$ rpki-client -vvvf rpki-rsync.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3230322e35312e35362e302f32322d3232203d3e20313431383938.roa File: 3230322e35312e35362e302f32322d3232203d3e20313431383938.roa (raw, json) Hash identifier: j/I/kKhkDUX9RuARCCcFlNxkkx+PA3hT+ZcJu48tmMM= Subject key identifier: F6:DD:B6:2D:BD:14:85:5C:C3:9E:A1:19:93:F7:E0:FF:ED:F5:F9:41 Certificate issuer: /CN=4D8CAFECBF12EF792F1EFD722767E5FE74282093 Certificate serial: 7DF3A42E623112B6AD928B0FD686660F73E43AC4 Authority key identifier: 4D:8C:AF:EC:BF:12:EF:79:2F:1E:FD:72:27:67:E5:FE:74:28:20:93 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D8CAFECBF12EF792F1EFD722767E5FE74282093.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3230322e35312e35362e302f32322d3232203d3e20313431383938.roa Signing time: Tue 20 Oct 2026 08:07:16 +0000 ROA not before: Tue 20 Oct 2026 08:02:16 +0000 ROA not after: Tue 19 Oct 2027 08:07:16 +0000 asID: 141898 IP address blocks: 202.51.56.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/4D8CAFECBF12EF792F1EFD722767E5FE74282093.crl rsync://rpki-rsync.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/4D8CAFECBF12EF792F1EFD722767E5FE74282093.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D8CAFECBF12EF792F1EFD722767E5FE74282093.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 12:34:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:f3:a4:2e:62:31:12:b6:ad:92:8b:0f:d6:86:66:0f:73:e4:3a:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4D8CAFECBF12EF792F1EFD722767E5FE74282093 Validity Not Before: Oct 20 08:02:16 2026 GMT Not After : Oct 19 08:07:16 2027 GMT Subject: CN=F6DDB62DBD14855CC39EA11993F7E0FFEDF5F941 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:a6:90:65:c4:08:90:02:c6:8f:b5:d2:11:19: f3:9f:24:9b:57:f4:b6:d5:de:1d:6e:7a:8e:b1:d1: 6f:a3:3c:b5:f3:2b:b6:bb:18:7f:b7:11:5d:cb:bd: ca:32:d2:7a:58:ea:dc:12:dc:56:60:a0:2b:36:57: be:86:87:fd:22:73:4f:48:eb:9d:94:9b:b2:44:e8: 20:9e:6c:fa:43:24:95:ec:ec:79:8c:e0:f9:cb:45: 93:75:07:9c:00:68:83:fd:0e:b6:0b:56:d7:6e:9d: 43:86:c9:4e:57:a9:6f:e6:cf:5e:6e:eb:7b:0b:1e: bb:86:e4:56:82:e6:69:2b:16:eb:f5:3c:8d:f9:57: 57:31:26:e7:81:71:bf:0a:15:e5:35:d7:e9:f1:86: 15:6b:d1:01:8e:48:0a:48:c1:24:6b:78:76:c7:c6: 78:ad:69:4d:29:d0:aa:ae:9f:05:30:f6:9f:ec:80: b8:fc:6b:1d:52:bf:9a:79:01:d9:8a:b2:5d:25:4f: ca:b4:1b:7c:a0:cb:15:81:a5:ae:ce:14:c5:0f:fd: f1:c6:af:51:08:da:c0:eb:ef:8d:ef:15:2d:09:5a: da:32:61:dc:0e:a0:46:94:3c:4e:81:e9:72:8d:59: 2a:ac:1a:10:91:45:16:6a:5d:59:e0:05:8f:27:a0: 0a:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:DD:B6:2D:BD:14:85:5C:C3:9E:A1:19:93:F7:E0:FF:ED:F5:F9:41 X509v3 Authority Key Identifier: keyid:4D:8C:AF:EC:BF:12:EF:79:2F:1E:FD:72:27:67:E5:FE:74:28:20:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/4D8CAFECBF12EF792F1EFD722767E5FE74282093.