$ rpki-client -vvf rpki-rsync.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/3230322e3135342e32302e302f32332d3234203d3e2034343334.roa File: 3230322e3135342e32302e302f32332d3234203d3e2034343334.roa (raw, json) Hash identifier: /lpB5NjEjXP8UfdBsZJFRWFc4GF4u3ZibYzC/RKaIQI= Subject key identifier: D2:DE:A2:F3:B5:51:AD:83:61:D8:73:FC:A8:EC:05:AB:1A:60:EB:E1 Certificate issuer: /CN=F93EE098C03DDEEBBFBFB77250D6772BEDEF245E Certificate serial: 06C3CFB88A00EF5AE6617ADC4387F4BAB7B24725 Authority key identifier: F9:3E:E0:98:C0:3D:DE:EB:BF:BF:B7:72:50:D6:77:2B:ED:EF:24:5E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F93EE098C03DDEEBBFBFB77250D6772BEDEF245E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/3230322e3135342e32302e302f32332d3234203d3e2034343334.roa Signing time: Sun 03 May 2026 02:36:07 +0000 ROA not before: Sun 03 May 2026 02:31:07 +0000 ROA not after: Sun 02 May 2027 02:36:07 +0000 asID: 4434 IP address blocks: 202.154.20.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/F93EE098C03DDEEBBFBFB77250D6772BEDEF245E.crl rsync://rpki-rsync.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/F93EE098C03DDEEBBFBFB77250D6772BEDEF245E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F93EE098C03DDEEBBFBFB77250D6772BEDEF245E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 May 2026 11:51:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:c3:cf:b8:8a:00:ef:5a:e6:61:7a:dc:43:87:f4:ba:b7:b2:47:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F93EE098C03DDEEBBFBFB77250D6772BEDEF245E Validity Not Before: May 3 02:31:07 2026 GMT Not After : May 2 02:36:07 2027 GMT Subject: CN=D2DEA2F3B551AD8361D873FCA8EC05AB1A60EBE1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:04:b4:bd:9e:48:6d:80:b1:4e:4a:6a:74:f6: 0d:26:a3:3d:a3:1b:8d:9d:c5:a6:ee:a4:7b:b1:c2: 0f:c4:52:ba:58:dd:be:9e:61:3c:e6:2d:22:03:13: 72:48:7b:3b:bc:49:b0:3a:cf:f7:bc:b0:ef:c3:92: 3e:78:0d:6a:4b:ea:86:1f:dc:b7:1c:66:7b:d2:fd: f8:67:81:3c:6c:1b:6e:d3:01:2c:f6:aa:0f:82:72: 93:60:48:d1:93:a4:50:d1:5e:37:49:62:f5:21:b6: 66:94:25:2e:bc:a4:36:84:7c:85:0c:07:d7:50:2e: 5f:ed:cd:56:c0:a0:fb:4d:f6:34:1f:76:18:a5:9b: 1f:d0:d5:6e:90:2e:b2:60:9f:43:11:31:b5:56:32: 2f:50:2f:cd:40:94:df:24:36:77:7a:2e:df:96:f9: 89:72:4f:35:f0:fb:d7:d0:13:4e:83:bf:af:23:1b: ea:8b:93:c1:79:5e:5b:8e:4c:7b:c5:2f:4c:52:02: 5a:de:e9:91:1f:41:76:fe:41:3a:ef:a7:97:25:96: 58:29:67:c2:83:1a:ec:7a:5e:27:8d:68:24:50:ab: b3:d1:47:fb:92:10:fd:4d:77:23:16:5c:8e:98:e5: 16:60:8a:2a:a8:42:4b:38:1a:91:ff:3e:1a:1c:74: f6:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:DE:A2:F3:B5:51:AD:83:61:D8:73:FC:A8:EC:05:AB:1A:60:EB:E1 X509v3 Authority Key Identifier: keyid:F9:3E:E0:98:C0:3D:DE:EB:BF:BF:B7:72:50:D6:77:2B:ED:EF:24:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/F93EE098C03DDEEBBFBFB77250D6772BEDEF245E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F93EE098C03DDEEBBFBFB77250D6772BEDEF245E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/3230322e3135342e32302e302f32332d3234203d3e2034343334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.154.20.0/23 