$ rpki-client -vvf rpki-rsync.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/3230322e3135322e3139382e302f32342d3234203d3e203633383539.roa File: 3230322e3135322e3139382e302f32342d3234203d3e203633383539.roa (raw, json) Hash identifier: 9ukbLf5qQb1rXyNwLc+GXHdfVwvyPUN+V3xFvkC1PU8= Subject key identifier: 33:5F:1C:B0:11:A8:74:01:32:44:EC:67:61:6B:D4:32:45:29:A8:E6 Certificate issuer: /CN=9BE1F1BA8091631A409BE939BDB0733274F4AAC4 Certificate serial: 6D79060A3CD82DB0FAD0F70756DEAEAD7F45F9A9 Authority key identifier: 9B:E1:F1:BA:80:91:63:1A:40:9B:E9:39:BD:B0:73:32:74:F4:AA:C4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9BE1F1BA8091631A409BE939BDB0733274F4AAC4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/3230322e3135322e3139382e302f32342d3234203d3e203633383539.roa Signing time: Sun 03 May 2026 03:10:29 +0000 ROA not before: Sun 03 May 2026 03:05:29 +0000 ROA not after: Sun 02 May 2027 03:10:29 +0000 asID: 63859 IP address blocks: 202.152.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/9BE1F1BA8091631A409BE939BDB0733274F4AAC4.crl rsync://rpki-rsync.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/9BE1F1BA8091631A409BE939BDB0733274F4AAC4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9BE1F1BA8091631A409BE939BDB0733274F4AAC4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 10:27:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:79:06:0a:3c:d8:2d:b0:fa:d0:f7:07:56:de:ae:ad:7f:45:f9:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9BE1F1BA8091631A409BE939BDB0733274F4AAC4 Validity Not Before: May 3 03:05:29 2026 GMT Not After : May 2 03:10:29 2027 GMT Subject: CN=335F1CB011A874013244EC67616BD4324529A8E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:3f:30:cf:6a:f6:90:91:c3:51:2c:e0:2d:fb: 68:5b:46:18:a5:73:74:a2:02:86:38:d3:03:a3:4a: 1b:31:c3:2c:ed:7b:c4:62:12:8f:58:71:a8:db:07: 4b:3d:08:85:d7:d1:85:1a:7b:df:48:32:d1:d6:85: 1c:b0:6a:67:ec:84:6d:26:7e:94:ea:47:45:3f:84: 63:a0:71:a3:d2:9f:e9:17:4d:e2:16:cc:dc:16:4e: 54:de:d7:06:1f:30:70:67:32:5a:ad:74:b0:e7:83: 6c:9b:15:10:5e:de:82:01:b0:eb:b7:69:9b:32:4e: 9f:a8:65:56:54:8d:24:1e:93:a0:21:6b:b4:36:89: 1f:1e:12:a6:de:33:19:84:d5:e9:76:6a:83:8d:31: ae:01:36:08:66:32:28:16:22:4b:cb:bf:31:7b:27: 3a:fd:ac:bc:e8:5d:39:31:f2:64:8f:68:4e:c6:fc: 8d:76:0c:39:20:1d:cd:5e:14:76:6b:03:ef:d3:dc: 2e:58:f3:04:14:f6:7e:0c:8b:4d:90:e5:36:ab:11: 47:fb:36:f1:c2:3f:9e:81:57:46:3d:f3:34:90:52: 8c:a1:88:7b:d1:10:46:08:fc:cc:fd:91:56:83:a7: 3a:1a:e1:9a:fb:60:ee:4b:3e:31:5f:11:3e:ec:52: e4:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:5F:1C:B0:11:A8:74:01:32:44:EC:67:61:6B:D4:32:45:29:A8:E6 X509v3 Authority Key Identifier: keyid:9B:E1:F1:BA:80:91:63:1A:40:9B:E9:39:BD:B0:73:32:74:F4:AA:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/9BE1F1BA8091631A409BE939BDB0733274F4AAC4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9BE1F1BA8091631A409BE939BDB0733274F4AAC4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/3230322e3135322e3139382e302f32342d3234203d3e203633383539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.152.198.0/24 Signature Algorithm: sha256WithRSAEncryption 8b:ca:f2:5e:dc:6e:0e:6d:7b:3d:93:82:a2:7f:f6:ff:09:1c: da:35:e0:b3:bd:0b:4e:8f:f9:7c:1e:75:a7:72:61:b5:f1:fe: 09:51:48:8a:1d:9e:6e:df:b3:2e:fc:60:fb:02:d0:70:57:d1: 1a:09:28:74:f8:aa:d5:de:b9:b7:27:f1:69:2e:b8:a2:c1:0d: e7:8c:82:d8:58:b3:86:0b:ab:96:ac:c5:89:8c:e9:54:9a:6e: 7e:59:11:7d:0b:61:c9:77:5c:a1:3c:ec:cf:45:2c:b8:14:7b: 08:bd:7a:27:34:f8:2f:85:d8:85:24:24:7c:c4:8b:8a:d8:cd: 0c:1f:b5:ab:34:51:70:8e:3b:85:dd:11:d5:4d:05:5e:36:2f: 96:8e:e5:af:af:c9:ed:97:c6:03:e3:ff:48:21:52:0b:58:6e: e9:86:47:dd:3e:bf:17:c5:e1:b4:4a:9d:91:09:13:f3:eb:72: 5a:93:09:7d:25:f3:2f:c9:61:09:45:4c:9b:3c:b6:f7:0e:0c: 74:55:aa:9c:1d:1b:19:7e:6c:3b:96:e2:f4:02:2a:98:b8:a1: 7c:29:0d:ea:2e:30:59:85:34:37:ad:30:8a:c3:59:5b:8c:67: f7:78:46:fb:90:6d:b8:1b:61:77:c3:7f:fd:a0:cc:ee:a8:93: 85:97:ed:71 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUbXkGCjzYLbD60PcHVt6urX9F+akwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUJFMUYxQkE4MDkxNjMxQTQwOUJFOTM5QkRCMDczMzI3 NEY0QUFDNDAeFw0yNjA1MDMwMzA1MjlaFw0yNzA1MDIwMzEwMjlaMDMxMTAvBgNV BAMTKDMzNUYxQ0IwMTFBODc0MDEzMjQ0RUM2NzYxNkJENDMyNDUyOUE4RTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlPzDPavaQkcNRLOAt+2hbRhil c3SiAoY40wOjShsxwyzte8RiEo9YcajbB0s9CIXX0YUae99IMtHWhRywamfshG0m fpTqR0U/hGOgcaPSn+kXTeIWzNwWTlTe1wYfMHBnMlqtdLDng2ybFRBe3oIBsOu3 aZsyTp+oZVZUjSQek6Aha7Q2iR8eEqbeMxmE1el2aoONMa4BNghmMigWIkvLvzF7 Jzr9rLzoXTkx8mSPaE7G/I12DDkgHc1eFHZrA+/T3C5Y8wQU9n4Mi02Q5TarEUf7 NvHCP56BV0Y98zSQUoyhiHvREEYI/Mz9kVaDpzoa4Zr7YO5LPjFfET7sUuSHAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUM18csBGodAEyROxnYWvUMkUpqOYwHwYDVR0j BBgwFoAUm+HxuoCRYxpAm+k5vbBzMnT0qsQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDhlM2IzOWMtZGExMS00NWVlLWFhYjMtNWNiMTRlYzQ0NzBjLzAvOUJFMUYxQkE4 MDkxNjMxQTQwOUJFOTM5QkRCMDczMzI3NEY0QUFDNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85QkUxRjFCQTgwOTE2MzFBNDA5QkU5MzlCREIwNzMzMjc0RjRB QUM0LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2Q4ZTNiMzljLWRhMTEtNDVlZS1h YWIzLTVjYjE0ZWM0NDcwYy8wLzMyMzAzMjJlMzEzNTMyMmUzMTM5MzgyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzNjMzMzgzNTM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAypjGMA0GCSqG SIb3DQEBCwUAA4IBAQCLyvJe3G4ObXs9k4Kif/b/CRzaNeCzvQtOj/l8HnWncmG1 8f4JUUiKHZ5u37Mu/GD7AtBwV9EaCSh0+KrV3rm3J/FpLriiwQ3njILYWLOGC6uW rMWJjOlUmm5+WRF9C2HJd1yhPOzPRSy4FHsIvXonNPgvhdiFJCR8xIuK2M0MH7Wr NFFwjjuF3RHVTQVeNi+WjuWvr8ntl8YD4/9IIVILWG7phkfdPr8XxeG0Sp2RCRPz 63Jakwl9JfMvyWEJRUybPLb3Dgx0VaqcHRsZfmw7luL0AiqYuKF8KQ3qLjBZhTQ3 rTCKw1lbjGf3eEb7kG24G2F3w3/9oMzuqJOFl+1x -----END CERTIFICATE-----Generated at Wed May 13 23:07:36 2026 by rpki-client