$ rpki-client -vvf rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3230322e35392e3137332e302f32342d3234203d3e203137373237.roa File: 3230322e35392e3137332e302f32342d3234203d3e203137373237.roa (raw, json) Hash identifier: 0djPH764QywUeMzlvVnCoKJQE8YHzMPh6rGq9kYyqhc= Subject key identifier: 07:38:EF:25:6F:0A:22:47:B4:21:8E:DA:29:35:26:A3:98:08:A9:45 Certificate issuer: /CN=EAE158B3C84D30768CBC0D1D56034E26E704B5D0 Certificate serial: 4A9E8BCC8079D912720EE59DAAB710CE008D6824 Authority key identifier: EA:E1:58:B3:C8:4D:30:76:8C:BC:0D:1D:56:03:4E:26:E7:04:B5:D0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3230322e35392e3137332e302f32342d3234203d3e203137373237.roa Signing time: Sun 03 May 2026 02:38:30 +0000 ROA not before: Sun 03 May 2026 02:33:30 +0000 ROA not after: Sun 02 May 2027 02:38:30 +0000 asID: 17727 IP address blocks: 202.59.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.crl rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 07 May 2026 23:33:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:9e:8b:cc:80:79:d9:12:72:0e:e5:9d:aa:b7:10:ce:00:8d:68:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EAE158B3C84D30768CBC0D1D56034E26E704B5D0 Validity Not Before: May 3 02:33:30 2026 GMT Not After : May 2 02:38:30 2027 GMT Subject: CN=0738EF256F0A2247B4218EDA293526A39808A945 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ec:e6:40:76:24:b8:c6:b7:27:e9:fe:84:06: f5:3f:11:e8:c0:2c:12:b3:47:ab:c2:0e:f0:23:43: 52:95:17:4b:77:c8:60:f5:b7:71:ba:a1:0b:fd:0b: b8:9d:69:2b:57:2d:cf:f9:2e:f9:d2:e3:5d:eb:02: 92:50:8f:95:45:d0:9b:8b:2e:ba:b6:0d:c5:db:8a: 23:d5:2a:87:4a:e4:21:69:14:06:20:64:a2:3c:b1: 86:d0:8a:d1:19:d8:d5:98:ce:d0:7c:0f:9c:66:22: 62:16:a9:eb:02:7a:c2:2e:1f:32:70:ee:b0:2e:9f: 2e:3c:45:72:3c:fd:f6:cf:b5:16:d8:6c:8f:83:41: 73:89:d9:95:b7:ca:a9:47:7e:73:ec:bb:5f:34:1d: 06:68:70:b9:86:8d:29:17:66:a6:5e:e3:b7:e5:d0: e4:c6:8c:1f:33:fa:00:17:f5:70:7b:43:a4:c7:be: f9:ea:26:85:68:75:e0:e3:d0:1a:77:e0:e8:aa:91: 42:d7:01:f6:f4:b3:28:f9:b6:a6:df:66:c7:ea:31: 98:0d:9c:95:99:d4:c1:4f:d3:31:2c:55:30:93:b9: 99:a7:9b:29:51:96:ca:76:32:62:99:3a:f3:89:0e: 97:d4:e3:7e:d5:fa:84:f7:15:b1:b4:1d:b6:92:91: 6b:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:38:EF:25:6F:0A:22:47:B4:21:8E:DA:29:35:26:A3:98:08:A9:45 X509v3 Authority Key Identifier: keyid:EA:E1:58:B3:C8:4D:30:76:8C:BC:0D:1D:56:03:4E:26:E7:04:B5:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3230322e35392e3137332e302f32342d3234203d3e203137373237.