$ rpki-client -vvf rpki-rsync.idnic.net/repo/1c289706-a4f4-4e1f-9a6e-01c9c53cd8f9/0/3230322e34332e3235342e302f32342d3234203d3e20313338303734.roa File: 3230322e34332e3235342e302f32342d3234203d3e20313338303734.roa (raw, json) Hash identifier: thRIrZ3+blRuGrSxkOAlYh2ltCPP95UB2kgDE2dzqA4= Subject key identifier: F8:76:22:13:FF:6E:D9:6C:79:9F:8A:13:F7:87:D4:D6:66:6A:2B:48 Certificate issuer: /CN=0446D571B5FD57D22786B0872C74829904EAAB9F Certificate serial: 6F5EC9582340D7CE88856372B8B8B039E547AF65 Authority key identifier: 04:46:D5:71:B5:FD:57:D2:27:86:B0:87:2C:74:82:99:04:EA:AB:9F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0446D571B5FD57D22786B0872C74829904EAAB9F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1c289706-a4f4-4e1f-9a6e-01c9c53cd8f9/0/3230322e34332e3235342e302f32342d3234203d3e20313338303734.roa Signing time: Sun 03 May 2026 02:17:23 +0000 ROA not before: Sun 03 May 2026 02:12:23 +0000 ROA not after: Sun 02 May 2027 02:17:23 +0000 asID: 138074 IP address blocks: 202.43.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1c289706-a4f4-4e1f-9a6e-01c9c53cd8f9/0/0446D571B5FD57D22786B0872C74829904EAAB9F.crl rsync://rpki-rsync.idnic.net/repo/1c289706-a4f4-4e1f-9a6e-01c9c53cd8f9/0/0446D571B5FD57D22786B0872C74829904EAAB9F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0446D571B5FD57D22786B0872C74829904EAAB9F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 May 2026 10:39:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:5e:c9:58:23:40:d7:ce:88:85:63:72:b8:b8:b0:39:e5:47:af:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0446D571B5FD57D22786B0872C74829904EAAB9F Validity Not Before: May 3 02:12:23 2026 GMT Not After : May 2 02:17:23 2027 GMT Subject: CN=F8762213FF6ED96C799F8A13F787D4D6666A2B48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:a5:8e:54:45:89:f5:64:d1:18:29:64:f9:31: ff:65:59:2a:7d:3f:1c:ed:30:90:53:d6:df:a7:07: cd:1f:61:99:8a:44:1d:0b:04:1a:44:0f:48:0a:99: 4a:5e:7d:a4:31:b0:8f:38:93:ff:11:f5:d0:56:05: af:eb:38:91:5d:37:45:2d:da:33:0b:df:2c:cb:12: f1:21:bb:38:d0:3b:74:fb:5c:7c:75:ea:b0:c7:65: 4a:06:f2:9d:9d:65:17:c2:82:f7:6d:aa:3b:71:91: 60:91:9e:81:c0:fc:4a:16:11:df:f8:a6:97:02:bb: 07:36:9a:3d:aa:5d:3d:68:15:32:c1:c9:8c:e9:95: 34:c9:74:48:22:28:5a:8c:48:3c:6f:c5:d5:bd:b8: d2:a2:08:d7:be:35:83:93:e4:cf:20:94:78:7d:20: 5e:95:bc:47:5d:d5:44:55:5c:00:94:bd:4d:a5:fe: 39:4f:ac:cd:ea:56:c1:a3:f6:23:9d:a1:d2:3d:f2: 82:c3:dd:66:d1:b7:88:d8:fb:3b:10:88:f6:5a:47: 20:9d:d5:5d:14:98:aa:17:f1:7c:2c:a2:66:c5:d6: 34:51:4c:2d:d9:d9:81:38:e9:96:74:84:2a:bb:25: d2:a5:fc:60:3e:3d:72:ae:b2:4c:93:b0:26:06:89: 49:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:76:22:13:FF:6E:D9:6C:79:9F:8A:13:F7:87:D4:D6:66:6A:2B:48 X509v3 Authority Key Identifier: keyid:04:46:D5:71:B5:FD:57:D2:27:86:B0:87:2C:74:82:99:04:EA:AB:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1c289706-a4f4-4e1f-9a6e-01c9c53cd8f9/0/0446D571B5FD57D22786B0872C74829904EAAB9F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0446D571B5FD57D22786B0872C74829904EAAB9F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1c289706-a4f4-4e1f-9a6e-01c9c53cd8f9/0/3230322e34332e3235342e302f32342d3234203d3e20313338303734.