$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7868119d-e012-4fb4-9650-b3afd2629b4e/0/3230332e3230312e3139302e302f32332d3234203d3e20313534383333.roa File: 3230332e3230312e3139302e302f32332d3234203d3e20313534383333.roa (raw, json) Hash identifier: FedQW0GWU8P5i3M8nF0hYiFJaRTI3w977R1u+knEuLI= Subject key identifier: A2:BB:94:EF:C2:85:A2:06:85:D6:4F:F6:3F:C9:67:A2:B7:6D:37:C4 Certificate issuer: /CN=A2A55EF8A6D2DBE3C6A46FE89FAFF506EE6EBEC6 Certificate serial: 32FB2FE3C1BC80256A8E013D2E4794ED48E68D45 Authority key identifier: A2:A5:5E:F8:A6:D2:DB:E3:C6:A4:6F:E8:9F:AF:F5:06:EE:6E:BE:C6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A2A55EF8A6D2DBE3C6A46FE89FAFF506EE6EBEC6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7868119d-e012-4fb4-9650-b3afd2629b4e/0/3230332e3230312e3139302e302f32332d3234203d3e20313534383333.roa Signing time: Sun 11 Oct 2026 05:20:43 +0000 ROA not before: Sun 11 Oct 2026 05:15:43 +0000 ROA not after: Sun 10 Oct 2027 05:20:43 +0000 asID: 154833 IP address blocks: 203.201.190.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7868119d-e012-4fb4-9650-b3afd2629b4e/0/A2A55EF8A6D2DBE3C6A46FE89FAFF506EE6EBEC6.crl rsync://rpki-rsync.idnic.net/repo/7868119d-e012-4fb4-9650-b3afd2629b4e/0/A2A55EF8A6D2DBE3C6A46FE89FAFF506EE6EBEC6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A2A55EF8A6D2DBE3C6A46FE89FAFF506EE6EBEC6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 16:11:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:fb:2f:e3:c1:bc:80:25:6a:8e:01:3d:2e:47:94:ed:48:e6:8d:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A2A55EF8A6D2DBE3C6A46FE89FAFF506EE6EBEC6 Validity Not Before: Oct 11 05:15:43 2026 GMT Not After : Oct 10 05:20:43 2027 GMT Subject: CN=A2BB94EFC285A20685D64FF63FC967A2B76D37C4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:5d:6c:1e:24:f0:11:07:35:e4:93:92:a5:cb: f4:91:66:53:d4:4c:0b:b5:5a:47:53:69:67:ef:f6: f1:b7:29:a6:57:f0:73:5c:90:1a:82:49:56:00:92: 16:ec:ab:b4:db:ce:45:7d:bc:6a:f7:50:30:09:31: 6b:4f:56:8a:8e:88:b3:60:00:ed:46:1a:cf:b6:a1: a5:ba:a8:c6:86:90:9e:56:2d:f9:72:0d:98:69:db: 09:7c:93:45:5e:47:6a:1a:96:01:9c:6d:23:58:81: 91:be:f0:9e:fc:22:d3:01:87:05:ea:b7:ac:b9:20: d2:e5:04:35:60:c5:fc:c6:87:d9:17:c0:64:ae:eb: f8:46:4c:db:2b:50:66:36:85:34:db:ef:1d:7c:81: 56:2b:f6:1f:ac:21:38:1e:bc:c4:cd:46:7d:2f:fd: df:49:9b:2c:6d:26:2a:d1:b8:b4:79:ff:08:26:c2: 94:03:48:6c:dc:66:c9:4f:4a:ea:af:db:f5:28:8c: ed:2a:49:05:4c:a2:82:a1:fd:b7:77:e6:3d:9c:e4: 11:cb:39:6b:b0:b1:84:8f:84:5a:83:88:52:a9:99: 62:c4:99:fe:8e:fa:92:0a:9d:15:ea:ed:4f:84:f8: 61:6f:6a:b7:ca:e1:66:b0:b1:90:20:87:e1:cc:01: e9:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:BB:94:EF:C2:85:A2:06:85:D6:4F:F6:3F:C9:67:A2:B7:6D:37:C4 X509v3 Authority Key Identifier: keyid:A2:A5:5E:F8:A6:D2:DB:E3:C6:A4:6F:E8:9F:AF:F5:06:EE:6E:BE:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7868119d-e012-4fb4-9650-b3afd2629b4e/0/A2A55EF8A6D2DBE3C6A46FE89FAFF506EE6EBEC6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A2A55EF8A6D2DBE3C6A46FE89FAFF506EE6EBEC6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7868119d-e012-4fb4-9650-b3afd2629b4e/0/3230332e3230312e3139302e302f32332d3234203d3e20313534383333.