$ rpki-client -vvf rpki-rsync.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/3230322e3135342e32382e302f32332d3234203d3e2034343334.roa File: 3230322e3135342e32382e302f32332d3234203d3e2034343334.roa (raw, json) Hash identifier: 2FCVCjnfIuDb3Zvl+7085KU34TViyvcWfLBFMsQ91zE= Subject key identifier: B8:EB:BD:F1:C1:72:C7:0C:F0:34:C4:CA:59:58:0E:54:1D:51:56:1C Certificate issuer: /CN=F93EE098C03DDEEBBFBFB77250D6772BEDEF245E Certificate serial: 2A6152DE84204E9BFF564718C98F00A63A3588D4 Authority key identifier: F9:3E:E0:98:C0:3D:DE:EB:BF:BF:B7:72:50:D6:77:2B:ED:EF:24:5E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F93EE098C03DDEEBBFBFB77250D6772BEDEF245E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/3230322e3135342e32382e302f32332d3234203d3e2034343334.roa Signing time: Sun 03 May 2026 02:36:03 +0000 ROA not before: Sun 03 May 2026 02:31:03 +0000 ROA not after: Sun 02 May 2027 02:36:03 +0000 asID: 4434 IP address blocks: 202.154.28.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/F93EE098C03DDEEBBFBFB77250D6772BEDEF245E.crl rsync://rpki-rsync.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/F93EE098C03DDEEBBFBFB77250D6772BEDEF245E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F93EE098C03DDEEBBFBFB77250D6772BEDEF245E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 May 2026 11:51:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:61:52:de:84:20:4e:9b:ff:56:47:18:c9:8f:00:a6:3a:35:88:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F93EE098C03DDEEBBFBFB77250D6772BEDEF245E Validity Not Before: May 3 02:31:03 2026 GMT Not After : May 2 02:36:03 2027 GMT Subject: CN=B8EBBDF1C172C70CF034C4CA59580E541D51561C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:22:07:38:4c:36:1e:04:02:26:7e:9f:7c:d4: 12:62:55:29:2a:e5:1d:1c:15:a3:55:9f:29:6c:00: df:2a:68:61:d9:e3:8f:6f:b4:a2:60:35:89:1f:9b: ce:4b:e7:43:0f:15:f7:45:cb:25:57:87:00:a1:f9: 0b:58:15:00:5b:52:df:3f:5b:30:42:d6:58:21:2b: 4b:6a:6b:c9:12:d7:c6:46:b0:a2:0e:5f:08:86:15: 29:16:ff:e9:ee:f6:42:08:2e:7e:07:70:95:d4:22: 22:07:e6:30:86:9a:be:45:9c:76:db:8f:b1:2c:e0: e4:40:50:a0:62:67:4d:ef:de:b0:93:17:45:5f:12: d6:3d:70:95:45:54:77:a8:c8:59:5e:c3:3e:28:e4: 28:27:5c:51:1c:5d:3d:ee:e1:a1:ea:bb:f7:e2:a0: 50:22:b6:44:ca:07:00:1d:e2:fe:2b:f2:1e:d8:de: 88:7f:ac:7b:41:fd:b5:ac:37:06:7b:3a:8c:65:33: 9d:70:6f:db:76:2b:92:40:e4:d5:58:00:b1:01:a4: 45:86:17:2a:10:e4:68:21:e6:12:4c:98:69:da:77: f8:e3:43:ca:8a:58:17:b5:0c:15:27:38:94:05:f4: 55:0c:d1:6d:4b:52:3a:4f:ff:a8:bb:9a:6d:0c:32: e1:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:EB:BD:F1:C1:72:C7:0C:F0:34:C4:CA:59:58:0E:54:1D:51:56:1C X509v3 Authority Key Identifier: keyid:F9:3E:E0:98:C0:3D:DE:EB:BF:BF:B7:72:50:D6:77:2B:ED:EF:24:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/F93EE098C03DDEEBBFBFB77250D6772BEDEF245E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F93EE098C03DDEEBBFBFB77250D6772BEDEF245E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/3230322e3135342e32382e302f32332d3234203d3e2034343334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.154.28.0/23 