnhaA+sDi/vI9xNy7tWIh7oqwY0CDA3XhyF0fbAoAG3no3+zCXcE UffpNgYGf8LRWXazo9H83rEi8tYr3w6iYbg8KrJKFTyRJEpyj2WQfZ2/VTy/kXJT +tbOQsxTnZD+PqDTGFs1udgTNI2GrEndJTN2El1mPJvYI02DKtM/x9Oip/01AgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUP1lTQBaJM8Qx/Zc2fnAd4il77/8wHwYDVR0j BBgwFoAUrcufnfVukLObU0QRgZQQT0aoNwIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MWY0ZmQzOC03ODI2LTQyMDEtOWY5Yi0xZDdjNzZhYTI0ZGQvMC9BRENCOUY5REY1 NkU5MEIzOUI1MzQ0MTE4MTk0MTA0RjQ2QTgzNzAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQURDQjlGOURGNTZFOTBCMzlCNTM0NDExODE5NDEwNEY0NkE4 MzcwMi5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2QxZjRmZDM4LTc4MjYtNDIwMS05 ZjliLTFkN2M3NmFhMjRkZC8wLzMyMzAzMzJlMzEzNTMzMmUzMjM4MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzIzNDM1MzIzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMuZHDANBgkqhkiG 9w0BAQsFAAOCAQEARetV/qtgYUKJFYAAwihv+CbBgBCmYR8EeIoxCNRkouNU0vuh N91ZlRbp26qY5QvjpZwL7RHqf7t3604KhufRxJArjU8yrn/Shumw3opWejdBqyuD Fq/JxP8sl3QyCIyVcOdkawRfoo2qpzNhKJz0uHFvAXiZt8LELCGEMqT0sNNTVQZr Fzld2yVFowQnqdOU9ga4pPYxR8yFh+WTi8ZhgxoWcjcVHn1yEicw9AQa+G9zhwn9 TpRJZE41KBs2e2UYDbIDhvCpZ6Fp20n63zbJ5N4vSukr+h6r+8iBpiERvFgg1oWo +CXbEUZMxhS9/I01ebBmaFJVd8rMR3h2WQo4uQ== -----END CERTIFICATE-----Generated at Sun Apr 19 14:24:10 2026 by rpki-client