$ rpki-client -vvf repo-rpki.idnic.net/repo/dcf00f8a-5cbd-460f-bfc6-bd8942b6537c/0/3230322e34332e36352e302f32342d3234203d3e203435333233.roa File: 3230322e34332e36352e302f32342d3234203d3e203435333233.roa (raw, json) Hash identifier: znONXNfdUZs1z0T4FfZkepx5iWfKvvzcCFqNNlG3IZM= Subject key identifier: 2B:64:D1:33:09:F3:8F:92:7F:67:76:CB:08:5D:3B:00:C4:1C:65:70 Certificate issuer: /CN=8694CDBB52F4AEA89AF46CA5BFA5A639973D7302 Certificate serial: 1F58727FC92AE3BCFA6E739FB6AD22BD48626D78 Authority key identifier: 86:94:CD:BB:52:F4:AE:A8:9A:F4:6C:A5:BF:A5:A6:39:97:3D:73:02 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8694CDBB52F4AEA89AF46CA5BFA5A639973D7302.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dcf00f8a-5cbd-460f-bfc6-bd8942b6537c/0/3230322e34332e36352e302f32342d3234203d3e203435333233.roa Signing time: Mon 30 Mar 2026 17:16:03 +0000 ROA not before: Mon 30 Mar 2026 17:11:03 +0000 ROA not after: Mon 29 Mar 2027 17:16:03 +0000 asID: 45323 IP address blocks: 202.43.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dcf00f8a-5cbd-460f-bfc6-bd8942b6537c/0/8694CDBB52F4AEA89AF46CA5BFA5A639973D7302.crl rsync://repo-rpki.idnic.net/repo/dcf00f8a-5cbd-460f-bfc6-bd8942b6537c/0/8694CDBB52F4AEA89AF46CA5BFA5A639973D7302.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8694CDBB52F4AEA89AF46CA5BFA5A639973D7302.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 05:48:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:58:72:7f:c9:2a:e3:bc:fa:6e:73:9f:b6:ad:22:bd:48:62:6d:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8694CDBB52F4AEA89AF46CA5BFA5A639973D7302 Validity Not Before: Mar 30 17:11:03 2026 GMT Not After : Mar 29 17:16:03 2027 GMT Subject: CN=2B64D13309F38F927F6776CB085D3B00C41C6570 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:ba:7a:a8:7b:27:67:2a:7f:8a:e0:42:07:6e: fe:c1:a5:49:68:4b:5c:39:63:bc:75:e0:31:b3:64: 72:2e:81:87:39:db:73:42:a7:42:a5:54:71:6d:5c: 95:7a:1e:c7:4d:ee:3b:f3:34:b0:39:e1:eb:f4:5f: 29:33:eb:8f:8a:b6:21:a1:4b:4d:ae:eb:d1:5f:1f: 36:c4:fd:95:41:b8:df:80:11:43:06:0d:86:c5:cf: 13:6a:a0:ce:aa:e5:32:67:55:87:68:de:96:9b:05: a2:1c:03:27:1a:70:e1:67:2e:95:10:6a:f2:97:cc: cf:4e:95:64:8d:63:c9:19:40:aa:16:61:f3:06:75: 49:78:6c:32:2e:96:7d:36:b2:3c:22:b0:5c:d9:92: 2f:91:bc:f5:83:41:09:7b:a8:f0:7a:09:8c:fc:3e: 83:2e:60:b5:e5:19:40:c8:2f:75:dd:b9:f2:a9:42: f0:a9:9c:7f:f4:cb:75:0c:b3:48:a0:7c:f7:48:ce: eb:6e:7f:72:ad:97:ce:79:ac:21:81:dc:b1:2f:ce: 6c:9c:a9:59:36:a8:80:84:f4:a0:1c:be:57:87:38: de:74:4e:fd:b4:71:b9:e7:3e:81:13:d8:1c:2f:1a: eb:48:30:57:ff:8a:0b:2b:3f:ac:db:22:8f:bd:cc: e9:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:64:D1:33:09:F3:8F:92:7F:67:76:CB:08:5D:3B:00:C4:1C:65:70 X509v3 Authority Key Identifier: keyid:86:94:CD:BB:52:F4:AE:A8:9A:F4:6C:A5:BF:A5:A6:39:97:3D:73:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dcf00f8a-5cbd-460f-bfc6-bd8942b6537c/0/8694CDBB52F4AEA89AF46CA5BFA5A639973D7302.