$ rpki-client -vvf rpki-rsync.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/3230322e3135322e3139332e302f32342d3234203d3e203633383539.roa File: 3230322e3135322e3139332e302f32342d3234203d3e203633383539.roa (raw, json) Hash identifier: 8xUt88GWo5Lh7HpcZIOQiiNvwVYn6c3qls4txEwd5Aw= Subject key identifier: 26:7F:11:A2:B9:6D:F0:A4:90:20:16:59:B6:C9:52:C5:1B:86:BA:B0 Certificate issuer: /CN=9BE1F1BA8091631A409BE939BDB0733274F4AAC4 Certificate serial: 3EFDA5DF61C7D604D2F8DC9A6EE5439FEA685FE7 Authority key identifier: 9B:E1:F1:BA:80:91:63:1A:40:9B:E9:39:BD:B0:73:32:74:F4:AA:C4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9BE1F1BA8091631A409BE939BDB0733274F4AAC4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/3230322e3135322e3139332e302f32342d3234203d3e203633383539.roa Signing time: Sun 03 May 2026 03:10:37 +0000 ROA not before: Sun 03 May 2026 03:05:37 +0000 ROA not after: Sun 02 May 2027 03:10:37 +0000 asID: 63859 IP address blocks: 202.152.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/9BE1F1BA8091631A409BE939BDB0733274F4AAC4.crl rsync://rpki-rsync.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/9BE1F1BA8091631A409BE939BDB0733274F4AAC4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9BE1F1BA8091631A409BE939BDB0733274F4AAC4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 10:27:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:fd:a5:df:61:c7:d6:04:d2:f8:dc:9a:6e:e5:43:9f:ea:68:5f:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9BE1F1BA8091631A409BE939BDB0733274F4AAC4 Validity Not Before: May 3 03:05:37 2026 GMT Not After : May 2 03:10:37 2027 GMT Subject: CN=267F11A2B96DF0A490201659B6C952C51B86BAB0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:6b:cd:3e:3b:cd:e8:d9:22:10:78:77:38:96: 78:35:41:6d:5f:35:b4:7b:db:6e:80:cc:d8:c5:b2: 0b:bd:92:17:96:70:b8:96:05:08:03:a4:f2:a2:db: 9a:08:71:7e:6c:d7:85:db:e6:7b:4e:08:c2:fb:43: 20:28:e6:87:69:f9:a5:62:2d:d2:52:a6:09:92:a6: f9:c4:f3:ed:39:ad:e6:48:3e:9f:62:35:3f:fb:ef: 11:44:93:5f:e3:e9:26:a1:6d:ea:e7:aa:40:34:73: e5:8c:0e:36:f2:7a:4b:3f:14:ea:58:71:1f:7f:8a: 08:4a:82:7c:95:c7:16:e5:12:5e:5b:71:a6:8c:7b: 8d:c6:5a:0f:85:50:c0:d8:2e:25:e6:64:f4:ef:4b: e1:bf:a9:15:ac:60:be:27:14:af:60:c9:a1:50:2c: 71:d2:0d:03:51:c6:b5:0e:ec:03:e3:b5:23:6e:4d: 90:28:4f:91:d4:63:8d:b0:7a:02:0e:88:2c:50:89: 20:5a:39:1d:5c:ba:be:3c:cd:7f:68:2c:10:e3:09: 43:e5:d0:bc:06:11:0b:ba:38:e5:8d:73:e1:30:14: c8:11:d3:df:f0:0a:d7:8c:13:50:e4:f0:17:ab:c1: 31:f4:fa:65:2d:26:aa:ef:60:98:2a:66:2b:3d:4e: 39:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:7F:11:A2:B9:6D:F0:A4:90:20:16:59:B6:C9:52:C5:1B:86:BA:B0 X509v3 Authority Key Identifier: