$ rpki-client -vvf rpki-rsync.idnic.net/repo/1c289706-a4f4-4e1f-9a6e-01c9c53cd8f9/0/3230322e34332e3235352e302f32342d3234203d3e20313338303734.roa File: 3230322e34332e3235352e302f32342d3234203d3e20313338303734.roa (raw, json) Hash identifier: ecVKsNk2S0Aj+ACqfjrNpX8pv8RXijVnKVy2HYKiIA0= Subject key identifier: 65:48:FF:FE:C6:99:99:82:E8:44:5D:29:57:F9:E6:F0:30:EA:39:53 Certificate issuer: /CN=0446D571B5FD57D22786B0872C74829904EAAB9F Certificate serial: 4515D7942A3EF4B6567C145461842523D810841E Authority key identifier: 04:46:D5:71:B5:FD:57:D2:27:86:B0:87:2C:74:82:99:04:EA:AB:9F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0446D571B5FD57D22786B0872C74829904EAAB9F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1c289706-a4f4-4e1f-9a6e-01c9c53cd8f9/0/3230322e34332e3235352e302f32342d3234203d3e20313338303734.roa Signing time: Sun 03 May 2026 02:17:26 +0000 ROA not before: Sun 03 May 2026 02:12:26 +0000 ROA not after: Sun 02 May 2027 02:17:26 +0000 asID: 138074 IP address blocks: 202.43.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1c289706-a4f4-4e1f-9a6e-01c9c53cd8f9/0/0446D571B5FD57D22786B0872C74829904EAAB9F.crl rsync://rpki-rsync.idnic.net/repo/1c289706-a4f4-4e1f-9a6e-01c9c53cd8f9/0/0446D571B5FD57D22786B0872C74829904EAAB9F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0446D571B5FD57D22786B0872C74829904EAAB9F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 May 2026 10:39:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:15:d7:94:2a:3e:f4:b6:56:7c:14:54:61:84:25:23:d8:10:84:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0446D571B5FD57D22786B0872C74829904EAAB9F Validity Not Before: May 3 02:12:26 2026 GMT Not After : May 2 02:17:26 2027 GMT Subject: CN=6548FFFEC6999982E8445D2957F9E6F030EA3953 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:8e:7d:5f:c8:46:26:63:05:c9:c6:bb:3e:55: c8:89:09:c4:b9:fb:ea:6b:7e:0b:0b:14:5b:10:ae: 27:09:47:ad:d8:73:15:7e:01:e9:79:40:ee:15:fe: ae:1c:30:4a:36:3c:f9:b4:31:44:7e:0d:c2:c5:f6: d6:94:3c:26:33:66:9e:8f:5d:02:02:72:6c:68:84: 2d:8e:6e:7f:02:ed:de:9d:35:52:30:9d:46:5d:ba: 0f:42:26:81:1b:a2:55:f0:db:72:26:75:4a:fe:71: f7:82:d2:ee:8d:81:a1:a4:40:c8:b0:74:ab:a4:67: 05:ce:df:7d:63:24:f3:b0:2a:74:a5:33:0c:0c:91: 48:62:f4:7a:c1:06:e4:1c:7d:94:d1:78:6d:26:ff: 75:43:41:da:fc:18:e1:76:23:51:6a:31:55:1f:ad: 18:2e:56:49:88:36:a0:a5:1a:a0:4f:fd:e1:ca:b5: f9:b2:2e:87:be:bf:a6:a4:4c:80:24:e7:48:38:13: 26:e1:0b:ff:80:c4:23:71:24:21:fd:0e:db:24:d4: fb:1b:fe:6a:18:d9:a1:75:e3:3c:53:2c:a6:79:98: 7f:e0:df:65:02:44:c1:a5:88:91:1e:80:f7:51:69: 0a:4b:a9:51:60:19:46:1c:5e:3d:15:97:55:aa:94: e3:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:48:FF:FE:C6:99:99:82:E8:44:5D:29:57:F9:E6:F0:30:EA:39:53 X509v3 Authority Key Identifier: keyid:04:46:D5:71:B5:FD:57:D2:27:86:B0:87:2C:74:82:99:04:EA:AB:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1c289706-a4f4-4e1f-9a6e-01c9c53cd8f9/0/0446D571B5FD57D22786B0872C74829904EAAB9F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0446D571B5FD57D22786B0872C74829904EAAB9F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1c289706-a4f4-4e1f-9a6e-01c9c53cd8f9/0/3230322e34332e3235352e302f32342d3234203d3e20313338303734.