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.59.173.0/24 Signature Algorithm: sha256WithRSAEncryption 45:22:0a:01:d4:63:ec:71:80:a7:dc:3d:f2:b9:90:7c:c9:f3: b7:91:e7:56:fb:8d:ea:d7:40:7b:64:c7:ed:88:0f:2b:ba:e2: f8:83:4a:1f:30:d1:89:9d:64:10:57:32:46:94:fc:2f:09:6d: 35:61:81:b8:1f:76:80:f9:e4:52:11:ab:32:b9:7c:28:79:3d: 4c:aa:cf:08:c7:0b:7b:63:28:e2:61:a6:3a:00:19:db:97:5d: c1:b1:9a:2d:d1:38:16:8f:b3:d4:81:90:0e:64:08:89:a1:77: 72:53:83:0a:f7:d2:9e:5c:34:c2:2b:15:7d:d2:96:de:46:c1: d5:e1:61:53:98:00:7b:8d:9c:74:6f:58:78:27:d4:04:a4:31: 67:18:a2:7d:bf:36:60:c0:78:11:3e:31:12:b5:3d:cd:95:ae: 46:3f:96:49:3e:1b:b3:67:98:39:12:0e:69:54:c6:35:45:70: b0:3f:54:dd:32:ca:80:6b:a8:52:d2:97:6a:b5:fc:b3:d3:f8: 84:af:42:b3:f9:6a:45:30:53:63:6c:89:e2:77:f7:46:47:e5: a3:9f:53:b3:fd:50:2e:89:df:0c:94:4a:8c:e2:d3:ab:81:c5: 41:c7:1c:a3:c0:cc:60:04:cc:54:ba:45:5d:00:e0:f9:46:f0: 68:65:da:a8 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUSp6LzIB52RJyDuWdqrcQzgCNaCQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUFFMTU4QjNDODREMzA3NjhDQkMwRDFENTYwMzRFMjZF NzA0QjVEMDAeFw0yNjA1MDMwMjMzMzBaFw0yNzA1MDIwMjM4MzBaMDMxMTAvBgNV BAMTKDA3MzhFRjI1NkYwQTIyNDdCNDIxOEVEQTI5MzUyNkEzOTgwOEE5NDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk7OZAdiS4xrcn6f6EBvU/EejA LBKzR6vCDvAjQ1KVF0t3yGD1t3G6oQv9C7idaStXLc/5LvnS413rApJQj5VF0JuL Lrq2DcXbiiPVKodK5CFpFAYgZKI8sYbQitEZ2NWYztB8D5xmImIWqesCesIuHzJw 7rAuny48RXI8/fbPtRbYbI+DQXOJ2ZW3yqlHfnPsu180HQZocLmGjSkXZqZe47fl 0OTGjB8z+gAX9XB7Q6THvvnqJoVodeDj0Bp34OiqkULXAfb0syj5tqbfZsfqMZgN nJWZ1MFP0zEsVTCTuZmnmylRlsp2MmKZOvOJDpfU437V+oT3FbG0HbaSkWtPAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUBzjvJW8KIke0IY7aKTUmo5gIqUUwHwYDVR0j BBgwFoAU6uFYs8hNMHaMvA0dVgNOJucEtdAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjM1ZjdhMmYtNzI1ZS00Mzk5LTg2OWEtNGIxZmNmMmM2YTBjLzAvRUFFMTU4QjND ODREMzA3NjhDQkMwRDFENTYwMzRFMjZFNzA0QjVEMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FQUUxNThCM0M4NEQzMDc2OENCQzBEMUQ1NjAzNEUyNkU3MDRC NUQwLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzYzNWY3YTJmLTcyNWUtNDM5OS04 NjlhLTRiMWZjZjJjNmEwYy8wLzMyMzAzMjJlMzUzOTJlMzEzNzMzMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNzM3MzIzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMo7rTANBgkqhkiG 9w0BAQsFAAOCAQEARSIKAdRj7HGAp9w98rmQfMnzt5HnVvuN6tdAe2TH7YgPK7ri +INKHzDRiZ1kEFcyRpT8LwltNWGBuB92gPnkUhGrMrl8KHk9TKrPCMcLe2Mo4mGm OgAZ25ddwbGaLdE4Fo+z1IGQDmQIiaF3clODCvfSnlw0wisVfdKW3kbB1eFhU5gA e42cdG9YeCfUBKQxZxiifb82YMB4ET4xErU9zZWuRj+WST4bs2eYORIOaVTGNUVw sD9U3TLKgGuoUtKXarX8s9P4hK9Cs/lqRTBTY2yJ4nf3Rkflo59Ts/1QLonfDJRK jOLTq4HFQccco8DMYATMVLpFXQDg+UbwaGXaqA== -----END CERTIFICATE-----Generated at Thu May 7 04:31:31 2026 by rpki-client