$ rpki-client -vvf rpki-rsync.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/3230322e3135342e342e302f32332d3234203d3e2034343334.roa File: 3230322e3135342e342e302f32332d3234203d3e2034343334.roa (raw, json) Hash identifier: Dab/f471JKg5IRhPaCTkix0h/A+5IxCwQLHJc/g64os= Subject key identifier: 03:24:11:9A:38:C5:77:44:01:02:95:4B:B2:97:1D:4A:55:E8:F5:BB Certificate issuer: /CN=F93EE098C03DDEEBBFBFB77250D6772BEDEF245E Certificate serial: 75E3E2711FEE3ADC68CAA9778A24A8623A14683D Authority key identifier: F9:3E:E0:98:C0:3D:DE:EB:BF:BF:B7:72:50:D6:77:2B:ED:EF:24:5E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F93EE098C03DDEEBBFBFB77250D6772BEDEF245E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/3230322e3135342e342e302f32332d3234203d3e2034343334.roa Signing time: Sun 03 May 2026 02:36:01 +0000 ROA not before: Sun 03 May 2026 02:31:01 +0000 ROA not after: Sun 02 May 2027 02:36:01 +0000 asID: 4434 IP address blocks: 202.154.4.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/F93EE098C03DDEEBBFBFB77250D6772BEDEF245E.crl rsync://rpki-rsync.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/F93EE098C03DDEEBBFBFB77250D6772BEDEF245E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F93EE098C03DDEEBBFBFB77250D6772BEDEF245E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 May 2026 11:51:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:e3:e2:71:1f:ee:3a:dc:68:ca:a9:77:8a:24:a8:62:3a:14:68:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F93EE098C03DDEEBBFBFB77250D6772BEDEF245E Validity Not Before: May 3 02:31:01 2026 GMT Not After : May 2 02:36:01 2027 GMT Subject: CN=0324119A38C577440102954BB2971D4A55E8F5BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:63:34:06:f6:dd:b1:91:c1:da:92:d7:48:9e: c1:54:47:42:dd:b7:74:6c:75:47:5e:da:de:3c:07: 31:b6:5c:62:8b:5e:55:8e:f5:65:5b:26:9a:d5:62: e0:15:73:15:04:a8:3e:6a:92:0f:b3:36:d6:8f:00: a1:0d:5c:39:c9:82:7a:fd:09:33:f8:9f:2e:d0:52: 2c:82:ad:2f:e7:a5:85:6e:86:e2:47:b7:9d:53:20: b6:ea:30:b5:6b:14:c9:31:48:d6:36:cf:fe:9c:42: c6:67:7d:0a:eb:d9:28:1d:d2:e9:79:30:2c:fd:fe: 0c:c3:50:ee:1d:63:76:f4:9c:5e:d5:7e:2a:fc:61: bf:2c:27:4e:78:13:13:cb:64:f5:b1:50:f6:c1:75: 82:48:a3:25:9f:96:c0:d9:d7:ed:a6:aa:eb:f1:19: ae:b3:ce:da:48:d4:4e:7c:0d:e0:ad:34:ea:fa:91: e8:cb:d2:dc:45:38:5d:27:2f:82:bd:39:75:3e:b7: 57:42:0f:5c:6d:b3:4a:44:ee:19:ff:f1:6a:7e:c9: 47:55:81:e3:83:5f:30:43:0a:e2:6e:12:d8:68:b9: 1e:a2:9a:d5:c8:4c:68:33:24:05:2f:c1:9d:5c:c1: d5:57:b3:b8:8d:61:01:53:f9:7b:7a:d2:11:02:32: fe:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:24:11:9A:38:C5:77:44:01:02:95:4B:B2:97:1D:4A:55:E8:F5:BB X509v3 Authority Key Identifier: keyid:F9:3E:E0:98:C0:3D:DE:EB:BF:BF:B7:72:50:D6:77:2B:ED:EF:24:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/F93EE098C03DDEEBBFBFB77250D6772BEDEF245E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F93EE098C03DDEEBBFBFB77250D6772BEDEF245E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/3230322e3135342e342e302f32332d3234203d3e2034343334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.154.4.0/23 