$ rpki-client -vvf rpki-rsync.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/3230322e3135342e35362e302f32312d3234203d3e2034343334.roa File: 3230322e3135342e35362e302f32312d3234203d3e2034343334.roa (raw, json) Hash identifier: P8wtFfjUtf08/eXI9NE0+s7VX5bjXF6Lm4GTfuRJuFQ= Subject key identifier: 2F:64:29:69:5A:8D:18:2C:22:D0:5F:AB:EF:31:CD:87:90:70:B7:15 Certificate issuer: /CN=F93EE098C03DDEEBBFBFB77250D6772BEDEF245E Certificate serial: 0C46E1D48CA03F1DE8CE5AC0AEA9E147360506F2 Authority key identifier: F9:3E:E0:98:C0:3D:DE:EB:BF:BF:B7:72:50:D6:77:2B:ED:EF:24:5E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F93EE098C03DDEEBBFBFB77250D6772BEDEF245E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/3230322e3135342e35362e302f32312d3234203d3e2034343334.roa Signing time: Sun 03 May 2026 02:36:00 +0000 ROA not before: Sun 03 May 2026 02:31:00 +0000 ROA not after: Sun 02 May 2027 02:36:00 +0000 asID: 4434 IP address blocks: 202.154.56.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/F93EE098C03DDEEBBFBFB77250D6772BEDEF245E.crl rsync://rpki-rsync.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/F93EE098C03DDEEBBFBFB77250D6772BEDEF245E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F93EE098C03DDEEBBFBFB77250D6772BEDEF245E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 May 2026 11:51:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:46:e1:d4:8c:a0:3f:1d:e8:ce:5a:c0:ae:a9:e1:47:36:05:06:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F93EE098C03DDEEBBFBFB77250D6772BEDEF245E Validity Not Before: May 3 02:31:00 2026 GMT Not After : May 2 02:36:00 2027 GMT Subject: CN=2F6429695A8D182C22D05FABEF31CD879070B715 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:07:cd:fa:96:d9:7e:13:21:40:82:fb:55:ea: 44:6c:38:86:53:46:7a:24:4d:1f:39:05:46:46:eb: 2e:2b:ee:27:bf:81:4e:51:8b:97:9a:46:3f:7e:35: 96:54:b6:2e:97:1a:83:05:fb:92:cb:97:a2:72:2a: c1:29:23:44:ca:bd:d1:ff:d3:ee:cd:0b:43:2c:3c: 45:52:4d:6e:ec:a0:d8:24:31:3c:f2:c6:b7:3b:1e: 61:2b:61:dc:e5:41:56:e9:3e:ec:00:ec:ac:3f:d9: d5:49:37:48:51:6a:f3:1c:ad:67:55:e3:3a:c7:da: d7:a6:ba:64:ce:19:70:dc:51:62:83:49:20:a2:ea: a0:d7:df:8e:78:d0:7c:57:60:51:50:16:bb:86:97: 36:30:7b:c5:60:e3:5e:e8:6c:0a:3b:59:3e:bb:bd: aa:dd:1c:f9:84:41:52:7e:31:39:d0:64:f9:7a:57: e3:21:0c:0d:5e:7c:f4:b4:bd:e9:fd:4e:27:a4:f2: 45:a8:ca:fb:71:7a:63:7c:83:47:ac:99:10:9f:ab: c7:b7:f9:90:ee:ea:cb:d1:c0:27:f3:28:82:70:45: 59:c6:43:f4:59:92:c0:04:13:8e:49:e2:33:bb:13: 70:83:af:8b:bd:08:3a:80:72:97:e4:aa:34:61:94: f1:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:64:29:69:5A:8D:18:2C:22:D0:5F:AB:EF:31:CD:87:90:70:B7:15 X509v3 Authority Key Identifier: keyid:F9:3E:E0:98:C0:3D:DE:EB:BF:BF:B7:72:50:D6:77:2B:ED:EF:24:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/F93EE098C03DDEEBBFBFB77250D6772BEDEF245E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F93EE098C03DDEEBBFBFB77250D6772BEDEF245E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/3230322e3135342e35362e302f32312d3234203d3e2034343334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.154.56.0/21 