$ rpki-client -vvf repo-rpki.idnic.net/repo/f0a929c6-1e25-494a-b0f9-55fc4fc94fbc/0/3230322e38372e3234382e302f32312d3234203d3e203234323031.roa File: 3230322e38372e3234382e302f32312d3234203d3e203234323031.roa (raw, json) Hash identifier: U7DVNvpEMLByQQk2b+WXhxRIJOFGjGQiEsah2HM4E5Y= Subject key identifier: 72:64:1E:B2:69:96:CB:04:48:C0:C7:C2:DE:D4:B5:BE:9B:9D:EF:2A Certificate issuer: /CN=8A0F7659BE6C916702994F1B653CA6335CF48F9F Certificate serial: 0E73F4E0956FACE865705EF64719B957FAFD7DAA Authority key identifier: 8A:0F:76:59:BE:6C:91:67:02:99:4F:1B:65:3C:A6:33:5C:F4:8F:9F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A0F7659BE6C916702994F1B653CA6335CF48F9F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f0a929c6-1e25-494a-b0f9-55fc4fc94fbc/0/3230322e38372e3234382e302f32312d3234203d3e203234323031.roa Signing time: Sat 21 Feb 2026 08:00:01 +0000 ROA not before: Sat 21 Feb 2026 07:55:01 +0000 ROA not after: Sat 20 Feb 2027 08:00:01 +0000 asID: 24201 IP address blocks: 202.87.248.0/21 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f0a929c6-1e25-494a-b0f9-55fc4fc94fbc/0/8A0F7659BE6C916702994F1B653CA6335CF48F9F.crl rsync://repo-rpki.idnic.net/repo/f0a929c6-1e25-494a-b0f9-55fc4fc94fbc/0/8A0F7659BE6C916702994F1B653CA6335CF48F9F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A0F7659BE6C916702994F1B653CA6335CF48F9F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 02:18:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:73:f4:e0:95:6f:ac:e8:65:70:5e:f6:47:19:b9:57:fa:fd:7d:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8A0F7659BE6C916702994F1B653CA6335CF48F9F Validity Not Before: Feb 21 07:55:01 2026 GMT Not After : Feb 20 08:00:01 2027 GMT Subject: CN=72641EB26996CB0448C0C7C2DED4B5BE9B9DEF2A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:35:15:21:ff:5f:39:fc:6f:4f:d8:71:4d:ce: 24:4e:84:d4:59:19:a2:a3:aa:0d:05:14:4f:bd:12: 14:ec:52:7e:0c:3a:f4:78:cc:08:c3:84:fa:04:7d: f9:95:97:2a:72:1c:47:65:3a:14:aa:c7:5e:65:9d: 4d:58:b0:f9:d2:83:65:f4:00:b5:f9:8b:0f:04:5a: b0:89:e0:1e:d0:fe:b5:3f:d2:a6:86:93:e9:ab:eb: 58:49:2a:e4:72:02:1d:98:6c:b1:4a:03:c0:e6:cc: 2b:f4:60:28:9f:91:b0:1a:05:56:e3:8d:13:62:bc: 8e:5d:c2:3b:14:8d:ed:8b:6b:10:a3:c8:8b:60:bc: 7b:c6:f3:63:75:cb:da:19:57:a4:b6:0a:05:8d:94: 32:56:8e:9c:3c:e9:fc:19:56:e0:57:dd:ea:9c:bf: 5c:2d:ba:ef:54:67:10:a7:17:63:6c:a6:7c:5b:ea: 60:1b:2f:9e:89:ec:33:c1:5e:ce:b3:a8:e1:88:16: e5:85:4c:9e:72:c0:31:cd:67:d3:e6:88:49:85:52: 2f:2b:f7:7d:7c:d9:47:84:ce:ac:ed:6d:d1:f3:ba: f4:50:5e:b0:84:5a:9a:eb:d6:cd:67:90:90:68:d4: 4f:0a:c0:ae:79:22:f4:a0:43:5d:18:de:0f:9f:1f: 6e:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:64:1E:B2:69:96:CB:04:48:C0:C7:C2:DE:D4:B5:BE:9B:9D:EF:2A X509v3 Authority Key Identifier: keyid:8A:0F:76:59:BE:6C:91:67:02:99:4F:1B:65:3C:A6:33:5C:F4:8F:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f0a929c6-1e25-494a-b0f9-55fc4fc94fbc/0/8A0F7659BE6C916702994F1B653CA6335CF48F9F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A0F7659BE6C916702994F1B653CA6335CF48F9F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f0a929c6-1e25-494a-b0f9-55fc4fc94fbc/0/3230322e38372e3234382e302f32312d3234203d3e203234323031.