keyid:9B:E1:F1:BA:80:91:63:1A:40:9B:E9:39:BD:B0:73:32:74:F4:AA:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/9BE1F1BA8091631A409BE939BDB0733274F4AAC4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9BE1F1BA8091631A409BE939BDB0733274F4AAC4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/3230322e3135322e3139332e302f32342d3234203d3e203633383539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.152.193.0/24 Signature Algorithm: sha256WithRSAEncryption 3c:57:ac:46:5b:9d:a9:94:80:b8:c6:f3:47:91:75:5e:fa:d3: 39:6c:00:94:8e:39:f1:1a:ee:3f:7a:2d:81:49:d8:63:06:a5: ce:5f:d6:fa:b7:51:06:dd:a4:15:e9:44:c6:ba:0b:c3:76:f0: fc:29:13:d1:ff:1a:c5:85:da:8a:59:24:9d:e1:e7:85:2b:97: 95:37:46:2b:30:b5:51:ee:5b:29:59:ae:f7:3d:c2:18:be:fb: 62:af:c8:b9:93:24:75:5c:2a:a0:8c:9b:39:96:e7:09:cf:47: 9d:5b:bf:3c:a0:38:c7:02:ed:55:76:b2:82:1d:f4:9e:ab:dc: f7:0b:2a:3e:7a:57:05:fe:e2:d2:92:e3:2f:96:42:f4:0d:dc: 6f:3e:6a:e3:d3:64:20:86:e2:b3:35:df:fe:29:91:b1:51:b8: ce:2c:77:4a:f0:79:51:74:08:1f:31:df:e0:a9:b1:96:02:ef: f8:a0:dd:75:d3:1c:13:4c:96:56:67:67:a1:60:2e:09:af:a6: d0:f4:19:b3:6e:57:2f:3d:d1:03:21:e1:98:8d:f7:ae:f4:57: 14:25:2d:30:e7:0a:e1:2b:96:29:3a:54:89:a7:47:3f:0f:7b: 35:2e:85:cb:25:16:13:6b:3e:18:8a:50:50:b5:05:c9:94:57: 9f:50:a3:4f -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUPv2l32HH1gTS+NyabuVDn+poX+cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUJFMUYxQkE4MDkxNjMxQTQwOUJFOTM5QkRCMDczMzI3 NEY0QUFDNDAeFw0yNjA1MDMwMzA1MzdaFw0yNzA1MDIwMzEwMzdaMDMxMTAvBgNV BAMTKDI2N0YxMUEyQjk2REYwQTQ5MDIwMTY1OUI2Qzk1MkM1MUI4NkJBQjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDea80+O83o2SIQeHc4lng1QW1f NbR7226AzNjFsgu9kheWcLiWBQgDpPKi25oIcX5s14Xb5ntOCML7QyAo5odp+aVi LdJSpgmSpvnE8+05reZIPp9iNT/77xFEk1/j6SahbernqkA0c+WMDjbyeks/FOpY cR9/ighKgnyVxxblEl5bcaaMe43GWg+FUMDYLiXmZPTvS+G/qRWsYL4nFK9gyaFQ LHHSDQNRxrUO7APjtSNuTZAoT5HUY42wegIOiCxQiSBaOR1cur48zX9oLBDjCUPl 0LwGEQu6OOWNc+EwFMgR09/wCteME1Dk8BerwTH0+mUtJqrvYJgqZis9TjlhAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUJn8Rorlt8KSQIBZZtslSxRuGurAwHwYDVR0j BBgwFoAUm+HxuoCRYxpAm+k5vbBzMnT0qsQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDhlM2IzOWMtZGExMS00NWVlLWFhYjMtNWNiMTRlYzQ0NzBjLzAvOUJFMUYxQkE4 MDkxNjMxQTQwOUJFOTM5QkRCMDczMzI3NEY0QUFDNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85QkUxRjFCQTgwOTE2MzFBNDA5QkU5MzlCREIwNzMzMjc0RjRB QUM0LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2Q4ZTNiMzljLWRhMTEtNDVlZS1h YWIzLTVjYjE0ZWM0NDcwYy8wLzMyMzAzMjJlMzEzNTMyMmUzMTM5MzMyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzNjMzMzgzNTM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAypjBMA0GCSqG SIb3DQEBCwUAA4IBAQA8V6xGW52plIC4xvNHkXVe+tM5bACUjjnxGu4/ei2BSdhj BqXOX9b6t1EG3aQV6UTGugvDdvD8KRPR/xrFhdqKWSSd4eeFK5eVN0YrMLVR7lsp Wa73PcIYvvtir8i5kyR1XCqgjJs5lucJz0edW788oDjHAu1VdrKCHfSeq9z3Cyo+ elcF/uLSkuMvlkL0DdxvPmrj02QghuKzNd/+KZGxUbjOLHdK8HlRdAgfMd/gqbGW Au/4oN110xwTTJZWZ2ehYC4Jr6bQ9BmzblcvPdEDIeGYjfeu9FcUJS0w5wrhK5Yp OlSJp0c/D3s1LoXLJRYTaz4YilBQtQXJlFefUKNP -----END CERTIFICATE-----Generated at Wed May 13 23:07:37 2026 by rpki-client