$ rpki-client -vvf rpki-rsync.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/3230322e3135322e3230352e302f32342d3234203d3e203633383539.roa File: 3230322e3135322e3230352e302f32342d3234203d3e203633383539.roa (raw, json) Hash identifier: 3F7kj8HCI8p6ltHGhgDwoLn+Flb6Nk9tbs0IPGWDTJ8= Subject key identifier: D5:1C:8A:98:22:B3:E8:48:85:CB:6A:94:93:DA:8F:88:0E:E6:B4:DF Certificate issuer: /CN=9BE1F1BA8091631A409BE939BDB0733274F4AAC4 Certificate serial: 0CE59ABF5985121DE997F46128CFEDFDEF365B49 Authority key identifier: 9B:E1:F1:BA:80:91:63:1A:40:9B:E9:39:BD:B0:73:32:74:F4:AA:C4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9BE1F1BA8091631A409BE939BDB0733274F4AAC4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/3230322e3135322e3230352e302f32342d3234203d3e203633383539.roa Signing time: Sun 03 May 2026 03:10:33 +0000 ROA not before: Sun 03 May 2026 03:05:33 +0000 ROA not after: Sun 02 May 2027 03:10:33 +0000 asID: 63859 IP address blocks: 202.152.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/9BE1F1BA8091631A409BE939BDB0733274F4AAC4.crl rsync://rpki-rsync.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/9BE1F1BA8091631A409BE939BDB0733274F4AAC4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9BE1F1BA8091631A409BE939BDB0733274F4AAC4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 10:27:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:e5:9a:bf:59:85:12:1d:e9:97:f4:61:28:cf:ed:fd:ef:36:5b:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9BE1F1BA8091631A409BE939BDB0733274F4AAC4 Validity Not Before: May 3 03:05:33 2026 GMT Not After : May 2 03:10:33 2027 GMT Subject: CN=D51C8A9822B3E84885CB6A9493DA8F880EE6B4DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:e3:90:4b:f8:b0:1a:5e:d9:83:bb:75:f5:f7: 07:cc:3e:a5:dd:a1:bf:82:13:04:8e:a7:9d:d3:c4: 81:9b:f6:65:0b:73:a9:77:8f:4d:66:93:f3:4c:31: eb:7b:d0:c2:ec:0c:3f:1d:fa:bc:c8:09:80:a0:94: ee:08:34:79:12:99:7e:89:91:37:92:94:b2:d9:12: 11:cf:7c:38:10:c1:4b:65:15:a9:cc:be:e0:38:e0: 21:68:bb:27:4b:cc:a5:b8:1c:b0:d4:15:d2:59:f8: 39:92:8a:13:b2:a5:c2:bd:f3:f4:62:fb:7d:97:d0: bd:89:18:89:68:37:3f:a6:01:f2:9f:61:13:3e:d3: a0:7a:62:91:77:46:16:b0:e4:ea:d5:c6:d7:b7:eb: dd:1a:a5:1c:11:7c:ff:d1:f7:ba:c4:2a:0f:e8:aa: 34:b6:11:c8:86:19:7d:56:82:bc:54:99:c9:44:fb: b9:60:84:bf:f6:6e:22:da:e0:19:8d:11:5c:cc:55: 03:55:93:d7:b9:a1:ea:26:fd:fd:dc:1e:a8:64:0f: c9:aa:79:6f:8b:b1:cd:8c:82:3f:a2:60:ea:5c:7d: ef:66:1b:01:38:c3:12:11:33:01:43:9c:25:48:4b: a4:31:51:9f:0a:18:f0:fd:a3:e1:36:7b:7e:6a:4c: c4:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:1C:8A:98:22:B3:E8:48:85:CB:6A:94:93:DA:8F:88:0E:E6:B4:DF X509v3 Authority Key Identifier: keyid:9B:E1:F1:BA:80:91:63:1A:40:9B:E9:39:BD:B0:73:32:74:F4:AA:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/9BE1F1BA8091631A409BE939BDB0733274F4AAC4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9BE1F1BA8091631A409BE939BDB0733274F4AAC4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/3230322e3135322e3230352e302f32342d3234203d3e203633383539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.152.205.0/24 Signature Algorithm: sha256WithRSAEncryption 29:c6:b7:8f:1d:aa:33:8d:73:de:6b:e3:c4:0a:af:fc:25:bc: 40:34:f4:ac:47:b6:76:06:8f:f1:96:dc:89:06:7b:65:95:68: 5e:61:55:a1:13:6e:82:4b:7b:ea:bc:b2:8c:a3:11:26:c6:6a: b5:e3:a5:ee:18:2a:b1:ab:32:d7:98:82:b9:bd:04:fd:e5:03: 5e:06:ac:06:47:af:ba:c2:7c:4d:79:f0:f4:72:f6:9f:86:e3: 04:1b:f1:79:81:dc:c4:08:e7:de:35:61:d3:25:bc:90:3f:de: a2:b6:d5:df:18:57:f3:27:05:fd:d0:97:8b:9e:19:42:b0:f5: fb:68:87:58:ea:dc:cf:9e:a4:54:3c:62:cc:5b:18:a5:19:50: 2a:d2:8b:e6:9f:8d:a6:69:30:c3:2f:67:ad:42:1e:da:59:21: 76:3f:ac:a5:20:4b:0d:ce:da:ee:1d:6a:63:e4:e2:b8:11:31: d6:00:6d:a5:0d:af:7a:04:03:c8:1f:99:8d:13:d9:c3:a2:7c: db:c0:90:55:28:54:a1:fa:00:f6:7f:d9:92:40:02:77:b0:e1: 9c:f7:b3:68:5d:cc:23:ae:c1:04:9a:92:7a:91:83:28:1a:ec: 6f:52:33:35:6a:6d:aa:d4:05:a3:dc:51:1e:37:42:95:db:73: e8:0e:3c:61 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUDOWav1mFEh3pl/RhKM/t/e82W0kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUJFMUYxQkE4MDkxNjMxQTQwOUJFOTM5QkRCMDczMzI3 NEY0QUFDNDAeFw0yNjA1MDMwMzA1MzNaFw0yNzA1MDIwMzEwMzNaMDMxMTAvBgNV BAMTKEQ1MUM4QTk4MjJCM0U4NDg4NUNCNkE5NDkzREE4Rjg4MEVFNkI0REYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDc45BL+LAaXtmDu3X19wfMPqXd ob+CEwSOp53TxIGb9mULc6l3j01mk/NMMet70MLsDD8d+rzICYCglO4INHkSmX6J kTeSlLLZEhHPfDgQwUtlFanMvuA44CFouydLzKW4HLDUFdJZ+DmSihOypcK98/Ri +32X0L2JGIloNz+mAfKfYRM+06B6YpF3Rhaw5OrVxte3690apRwRfP/R97rEKg/o qjS2EciGGX1WgrxUmclE+7lghL/2biLa4BmNEVzMVQNVk9e5oeom/f3cHqhkD8mq eW+Lsc2Mgj+iYOpcfe9mGwE4wxIRMwFDnCVIS6QxUZ8KGPD9o+E2e35qTMTRAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU1RyKmCKz6EiFy2qUk9qPiA7mtN8wHwYDVR0j BBgwFoAUm+HxuoCRYxpAm+k5vbBzMnT0qsQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDhlM2IzOWMtZGExMS00NWVlLWFhYjMtNWNiMTRlYzQ0NzBjLzAvOUJFMUYxQkE4 MDkxNjMxQTQwOUJFOTM5QkRCMDczMzI3NEY0QUFDNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85QkUxRjFCQTgwOTE2MzFBNDA5QkU5MzlCREIwNzMzMjc0RjRB QUM0LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2Q4ZTNiMzljLWRhMTEtNDVlZS1h YWIzLTVjYjE0ZWM0NDcwYy8wLzMyMzAzMjJlMzEzNTMyMmUzMjMwMzUyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzNjMzMzgzNTM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAypjNMA0GCSqG SIb3DQEBCwUAA4IBAQApxrePHaozjXPea+PECq/8JbxANPSsR7Z2Bo/xltyJBntl lWheYVWhE26CS3vqvLKMoxEmxmq146XuGCqxqzLXmIK5vQT95QNeBqwGR6+6wnxN efD0cvafhuMEG/F5gdzECOfeNWHTJbyQP96ittXfGFfzJwX90JeLnhlCsPX7aIdY 6tzPnqRUPGLMWxilGVAq0ovmn42maTDDL2etQh7aWSF2P6ylIEsNztruHWpj5OK4 ETHWAG2lDa96BAPIH5mNE9nDonzbwJBVKFSh+gD2f9mSQAJ3sOGc97NoXcwjrsEE mpJ6kYMoGuxvUjM1am2q1AWj3FEeN0KV23PoDjxh -----END CERTIFICATE-----Generated at Wed May 13 23:07:31 2026 by rpki-client