$ rpki-client -vvf rpki-rsync.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/3230322e3135322e3139362e302f32342d3234203d3e203633383539.roa File: 3230322e3135322e3139362e302f32342d3234203d3e203633383539.roa (raw, json) Hash identifier: IiX5vZYV34MLgOX/GRxuakpCz+OmnJUby0rObSh/dR0= Subject key identifier: 80:74:C7:F2:59:6B:DE:72:82:23:AE:2E:21:62:76:FA:17:27:85:91 Certificate issuer: /CN=9BE1F1BA8091631A409BE939BDB0733274F4AAC4 Certificate serial: 1FC0594BE4A8584F17526AB1834FD4772D33A979 Authority key identifier: 9B:E1:F1:BA:80:91:63:1A:40:9B:E9:39:BD:B0:73:32:74:F4:AA:C4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9BE1F1BA8091631A409BE939BDB0733274F4AAC4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/3230322e3135322e3139362e302f32342d3234203d3e203633383539.roa Signing time: Sun 03 May 2026 03:10:35 +0000 ROA not before: Sun 03 May 2026 03:05:35 +0000 ROA not after: Sun 02 May 2027 03:10:35 +0000 asID: 63859 IP address blocks: 202.152.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/9BE1F1BA8091631A409BE939BDB0733274F4AAC4.crl rsync://rpki-rsync.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/9BE1F1BA8091631A409BE939BDB0733274F4AAC4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9BE1F1BA8091631A409BE939BDB0733274F4AAC4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 10:27:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:c0:59:4b:e4:a8:58:4f:17:52:6a:b1:83:4f:d4:77:2d:33:a9:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9BE1F1BA8091631A409BE939BDB0733274F4AAC4 Validity Not Before: May 3 03:05:35 2026 GMT Not After : May 2 03:10:35 2027 GMT Subject: CN=8074C7F2596BDE728223AE2E216276FA17278591 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:c5:11:f0:28:cd:3a:ba:0a:f3:f2:54:96:f2: cd:76:8c:71:78:d6:50:79:f7:3c:c1:c3:f2:fa:fa: 1d:1e:14:0d:3e:bb:27:66:08:98:b5:ad:d3:cd:77: ea:b9:89:28:92:5e:8e:e7:b3:fe:cd:eb:89:e6:27: 29:b0:dc:3f:72:8d:20:5a:c6:6d:5e:21:f7:c5:9d: d0:23:69:9c:bb:6a:98:b7:b7:06:a9:85:ea:26:b7: 70:c7:42:48:9d:f8:7e:00:cb:20:b1:2b:fc:8c:1b: d6:c3:d5:4c:6a:3b:d4:03:a3:23:a8:4d:86:df:c8: 9c:5a:bc:0e:0f:25:dd:3a:51:24:1f:c8:31:5d:81: ff:31:a7:e3:66:bb:b0:f8:04:cb:b2:d9:0d:15:07: ad:f3:94:5b:ca:23:2d:c9:c8:ab:d0:59:3c:43:b6: ff:31:dd:b7:cc:6e:af:bc:86:00:df:ef:b0:15:cb: 8c:ed:24:c4:69:ea:6d:95:44:05:a0:92:92:66:f6: c4:b7:4f:97:c6:e3:96:33:0a:74:07:dc:44:32:3e: 64:78:70:62:25:9e:1d:a5:9a:4b:82:95:fc:04:90: 89:49:e7:45:00:b1:df:4d:19:ab:45:b6:5f:38:e0: 8c:55:22:c2:28:cc:3c:a8:a6:33:12:8d:2a:57:f4: 1e:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:74:C7:F2:59:6B:DE:72:82:23:AE:2E:21:62:76:FA:17:27:85:91 X509v3 Authority Key Identifier: keyid:9B:E1:F1:BA:80:91:63:1A:40:9B:E9:39:BD:B0:73:32:74:F4:AA:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/9BE1F1BA8091631A409BE939BDB0733274F4AAC4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9BE1F1BA8091631A409BE939BDB0733274F4AAC4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/3230322e3135322e3139362e302f32342d3234203d3e203633383539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.152.196.0/24 Signature Algorithm: sha256WithRSAEncryption b4:ca:34:8b:9d:c6:36:dd:07:be:af:20:17:33:de:1a:30:00: 91:0a:97:ad:c8:47:6c:d4:69:0e:46:e2:c7:9a:88:53:be:26: 66:1f:8b:30:e6:8b:69:87:8e:3a:79:3f:b5:da:79:2f:a2:8a: 16:8b:d6:7a:37:5d:cd:d8:ad:9c:8c:fb:e9:3b:3e:18:04:83: 0e:74:2a:b7:f9:f1:0a:04:c2:ca:68:1b:a3:fd:98:2a:c9:bd: 95:ac:49:b8:ad:2c:3e:37:7e:86:c6:5d:fe:28:17:e1:57:1f: f3:01:1c:2d:68:45:a8:d2:8a:ec:c9:9d:6a:99:f1:89:a7:9b: fd:d2:87:05:f7:71:0d:b8:45:02:c9:18:b9:c8:a8:dd:fa:f1: 24:5f:4b:bf:34:66:54:18:22:08:24:89:40:08:9b:ee:98:ef: f3:61:0d:74:ef:34:db:39:7e:98:19:51:a8:49:c2:49:04:a6: f1:44:6c:b1:73:45:55:7e:3a:c3:2d:45:25:b3:d0:95:28:9d: 86:16:19:93:de:0f:8b:eb:d5:db:38:66:86:28:d6:bc:a8:fb: e9:f2:46:af:25:a9:71:6e:b9:b3:bc:04:d5:2e:95:2e:4c:fc: 5a:2c:69:13:0d:20:04:a3:0a:72:ed:fe:5a:5a:49:82:bd:d5: 61:fd:41:50 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUH8BZS+SoWE8XUmqxg0/Udy0zqXkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUJFMUYxQkE4MDkxNjMxQTQwOUJFOTM5QkRCMDczMzI3 NEY0QUFDNDAeFw0yNjA1MDMwMzA1MzVaFw0yNzA1MDIwMzEwMzVaMDMxMTAvBgNV BAMTKDgwNzRDN0YyNTk2QkRFNzI4MjIzQUUyRTIxNjI3NkZBMTcyNzg1OTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtxRHwKM06ugrz8lSW8s12jHF4 1lB59zzBw/L6+h0eFA0+uydmCJi1rdPNd+q5iSiSXo7ns/7N64nmJymw3D9yjSBa xm1eIffFndAjaZy7api3twapheomt3DHQkid+H4AyyCxK/yMG9bD1UxqO9QDoyOo TYbfyJxavA4PJd06USQfyDFdgf8xp+Nmu7D4BMuy2Q0VB63zlFvKIy3JyKvQWTxD tv8x3bfMbq+8hgDf77AVy4ztJMRp6m2VRAWgkpJm9sS3T5fG45YzCnQH3EQyPmR4 cGIlnh2lmkuClfwEkIlJ50UAsd9NGatFtl844IxVIsIozDyopjMSjSpX9B7pAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUgHTH8llr3nKCI64uIWJ2+hcnhZEwHwYDVR0j BBgwFoAUm+HxuoCRYxpAm+k5vbBzMnT0qsQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDhlM2IzOWMtZGExMS00NWVlLWFhYjMtNWNiMTRlYzQ0NzBjLzAvOUJFMUYxQkE4 MDkxNjMxQTQwOUJFOTM5QkRCMDczMzI3NEY0QUFDNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85QkUxRjFCQTgwOTE2MzFBNDA5QkU5MzlCREIwNzMzMjc0RjRB QUM0LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2Q4ZTNiMzljLWRhMTEtNDVlZS1h YWIzLTVjYjE0ZWM0NDcwYy8wLzMyMzAzMjJlMzEzNTMyMmUzMTM5MzYyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzNjMzMzgzNTM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAypjEMA0GCSqG SIb3DQEBCwUAA4IBAQC0yjSLncY23Qe+ryAXM94aMACRCpetyEds1GkORuLHmohT viZmH4sw5otph446eT+12nkvoooWi9Z6N13N2K2cjPvpOz4YBIMOdCq3+fEKBMLK aBuj/Zgqyb2VrEm4rSw+N36Gxl3+KBfhVx/zARwtaEWo0orsyZ1qmfGJp5v90ocF 93ENuEUCyRi5yKjd+vEkX0u/NGZUGCIIJIlACJvumO/zYQ107zTbOX6YGVGoScJJ BKbxRGyxc0VVfjrDLUUls9CVKJ2GFhmT3g+L69XbOGaGKNa8qPvp8kavJalxbrmz vATVLpUuTPxaLGkTDSAEowpy7f5aWkmCvdVh/UFQ -----END CERTIFICATE-----Generated at Wed May 13 23:07:36 2026 by rpki-client