$ rpki-client -vvf rpki-rsync.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/3230322e3135342e33362e302f32332d3234203d3e20313431363037.roa File: 3230322e3135342e33362e302f32332d3234203d3e20313431363037.roa (raw, json) Hash identifier: 7y/Bx/w0JjnhrbPpTrw+gUjjXtPYSBeIYaQhahnPNWY= Subject key identifier: 15:53:2E:5E:02:62:8D:7C:47:05:C8:05:75:01:C6:3A:AE:44:22:13 Certificate issuer: /CN=F93EE098C03DDEEBBFBFB77250D6772BEDEF245E Certificate serial: 3131B1C4ADFC19568E24EC67B6F22E366CB7F7E8 Authority key identifier: F9:3E:E0:98:C0:3D:DE:EB:BF:BF:B7:72:50:D6:77:2B:ED:EF:24:5E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F93EE098C03DDEEBBFBFB77250D6772BEDEF245E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/3230322e3135342e33362e302f32332d3234203d3e20313431363037.roa Signing time: Sun 03 May 2026 02:36:01 +0000 ROA not before: Sun 03 May 2026 02:31:01 +0000 ROA not after: Sun 02 May 2027 02:36:01 +0000 asID: 141607 IP address blocks: 202.154.36.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/F93EE098C03DDEEBBFBFB77250D6772BEDEF245E.crl rsync://rpki-rsync.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/F93EE098C03DDEEBBFBFB77250D6772BEDEF245E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F93EE098C03DDEEBBFBFB77250D6772BEDEF245E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 May 2026 10:15:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:31:b1:c4:ad:fc:19:56:8e:24:ec:67:b6:f2:2e:36:6c:b7:f7:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F93EE098C03DDEEBBFBFB77250D6772BEDEF245E Validity Not Before: May 3 02:31:01 2026 GMT Not After : May 2 02:36:01 2027 GMT Subject: CN=15532E5E02628D7C4705C8057501C63AAE442213 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:bf:4c:42:cf:ff:e9:28:5d:8f:c5:d8:1a:4e: a7:c7:a4:98:00:48:ae:8d:e7:07:50:d9:8c:73:59: 04:cb:7c:70:8d:9d:91:7b:2f:ba:db:c9:b0:92:21: 61:49:89:87:83:71:46:45:22:51:17:6e:55:f1:1c: ac:d5:1a:f7:1a:4b:2d:a0:82:9c:98:e6:2d:c0:65: 98:7b:ed:7a:e5:3b:a0:0c:31:08:63:e0:25:6c:02: f5:d6:2f:79:cd:93:f4:67:23:24:b6:84:f1:36:11: 33:07:69:f6:9d:57:5c:44:5e:ea:36:27:aa:18:ac: d8:12:57:42:89:fc:5c:76:95:4f:20:1f:d5:08:cc: c2:3b:4b:7a:6a:af:a8:96:7d:a8:f5:f6:c4:59:31: 13:5d:d8:e2:8b:71:5b:03:cf:32:ed:f4:a4:53:fc: 92:2d:69:3c:d7:51:3f:41:2b:40:c7:c9:1d:02:13: 0a:4d:43:ce:8b:e2:1d:0d:7e:40:7a:f1:57:f4:9d: 25:6c:62:47:89:35:81:2f:6d:05:da:82:c7:bf:af: 12:49:25:9b:19:60:97:8c:ac:b5:c8:11:f2:41:dd: fc:01:db:09:8c:00:30:40:97:43:d2:6d:83:26:31: ad:9c:32:0d:ff:38:c1:f5:6d:ca:3c:06:d4:21:71: d8:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:53:2E:5E:02:62:8D:7C:47:05:C8:05:75:01:C6:3A:AE:44:22:13 X509v3 Authority Key Identifier: keyid:F9:3E:E0:98:C0:3D:DE:EB:BF:BF:B7:72:50:D6:77:2B:ED:EF:24:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/F93EE098C03DDEEBBFBFB77250D6772BEDEF245E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F93EE098C03DDEEBBFBFB77250D6772BEDEF245E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/3230322e3135342e33362e302f32332d3234203d3e20313431363037.