$ rpki-client -vvf repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3230332e3135332e33312e302f32342d3234203d3e203234353235.roa File: 3230332e3135332e33312e302f32342d3234203d3e203234353235.roa (raw, json) Hash identifier: TdUqEezOK8lv30IKT6wRqZ1emM0GB9AgLlBkEXLgtFY= Subject key identifier: 7B:9C:05:93:D7:3E:38:FD:BA:A5:E6:37:F3:3F:1A:FA:A0:FD:6E:E7 Certificate issuer: /CN=ADCB9F9DF56E90B39B5344118194104F46A83702 Certificate serial: 71BDA4C403716CA2A1C09E59CA93985D3464FC7C Authority key identifier: AD:CB:9F:9D:F5:6E:90:B3:9B:53:44:11:81:94:10:4F:46:A8:37:02 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3230332e3135332e33312e302f32342d3234203d3e203234353235.roa Signing time: Sat 04 Apr 2026 10:00:02 +0000 ROA not before: Sat 04 Apr 2026 09:55:02 +0000 ROA not after: Sat 03 Apr 2027 10:00:02 +0000 asID: 24525 IP address blocks: 203.153.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.crl rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 11:57:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:bd:a4:c4:03:71:6c:a2:a1:c0:9e:59:ca:93:98:5d:34:64:fc:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ADCB9F9DF56E90B39B5344118194104F46A83702 Validity Not Before: Apr 4 09:55:02 2026 GMT Not After : Apr 3 10:00:02 2027 GMT Subject: CN=7B9C0593D73E38FDBAA5E637F33F1AFAA0FD6EE7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:3f:29:2a:76:e1:ca:5b:f8:eb:df:d4:f7:7a: 13:13:77:70:b2:b9:fd:bc:b2:c1:27:92:bc:94:c4: 50:2e:3f:f4:9a:d3:64:c9:26:5e:a5:43:8e:34:ab: b3:a8:40:01:70:4c:5d:24:a9:8a:25:37:18:a8:35: ec:91:e4:53:27:a7:d9:5c:a1:ae:15:51:44:3c:1e: ac:d5:6b:4d:e8:3a:b1:34:f8:37:af:06:03:4c:ac: e7:4e:f9:53:84:3b:2f:e9:93:e9:77:92:9f:fb:c0: f4:f3:8c:ab:a3:75:8b:90:4b:9a:29:31:c0:b6:bd: 03:2b:45:46:21:ff:e5:bb:1a:59:01:0a:42:ba:41: 20:80:96:1c:68:33:b6:c9:bd:5f:75:a7:37:bf:c6: f3:a4:81:d8:25:22:d8:f6:7d:17:41:6d:a1:f4:ba: b9:fe:96:e9:fc:b5:b7:77:ad:0c:3f:14:e6:e3:99: 44:60:da:13:ea:40:3a:1d:f6:3e:58:02:f4:77:89: 1f:28:f1:69:79:b4:6c:cd:2b:3b:b8:a6:36:35:5a: 4b:49:de:6d:5a:f5:4c:16:3b:40:c2:1a:1b:1d:24: 0f:77:1b:57:bd:e9:cb:d5:ae:52:62:6c:54:00:c5: 86:ad:d3:9b:08:c7:ea:38:33:c7:b3:da:8b:27:e4: 50:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:9C:05:93:D7:3E:38:FD:BA:A5:E6:37:F3:3F:1A:FA:A0:FD:6E:E7 X509v3 Authority Key Identifier: keyid:AD:CB:9F:9D:F5:6E:90:B3:9B:53:44:11:81:94:10:4F:46:A8:37:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3230332e3135332e33312e302f32342d3234203d3e203234353235.