$ rpki-client -vvf rpki-rsync.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/3230322e3135342e322e302f32332d3234203d3e2034343334.roa File: 3230322e3135342e322e302f32332d3234203d3e2034343334.roa (raw, json) Hash identifier: g1W0EHk4sc8SkNq/f7Tzx/I7S7OvECOq/mMRx7IY+AY= Subject key identifier: 04:97:E7:3D:4D:C4:C1:61:C9:8B:57:28:D4:69:79:A1:16:EC:B5:F7 Certificate issuer: /CN=F93EE098C03DDEEBBFBFB77250D6772BEDEF245E Certificate serial: 48E22CC66E65F966D5BA52C94C93DA7A517DC6B1 Authority key identifier: F9:3E:E0:98:C0:3D:DE:EB:BF:BF:B7:72:50:D6:77:2B:ED:EF:24:5E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F93EE098C03DDEEBBFBFB77250D6772BEDEF245E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/3230322e3135342e322e302f32332d3234203d3e2034343334.roa Signing time: Sun 03 May 2026 02:36:12 +0000 ROA not before: Sun 03 May 2026 02:31:12 +0000 ROA not after: Sun 02 May 2027 02:36:12 +0000 asID: 4434 IP address blocks: 202.154.2.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/F93EE098C03DDEEBBFBFB77250D6772BEDEF245E.crl rsync://rpki-rsync.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/F93EE098C03DDEEBBFBFB77250D6772BEDEF245E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F93EE098C03DDEEBBFBFB77250D6772BEDEF245E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 May 2026 11:51:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:e2:2c:c6:6e:65:f9:66:d5:ba:52:c9:4c:93:da:7a:51:7d:c6:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F93EE098C03DDEEBBFBFB77250D6772BEDEF245E Validity Not Before: May 3 02:31:12 2026 GMT Not After : May 2 02:36:12 2027 GMT Subject: CN=0497E73D4DC4C161C98B5728D46979A116ECB5F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:dc:88:34:ea:ba:a4:6e:eb:b3:a7:03:b3:2e: a4:c4:68:77:c3:cf:b3:8a:30:c9:19:d0:0c:86:e4: 37:82:2e:60:51:25:83:7b:cf:12:c9:2e:6d:bc:72: 71:34:ab:51:34:89:2d:d6:a2:45:95:73:f9:4a:1d: b8:e4:49:66:d3:d4:34:2a:a2:4f:06:18:2b:3b:ee: 7d:f5:9a:88:f5:09:11:3e:95:8b:08:b1:5e:5e:4b: e8:75:f2:90:f9:5e:fa:f1:6d:e0:6a:ae:83:5a:fd: 6e:eb:eb:cb:32:62:b9:92:22:ca:87:b6:bb:36:74: 1e:45:17:6e:46:7a:12:b3:cd:fd:1a:46:2d:b9:bc: 8d:5c:9f:84:18:88:ff:96:09:73:c2:b6:8b:35:b2: 1e:f7:31:52:f8:b3:55:4e:12:8b:c0:7a:2e:53:38: a1:ca:c8:35:49:39:77:ab:83:98:6f:e3:1c:5c:62: 75:85:fb:da:90:7d:8c:ec:b4:6b:f1:88:fb:41:af: 82:12:2f:c0:c3:89:15:1e:28:98:83:78:80:41:21: 15:a4:36:dc:5b:53:01:9e:3a:76:65:2a:c0:12:28: 87:dd:08:b0:28:81:a8:66:b9:89:71:b7:53:74:10: f4:4a:b4:d8:08:2c:04:dd:96:b1:fa:36:c2:bf:7d: f3:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:97:E7:3D:4D:C4:C1:61:C9:8B:57:28:D4:69:79:A1:16:EC:B5:F7 X509v3 Authority Key Identifier: keyid:F9:3E:E0:98:C0:3D:DE:EB:BF:BF:B7:72:50:D6:77:2B:ED:EF:24:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/F93EE098C03DDEEBBFBFB77250D6772BEDEF245E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F93EE098C03DDEEBBFBFB77250D6772BEDEF245E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/3230322e3135342e322e302f32332d3234203d3e2034343334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.154.2.0/23 