$ rpki-client -vvf rpki-rsync.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/3230322e3135342e34302e302f32322d3234203d3e2034343334.roa File: 3230322e3135342e34302e302f32322d3234203d3e2034343334.roa (raw, json) Hash identifier: gEtfq++TPx94D5ggSD8BHyqeMf5lVxXvR6HGPq9iaUk= Subject key identifier: 94:35:15:7D:8C:89:18:2F:6D:E3:8F:81:AB:1A:3F:CB:74:90:6F:35 Certificate issuer: /CN=F93EE098C03DDEEBBFBFB77250D6772BEDEF245E Certificate serial: 41CC0C58CB896CC9F75FE0CF00177746DE612DFF Authority key identifier: F9:3E:E0:98:C0:3D:DE:EB:BF:BF:B7:72:50:D6:77:2B:ED:EF:24:5E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F93EE098C03DDEEBBFBFB77250D6772BEDEF245E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/3230322e3135342e34302e302f32322d3234203d3e2034343334.roa Signing time: Sun 03 May 2026 02:36:02 +0000 ROA not before: Sun 03 May 2026 02:31:02 +0000 ROA not after: Sun 02 May 2027 02:36:02 +0000 asID: 4434 IP address blocks: 202.154.40.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/F93EE098C03DDEEBBFBFB77250D6772BEDEF245E.crl rsync://rpki-rsync.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/F93EE098C03DDEEBBFBFB77250D6772BEDEF245E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F93EE098C03DDEEBBFBFB77250D6772BEDEF245E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 May 2026 11:51:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:cc:0c:58:cb:89:6c:c9:f7:5f:e0:cf:00:17:77:46:de:61:2d:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F93EE098C03DDEEBBFBFB77250D6772BEDEF245E Validity Not Before: May 3 02:31:02 2026 GMT Not After : May 2 02:36:02 2027 GMT Subject: CN=9435157D8C89182F6DE38F81AB1A3FCB74906F35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:89:da:f8:18:62:2d:e1:0f:c8:b7:a4:3d:72: 3f:ee:b8:2e:5b:c3:ff:16:59:58:ec:3b:c6:e7:c0: 6c:64:15:a8:b8:1d:e5:46:3b:7c:2e:fb:9e:6d:41: e9:7e:74:a6:94:40:e8:c5:30:f0:a0:8f:37:c2:d3: d4:3f:37:d7:bd:09:55:04:4e:44:10:e5:ca:83:a6: 89:71:c2:bf:26:57:43:31:05:29:fc:56:b7:1a:7a: 13:c7:0a:59:e0:ce:59:06:a8:2f:ab:4c:43:a5:0a: 2f:ab:47:0f:8b:b9:12:ee:ac:d8:a8:ea:1d:4e:42: 76:0c:40:04:79:94:70:aa:56:ef:cd:f6:7e:1c:35: a1:a5:13:2f:3f:e7:d4:d7:ee:66:2b:c5:e8:7d:5c: ee:ca:09:d7:a2:e7:e2:02:9c:86:53:c5:97:71:36: ae:8f:29:be:0d:38:38:19:07:be:1b:c6:08:f6:f5: b8:a3:04:9c:09:3d:f7:6b:fb:26:5b:5f:8d:8f:df: 36:11:0a:b2:04:01:23:5c:ab:d2:f5:eb:3b:2d:f4: 73:6c:48:b6:60:01:bf:9f:be:52:83:9d:79:64:70: 4b:2c:c2:a6:73:77:a3:d7:3b:cd:d3:78:dc:ff:a5: c9:ec:58:60:35:bc:d0:22:31:c7:0c:7b:e8:f8:aa: ce:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:35:15:7D:8C:89:18:2F:6D:E3:8F:81:AB:1A:3F:CB:74:90:6F:35 X509v3 Authority Key Identifier: keyid:F9:3E:E0:98:C0:3D:DE:EB:BF:BF:B7:72:50:D6:77:2B:ED:EF:24:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/F93EE098C03DDEEBBFBFB77250D6772BEDEF245E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F93EE098C03DDEEBBFBFB77250D6772BEDEF245E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/3230322e3135342e34302e302f32322d3234203d3e2034343334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.154.40.0/22 