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.154.36.0/23 Signature Algorithm: sha256WithRSAEncryption 4d:4c:25:0f:0a:e3:e3:d5:73:9f:3c:bc:06:57:7c:e1:35:c5: 9e:c2:7c:77:7b:76:56:93:1b:0b:20:80:d8:10:eb:60:af:3f: 69:73:4b:35:7b:8d:58:dd:3d:9d:57:22:ee:63:68:af:95:f2: 23:1e:08:1f:b3:db:ae:78:64:be:da:46:7a:19:14:e3:85:b2: 64:f3:bf:4f:d2:47:81:fb:17:23:ce:40:bc:2e:a3:a0:c3:4e: 32:a1:1e:71:8d:21:e1:45:c5:ce:66:49:60:56:70:03:d4:c1: f4:1a:c3:df:a8:24:f6:83:d5:f6:41:89:13:e3:2a:c1:c2:d0: 2a:5d:e6:63:ab:34:69:0b:97:55:50:ba:87:a6:76:02:05:00: ac:b8:96:f4:32:99:57:6f:bf:d9:4a:84:a5:9f:3e:7e:cc:24: e3:79:24:3d:c8:fa:5f:80:16:47:af:cb:ad:f5:aa:86:b0:93: dc:b2:31:63:5b:78:d0:78:fe:a9:f5:24:81:f7:14:97:01:d5: da:2b:9a:5c:02:53:03:31:bc:c6:64:a4:5e:39:12:93:65:10: 7a:01:ac:10:f0:74:58:77:44:2c:ed:7e:3a:76:62:b1:05:99: 4b:61:79:e5:b8:f0:62:e2:db:3b:b3:ec:66:48:89:8e:da:2d: 10:1c:d0:cc -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUMTGxxK38GVaOJOxntvIuNmy39+gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjkzRUUwOThDMDNEREVFQkJGQkZCNzcyNTBENjc3MkJF REVGMjQ1RTAeFw0yNjA1MDMwMjMxMDFaFw0yNzA1MDIwMjM2MDFaMDMxMTAvBgNV BAMTKDE1NTMyRTVFMDI2MjhEN0M0NzA1QzgwNTc1MDFDNjNBQUU0NDIyMTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKv0xCz//pKF2PxdgaTqfHpJgA SK6N5wdQ2YxzWQTLfHCNnZF7L7rbybCSIWFJiYeDcUZFIlEXblXxHKzVGvcaSy2g gpyY5i3AZZh77XrlO6AMMQhj4CVsAvXWL3nNk/RnIyS2hPE2ETMHafadV1xEXuo2 J6oYrNgSV0KJ/Fx2lU8gH9UIzMI7S3pqr6iWfaj19sRZMRNd2OKLcVsDzzLt9KRT /JItaTzXUT9BK0DHyR0CEwpNQ86L4h0NfkB68Vf0nSVsYkeJNYEvbQXagse/rxJJ JZsZYJeMrLXIEfJB3fwB2wmMADBAl0PSbYMmMa2cMg3/OMH1bco8BtQhcdifAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUFVMuXgJijXxHBcgFdQHGOq5EIhMwHwYDVR0j BBgwFoAU+T7gmMA93uu/v7dyUNZ3K+3vJF4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWMwYzE0YTktM2E3Ny00OWUyLTkxOTQtNDhkMDkxMzQ1OGIyLzAvRjkzRUUwOThD MDNEREVFQkJGQkZCNzcyNTBENjc3MkJFREVGMjQ1RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GOTNFRTA5OEMwM0RERUVCQkZCRkI3NzI1MEQ2NzcyQkVERUYy NDVFLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzVjMGMxNGE5LTNhNzctNDllMi05 MTk0LTQ4ZDA5MTM0NThiMi8wLzMyMzAzMjJlMzEzNTM0MmUzMzM2MmUzMDJmMzIz MzJkMzIzNDIwM2QzZTIwMzEzNDMxMzYzMDM3LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBypokMA0GCSqG SIb3DQEBCwUAA4IBAQBNTCUPCuPj1XOfPLwGV3zhNcWewnx3e3ZWkxsLIIDYEOtg rz9pc0s1e41Y3T2dVyLuY2ivlfIjHggfs9uueGS+2kZ6GRTjhbJk879P0keB+xcj zkC8LqOgw04yoR5xjSHhRcXOZklgVnAD1MH0GsPfqCT2g9X2QYkT4yrBwtAqXeZj qzRpC5dVULqHpnYCBQCsuJb0MplXb7/ZSoSlnz5+zCTjeSQ9yPpfgBZHr8ut9aqG sJPcsjFjW3jQeP6p9SSB9xSXAdXaK5pcAlMDMbzGZKReORKTZRB6AawQ8HRYd0Qs 7X46dmKxBZlLYXnluPBi4ts7s+xmSImO2i0QHNDM -----END CERTIFICATE-----Generated at Tue May 5 13:31:47 2026 by rpki-client