$ rpki-client -vvf rpki-rsync.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/3136332e35332e3139342e302f32342d3234203d3e203538333831.roa File: 3136332e35332e3139342e302f32342d3234203d3e203538333831.roa (raw, json) Hash identifier: aop1U/z5XKpBzcRvoj7W7+/ffJTbEvTMlvj03extEio= Subject key identifier: 38:D5:F2:97:C2:4B:5C:6E:3E:B7:8B:E6:AD:23:17:15:18:9E:7F:BC Certificate issuer: /CN=0FB424B20D6A4580E6D3233FCF2EB9F2BDA99CB0 Certificate serial: 28933F157B342970619660F0FC3B72C898870B6F Authority key identifier: 0F:B4:24:B2:0D:6A:45:80:E6:D3:23:3F:CF:2E:B9:F2:BD:A9:9C:B0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0FB424B20D6A4580E6D3233FCF2EB9F2BDA99CB0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/3136332e35332e3139342e302f32342d3234203d3e203538333831.roa Signing time: Sun 03 May 2026 02:24:47 +0000 ROA not before: Sun 03 May 2026 02:19:47 +0000 ROA not after: Sun 02 May 2027 02:24:47 +0000 asID: 58381 IP address blocks: 163.53.194.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/0FB424B20D6A4580E6D3233FCF2EB9F2BDA99CB0.crl rsync://rpki-rsync.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/0FB424B20D6A4580E6D3233FCF2EB9F2BDA99CB0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0FB424B20D6A4580E6D3233FCF2EB9F2BDA99CB0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 May 2026 13:33:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:93:3f:15:7b:34:29:70:61:96:60:f0:fc:3b:72:c8:98:87:0b:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0FB424B20D6A4580E6D3233FCF2EB9F2BDA99CB0 Validity Not Before: May 3 02:19:47 2026 GMT Not After : May 2 02:24:47 2027 GMT Subject: CN=38D5F297C24B5C6E3EB78BE6AD231715189E7FBC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:3b:6d:8f:3f:d7:ed:7d:83:4b:18:f2:fc:ea: 02:81:25:a5:66:f1:05:41:19:4a:c7:d9:61:2d:b0: 4a:3b:98:f6:3b:54:63:3e:41:91:3f:23:aa:38:eb: 2e:7a:95:38:d2:da:d9:aa:30:bb:14:ab:2f:ca:47: ad:77:7c:d2:b0:d1:9c:9e:3d:4b:a4:d3:b6:94:6a: ed:e3:15:dc:24:a7:35:7d:c0:59:93:a3:cd:a7:28: d2:dd:bc:18:3d:fc:b9:b9:2f:11:02:a3:f6:91:80: 86:28:ec:97:43:2f:b4:44:a3:8d:c9:ac:28:bb:7c: 2d:97:7d:09:6c:11:6f:28:0e:35:b7:b7:b7:be:25: 57:d0:2d:0b:91:30:cd:e8:f1:be:b0:1e:80:66:23: a1:b2:54:79:dd:53:43:b5:fa:dc:b9:02:38:9e:71: 41:2e:53:7a:bd:cb:69:3f:2a:81:ea:51:4a:4e:74: d1:2b:87:90:bf:82:5c:11:42:3d:5a:93:bd:d7:5c: 37:b0:8f:10:e9:77:de:d1:0f:8e:d7:db:88:23:b7: ca:56:68:ac:25:15:5d:94:f4:11:ca:2d:45:8d:d6: f0:17:38:ae:e8:20:b1:ce:3c:3c:de:a9:6c:52:bb: 2f:94:64:ed:e0:49:2e:fd:5e:a1:b1:ec:7f:53:a8: 82:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:D5:F2:97:C2:4B:5C:6E:3E:B7:8B:E6:AD:23:17:15:18:9E:7F:BC X509v3 Authority Key Identifier: keyid:0F:B4:24:B2:0D:6A:45:80:E6:D3:23:3F:CF:2E:B9:F2:BD:A9:9C:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/0FB424B20D6A4580E6D3233FCF2EB9F2BDA99CB0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0FB424B20D6A4580E6D3233FCF2EB9F2BDA99CB0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/3136332e35332e3139342e302f32342d3234203d3e203538333831.