Signature Algorithm: sha256WithRSAEncryption c6:32:ba:79:36:60:a5:60:f1:f0:20:b6:32:f0:7f:01:16:fe: 92:6d:de:e1:a5:0f:4d:8d:66:6d:13:80:83:b0:f7:a1:87:14: c9:51:b3:b5:ba:4a:ad:29:d2:04:5b:b2:c6:8f:5d:d0:89:ee: 71:49:09:40:82:46:c3:66:12:7c:c1:e7:d9:dc:33:88:70:ef: 72:fc:79:c5:92:da:05:17:ac:d9:49:e0:89:db:11:4b:68:2e: 0a:dd:65:f6:dd:71:86:dd:f0:8f:51:6d:2d:da:84:1e:bc:7b: db:ca:69:d8:58:5a:d3:6d:92:66:ac:a9:e3:3c:9f:60:2b:c9: 39:40:d6:2b:a1:c7:2a:90:b6:92:25:c6:4e:0e:38:02:5d:9e: 0d:e6:a9:57:ba:0b:e1:a3:ac:f3:b1:40:db:ca:61:3b:b6:3a: 6d:2a:26:57:9a:8a:fe:a8:d5:a6:24:42:2b:3d:29:8d:86:e2: 53:66:2f:b2:03:58:31:3e:fa:b0:c3:a2:c1:24:8a:f9:74:78: 5b:13:79:4c:7f:77:74:5a:78:4f:4f:de:df:15:fa:ee:81:e2: cc:a8:21:91:e4:43:dd:4d:bc:48:f3:1a:ad:6c:8c:8f:7f:ea: 34:17:6d:99:52:03:c1:44:e3:dd:98:1c:d8:f5:62:cd:b7:3d: 3b:d8:a9:4f -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUQcwMWMuJbMn3X+DPABd3Rt5hLf8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjkzRUUwOThDMDNEREVFQkJGQkZCNzcyNTBENjc3MkJF REVGMjQ1RTAeFw0yNjA1MDMwMjMxMDJaFw0yNzA1MDIwMjM2MDJaMDMxMTAvBgNV BAMTKDk0MzUxNTdEOEM4OTE4MkY2REUzOEY4MUFCMUEzRkNCNzQ5MDZGMzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYidr4GGIt4Q/It6Q9cj/uuC5b w/8WWVjsO8bnwGxkFai4HeVGO3wu+55tQel+dKaUQOjFMPCgjzfC09Q/N9e9CVUE TkQQ5cqDpolxwr8mV0MxBSn8VrcaehPHClngzlkGqC+rTEOlCi+rRw+LuRLurNio 6h1OQnYMQAR5lHCqVu/N9n4cNaGlEy8/59TX7mYrxeh9XO7KCdei5+ICnIZTxZdx Nq6PKb4NODgZB74bxgj29bijBJwJPfdr+yZbX42P3zYRCrIEASNcq9L16zst9HNs SLZgAb+fvlKDnXlkcEsswqZzd6PXO83TeNz/pcnsWGA1vNAiMccMe+j4qs6TAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUlDUVfYyJGC9t44+Bqxo/y3SQbzUwHwYDVR0j BBgwFoAU+T7gmMA93uu/v7dyUNZ3K+3vJF4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWMwYzE0YTktM2E3Ny00OWUyLTkxOTQtNDhkMDkxMzQ1OGIyLzAvRjkzRUUwOThD MDNEREVFQkJGQkZCNzcyNTBENjc3MkJFREVGMjQ1RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GOTNFRTA5OEMwM0RERUVCQkZCRkI3NzI1MEQ2NzcyQkVERUYy NDVFLmNlcjCBoQYIKwYBBQUHAQsEgZQwgZEwgY4GCCsGAQUFBzALhoGBcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzVjMGMxNGE5LTNhNzctNDllMi05 MTk0LTQ4ZDA5MTM0NThiMi8wLzMyMzAzMjJlMzEzNTM0MmUzNDMwMmUzMDJmMzIz MjJkMzIzNDIwM2QzZTIwMzQzNDMzMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBALKmigwDQYJKoZIhvcN AQELBQADggEBAMYyunk2YKVg8fAgtjLwfwEW/pJt3uGlD02NZm0TgIOw96GHFMlR s7W6Sq0p0gRbssaPXdCJ7nFJCUCCRsNmEnzB59ncM4hw73L8ecWS2gUXrNlJ4Inb EUtoLgrdZfbdcYbd8I9RbS3ahB68e9vKadhYWtNtkmasqeM8n2AryTlA1iuhxyqQ tpIlxk4OOAJdng3mqVe6C+GjrPOxQNvKYTu2Om0qJleaiv6o1aYkQis9KY2G4lNm L7IDWDE++rDDosEkivl0eFsTeUx/d3RaeE9P3t8V+u6B4syoIZHkQ91NvEjzGq1s jI9/6jQXbZlSA8FE492YHNj1Ys23PTvYqU8= -----END CERTIFICATE-----Generated at Tue May 5 15:05:42 2026 by rpki-client