$ rpki-client -vvf rpki-rsync.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/3230322e3135342e31342e302f32342d3234203d3e20313431383938.roa File: 3230322e3135342e31342e302f32342d3234203d3e20313431383938.roa (raw, json) Hash identifier: c3LNCt/eJWRLOu9+9TKsBupU0U7TWJFEXOuBfckRW5w= Subject key identifier: 2F:C3:AF:5A:83:3E:35:F5:E4:AC:A9:A3:FD:BB:2F:3E:92:7E:45:6B Certificate issuer: /CN=F93EE098C03DDEEBBFBFB77250D6772BEDEF245E Certificate serial: 76F20A667CFF0A1CAC5C92051CE4B89D9B6D7FA0 Authority key identifier: F9:3E:E0:98:C0:3D:DE:EB:BF:BF:B7:72:50:D6:77:2B:ED:EF:24:5E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F93EE098C03DDEEBBFBFB77250D6772BEDEF245E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/3230322e3135342e31342e302f32342d3234203d3e20313431383938.roa Signing time: Sun 03 May 2026 02:36:00 +0000 ROA not before: Sun 03 May 2026 02:31:00 +0000 ROA not after: Sun 02 May 2027 02:36:00 +0000 asID: 141898 IP address blocks: 202.154.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/F93EE098C03DDEEBBFBFB77250D6772BEDEF245E.crl rsync://rpki-rsync.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/F93EE098C03DDEEBBFBFB77250D6772BEDEF245E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F93EE098C03DDEEBBFBFB77250D6772BEDEF245E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 May 2026 11:51:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:f2:0a:66:7c:ff:0a:1c:ac:5c:92:05:1c:e4:b8:9d:9b:6d:7f:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F93EE098C03DDEEBBFBFB77250D6772BEDEF245E Validity Not Before: May 3 02:31:00 2026 GMT Not After : May 2 02:36:00 2027 GMT Subject: CN=2FC3AF5A833E35F5E4ACA9A3FDBB2F3E927E456B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:a0:2e:c9:83:97:d9:95:a2:8a:2d:a5:4c:5f: ae:e0:11:05:49:93:d8:c1:fe:fc:09:47:3f:f5:0d: 42:1b:97:b3:65:ee:38:07:ca:a0:5e:cb:91:69:28: 6e:27:32:42:1b:72:6b:35:91:60:02:af:33:81:7f: 21:32:09:80:f8:71:a1:de:35:2e:8f:85:f1:fc:f6: 74:ac:0e:14:d3:c1:66:8b:19:7d:9e:ae:fd:e1:22: 1a:6f:ef:da:d5:70:6d:7e:be:2c:71:9f:62:b4:6d: c0:14:0c:c9:0d:e1:61:f4:a6:57:09:a8:b4:4e:4f: fc:72:5a:b5:0d:66:5c:85:28:55:a7:13:8b:30:f0: ed:27:18:61:80:3c:2a:48:0a:e9:a9:87:8b:18:5e: f9:4a:5d:54:94:81:3f:56:49:97:0a:a0:20:e3:49: 6b:af:e2:8d:11:63:6d:1b:e8:44:82:42:36:d1:c1: d4:23:80:f8:bc:a9:4c:7c:e8:d5:b1:5e:ec:48:42: 28:dd:93:6e:d9:44:a1:81:73:01:dd:d2:fd:65:3e: e6:d7:46:89:1c:67:28:17:cd:a2:3b:fb:8d:a8:1b: 8a:39:da:07:8b:f4:30:03:92:3c:ee:b0:ef:84:5b: d6:b1:03:11:5f:d6:de:8e:1a:e0:26:37:ae:5a:0c: f1:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:C3:AF:5A:83:3E:35:F5:E4:AC:A9:A3:FD:BB:2F:3E:92:7E:45:6B X509v3 Authority Key Identifier: keyid:F9:3E:E0:98:C0:3D:DE:EB:BF:BF:B7:72:50:D6:77:2B:ED:EF:24:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/F93EE098C03DDEEBBFBFB77250D6772BEDEF245E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F93EE098C03DDEEBBFBFB77250D6772BEDEF245E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/3230322e3135342e31342e302f32342d3234203d3e20313431383938.