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D8CAFECBF12EF792F1EFD722767E5FE74282093.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3230322e35312e35362e302f32322d3232203d3e20313431383938.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.51.56.0/22 Signature Algorithm: sha256WithRSAEncryption b1:d3:17:df:59:ac:40:e0:c0:33:4b:82:d2:07:38:22:7d:e0: 25:65:07:a5:2d:a7:b0:40:62:4a:44:7e:ac:ed:2f:47:d4:e9: 79:c6:13:2e:db:4e:22:24:79:bd:a1:01:3c:4d:2f:5c:b6:7c: a2:e1:ab:df:19:4d:4e:86:58:62:d5:3a:af:17:e3:c5:0e:55: 14:dc:c6:4c:5f:0d:3f:9b:2d:2a:e6:18:ec:1e:86:82:3e:45: a1:a6:4a:21:1d:02:10:cc:91:2e:a2:9c:a6:1f:91:f9:50:92: e5:5e:a2:26:1c:c7:01:9c:97:0e:ac:d3:da:8d:6b:5a:4d:00: 49:02:de:bf:0b:f4:82:52:3f:c6:08:d4:b4:12:d1:1d:5e:b0: f2:31:ce:25:a9:c1:43:e9:5a:53:ed:5c:1f:3f:7e:83:53:08: a9:f6:8d:1a:80:92:a0:54:14:f2:c5:e8:73:56:30:f8:d9:53: 07:49:97:bf:5d:3d:b9:81:38:df:00:6f:96:61:9b:74:3c:42: b2:5b:96:4f:bd:45:ef:80:e3:a8:89:b7:59:66:9c:ab:50:52: cb:c7:14:46:ea:2b:a8:37:ea:fe:67:55:b8:54:7e:a9:f4:12: 02:78:f7:6e:66:08:d7:71:5d:78:ba:c7:36:0d:20:0a:50:a3: f4:bb:33:82 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUffOkLmIxEratkosP1oZmD3PkOsQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEQ4Q0FGRUNCRjEyRUY3OTJGMUVGRDcyMjc2N0U1RkU3 NDI4MjA5MzAeFw0yNjEwMjAwODAyMTZaFw0yNzEwMTkwODA3MTZaMDMxMTAvBgNV BAMTKEY2RERCNjJEQkQxNDg1NUNDMzlFQTExOTkzRjdFMEZGRURGNUY5NDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7ppBlxAiQAsaPtdIRGfOfJJtX 9LbV3h1ueo6x0W+jPLXzK7a7GH+3EV3Lvcoy0npY6twS3FZgoCs2V76Gh/0ic09I 652Um7JE6CCebPpDJJXs7HmM4PnLRZN1B5wAaIP9DrYLVtdunUOGyU5XqW/mz15u 63sLHruG5FaC5mkrFuv1PI35V1cxJueBcb8KFeU11+nxhhVr0QGOSApIwSRreHbH xnitaU0p0KqunwUw9p/sgLj8ax1Sv5p5AdmKsl0lT8q0G3ygyxWBpa7OFMUP/fHG r1EI2sDr743vFS0JWtoyYdwOoEaUPE6B6XKNWSqsGhCRRRZqXVngBY8noAolAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQU9t22Lb0UhVzDnqEZk/fg/+31+UEwHwYDVR0j BBgwFoAUTYyv7L8S73kvHv1yJ2fl/nQoIJMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmU1NDAxNjQtM2Q0Ni00Nzk0LWJmNTUtYjZiMTM0ZDlhYjEzLzAvNEQ4Q0FGRUNC RjEyRUY3OTJGMUVGRDcyMjc2N0U1RkU3NDI4MjA5My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80RDhDQUZFQ0JGMTJFRjc5MkYxRUZENzIyNzY3RTVGRTc0Mjgy MDkzLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2JlNTQwMTY0LTNkNDYtNDc5NC1i ZjU1LWI2YjEzNGQ5YWIxMy8wLzMyMzAzMjJlMzUzMTJlMzUzNjJlMzAyZjMyMzIy ZDMyMzIyMDNkM2UyMDMxMzQzMTM4MzkzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAsozODANBgkqhkiG 9w0BAQsFAAOCAQEAsdMX31msQODAM0uC0gc4In3gJWUHpS2nsEBiSkR+rO0vR9Tp ecYTLttOIiR5vaEBPE0vXLZ8ouGr3xlNToZYYtU6rxfjxQ5VFNzGTF8NP5stKuYY 7B6Ggj5FoaZKIR0CEMyRLqKcph+R+VCS5V6iJhzHAZyXDqzT2o1rWk0ASQLevwv0 glI/xgjUtBLRHV6w8jHOJanBQ+laU+1cHz9+g1MIqfaNGoCSoFQU8sXoc1Yw+NlT B0mXv109uYE43wBvlmGbdDxCsluWT71F74DjqIm3WWacq1BSy8cURuorqDfq/mdV uFR+qfQSAnj3bmYI13FdeLrHNg0gClCj9Lszgg== -----END CERTIFICATE-----Generated at Mon Oct 26 02:20:13 2026 by rpki-client