$ rpki-client -vvf rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3230322e35392e3136382e302f32342d3234203d3e203137373237.roa File: 3230322e35392e3136382e302f32342d3234203d3e203137373237.roa (raw, json) Hash identifier: AkxA5iAAhgwy/lwjkhpjxhpj26OTtLEQseyDwNN8OxA= Subject key identifier: B1:3F:A7:38:38:86:35:91:2E:DD:64:E6:66:87:1E:3C:36:1C:49:44 Certificate issuer: /CN=EAE158B3C84D30768CBC0D1D56034E26E704B5D0 Certificate serial: 1A6D7ED88F2D57C9881AB67D04142B759C85215D Authority key identifier: EA:E1:58:B3:C8:4D:30:76:8C:BC:0D:1D:56:03:4E:26:E7:04:B5:D0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3230322e35392e3136382e302f32342d3234203d3e203137373237.roa Signing time: Sun 03 May 2026 02:38:29 +0000 ROA not before: Sun 03 May 2026 02:33:29 +0000 ROA not after: Sun 02 May 2027 02:38:29 +0000 asID: 17727 IP address blocks: 202.59.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.crl rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 07 May 2026 23:33:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:6d:7e:d8:8f:2d:57:c9:88:1a:b6:7d:04:14:2b:75:9c:85:21:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EAE158B3C84D30768CBC0D1D56034E26E704B5D0 Validity Not Before: May 3 02:33:29 2026 GMT Not After : May 2 02:38:29 2027 GMT Subject: CN=B13FA738388635912EDD64E666871E3C361C4944 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:64:b2:8a:11:9a:2f:e2:6e:13:82:f5:ef:e4: 25:be:5b:da:cd:d5:90:97:53:32:4a:f2:40:44:be: 0b:d2:de:83:0c:37:b7:5e:63:6c:dc:6f:d9:f1:b6: 4c:ed:f5:bf:ad:7c:31:26:00:38:28:9f:12:11:19: 0b:6c:6c:43:c5:34:0c:f7:f9:af:db:08:4b:e0:44: 23:66:8f:5e:00:b7:de:7a:25:3b:b9:0f:14:5a:55: 3b:ac:ac:bf:20:4a:ce:61:59:d9:89:1e:78:56:06: ed:3d:0d:5f:99:c7:50:d6:32:fe:99:1f:52:f9:8c: 75:bc:b8:42:7c:5d:44:2b:97:4e:6b:88:d0:70:7d: cd:3e:63:76:10:4c:1c:c1:0f:24:28:bb:31:08:a7: 0e:04:58:64:0f:33:ec:9e:4f:4d:09:ef:b6:bf:fa: 81:dd:53:10:df:78:67:25:98:6d:31:8b:af:ed:35: c9:46:54:8f:99:9b:c4:d8:db:59:dd:65:43:c9:2e: c6:0c:7f:a0:9c:48:5b:6b:26:63:d4:e5:58:57:7f: d4:70:9b:2b:8d:eb:58:b7:8d:43:72:5b:71:14:4d: 5c:d9:f0:93:30:66:dd:d7:12:95:b6:72:0f:30:d6: 6c:74:ce:83:b1:75:1c:ab:49:ce:62:f0:1f:b2:c3: 38:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:3F:A7:38:38:86:35:91:2E:DD:64:E6:66:87:1E:3C:36:1C:49:44 X509v3 Authority Key Identifier: keyid:EA:E1:58:B3:C8:4D:30:76:8C:BC:0D:1D:56:03:4E:26:E7:04:B5:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3230322e35392e3136382e302f32342d3234203d3e203137373237.