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.53.194.0/24 Signature Algorithm: sha256WithRSAEncryption 25:3e:9f:a3:0b:71:23:a4:2c:c4:00:c2:52:b1:29:06:cf:56: 9d:6d:ff:65:d5:ba:0d:07:0b:18:08:da:1b:51:da:b9:e0:ff: ec:0a:e2:19:78:28:03:57:cf:0c:9f:b1:e4:55:78:49:98:2d: b9:68:8b:9a:27:45:4e:69:4d:c4:1f:ac:f9:25:34:c1:09:32: 1a:3a:02:cc:15:28:ae:12:31:cb:5f:69:29:9f:2d:4d:19:d0: 26:da:0f:c4:52:de:48:a9:c9:c5:75:6c:25:02:e6:22:90:90: d1:07:77:ce:e0:fb:89:44:a6:44:5d:7a:98:cc:b3:f5:15:c2: 7a:ac:39:e9:af:26:58:66:93:fb:c5:b2:54:b0:e0:90:a1:25: 11:40:82:61:b4:45:11:cb:ac:17:d8:c8:e1:20:92:58:09:ef: bc:76:2e:93:fd:09:b5:0b:80:f0:ce:97:9b:19:65:81:b2:1a: 67:b2:6c:d3:c6:c3:ce:13:22:b9:12:09:2d:9b:06:a0:ed:29: 20:c0:81:21:3a:08:36:55:6e:67:5e:da:b3:a1:37:ac:d1:96: 94:8a:88:1a:90:b9:a9:6d:b6:6d:59:1a:b0:40:ba:d4:29:e9: 2e:d2:a6:e7:ce:0e:90:5c:cf:39:fb:5a:d2:cb:24:67:fb:d4: 25:bb:29:c2 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUKJM/FXs0KXBhlmDw/DtyyJiHC28wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEZCNDI0QjIwRDZBNDU4MEU2RDMyMzNGQ0YyRUI5RjJC REE5OUNCMDAeFw0yNjA1MDMwMjE5NDdaFw0yNzA1MDIwMjI0NDdaMDMxMTAvBgNV BAMTKDM4RDVGMjk3QzI0QjVDNkUzRUI3OEJFNkFEMjMxNzE1MTg5RTdGQkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClO22PP9ftfYNLGPL86gKBJaVm 8QVBGUrH2WEtsEo7mPY7VGM+QZE/I6o46y56lTjS2tmqMLsUqy/KR613fNKw0Zye PUuk07aUau3jFdwkpzV9wFmTo82nKNLdvBg9/Lm5LxECo/aRgIYo7JdDL7REo43J rCi7fC2XfQlsEW8oDjW3t7e+JVfQLQuRMM3o8b6wHoBmI6GyVHndU0O1+ty5Ajie cUEuU3q9y2k/KoHqUUpOdNErh5C/glwRQj1ak73XXDewjxDpd97RD47X24gjt8pW aKwlFV2U9BHKLUWN1vAXOK7oILHOPDzeqWxSuy+UZO3gSS79XqGx7H9TqIL7AgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUONXyl8JLXG4+t4vmrSMXFRief7wwHwYDVR0j BBgwFoAUD7Qksg1qRYDm0yM/zy658r2pnLAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzM4ZDI3NTUtMzgwZC00NzdlLWJmMjUtMGFmMjkwMjZiZDcwLzAvMEZCNDI0QjIw RDZBNDU4MEU2RDMyMzNGQ0YyRUI5RjJCREE5OUNCMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wRkI0MjRCMjBENkE0NTgwRTZEMzIzM0ZDRjJFQjlGMkJEQTk5 Q0IwLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzMzOGQyNzU1LTM4MGQtNDc3ZS1i ZjI1LTBhZjI5MDI2YmQ3MC8wLzMxMzYzMzJlMzUzMzJlMzEzOTM0MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzUzODMzMzgzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKM1wjANBgkqhkiG 9w0BAQsFAAOCAQEAJT6fowtxI6QsxADCUrEpBs9WnW3/ZdW6DQcLGAjaG1HaueD/ 7AriGXgoA1fPDJ+x5FV4SZgtuWiLmidFTmlNxB+s+SU0wQkyGjoCzBUorhIxy19p KZ8tTRnQJtoPxFLeSKnJxXVsJQLmIpCQ0Qd3zuD7iUSmRF16mMyz9RXCeqw56a8m WGaT+8WyVLDgkKElEUCCYbRFEcusF9jI4SCSWAnvvHYuk/0JtQuA8M6XmxllgbIa Z7Js08bDzhMiuRIJLZsGoO0pIMCBIToINlVuZ17as6E3rNGWlIqIGpC5qW22bVka sEC61CnpLtKm584OkFzPOfta0sskZ/vUJbspwg== -----END CERTIFICATE-----Generated at Wed May 6 02:06:52 2026 by rpki-client