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.154.14.0/24 Signature Algorithm: sha256WithRSAEncryption 2a:1a:66:3d:1a:06:5e:69:30:17:ef:4e:a5:d4:a3:7d:b0:6e: e5:a9:85:3c:32:91:53:08:73:8a:7c:a8:66:2b:6d:c5:32:cf: 3a:ea:4d:6d:f3:b1:1e:df:4c:f4:ea:1a:07:8a:31:5c:99:84: 0d:00:c6:34:db:3d:3f:c3:5f:cb:0b:6c:2a:ec:d2:e8:48:82: 1d:dc:b9:f0:68:a1:ef:dd:e7:9d:88:6e:c3:72:93:5a:b5:c6: c9:07:ea:68:66:ff:b7:07:09:9f:c1:8f:77:89:9a:a0:5c:d5: 97:00:83:a8:25:1b:9a:f8:b7:3c:4a:52:c3:24:fc:5d:84:fa: 4a:b8:e2:75:57:01:91:1f:e5:92:5c:33:03:dd:62:7c:d6:ab: a4:8e:3b:c1:d8:8c:32:01:4a:2e:a0:a8:96:8d:b9:a5:12:34: 4e:5f:80:bc:82:24:8a:44:48:f7:3b:46:13:c7:79:8e:2f:5d: 35:25:d3:87:15:4d:e8:87:90:8a:8b:73:58:fc:02:37:94:e9: 60:8e:c2:9b:4c:00:69:b5:41:e8:a3:39:84:17:65:de:ab:40: c7:8f:b6:8c:6d:35:49:df:c3:32:74:e9:66:f6:3c:3c:48:4a: 3d:08:0a:37:bb:46:3f:6c:75:85:5f:d7:4f:5d:d9:73:f4:f5: 9d:f0:a2:b5 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUdvIKZnz/ChysXJIFHOS4nZttf6AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjkzRUUwOThDMDNEREVFQkJGQkZCNzcyNTBENjc3MkJF REVGMjQ1RTAeFw0yNjA1MDMwMjMxMDBaFw0yNzA1MDIwMjM2MDBaMDMxMTAvBgNV BAMTKDJGQzNBRjVBODMzRTM1RjVFNEFDQTlBM0ZEQkIyRjNFOTI3RTQ1NkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnoC7Jg5fZlaKKLaVMX67gEQVJ k9jB/vwJRz/1DUIbl7Nl7jgHyqBey5FpKG4nMkIbcms1kWACrzOBfyEyCYD4caHe NS6PhfH89nSsDhTTwWaLGX2erv3hIhpv79rVcG1+vixxn2K0bcAUDMkN4WH0plcJ qLROT/xyWrUNZlyFKFWnE4sw8O0nGGGAPCpICumph4sYXvlKXVSUgT9WSZcKoCDj SWuv4o0RY20b6ESCQjbRwdQjgPi8qUx86NWxXuxIQijdk27ZRKGBcwHd0v1lPubX RokcZygXzaI7+42oG4o52geL9DADkjzusO+EW9axAxFf1t6OGuAmN65aDPFtAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUL8OvWoM+NfXkrKmj/bsvPpJ+RWswHwYDVR0j BBgwFoAU+T7gmMA93uu/v7dyUNZ3K+3vJF4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWMwYzE0YTktM2E3Ny00OWUyLTkxOTQtNDhkMDkxMzQ1OGIyLzAvRjkzRUUwOThD MDNEREVFQkJGQkZCNzcyNTBENjc3MkJFREVGMjQ1RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GOTNFRTA5OEMwM0RERUVCQkZCRkI3NzI1MEQ2NzcyQkVERUYy NDVFLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzVjMGMxNGE5LTNhNzctNDllMi05 MTk0LTQ4ZDA5MTM0NThiMi8wLzMyMzAzMjJlMzEzNTM0MmUzMTM0MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNDMxMzgzOTM4LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAypoOMA0GCSqG SIb3DQEBCwUAA4IBAQAqGmY9GgZeaTAX706l1KN9sG7lqYU8MpFTCHOKfKhmK23F Ms866k1t87Ee30z06hoHijFcmYQNAMY02z0/w1/LC2wq7NLoSIId3LnwaKHv3eed iG7DcpNatcbJB+poZv+3BwmfwY93iZqgXNWXAIOoJRua+Lc8SlLDJPxdhPpKuOJ1 VwGRH+WSXDMD3WJ81qukjjvB2IwyAUouoKiWjbmlEjROX4C8giSKREj3O0YTx3mO L101JdOHFU3oh5CKi3NY/AI3lOlgjsKbTABptUHoozmEF2Xeq0DHj7aMbTVJ38My dOlm9jw8SEo9CAo3u0Y/bHWFX9dPXdlz9PWd8KK1 -----END CERTIFICATE-----Generated at Tue May 5 15:05:25 2026 by rpki-client