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.59.168.0/24 Signature Algorithm: sha256WithRSAEncryption 4c:66:6e:55:e2:0b:a3:72:74:ea:c5:30:98:33:3a:7d:6b:46: 67:98:2a:8c:3f:e9:fc:8a:fe:1d:a5:b8:ea:1d:91:3e:b3:ed: 9e:9a:2c:fe:b4:2f:cf:5b:84:7b:25:1b:30:fc:cb:08:48:8d: 5f:4c:5e:b4:b0:9c:72:1d:d5:02:28:27:9b:b4:24:12:a5:bf: 06:28:29:02:e3:0f:e7:a7:65:2f:36:46:a3:ae:b5:e5:4e:1c: 3d:d6:94:68:b7:4c:32:09:c5:27:0a:13:46:f9:27:78:b8:ce: 9c:e7:73:b4:e8:3d:67:46:08:7c:02:e1:30:3d:c6:83:28:51: 47:98:9c:28:a0:76:5c:46:4f:2c:5c:5f:61:cc:40:18:08:12: ad:30:bb:e4:dd:c7:99:6b:d1:1b:0e:c9:8a:14:00:52:71:a6: fc:d6:7a:14:7d:11:d8:f2:89:f5:00:d3:c0:81:ca:9e:16:db: e8:06:6c:a4:e8:6d:d7:e0:9a:2a:ac:60:c4:f1:b0:93:50:16: 99:48:c3:72:75:17:8d:92:36:12:43:76:51:f5:5f:1f:94:44: cb:b3:04:de:61:6e:a1:eb:8b:2d:6b:2b:78:80:c3:36:71:cf: 68:c8:33:b1:84:18:c6:d4:de:1d:25:59:44:be:64:f8:ba:2b: f8:50:22:00 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUGm1+2I8tV8mIGrZ9BBQrdZyFIV0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUFFMTU4QjNDODREMzA3NjhDQkMwRDFENTYwMzRFMjZF NzA0QjVEMDAeFw0yNjA1MDMwMjMzMjlaFw0yNzA1MDIwMjM4MjlaMDMxMTAvBgNV BAMTKEIxM0ZBNzM4Mzg4NjM1OTEyRURENjRFNjY2ODcxRTNDMzYxQzQ5NDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZZLKKEZov4m4TgvXv5CW+W9rN 1ZCXUzJK8kBEvgvS3oMMN7deY2zcb9nxtkzt9b+tfDEmADgonxIRGQtsbEPFNAz3 +a/bCEvgRCNmj14At956JTu5DxRaVTusrL8gSs5hWdmJHnhWBu09DV+Zx1DWMv6Z H1L5jHW8uEJ8XUQrl05riNBwfc0+Y3YQTBzBDyQouzEIpw4EWGQPM+yeT00J77a/ +oHdUxDfeGclmG0xi6/tNclGVI+Zm8TY21ndZUPJLsYMf6CcSFtrJmPU5VhXf9Rw myuN61i3jUNyW3EUTVzZ8JMwZt3XEpW2cg8w1mx0zoOxdRyrSc5i8B+ywzg3AgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUsT+nODiGNZEu3WTmZocePDYcSUQwHwYDVR0j BBgwFoAU6uFYs8hNMHaMvA0dVgNOJucEtdAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjM1ZjdhMmYtNzI1ZS00Mzk5LTg2OWEtNGIxZmNmMmM2YTBjLzAvRUFFMTU4QjND ODREMzA3NjhDQkMwRDFENTYwMzRFMjZFNzA0QjVEMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FQUUxNThCM0M4NEQzMDc2OENCQzBEMUQ1NjAzNEUyNkU3MDRC NUQwLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzYzNWY3YTJmLTcyNWUtNDM5OS04 NjlhLTRiMWZjZjJjNmEwYy8wLzMyMzAzMjJlMzUzOTJlMzEzNjM4MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNzM3MzIzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMo7qDANBgkqhkiG 9w0BAQsFAAOCAQEATGZuVeILo3J06sUwmDM6fWtGZ5gqjD/p/Ir+HaW46h2RPrPt npos/rQvz1uEeyUbMPzLCEiNX0xetLCcch3VAignm7QkEqW/BigpAuMP56dlLzZG o6615U4cPdaUaLdMMgnFJwoTRvkneLjOnOdztOg9Z0YIfALhMD3GgyhRR5icKKB2 XEZPLFxfYcxAGAgSrTC75N3HmWvRGw7JihQAUnGm/NZ6FH0R2PKJ9QDTwIHKnhbb 6AZspOht1+CaKqxgxPGwk1AWmUjDcnUXjZI2EkN2UfVfH5REy7ME3mFuoeuLLWsr eIDDNnHPaMgzsYQYxtTeHSVZRL5k+Lor+FAiAA== -----END CERTIFICATE-----Generated at Thu May 7 04:31:34 2026 by rpki-client