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.201.190.0/23 Signature Algorithm: sha256WithRSAEncryption 61:1e:af:05:80:36:9c:49:8c:1c:36:38:89:ab:5a:ba:5a:60: 1a:61:75:18:ff:9e:e4:5c:1e:01:5a:3f:9b:a9:f0:de:d3:25: 87:74:95:d6:fb:f6:ba:2e:0c:f2:9f:19:86:17:f8:e8:10:b4: e6:93:11:6f:bc:9e:ee:09:2d:6a:12:e8:5c:5c:8f:d0:93:22: d9:16:48:ef:47:df:04:51:58:7d:32:e7:e1:93:43:c2:eb:66: 5d:8f:b0:0c:92:46:e4:cf:5b:64:ee:1e:51:38:fa:34:1b:7e: d8:08:a1:c8:4d:d4:60:11:9c:8f:61:f4:35:f3:5b:7f:62:7d: c0:44:38:11:e2:e2:03:e2:8c:2e:c6:e2:81:8a:e5:c1:5e:27: 7e:c2:f5:b0:a0:fc:b2:e2:47:cf:cc:65:c9:07:5c:1a:91:9a: 25:ee:ed:1f:e4:bb:46:1a:60:38:24:7d:4f:e4:c8:2e:12:5a: d0:a5:ca:ef:ba:b6:04:9e:b9:c1:8c:25:0b:2f:cd:5d:c5:82: bc:a9:a1:b8:19:59:ed:e1:6a:5c:c9:18:e6:7d:d5:ea:60:c6: 4b:f9:b5:f3:fb:51:a9:9c:2a:d5:be:40:18:c7:5c:6d:e3:80: f8:4a:2f:c2:3d:46:75:9f:1d:ae:f3:73:e7:f5:90:08:90:ac: a0:d2:10:2d -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUMvsv48G8gCVqjgE9LkeU7UjmjUUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTJBNTVFRjhBNkQyREJFM0M2QTQ2RkU4OUZBRkY1MDZF RTZFQkVDNjAeFw0yNjEwMTEwNTE1NDNaFw0yNzEwMTAwNTIwNDNaMDMxMTAvBgNV BAMTKEEyQkI5NEVGQzI4NUEyMDY4NUQ2NEZGNjNGQzk2N0EyQjc2RDM3QzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCKXWweJPARBzXkk5Kly/SRZlPU TAu1WkdTaWfv9vG3KaZX8HNckBqCSVYAkhbsq7TbzkV9vGr3UDAJMWtPVoqOiLNg AO1GGs+2oaW6qMaGkJ5WLflyDZhp2wl8k0VeR2oalgGcbSNYgZG+8J78ItMBhwXq t6y5INLlBDVgxfzGh9kXwGSu6/hGTNsrUGY2hTTb7x18gVYr9h+sITgevMTNRn0v /d9JmyxtJirRuLR5/wgmwpQDSGzcZslPSuqv2/UojO0qSQVMooKh/bd35j2c5BHL OWuwsYSPhFqDiFKpmWLEmf6O+pIKnRXq7U+E+GFvarfK4WawsZAgh+HMAentAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUoruU78KFogaF1k/2P8lnordtN8QwHwYDVR0j BBgwFoAUoqVe+KbS2+PGpG/on6/1Bu5uvsYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Nzg2ODExOWQtZTAxMi00ZmI0LTk2NTAtYjNhZmQyNjI5YjRlLzAvQTJBNTVFRjhB NkQyREJFM0M2QTQ2RkU4OUZBRkY1MDZFRTZFQkVDNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BMkE1NUVGOEE2RDJEQkUzQzZBNDZGRTg5RkFGRjUwNkVFNkVC RUM2LmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzc4NjgxMTlkLWUwMTItNGZiNC05 NjUwLWIzYWZkMjYyOWI0ZS8wLzMyMzAzMzJlMzIzMDMxMmUzMTM5MzAyZTMwMmYz MjMzMmQzMjM0MjAzZDNlMjAzMTM1MzQzODMzMzMucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAHLyb4wDQYJ KoZIhvcNAQELBQADggEBAGEerwWANpxJjBw2OImrWrpaYBphdRj/nuRcHgFaP5up 8N7TJYd0ldb79rouDPKfGYYX+OgQtOaTEW+8nu4JLWoS6Fxcj9CTItkWSO9H3wRR WH0y5+GTQ8LrZl2PsAySRuTPW2TuHlE4+jQbftgIochN1GARnI9h9DXzW39ifcBE OBHi4gPijC7G4oGK5cFeJ37C9bCg/LLiR8/MZckHXBqRmiXu7R/ku0YaYDgkfU/k yC4SWtClyu+6tgSeucGMJQsvzV3FgrypobgZWe3halzJGOZ91epgxkv5tfP7Uamc KtW+QBjHXG3jgPhKL8I9RnWfHa7zc+f1kAiQrKDSEC0= -----END CERTIFICATE-----Generated at Mon Oct 26 08:54:33 2026 by rpki-client