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.87.248.0/21 Signature Algorithm: sha256WithRSAEncryption 5b:93:e1:c5:57:b4:b3:21:80:4a:8a:80:6c:09:88:e0:24:6b: b1:6e:2a:5b:1e:a0:76:b8:63:33:91:88:50:4d:ce:be:ab:a8: ee:56:9e:c8:6a:24:a0:18:62:b6:1d:60:c5:16:52:ac:05:f0: b2:a8:d3:d8:b1:03:8b:d8:bf:90:73:b2:80:08:c8:46:a6:44: 96:c3:60:a5:b2:97:79:4c:d6:b6:61:bb:51:0e:1d:74:4a:bc: 8d:43:cb:84:7a:06:6a:b0:70:64:ba:cb:4b:70:ae:56:d5:89: 1e:15:df:cf:d2:3a:20:08:b5:f3:c2:bc:24:18:86:2f:a7:40: d8:20:33:e6:8a:82:15:04:f2:12:e1:e6:be:26:08:80:b6:53: c3:db:1c:ac:ce:52:2d:7d:36:7f:20:9c:57:25:a3:34:08:7f: c7:12:29:53:cd:d0:07:f0:c2:cf:8b:14:51:7c:17:98:9d:7c: 0f:2b:f7:2d:e8:1f:87:0b:65:66:89:23:4b:19:85:92:17:ff: 57:cb:59:1b:62:12:02:e2:0b:77:59:e5:c4:47:03:56:ae:98: a4:39:50:95:08:bb:b8:87:cd:fb:67:26:bf:e4:eb:79:47:60: 39:a2:fc:cc:23:97:3e:1f:17:f4:60:7d:15:f0:77:31:2c:ad: e7:8c:16:11 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUDnP04JVvrOhlcF72Rxm5V/r9faowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEEwRjc2NTlCRTZDOTE2NzAyOTk0RjFCNjUzQ0E2MzM1 Q0Y0OEY5RjAeFw0yNjAyMjEwNzU1MDFaFw0yNzAyMjAwODAwMDFaMDMxMTAvBgNV BAMTKDcyNjQxRUIyNjk5NkNCMDQ0OEMwQzdDMkRFRDRCNUJFOUI5REVGMkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzNRUh/185/G9P2HFNziROhNRZ GaKjqg0FFE+9EhTsUn4MOvR4zAjDhPoEffmVlypyHEdlOhSqx15lnU1YsPnSg2X0 ALX5iw8EWrCJ4B7Q/rU/0qaGk+mr61hJKuRyAh2YbLFKA8DmzCv0YCifkbAaBVbj jRNivI5dwjsUje2LaxCjyItgvHvG82N1y9oZV6S2CgWNlDJWjpw86fwZVuBX3eqc v1wtuu9UZxCnF2Nspnxb6mAbL56J7DPBXs6zqOGIFuWFTJ5ywDHNZ9PmiEmFUi8r 93182UeEzqztbdHzuvRQXrCEWprr1s1nkJBo1E8KwK55IvSgQ10Y3g+fH27fAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUcmQesmmWywRIwMfC3tS1vpud7yowHwYDVR0j BBgwFoAUig92Wb5skWcCmU8bZTymM1z0j58wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MGE5MjljNi0xZTI1LTQ5NGEtYjBmOS01NWZjNGZjOTRmYmMvMC84QTBGNzY1OUJF NkM5MTY3MDI5OTRGMUI2NTNDQTYzMzVDRjQ4RjlGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEEwRjc2NTlCRTZDOTE2NzAyOTk0RjFCNjUzQ0E2MzM1Q0Y0 OEY5Ri5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2YwYTkyOWM2LTFlMjUtNDk0YS1i MGY5LTU1ZmM0ZmM5NGZiYy8wLzMyMzAzMjJlMzgzNzJlMzIzNDM4MmUzMDJmMzIz MTJkMzIzNDIwM2QzZTIwMzIzNDMyMzAzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA8pX+DANBgkqhkiG 9w0BAQsFAAOCAQEAW5PhxVe0syGASoqAbAmI4CRrsW4qWx6gdrhjM5GIUE3Ovquo 7laeyGokoBhith1gxRZSrAXwsqjT2LEDi9i/kHOygAjIRqZElsNgpbKXeUzWtmG7 UQ4ddEq8jUPLhHoGarBwZLrLS3CuVtWJHhXfz9I6IAi188K8JBiGL6dA2CAz5oqC FQTyEuHmviYIgLZTw9scrM5SLX02fyCcVyWjNAh/xxIpU83QB/DCz4sUUXwXmJ18 Dyv3LegfhwtlZokjSxmFkhf/V8tZG2ISAuILd1nlxEcDVq6YpDlQlQi7uIfN+2cm v+TreUdgOaL8zCOXPh8X9GB9FfB3MSyt54wWEQ== -----END CERTIFICATE-----Generated at Mon Mar 2 18:30:26 2026 by rpki-client