Signature Algorithm: sha256WithRSAEncryption c2:67:9e:f3:55:b6:74:5c:78:c6:25:0e:18:18:65:dd:cf:f7: 34:2d:67:6b:12:f7:e3:86:d4:24:05:07:11:17:2f:30:ad:85: 18:0a:00:a1:e1:62:90:3f:e3:c9:c4:78:26:42:3c:fe:38:be: 22:ab:57:72:6b:ce:04:bd:87:50:bc:05:1a:5a:06:7e:5f:04: 01:63:19:40:64:ea:3b:ff:ef:52:30:da:b3:3c:99:37:94:c0: b6:5b:c8:51:c3:20:16:69:d2:4c:7f:96:ab:0a:d3:e1:03:c0: e3:d9:4c:da:b8:32:c0:fa:60:61:b0:cf:f5:ed:10:fc:4e:43: fb:15:0c:09:7b:5e:86:85:e1:2f:4c:9e:cd:14:32:b1:f1:0c: 20:5b:03:35:d1:7b:cf:24:37:92:79:01:a2:2b:97:1c:4e:c5: 78:2a:eb:5b:0c:31:77:f8:eb:69:eb:94:76:7c:2e:30:a3:02: cd:07:ee:28:79:23:43:87:69:4f:05:c5:9c:ba:e0:73:f0:0e: d5:4b:57:a4:8a:7c:ab:6e:30:a8:24:cf:c6:65:72:ec:20:44: 03:c2:14:8d:c7:5a:09:9b:7e:03:7c:4e:1a:c3:e8:46:35:45: cb:cc:05:61:89:35:b2:52:27:8e:70:e5:a8:ec:23:6f:17:3f: 8d:35:7c:94 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUBsPPuIoA71rmYXrcQ4f0ureyRyUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjkzRUUwOThDMDNEREVFQkJGQkZCNzcyNTBENjc3MkJF REVGMjQ1RTAeFw0yNjA1MDMwMjMxMDdaFw0yNzA1MDIwMjM2MDdaMDMxMTAvBgNV BAMTKEQyREVBMkYzQjU1MUFEODM2MUQ4NzNGQ0E4RUMwNUFCMUE2MEVCRTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNBLS9nkhtgLFOSmp09g0moz2j G42dxabupHuxwg/EUrpY3b6eYTzmLSIDE3JIezu8SbA6z/e8sO/Dkj54DWpL6oYf 3LccZnvS/fhngTxsG27TASz2qg+CcpNgSNGTpFDRXjdJYvUhtmaUJS68pDaEfIUM B9dQLl/tzVbAoPtN9jQfdhilmx/Q1W6QLrJgn0MRMbVWMi9QL81AlN8kNnd6Lt+W +YlyTzXw+9fQE06Dv68jG+qLk8F5XluOTHvFL0xSAlre6ZEfQXb+QTrvp5clllgp Z8KDGux6XieNaCRQq7PRR/uSEP1NdyMWXI6Y5RZgiiqoQks4GpH/PhocdPYDAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQU0t6i87VRrYNh2HP8qOwFqxpg6+EwHwYDVR0j BBgwFoAU+T7gmMA93uu/v7dyUNZ3K+3vJF4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWMwYzE0YTktM2E3Ny00OWUyLTkxOTQtNDhkMDkxMzQ1OGIyLzAvRjkzRUUwOThD MDNEREVFQkJGQkZCNzcyNTBENjc3MkJFREVGMjQ1RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GOTNFRTA5OEMwM0RERUVCQkZCRkI3NzI1MEQ2NzcyQkVERUYy NDVFLmNlcjCBoQYIKwYBBQUHAQsEgZQwgZEwgY4GCCsGAQUFBzALhoGBcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzVjMGMxNGE5LTNhNzctNDllMi05 MTk0LTQ4ZDA5MTM0NThiMi8wLzMyMzAzMjJlMzEzNTM0MmUzMjMwMmUzMDJmMzIz MzJkMzIzNDIwM2QzZTIwMzQzNDMzMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAHKmhQwDQYJKoZIhvcN AQELBQADggEBAMJnnvNVtnRceMYlDhgYZd3P9zQtZ2sS9+OG1CQFBxEXLzCthRgK AKHhYpA/48nEeCZCPP44viKrV3JrzgS9h1C8BRpaBn5fBAFjGUBk6jv/71Iw2rM8 mTeUwLZbyFHDIBZp0kx/lqsK0+EDwOPZTNq4MsD6YGGwz/XtEPxOQ/sVDAl7XoaF 4S9Mns0UMrHxDCBbAzXRe88kN5J5AaIrlxxOxXgq61sMMXf462nrlHZ8LjCjAs0H 7ih5I0OHaU8FxZy64HPwDtVLV6SKfKtuMKgkz8ZlcuwgRAPCFI3HWgmbfgN8ThrD 6EY1RcvMBWGJNbJSJ45w5ajsI28XP401fJQ= -----END CERTIFICATE-----Generated at Tue May 5 15:04:59 2026 by rpki-client