Signature Algorithm: sha256WithRSAEncryption 88:f3:ec:83:6f:55:5a:bb:b4:dc:cf:d8:1e:43:b7:b8:05:08: 7e:56:4e:05:ed:9b:82:84:2b:b2:ef:34:30:37:b4:81:a1:74: d8:38:49:5d:b3:74:19:1e:ee:00:81:e4:3d:2a:2c:f8:f1:19: 26:59:f7:61:98:24:6b:73:ce:63:59:a6:f5:45:ec:4d:e4:0f: 7a:f1:d7:33:29:ea:ae:8c:3b:27:ba:56:45:4f:0f:2b:6b:ac: fd:2b:5b:81:f1:71:3c:53:6d:b7:88:05:a7:f6:7b:f1:1d:17: 26:32:54:10:c5:12:02:6d:e5:97:4b:a8:98:7b:74:64:5a:f0: 7c:76:f1:fb:b7:4d:85:b1:93:4c:72:d3:57:c3:00:42:5a:02: 9c:84:71:d3:0f:c4:c5:c0:2a:93:17:b5:38:cc:ac:ee:6e:e0: 80:6d:17:53:b4:80:5d:68:f6:3d:2e:83:56:c1:4f:bf:78:12: 84:84:93:3b:ed:54:69:68:f1:ff:40:91:b3:7d:68:32:4e:5d: da:ec:85:46:5e:48:1a:b0:92:9a:1e:02:25:3c:9f:15:ea:d6: c1:9d:bb:e2:f0:ed:05:43:6f:c8:3c:9f:a7:a4:fe:a3:a2:fa: 83:29:ca:b2:87:ab:3f:d5:db:25:f3:b7:05:40:61:c9:77:8b: 3d:c1:40:d8 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUDEbh1IygPx3ozlrArqnhRzYFBvIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjkzRUUwOThDMDNEREVFQkJGQkZCNzcyNTBENjc3MkJF REVGMjQ1RTAeFw0yNjA1MDMwMjMxMDBaFw0yNzA1MDIwMjM2MDBaMDMxMTAvBgNV BAMTKDJGNjQyOTY5NUE4RDE4MkMyMkQwNUZBQkVGMzFDRDg3OTA3MEI3MTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCGB836ltl+EyFAgvtV6kRsOIZT RnokTR85BUZG6y4r7ie/gU5Ri5eaRj9+NZZUti6XGoMF+5LLl6JyKsEpI0TKvdH/ 0+7NC0MsPEVSTW7soNgkMTzyxrc7HmErYdzlQVbpPuwA7Kw/2dVJN0hRavMcrWdV 4zrH2temumTOGXDcUWKDSSCi6qDX34540HxXYFFQFruGlzYwe8Vg417obAo7WT67 vardHPmEQVJ+MTnQZPl6V+MhDA1efPS0ven9Tiek8kWoyvtxemN8g0esmRCfq8e3 +ZDu6svRwCfzKIJwRVnGQ/RZksAEE45J4jO7E3CDr4u9CDqAcpfkqjRhlPH5AgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUL2QpaVqNGCwi0F+r7zHNh5BwtxUwHwYDVR0j BBgwFoAU+T7gmMA93uu/v7dyUNZ3K+3vJF4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWMwYzE0YTktM2E3Ny00OWUyLTkxOTQtNDhkMDkxMzQ1OGIyLzAvRjkzRUUwOThD MDNEREVFQkJGQkZCNzcyNTBENjc3MkJFREVGMjQ1RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GOTNFRTA5OEMwM0RERUVCQkZCRkI3NzI1MEQ2NzcyQkVERUYy NDVFLmNlcjCBoQYIKwYBBQUHAQsEgZQwgZEwgY4GCCsGAQUFBzALhoGBcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzVjMGMxNGE5LTNhNzctNDllMi05 MTk0LTQ4ZDA5MTM0NThiMi8wLzMyMzAzMjJlMzEzNTM0MmUzNTM2MmUzMDJmMzIz MTJkMzIzNDIwM2QzZTIwMzQzNDMzMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAPKmjgwDQYJKoZIhvcN AQELBQADggEBAIjz7INvVVq7tNzP2B5Dt7gFCH5WTgXtm4KEK7LvNDA3tIGhdNg4 SV2zdBke7gCB5D0qLPjxGSZZ92GYJGtzzmNZpvVF7E3kD3rx1zMp6q6MOye6VkVP DytrrP0rW4HxcTxTbbeIBaf2e/EdFyYyVBDFEgJt5ZdLqJh7dGRa8Hx28fu3TYWx k0xy01fDAEJaApyEcdMPxMXAKpMXtTjMrO5u4IBtF1O0gF1o9j0ug1bBT794EoSE kzvtVGlo8f9AkbN9aDJOXdrshUZeSBqwkpoeAiU8nxXq1sGdu+Lw7QVDb8g8n6ek /qOi+oMpyrKHqz/V2yXztwVAYcl3iz3BQNg= -----END CERTIFICATE-----Generated at Tue May 5 15:05:41 2026 by rpki-client