Signature Algorithm: sha256WithRSAEncryption d1:bf:4d:c2:63:7e:4e:e8:52:dc:ea:01:dd:97:ea:a0:28:0a: ca:d6:12:64:97:b5:a9:be:a4:7c:05:83:c5:74:fc:9b:af:aa: a5:55:cf:4c:f3:68:06:5f:4e:ec:4c:e3:f8:0b:fd:45:f5:28: 10:ca:68:09:5f:8b:4c:86:86:39:66:bf:37:26:cd:89:40:af: 0d:b6:9e:8f:46:b7:5e:74:4b:f9:85:ff:c1:b3:35:99:5b:39: 6e:74:56:93:3f:fb:a3:17:46:5e:94:26:0f:0b:40:b2:ff:42: b3:a4:4c:3b:0f:10:c7:44:bc:bc:bc:05:81:d4:69:a7:a3:03: 48:bd:8d:3e:f6:bc:01:b5:3f:c6:0f:5d:86:16:e1:dc:1e:45: fe:87:9d:f7:81:12:7e:96:3d:45:af:c2:d1:a4:5b:58:aa:cf: c9:2e:8f:26:84:61:d5:d6:8b:b3:06:8f:33:eb:be:dd:53:73: 81:6d:38:a0:d7:d7:cb:90:69:5d:09:c4:d5:c2:36:45:c2:5e: 36:4b:34:39:d4:7b:48:27:35:98:8e:f3:b5:73:fb:36:32:e1: 8d:4e:b5:01:d9:72:6b:cf:c7:e7:90:1b:05:b2:f6:cb:72:f6: 0a:c6:9b:af:2f:5f:ec:b1:1d:81:c3:ab:cd:3e:a9:21:d6:97: 39:a6:46:09 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUKmFS3oQgTpv/VkcYyY8Apjo1iNQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjkzRUUwOThDMDNEREVFQkJGQkZCNzcyNTBENjc3MkJF REVGMjQ1RTAeFw0yNjA1MDMwMjMxMDNaFw0yNzA1MDIwMjM2MDNaMDMxMTAvBgNV BAMTKEI4RUJCREYxQzE3MkM3MENGMDM0QzRDQTU5NTgwRTU0MUQ1MTU2MUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+Igc4TDYeBAImfp981BJiVSkq 5R0cFaNVnylsAN8qaGHZ449vtKJgNYkfm85L50MPFfdFyyVXhwCh+QtYFQBbUt8/ WzBC1lghK0tqa8kS18ZGsKIOXwiGFSkW/+nu9kIILn4HcJXUIiIH5jCGmr5FnHbb j7Es4ORAUKBiZ03v3rCTF0VfEtY9cJVFVHeoyFlewz4o5CgnXFEcXT3u4aHqu/fi oFAitkTKBwAd4v4r8h7Y3oh/rHtB/bWsNwZ7OoxlM51wb9t2K5JA5NVYALEBpEWG FyoQ5Ggh5hJMmGnad/jjQ8qKWBe1DBUnOJQF9FUM0W1LUjpP/6i7mm0MMuHpAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUuOu98cFyxwzwNMTKWVgOVB1RVhwwHwYDVR0j BBgwFoAU+T7gmMA93uu/v7dyUNZ3K+3vJF4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWMwYzE0YTktM2E3Ny00OWUyLTkxOTQtNDhkMDkxMzQ1OGIyLzAvRjkzRUUwOThD MDNEREVFQkJGQkZCNzcyNTBENjc3MkJFREVGMjQ1RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GOTNFRTA5OEMwM0RERUVCQkZCRkI3NzI1MEQ2NzcyQkVERUYy NDVFLmNlcjCBoQYIKwYBBQUHAQsEgZQwgZEwgY4GCCsGAQUFBzALhoGBcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzVjMGMxNGE5LTNhNzctNDllMi05 MTk0LTQ4ZDA5MTM0NThiMi8wLzMyMzAzMjJlMzEzNTM0MmUzMjM4MmUzMDJmMzIz MzJkMzIzNDIwM2QzZTIwMzQzNDMzMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAHKmhwwDQYJKoZIhvcN AQELBQADggEBANG/TcJjfk7oUtzqAd2X6qAoCsrWEmSXtam+pHwFg8V0/JuvqqVV z0zzaAZfTuxM4/gL/UX1KBDKaAlfi0yGhjlmvzcmzYlArw22no9Gt150S/mF/8Gz NZlbOW50VpM/+6MXRl6UJg8LQLL/QrOkTDsPEMdEvLy8BYHUaaejA0i9jT72vAG1 P8YPXYYW4dweRf6HnfeBEn6WPUWvwtGkW1iqz8kujyaEYdXWi7MGjzPrvt1Tc4Ft OKDX18uQaV0JxNXCNkXCXjZLNDnUe0gnNZiO87Vz+zYy4Y1OtQHZcmvPx+eQGwWy 9sty9grGm68vX+yxHYHDq80+qSHWlzmmRgk= -----END CERTIFICATE-----Generated at Tue May 5 15:05:42 2026 by rpki-client