$ rpki-client -vvf rpki-rsync.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/3230322e3135342e31392e302f32342d3234203d3e20313336313231.roa File: 3230322e3135342e31392e302f32342d3234203d3e20313336313231.roa (raw, json) Hash identifier: dqtMYQWaCTDbVQjEn9d/R9v7mBuUOAkUthQgONsEFp4= Subject key identifier: 11:4F:3F:24:95:27:38:B8:5B:54:B8:F5:F8:B5:BF:FB:0D:4C:F1:D4 Certificate issuer: /CN=F93EE098C03DDEEBBFBFB77250D6772BEDEF245E Certificate serial: 6B47C34F368A011A213EC0786053F69BBB772BDB Authority key identifier: F9:3E:E0:98:C0:3D:DE:EB:BF:BF:B7:72:50:D6:77:2B:ED:EF:24:5E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F93EE098C03DDEEBBFBFB77250D6772BEDEF245E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/3230322e3135342e31392e302f32342d3234203d3e20313336313231.roa Signing time: Sun 03 May 2026 02:36:04 +0000 ROA not before: Sun 03 May 2026 02:31:04 +0000 ROA not after: Sun 02 May 2027 02:36:04 +0000 asID: 136121 IP address blocks: 202.154.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/F93EE098C03DDEEBBFBFB77250D6772BEDEF245E.crl rsync://rpki-rsync.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/F93EE098C03DDEEBBFBFB77250D6772BEDEF245E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F93EE098C03DDEEBBFBFB77250D6772BEDEF245E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 May 2026 11:51:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:47:c3:4f:36:8a:01:1a:21:3e:c0:78:60:53:f6:9b:bb:77:2b:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F93EE098C03DDEEBBFBFB77250D6772BEDEF245E Validity Not Before: May 3 02:31:04 2026 GMT Not After : May 2 02:36:04 2027 GMT Subject: CN=114F3F24952738B85B54B8F5F8B5BFFB0D4CF1D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:d0:24:2e:a8:7f:1c:3c:cd:6c:ea:0d:5d:b0: 11:8e:78:8c:15:45:bc:d2:b1:56:54:51:2d:68:9f: 57:16:ac:6c:75:d7:09:45:d5:04:24:87:27:30:1b: 64:a3:c1:30:75:66:96:3a:28:3f:82:fd:f9:5e:d3: 2e:eb:d2:b9:0c:96:a1:22:3b:0e:de:49:39:40:f2: a2:c7:fc:d2:c0:e9:7a:fe:11:be:53:48:81:0d:38: 9f:c9:52:19:28:90:d5:6a:b9:4a:2c:0a:99:63:66: 4b:0a:ce:57:63:22:ca:a8:40:81:cc:9f:d9:d0:da: 22:7f:bb:7d:c0:d2:e9:c5:df:ac:ff:10:68:99:c8: 6f:3f:24:b7:22:b8:76:a4:9e:1b:b0:69:de:16:b6: c5:6a:2e:60:14:c4:10:ee:1d:e7:06:c3:46:db:bc: 99:dc:d1:2b:88:51:e6:ee:ca:00:f7:a4:b8:56:30: 6c:44:fb:7f:db:7d:eb:93:38:3a:3f:c2:fa:3f:f7: 8b:48:aa:e4:48:1a:25:14:40:1d:ef:1e:ae:aa:60: 66:e2:19:41:37:16:57:4f:42:0d:d4:3d:98:24:aa: 52:17:f4:5f:7d:ff:79:82:6a:e7:ac:be:48:97:c1: d2:2f:99:0f:96:0a:66:64:06:e7:af:5d:95:7f:dd: 65:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:4F:3F:24:95:27:38:B8:5B:54:B8:F5:F8:B5:BF:FB:0D:4C:F1:D4 X509v3 Authority Key Identifier: keyid:F9:3E:E0:98:C0:3D:DE:EB:BF:BF:B7:72:50:D6:77:2B:ED:EF:24:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/F93EE098C03DDEEBBFBFB77250D6772BEDEF245E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F93EE098C03DDEEBBFBFB77250D6772BEDEF245E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/3230322e3135342e31392e302f32342d3234203d3e20313336313231.