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.43.254.0/24 Signature Algorithm: sha256WithRSAEncryption b5:de:8c:71:b2:80:a2:dd:ed:50:be:fd:20:5e:84:88:18:4c: ac:a0:ec:3c:29:fc:76:50:2a:5d:ab:93:9c:1e:0f:18:0f:57: 7f:d4:2b:f8:a9:67:3e:e6:2f:fb:bd:6e:94:26:2c:d0:18:15: d7:97:13:02:fb:df:21:33:83:7f:1f:fc:62:cc:ed:6e:60:35: 04:75:58:f0:39:c3:37:21:80:59:fd:d7:76:29:5f:6a:8c:f3: fa:08:f2:3b:e3:22:91:36:98:55:0f:08:23:d7:76:c1:2d:7a: 91:b0:63:ee:83:76:59:f1:a0:2b:98:85:ba:2f:56:44:59:04: ba:dc:0b:fc:fa:c3:5d:61:05:a3:26:13:56:be:41:b1:d6:3f: ce:ae:f9:07:30:8f:93:f0:f9:7d:6c:38:54:8c:44:ac:1b:76: d5:f4:cf:4c:bc:e8:73:63:f2:68:99:2d:0e:d4:ea:26:32:2f: 60:3f:ce:f0:f6:8a:30:3b:f7:56:f1:88:a0:3c:93:17:e2:7c: 5a:be:4b:eb:7e:0c:97:ec:98:37:b0:51:de:5f:f1:0e:a6:37: 1e:d9:ac:43:51:95:82:4c:7b:3c:65:d0:d6:3c:71:f4:33:58: 80:ea:09:5a:05:14:c2:b0:ad:7d:37:e5:7f:28:45:91:fa:ce: ad:84:8e:ad -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUb17JWCNA186IhWNyuLiwOeVHr2UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDQ0NkQ1NzFCNUZENTdEMjI3ODZCMDg3MkM3NDgyOTkw NEVBQUI5RjAeFw0yNjA1MDMwMjEyMjNaFw0yNzA1MDIwMjE3MjNaMDMxMTAvBgNV BAMTKEY4NzYyMjEzRkY2RUQ5NkM3OTlGOEExM0Y3ODdENEQ2NjY2QTJCNDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCspY5URYn1ZNEYKWT5Mf9lWSp9 PxztMJBT1t+nB80fYZmKRB0LBBpED0gKmUpefaQxsI84k/8R9dBWBa/rOJFdN0Ut 2jML3yzLEvEhuzjQO3T7XHx16rDHZUoG8p2dZRfCgvdtqjtxkWCRnoHA/EoWEd/4 ppcCuwc2mj2qXT1oFTLByYzplTTJdEgiKFqMSDxvxdW9uNKiCNe+NYOT5M8glHh9 IF6VvEdd1URVXACUvU2l/jlPrM3qVsGj9iOdodI98oLD3WbRt4jY+zsQiPZaRyCd 1V0UmKoX8XwsombF1jRRTC3Z2YE46ZZ0hCq7JdKl/GA+PXKuskyTsCYGiUn5AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU+HYiE/9u2Wx5n4oT94fU1mZqK0gwHwYDVR0j BBgwFoAUBEbVcbX9V9InhrCHLHSCmQTqq58wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWMyODk3MDYtYTRmNC00ZTFmLTlhNmUtMDFjOWM1M2NkOGY5LzAvMDQ0NkQ1NzFC NUZENTdEMjI3ODZCMDg3MkM3NDgyOTkwNEVBQUI5Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wNDQ2RDU3MUI1RkQ1N0QyMjc4NkIwODcyQzc0ODI5OTA0RUFB QjlGLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzFjMjg5NzA2LWE0ZjQtNGUxZi05 YTZlLTAxYzljNTNjZDhmOS8wLzMyMzAzMjJlMzQzMzJlMzIzNTM0MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzM4MzAzNzM0LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyiv+MA0GCSqG SIb3DQEBCwUAA4IBAQC13oxxsoCi3e1Qvv0gXoSIGEysoOw8Kfx2UCpdq5OcHg8Y D1d/1Cv4qWc+5i/7vW6UJizQGBXXlxMC+98hM4N/H/xizO1uYDUEdVjwOcM3IYBZ /dd2KV9qjPP6CPI74yKRNphVDwgj13bBLXqRsGPug3ZZ8aArmIW6L1ZEWQS63Av8 +sNdYQWjJhNWvkGx1j/OrvkHMI+T8Pl9bDhUjESsG3bV9M9MvOhzY/JomS0O1Oom Mi9gP87w9oowO/dW8YigPJMX4nxavkvrfgyX7Jg3sFHeX/EOpjce2axDUZWCTHs8 ZdDWPHH0M1iA6glaBRTCsK19N+V/KEWR+s6thI6t -----END CERTIFICATE-----Generated at Wed May 6 03:29:44 2026 by rpki-client