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.43.255.0/24 Signature Algorithm: sha256WithRSAEncryption 2e:13:14:23:73:99:ad:7b:cb:c7:ed:f5:0f:fb:53:ab:19:25: f2:f9:b4:9c:8a:e8:d7:00:79:40:5f:a4:dc:3d:61:28:85:f9: 74:28:6f:29:81:e2:6f:db:01:e2:59:aa:d6:57:50:ea:7d:59: c4:4d:5c:0b:5c:8d:d9:b9:1d:cb:45:90:35:5e:3c:fb:4f:fd: a3:ff:7f:4d:9e:fa:3b:7a:c6:9b:30:9c:6f:ba:14:84:70:68: 47:c4:3b:ab:35:d4:76:80:3a:38:48:a6:3c:16:9c:8b:63:13: 60:2c:ab:05:e5:53:74:93:70:30:22:ac:85:2d:a1:b7:a3:4d: 59:cb:a2:d0:f5:16:3e:41:9a:dc:a8:cf:cd:83:0c:93:6b:7d: 72:fd:fe:5e:72:37:95:bb:13:ee:92:38:8a:58:87:de:01:b4: b5:d8:ef:50:c9:6b:13:25:20:20:86:b9:33:4d:4b:18:c5:e8: 4f:63:3b:6e:5a:18:40:57:51:40:f1:c3:9c:e0:4d:fc:74:5c: 39:c7:90:3d:36:98:8a:69:75:59:a5:40:b3:51:11:4c:33:e3: 42:03:72:b4:0b:dd:6e:06:71:17:de:4a:19:de:fb:a5:44:99: ad:21:f1:a3:1a:07:f6:7e:77:b1:42:86:25:c2:61:18:d8:93: 10:d6:cd:96 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIURRXXlCo+9LZWfBRUYYQlI9gQhB4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDQ0NkQ1NzFCNUZENTdEMjI3ODZCMDg3MkM3NDgyOTkw NEVBQUI5RjAeFw0yNjA1MDMwMjEyMjZaFw0yNzA1MDIwMjE3MjZaMDMxMTAvBgNV BAMTKDY1NDhGRkZFQzY5OTk5ODJFODQ0NUQyOTU3RjlFNkYwMzBFQTM5NTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsjn1fyEYmYwXJxrs+VciJCcS5 ++prfgsLFFsQricJR63YcxV+Ael5QO4V/q4cMEo2PPm0MUR+DcLF9taUPCYzZp6P XQICcmxohC2Obn8C7d6dNVIwnUZdug9CJoEbolXw23ImdUr+cfeC0u6NgaGkQMiw dKukZwXO331jJPOwKnSlMwwMkUhi9HrBBuQcfZTReG0m/3VDQdr8GOF2I1FqMVUf rRguVkmINqClGqBP/eHKtfmyLoe+v6akTIAk50g4EybhC/+AxCNxJCH9Dtsk1Psb /moY2aF14zxTLKZ5mH/g32UCRMGliJEegPdRaQpLqVFgGUYcXj0Vl1WqlOOXAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUZUj//saZmYLoRF0pV/nm8DDqOVMwHwYDVR0j BBgwFoAUBEbVcbX9V9InhrCHLHSCmQTqq58wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWMyODk3MDYtYTRmNC00ZTFmLTlhNmUtMDFjOWM1M2NkOGY5LzAvMDQ0NkQ1NzFC NUZENTdEMjI3ODZCMDg3MkM3NDgyOTkwNEVBQUI5Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wNDQ2RDU3MUI1RkQ1N0QyMjc4NkIwODcyQzc0ODI5OTA0RUFB QjlGLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzFjMjg5NzA2LWE0ZjQtNGUxZi05 YTZlLTAxYzljNTNjZDhmOS8wLzMyMzAzMjJlMzQzMzJlMzIzNTM1MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzM4MzAzNzM0LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyiv/MA0GCSqG SIb3DQEBCwUAA4IBAQAuExQjc5mte8vH7fUP+1OrGSXy+bSciujXAHlAX6TcPWEo hfl0KG8pgeJv2wHiWarWV1DqfVnETVwLXI3ZuR3LRZA1Xjz7T/2j/39Nnvo7esab MJxvuhSEcGhHxDurNdR2gDo4SKY8FpyLYxNgLKsF5VN0k3AwIqyFLaG3o01Zy6LQ 9RY+QZrcqM/NgwyTa31y/f5ecjeVuxPukjiKWIfeAbS12O9QyWsTJSAghrkzTUsY xehPYztuWhhAV1FA8cOc4E38dFw5x5A9NpiKaXVZpUCzURFMM+NCA3K0C91uBnEX 3koZ3vulRJmtIfGjGgf2fnexQoYlwmEY2JMQ1s2W -----END CERTIFICATE-----Generated at Wed May 6 03:29:44 2026 by rpki-client