Signature Algorithm: sha256WithRSAEncryption a1:64:fd:56:bc:62:be:3d:75:28:0d:39:ae:e3:45:ac:db:5b: 2f:31:c0:42:67:c4:47:36:c9:91:a9:3a:99:a0:aa:90:46:ad: d8:cf:04:9d:b0:6a:82:58:7c:65:1d:b4:f3:fa:0d:14:cd:30: 16:6b:aa:cd:0a:39:ae:51:98:47:1d:25:36:ad:37:c3:f6:44: 12:cb:38:57:e5:d0:26:ea:91:1b:3b:15:79:12:02:fd:1f:07: 8b:7c:1f:ae:6b:26:22:9d:38:49:b4:d2:ec:62:21:b7:c8:92: 71:0f:da:4c:6d:72:72:61:6a:9d:6c:ac:83:56:3b:66:70:5d: df:8c:80:b5:46:a6:50:dd:52:e3:2a:a6:24:be:04:00:d3:aa: c7:ea:78:eb:93:95:38:e2:10:87:a5:64:4f:b9:54:86:3e:ee: 07:61:1e:07:09:e7:56:e5:76:7c:90:f6:fc:23:28:5d:a1:db: 28:cf:ed:e6:8a:6d:f1:69:51:7b:df:e4:21:f5:2f:f7:66:08: dc:4e:70:ed:95:b6:f7:61:5b:3f:e9:e8:0b:d7:f1:45:6e:1a: 3b:cd:59:4a:58:34:e9:aa:e4:f8:6c:03:e4:87:b5:dc:63:3f: 8e:6a:bd:23:a6:89:12:79:f1:f4:84:27:ce:e7:af:9d:f6:23: 5e:13:36:fd -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgIUSOIsxm5l+WbVulLJTJPaelF9xrEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjkzRUUwOThDMDNEREVFQkJGQkZCNzcyNTBENjc3MkJF REVGMjQ1RTAeFw0yNjA1MDMwMjMxMTJaFw0yNzA1MDIwMjM2MTJaMDMxMTAvBgNV BAMTKDA0OTdFNzNENERDNEMxNjFDOThCNTcyOEQ0Njk3OUExMTZFQ0I1RjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCG3Ig06rqkbuuzpwOzLqTEaHfD z7OKMMkZ0AyG5DeCLmBRJYN7zxLJLm28cnE0q1E0iS3WokWVc/lKHbjkSWbT1DQq ok8GGCs77n31moj1CRE+lYsIsV5eS+h18pD5XvrxbeBqroNa/W7r68syYrmSIsqH trs2dB5FF25GehKzzf0aRi25vI1cn4QYiP+WCXPCtos1sh73MVL4s1VOEovAei5T OKHKyDVJOXerg5hv4xxcYnWF+9qQfYzstGvxiPtBr4ISL8DDiRUeKJiDeIBBIRWk NtxbUwGeOnZlKsASKIfdCLAogahmuYlxt1N0EPRKtNgILATdlrH6NsK/ffM9AgMB AAGjggItMIICKTAdBgNVHQ4EFgQUBJfnPU3EwWHJi1co1Gl5oRbstfcwHwYDVR0j BBgwFoAU+T7gmMA93uu/v7dyUNZ3K+3vJF4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWMwYzE0YTktM2E3Ny00OWUyLTkxOTQtNDhkMDkxMzQ1OGIyLzAvRjkzRUUwOThD MDNEREVFQkJGQkZCNzcyNTBENjc3MkJFREVGMjQ1RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GOTNFRTA5OEMwM0RERUVCQkZCRkI3NzI1MEQ2NzcyQkVERUYy NDVFLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUFBzALhn9yc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWMwYzE0YTktM2E3Ny00OWUyLTkx OTQtNDhkMDkxMzQ1OGIyLzAvMzIzMDMyMmUzMTM1MzQyZTMyMmUzMDJmMzIzMzJk MzIzNDIwM2QzZTIwMzQzNDMzMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAHKmgIwDQYJKoZIhvcNAQEL BQADggEBAKFk/Va8Yr49dSgNOa7jRazbWy8xwEJnxEc2yZGpOpmgqpBGrdjPBJ2w aoJYfGUdtPP6DRTNMBZrqs0KOa5RmEcdJTatN8P2RBLLOFfl0CbqkRs7FXkSAv0f B4t8H65rJiKdOEm00uxiIbfIknEP2kxtcnJhap1srINWO2ZwXd+MgLVGplDdUuMq piS+BADTqsfqeOuTlTjiEIelZE+5VIY+7gdhHgcJ51bldnyQ9vwjKF2h2yjP7eaK bfFpUXvf5CH1L/dmCNxOcO2VtvdhWz/p6AvX8UVuGjvNWUpYNOmq5PhsA+SHtdxj P45qvSOmiRJ58fSEJ87nr532I14TNv0= -----END CERTIFICATE-----Generated at Tue May 5 15:04:57 2026 by rpki-client