$ rpki-client -vvf rpki-rsync.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/3230322e3135322e3230322e302f32342d3234203d3e203633383539.roa File: 3230322e3135322e3230322e302f32342d3234203d3e203633383539.roa (raw, json) Hash identifier: ZN11kMbpQEiQxZkCv4YoKpVbtM+I8QNVgn3BqfSzPFM= Subject key identifier: BD:88:F5:C9:98:11:5D:64:B3:29:32:25:21:91:E8:A3:F1:EB:23:00 Certificate issuer: /CN=9BE1F1BA8091631A409BE939BDB0733274F4AAC4 Certificate serial: 218524EC9BBAB8BD8C89B27347B20530BA0AD58F Authority key identifier: 9B:E1:F1:BA:80:91:63:1A:40:9B:E9:39:BD:B0:73:32:74:F4:AA:C4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9BE1F1BA8091631A409BE939BDB0733274F4AAC4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/3230322e3135322e3230322e302f32342d3234203d3e203633383539.roa Signing time: Sun 03 May 2026 03:10:35 +0000 ROA not before: Sun 03 May 2026 03:05:35 +0000 ROA not after: Sun 02 May 2027 03:10:35 +0000 asID: 63859 IP address blocks: 202.152.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/9BE1F1BA8091631A409BE939BDB0733274F4AAC4.crl rsync://rpki-rsync.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/9BE1F1BA8091631A409BE939BDB0733274F4AAC4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9BE1F1BA8091631A409BE939BDB0733274F4AAC4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 10:27:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:85:24:ec:9b:ba:b8:bd:8c:89:b2:73:47:b2:05:30:ba:0a:d5:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9BE1F1BA8091631A409BE939BDB0733274F4AAC4 Validity Not Before: May 3 03:05:35 2026 GMT Not After : May 2 03:10:35 2027 GMT Subject: CN=BD88F5C998115D64B32932252191E8A3F1EB2300 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:cb:de:e4:cb:12:fb:05:04:c6:55:c0:a3:16: be:44:76:7d:40:0e:e8:89:f7:51:ad:80:16:a5:24: 9d:eb:d7:c2:57:5a:b3:01:08:9b:4d:2c:9a:a9:80: d3:6e:00:54:7d:5f:82:2d:41:16:52:48:96:ee:4a: 10:8c:92:57:0c:ba:55:b2:0a:e4:db:c8:1d:80:0e: 31:aa:23:03:b6:eb:00:dc:78:2b:61:d2:a7:74:92: c7:b0:25:e9:d3:88:87:4d:4a:25:78:42:4f:7f:33: aa:91:35:d6:e3:92:51:6e:27:a5:0d:53:af:4d:05: 29:cb:0a:b5:e5:f9:eb:c4:e5:4d:b1:45:06:ae:8f: 28:ed:da:0d:e5:a2:34:c9:d1:f6:e9:f9:a9:c7:01: 96:d7:fc:6b:e4:07:40:f3:a7:b7:ca:53:4c:1d:e4: 14:ec:c4:4a:c4:8f:a6:fe:be:69:18:bc:2a:50:11: 58:7d:3d:ba:8a:ea:4a:d0:2a:38:5c:c1:67:80:c0: 34:5f:ec:81:d2:62:af:de:58:a1:57:1a:32:2c:c0: 53:e7:0a:5b:26:a3:5a:5c:39:57:2a:75:4c:d0:ab: e2:61:5a:2e:0d:3d:15:5b:f9:5d:16:e3:8f:b8:8e: d9:50:13:89:fb:e8:cd:e7:09:ac:84:86:71:23:90: 09:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:88:F5:C9:98:11:5D:64:B3:29:32:25:21:91:E8:A3:F1:EB:23:00 X509v3 Authority Key Identifier: keyid:9B:E1:F1:BA:80:91:63:1A:40:9B:E9:39:BD:B0:73:32:74:F4:AA:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/9BE1F1BA8091631A409BE939BDB0733274F4AAC4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9BE1F1BA8091631A409BE939BDB0733274F4AAC4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/3230322e3135322e3230322e302f32342d3234203d3e203633383539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.152.202.0/24 Signature Algorithm: sha256WithRSAEncryption b7:c1:48:b9:0e:5b:20:e3:20:0c:87:04:cf:55:99:53:b6:e4: 37:5b:88:65:cf:16:13:44:db:77:3a:aa:99:4e:c9:0f:91:5f: 12:3f:cd:86:26:46:b2:81:aa:4f:4f:7e:5c:fb:9a:a4:70:a1: 79:a8:66:45:71:38:fe:1b:00:b8:49:30:da:5f:6b:15:75:25: 75:c6:ed:f9:6c:b6:ca:da:54:0d:d1:22:37:81:4a:9d:51:3a: 90:1f:47:62:f3:28:94:e5:af:83:0e:55:a5:58:bb:e0:9c:1a: 78:f2:15:4f:d8:0b:be:34:e0:20:27:3c:64:4b:0d:74:4a:b4: 07:bf:89:e8:10:87:38:69:fa:fc:74:bf:88:f6:59:93:e4:e5: 2c:f4:ab:56:a3:69:63:8e:f7:4d:d2:16:98:5a:ef:da:70:03: 1e:27:c6:86:98:bd:ea:73:ed:ec:19:7b:dd:d4:6a:64:c3:3a: de:70:d2:6f:94:f2:e4:66:c1:9e:80:e1:0f:8c:d4:98:c6:e8: f4:34:d8:23:b5:a6:e5:3d:a6:e1:eb:9e:66:37:9c:12:99:3e: 8d:8a:87:1f:80:fc:0e:2d:61:30:7e:16:d4:09:e1:3e:c5:71: b8:ba:16:35:84:66:68:d0:2d:44:ec:2d:44:36:9a:d4:2a:c6: a9:a3:22:5a -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUIYUk7Ju6uL2MibJzR7IFMLoK1Y8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUJFMUYxQkE4MDkxNjMxQTQwOUJFOTM5QkRCMDczMzI3 NEY0QUFDNDAeFw0yNjA1MDMwMzA1MzVaFw0yNzA1MDIwMzEwMzVaMDMxMTAvBgNV BAMTKEJEODhGNUM5OTgxMTVENjRCMzI5MzIyNTIxOTFFOEEzRjFFQjIzMDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgy97kyxL7BQTGVcCjFr5Edn1A DuiJ91GtgBalJJ3r18JXWrMBCJtNLJqpgNNuAFR9X4ItQRZSSJbuShCMklcMulWy CuTbyB2ADjGqIwO26wDceCth0qd0ksewJenTiIdNSiV4Qk9/M6qRNdbjklFuJ6UN U69NBSnLCrXl+evE5U2xRQaujyjt2g3lojTJ0fbp+anHAZbX/GvkB0Dzp7fKU0wd 5BTsxErEj6b+vmkYvCpQEVh9PbqK6krQKjhcwWeAwDRf7IHSYq/eWKFXGjIswFPn Clsmo1pcOVcqdUzQq+JhWi4NPRVb+V0W44+4jtlQE4n76M3nCayEhnEjkAl9AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUvYj1yZgRXWSzKTIlIZHoo/HrIwAwHwYDVR0j BBgwFoAUm+HxuoCRYxpAm+k5vbBzMnT0qsQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDhlM2IzOWMtZGExMS00NWVlLWFhYjMtNWNiMTRlYzQ0NzBjLzAvOUJFMUYxQkE4 MDkxNjMxQTQwOUJFOTM5QkRCMDczMzI3NEY0QUFDNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85QkUxRjFCQTgwOTE2MzFBNDA5QkU5MzlCREIwNzMzMjc0RjRB QUM0LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2Q4ZTNiMzljLWRhMTEtNDVlZS1h YWIzLTVjYjE0ZWM0NDcwYy8wLzMyMzAzMjJlMzEzNTMyMmUzMjMwMzIyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzNjMzMzgzNTM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAypjKMA0GCSqG SIb3DQEBCwUAA4IBAQC3wUi5Dlsg4yAMhwTPVZlTtuQ3W4hlzxYTRNt3OqqZTskP kV8SP82GJkaygapPT35c+5qkcKF5qGZFcTj+GwC4STDaX2sVdSV1xu35bLbK2lQN 0SI3gUqdUTqQH0di8yiU5a+DDlWlWLvgnBp48hVP2Au+NOAgJzxkSw10SrQHv4no EIc4afr8dL+I9lmT5OUs9KtWo2ljjvdN0haYWu/acAMeJ8aGmL3qc+3sGXvd1Gpk wzrecNJvlPLkZsGegOEPjNSYxuj0NNgjtablPabh655mN5wSmT6NiocfgPwOLWEw fhbUCeE+xXG4uhY1hGZo0C1E7C1ENprUKsapoyJa -----END CERTIFICATE-----Generated at Wed May 13 23:07:36 2026 by rpki-client