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.153.31.0/24 Signature Algorithm: sha256WithRSAEncryption 77:fe:99:0b:29:0a:d4:c5:51:04:7f:95:48:a5:92:11:50:8f: 8e:93:dc:80:aa:dd:1d:1b:86:a5:4a:ae:d4:d1:aa:9d:29:2a: 2a:ec:d9:79:b2:90:a8:d2:aa:94:c4:ec:9f:23:29:ef:f6:06: e1:ee:57:99:a1:19:65:1e:3a:15:e0:0f:99:1d:ae:0d:8f:e0: a5:69:2d:30:a9:52:fe:6d:60:fa:8e:05:26:7d:93:dd:2d:28: 57:45:d7:7a:39:6d:9e:ed:14:63:e1:64:37:fb:16:2d:6b:99: 60:77:ff:9b:9e:89:21:6a:11:6c:96:43:8e:a9:14:d8:81:bb: d6:7f:72:d0:de:46:dd:5e:a1:ad:72:ab:36:95:f7:d9:33:56: 0b:91:f4:39:2f:90:1c:d2:28:46:f5:a5:c2:ad:79:83:3a:d3: 7e:d9:46:e3:6a:18:8b:44:53:4a:00:02:19:5b:07:6e:a3:08: dc:8f:3c:7e:d8:0b:6f:b1:25:5f:cf:91:8c:1b:f1:fd:5c:77: 0c:7b:9e:42:df:9f:88:60:53:68:f8:b8:23:29:a2:11:36:69: f5:b1:ab:61:9f:8b:4f:53:a4:96:96:ca:81:f4:54:dd:c4:77: 52:b8:5d:85:dd:2e:93:47:1d:d0:b6:ed:a9:fd:37:1f:16:aa: 07:90:82:35 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUcb2kxANxbKKhwJ5ZypOYXTRk/HwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQURDQjlGOURGNTZFOTBCMzlCNTM0NDExODE5NDEwNEY0 NkE4MzcwMjAeFw0yNjA0MDQwOTU1MDJaFw0yNzA0MDMxMDAwMDJaMDMxMTAvBgNV BAMTKDdCOUMwNTkzRDczRTM4RkRCQUE1RTYzN0YzM0YxQUZBQTBGRDZFRTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2PykqduHKW/jr39T3ehMTd3Cy uf28ssEnkryUxFAuP/Sa02TJJl6lQ440q7OoQAFwTF0kqYolNxioNeyR5FMnp9lc oa4VUUQ8HqzVa03oOrE0+DevBgNMrOdO+VOEOy/pk+l3kp/7wPTzjKujdYuQS5op McC2vQMrRUYh/+W7GlkBCkK6QSCAlhxoM7bJvV91pze/xvOkgdglItj2fRdBbaH0 urn+lun8tbd3rQw/FObjmURg2hPqQDod9j5YAvR3iR8o8Wl5tGzNKzu4pjY1WktJ 3m1a9UwWO0DCGhsdJA93G1e96cvVrlJibFQAxYat05sIx+o4M8ez2osn5FDDAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUe5wFk9c+OP26peY38z8a+qD9bucwHwYDVR0j BBgwFoAUrcufnfVukLObU0QRgZQQT0aoNwIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MWY0ZmQzOC03ODI2LTQyMDEtOWY5Yi0xZDdjNzZhYTI0ZGQvMC9BRENCOUY5REY1 NkU5MEIzOUI1MzQ0MTE4MTk0MTA0RjQ2QTgzNzAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQURDQjlGOURGNTZFOTBCMzlCNTM0NDExODE5NDEwNEY0NkE4 MzcwMi5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2QxZjRmZDM4LTc4MjYtNDIwMS05 ZjliLTFkN2M3NmFhMjRkZC8wLzMyMzAzMzJlMzEzNTMzMmUzMzMxMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzIzNDM1MzIzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMuZHzANBgkqhkiG 9w0BAQsFAAOCAQEAd/6ZCykK1MVRBH+VSKWSEVCPjpPcgKrdHRuGpUqu1NGqnSkq KuzZebKQqNKqlMTsnyMp7/YG4e5XmaEZZR46FeAPmR2uDY/gpWktMKlS/m1g+o4F Jn2T3S0oV0XXejltnu0UY+FkN/sWLWuZYHf/m56JIWoRbJZDjqkU2IG71n9y0N5G 3V6hrXKrNpX32TNWC5H0OS+QHNIoRvWlwq15gzrTftlG42oYi0RTSgACGVsHbqMI 3I88ftgLb7ElX8+RjBvx/Vx3DHueQt+fiGBTaPi4IymiETZp9bGrYZ+LT1OklpbK gfRU3cR3Urhdhd0uk0cd0Lbtqf03HxaqB5CCNQ== -----END CERTIFICATE-----Generated at Sun Apr 19 14:24:02 2026 by rpki-client