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.154.19.0/24 Signature Algorithm: sha256WithRSAEncryption ca:63:c0:54:5f:6a:bc:7a:6f:98:58:8f:16:05:47:96:7b:46: 7b:82:eb:b7:b6:53:9b:b1:b9:35:e7:c3:31:f7:38:13:77:fa: 5a:e0:7c:3b:d2:f2:41:6d:33:5f:4b:0b:e6:87:59:40:59:79: 14:11:bc:47:9e:c5:8b:4a:84:d4:67:39:b6:e9:91:45:22:be: e9:25:da:06:d0:2a:88:ff:f4:32:41:cf:bc:2f:1c:89:1b:86: 8b:13:6f:8a:d5:6c:85:f0:43:62:37:9d:d7:c6:45:01:03:08: 71:cf:95:ed:ab:b1:c0:bf:0a:6f:6b:53:dd:e4:d5:50:a4:f4: 58:0e:a8:df:77:9e:32:59:53:3d:85:1c:80:a4:62:e9:f3:12: 96:75:c6:f7:4a:6c:1b:c6:a4:8d:fc:fc:5c:c2:b7:27:a8:e8: 2c:a4:fc:96:28:38:c6:2e:34:1a:eb:ff:47:59:07:05:3d:21: a2:08:fd:9b:43:82:62:c9:a6:db:ce:0e:b0:f9:67:42:f1:2c: ab:f0:6d:97:80:cf:9e:34:4b:ca:9d:09:26:2f:7d:1c:79:65: 3b:67:c7:15:ec:d6:b1:e4:60:bf:86:7a:43:2b:73:1c:c6:79: 3b:9e:46:c3:b4:69:82:b0:59:95:4f:67:bc:04:d0:75:47:3e: e9:85:d8:8a -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUa0fDTzaKARohPsB4YFP2m7t3K9swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjkzRUUwOThDMDNEREVFQkJGQkZCNzcyNTBENjc3MkJF REVGMjQ1RTAeFw0yNjA1MDMwMjMxMDRaFw0yNzA1MDIwMjM2MDRaMDMxMTAvBgNV BAMTKDExNEYzRjI0OTUyNzM4Qjg1QjU0QjhGNUY4QjVCRkZCMEQ0Q0YxRDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG0CQuqH8cPM1s6g1dsBGOeIwV RbzSsVZUUS1on1cWrGx11wlF1QQkhycwG2SjwTB1ZpY6KD+C/fle0y7r0rkMlqEi Ow7eSTlA8qLH/NLA6Xr+Eb5TSIENOJ/JUhkokNVquUosCpljZksKzldjIsqoQIHM n9nQ2iJ/u33A0unF36z/EGiZyG8/JLciuHaknhuwad4WtsVqLmAUxBDuHecGw0bb vJnc0SuIUebuygD3pLhWMGxE+3/bfeuTODo/wvo/94tIquRIGiUUQB3vHq6qYGbi GUE3FldPQg3UPZgkqlIX9F99/3mCauesvkiXwdIvmQ+WCmZkBuevXZV/3WXpAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUEU8/JJUnOLhbVLj1+LW/+w1M8dQwHwYDVR0j BBgwFoAU+T7gmMA93uu/v7dyUNZ3K+3vJF4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWMwYzE0YTktM2E3Ny00OWUyLTkxOTQtNDhkMDkxMzQ1OGIyLzAvRjkzRUUwOThD MDNEREVFQkJGQkZCNzcyNTBENjc3MkJFREVGMjQ1RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GOTNFRTA5OEMwM0RERUVCQkZCRkI3NzI1MEQ2NzcyQkVERUYy NDVFLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzVjMGMxNGE5LTNhNzctNDllMi05 MTk0LTQ4ZDA5MTM0NThiMi8wLzMyMzAzMjJlMzEzNTM0MmUzMTM5MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzM2MzEzMjMxLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAypoTMA0GCSqG SIb3DQEBCwUAA4IBAQDKY8BUX2q8em+YWI8WBUeWe0Z7guu3tlObsbk158Mx9zgT d/pa4Hw70vJBbTNfSwvmh1lAWXkUEbxHnsWLSoTUZzm26ZFFIr7pJdoG0CqI//Qy Qc+8LxyJG4aLE2+K1WyF8ENiN53XxkUBAwhxz5Xtq7HAvwpva1Pd5NVQpPRYDqjf d54yWVM9hRyApGLp8xKWdcb3SmwbxqSN/PxcwrcnqOgspPyWKDjGLjQa6/9HWQcF PSGiCP2bQ4Jiyabbzg6w+WdC8Syr8G2XgM+eNEvKnQkmL30ceWU7Z8cV7Nax5GC/ hnpDK3Mcxnk7nkbDtGmCsFmVT2e8BNB1Rz7phdiK -----END CERTIFICATE-----Generated at Tue May 5 15:06:08 2026 by rpki-client