Signature Algorithm: sha256WithRSAEncryption 5c:6d:90:07:c5:da:94:1a:4e:eb:a4:f9:78:2a:fe:47:0e:2e: d6:9c:06:ef:f5:a4:94:a6:a6:55:bf:a5:5f:81:ca:6c:fb:19: 1a:4c:98:c3:90:12:0f:ef:b4:15:0e:d1:38:75:4c:be:03:3a: e7:ba:62:7a:59:f3:3f:ca:2d:aa:de:25:24:69:38:49:55:62: 8e:f2:28:31:f6:eb:ea:d7:c8:87:15:cb:17:97:72:48:ca:12: 79:36:52:c7:e8:b1:5f:6e:5e:e8:e5:31:63:e7:61:44:6b:4b: c3:6a:72:f2:ab:dc:95:d7:18:6b:11:dd:a5:0e:08:8b:48:9b: 70:00:af:06:b0:25:af:27:3a:e3:34:dc:93:98:e2:5c:7b:ff: cb:c2:a3:1a:f6:cf:bc:da:49:94:2f:05:7a:5c:7f:fe:6b:92: c9:0f:02:14:6a:b7:90:9e:05:dc:ea:70:7d:33:1e:ff:0c:59: 9f:92:86:c3:37:e0:41:85:eb:c8:70:fe:b9:9a:31:b4:bc:b5: 08:89:aa:90:c0:a8:8e:0e:7d:11:22:c3:1a:18:ff:2e:b4:13: 6d:7e:1d:c6:1d:1c:02:f8:2c:4d:50:2f:12:4d:85:a9:de:84: ff:8a:14:d2:27:1f:b7:e6:bb:aa:d2:b6:40:89:8b:f9:f7:e2: 2b:83:86:30 -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgIUdePicR/uOtxoyql3iiSoYjoUaD0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjkzRUUwOThDMDNEREVFQkJGQkZCNzcyNTBENjc3MkJF REVGMjQ1RTAeFw0yNjA1MDMwMjMxMDFaFw0yNzA1MDIwMjM2MDFaMDMxMTAvBgNV BAMTKDAzMjQxMTlBMzhDNTc3NDQwMTAyOTU0QkIyOTcxRDRBNTVFOEY1QkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGYzQG9t2xkcHaktdInsFUR0Ld t3RsdUde2t48BzG2XGKLXlWO9WVbJprVYuAVcxUEqD5qkg+zNtaPAKENXDnJgnr9 CTP4ny7QUiyCrS/npYVuhuJHt51TILbqMLVrFMkxSNY2z/6cQsZnfQrr2Sgd0ul5 MCz9/gzDUO4dY3b0nF7Vfir8Yb8sJ054ExPLZPWxUPbBdYJIoyWflsDZ1+2mquvx Ga6zztpI1E58DeCtNOr6kejL0txFOF0nL4K9OXU+t1dCD1xts0pE7hn/8Wp+yUdV geODXzBDCuJuEthouR6imtXITGgzJAUvwZ1cwdVXs7iNYQFT+Xt60hECMv4pAgMB AAGjggItMIICKTAdBgNVHQ4EFgQUAyQRmjjFd0QBApVLspcdSlXo9bswHwYDVR0j BBgwFoAU+T7gmMA93uu/v7dyUNZ3K+3vJF4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWMwYzE0YTktM2E3Ny00OWUyLTkxOTQtNDhkMDkxMzQ1OGIyLzAvRjkzRUUwOThD MDNEREVFQkJGQkZCNzcyNTBENjc3MkJFREVGMjQ1RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GOTNFRTA5OEMwM0RERUVCQkZCRkI3NzI1MEQ2NzcyQkVERUYy NDVFLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUFBzALhn9yc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWMwYzE0YTktM2E3Ny00OWUyLTkx OTQtNDhkMDkxMzQ1OGIyLzAvMzIzMDMyMmUzMTM1MzQyZTM0MmUzMDJmMzIzMzJk MzIzNDIwM2QzZTIwMzQzNDMzMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAHKmgQwDQYJKoZIhvcNAQEL BQADggEBAFxtkAfF2pQaTuuk+Xgq/kcOLtacBu/1pJSmplW/pV+Bymz7GRpMmMOQ Eg/vtBUO0Th1TL4DOue6YnpZ8z/KLareJSRpOElVYo7yKDH26+rXyIcVyxeXckjK Enk2UsfosV9uXujlMWPnYURrS8NqcvKr3JXXGGsR3aUOCItIm3AArwawJa8nOuM0 3JOY4lx7/8vCoxr2z7zaSZQvBXpcf/5rkskPAhRqt5CeBdzqcH0zHv8MWZ+ShsM3 4EGF68hw/rmaMbS8tQiJqpDAqI4OfREiwxoY/y60E21+HcYdHAL4LE1QLxJNhane hP+KFNInH7fmu6rStkCJi/n34iuDhjA= -----END CERTIFICATE-----Generated at Tue May 5 15:04:28 2026 by rpki-client