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8694CDBB52F4AEA89AF46CA5BFA5A639973D7302.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dcf00f8a-5cbd-460f-bfc6-bd8942b6537c/0/3230322e34332e36352e302f32342d3234203d3e203435333233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.43.65.0/24 Signature Algorithm: sha256WithRSAEncryption 4d:3b:f8:43:95:f1:ca:5d:a4:a5:e6:b0:7b:72:d5:99:3e:e8: a6:04:d1:6f:ec:db:3b:fa:02:5b:1f:a0:27:d5:fc:e3:18:c6: 1f:72:86:49:58:57:11:67:60:03:57:d2:d5:cb:35:be:43:79: a0:dc:ff:f8:f3:2b:31:bf:ab:95:a4:97:7e:4b:c6:65:7f:b6: 04:2c:7b:fc:92:a0:12:da:d8:40:9d:aa:4c:61:37:31:60:82: 65:b3:af:a8:28:f9:0b:94:80:74:25:41:a1:ec:73:be:b0:06: 0c:3f:1d:09:e7:60:7e:77:6d:f9:44:f1:0b:55:ff:1b:bf:08: d6:72:53:40:c0:5e:83:6e:53:aa:76:9f:79:3a:1a:0c:ee:b2: f7:4c:ed:c4:fd:32:b1:bf:36:0f:e7:65:2c:e4:a8:8a:82:36: 1b:99:af:d8:ff:75:d5:55:48:66:34:91:89:be:d0:6c:f9:e2: 8b:4b:39:2d:5f:29:3d:b2:f0:28:85:df:06:33:97:cc:5d:52: 5b:5a:62:16:bb:ba:f1:49:f5:fd:05:88:23:77:59:c0:18:aa: 3d:4b:c7:72:21:0d:49:16:40:d4:89:5d:10:49:60:11:ee:ed: 91:52:71:c8:1d:e1:8f:72:dc:17:9c:f7:de:c1:2a:68:c6:c3: 21:4b:ab:b7 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUH1hyf8kq47z6bnOftq0ivUhibXgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODY5NENEQkI1MkY0QUVBODlBRjQ2Q0E1QkZBNUE2Mzk5 NzNENzMwMjAeFw0yNjAzMzAxNzExMDNaFw0yNzAzMjkxNzE2MDNaMDMxMTAvBgNV BAMTKDJCNjREMTMzMDlGMzhGOTI3RjY3NzZDQjA4NUQzQjAwQzQxQzY1NzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjunqoeydnKn+K4EIHbv7BpUlo S1w5Y7x14DGzZHIugYc523NCp0KlVHFtXJV6HsdN7jvzNLA54ev0Xykz64+KtiGh S02u69FfHzbE/ZVBuN+AEUMGDYbFzxNqoM6q5TJnVYdo3pabBaIcAycacOFnLpUQ avKXzM9OlWSNY8kZQKoWYfMGdUl4bDIuln02sjwisFzZki+RvPWDQQl7qPB6CYz8 PoMuYLXlGUDIL3XdufKpQvCpnH/0y3UMs0igfPdIzutuf3Ktl855rCGB3LEvzmyc qVk2qICE9KAcvleHON50Tv20cbnnPoET2BwvGutIMFf/igsrP6zbIo+9zOmPAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUK2TRMwnzj5J/Z3bLCF07AMQcZXAwHwYDVR0j BBgwFoAUhpTNu1L0rqia9Gylv6WmOZc9cwIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k Y2YwMGY4YS01Y2JkLTQ2MGYtYmZjNi1iZDg5NDJiNjUzN2MvMC84Njk0Q0RCQjUy RjRBRUE4OUFGNDZDQTVCRkE1QTYzOTk3M0Q3MzAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODY5NENEQkI1MkY0QUVBODlBRjQ2Q0E1QkZBNUE2Mzk5NzNE NzMwMi5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2RjZjAwZjhhLTVjYmQtNDYwZi1i ZmM2LWJkODk0MmI2NTM3Yy8wLzMyMzAzMjJlMzQzMzJlMzYzNTJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDM0MzUzMzMyMzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADKK0EwDQYJKoZIhvcN AQELBQADggEBAE07+EOV8cpdpKXmsHty1Zk+6KYE0W/s2zv6AlsfoCfV/OMYxh9y hklYVxFnYANX0tXLNb5DeaDc//jzKzG/q5Wkl35LxmV/tgQse/ySoBLa2ECdqkxh NzFggmWzr6go+QuUgHQlQaHsc76wBgw/HQnnYH53bflE8QtV/xu/CNZyU0DAXoNu U6p2n3k6GgzusvdM7cT9MrG/Ng/nZSzkqIqCNhuZr9j/ddVVSGY0kYm+0Gz54otL OS1fKT2y8CiF3wYzl8xdUltaYha7uvFJ9f0FiCN3WcAYqj1Lx3IhDUkWQNSJXRBJ YBHu7ZFSccgd4Y9y3Bec997BKmjGwyFLq7c= -----END CERTIFICATE-----Generated at Sat Apr 18 05:45:46 2026 by rpki-client