$ rpki-client -vvf rpki-rsync.idnic.net/repo/0463ae7c-a6ff-4fd8-96f2-0ba1880133c7/0/3230332e3131342e3232362e302f32332d3233203d3e203435373033.roa File: 3230332e3131342e3232362e302f32332d3233203d3e203435373033.roa (raw, json) Hash identifier: wM3JMaIp+zvVQetOr/lRp0Azv2B1AVIYfVuKB1kJoRo= Subject key identifier: 47:38:06:E5:18:BD:61:2D:15:14:7B:90:8D:08:80:F9:74:C3:C3:F2 Certificate issuer: /CN=AA23A685C6726226B631C7DF6C89BB4413F6F3B6 Certificate serial: 5B124FF06694FAE78331765C5E1BAE27D3AF8300 Authority key identifier: AA:23:A6:85:C6:72:62:26:B6:31:C7:DF:6C:89:BB:44:13:F6:F3:B6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AA23A685C6726226B631C7DF6C89BB4413F6F3B6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0463ae7c-a6ff-4fd8-96f2-0ba1880133c7/0/3230332e3131342e3232362e302f32332d3233203d3e203435373033.roa Signing time: Sun 03 May 2026 02:10:58 +0000 ROA not before: Sun 03 May 2026 02:05:58 +0000 ROA not after: Sun 02 May 2027 02:10:58 +0000 asID: 45703 IP address blocks: 203.114.226.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0463ae7c-a6ff-4fd8-96f2-0ba1880133c7/0/AA23A685C6726226B631C7DF6C89BB4413F6F3B6.crl rsync://rpki-rsync.idnic.net/repo/0463ae7c-a6ff-4fd8-96f2-0ba1880133c7/0/AA23A685C6726226B631C7DF6C89BB4413F6F3B6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AA23A685C6726226B631C7DF6C89BB4413F6F3B6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:12:4f:f0:66:94:fa:e7:83:31:76:5c:5e:1b:ae:27:d3:af:83:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AA23A685C6726226B631C7DF6C89BB4413F6F3B6 Validity Not Before: May 3 02:05:58 2026 GMT Not After : May 2 02:10:58 2027 GMT Subject: CN=473806E518BD612D15147B908D0880F974C3C3F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:ac:21:15:30:1d:49:52:40:9f:6e:0d:59:fd: 42:c3:c9:13:57:b5:da:55:91:8d:08:a4:c3:49:56: 1b:84:5f:79:45:cb:b1:0b:b7:9e:16:5f:57:8f:f0: ce:de:65:64:9b:f8:d3:4f:b6:0f:e9:bf:75:ee:25: 07:43:56:42:21:a5:c9:f6:10:8b:dd:3c:0c:ae:4f: 8d:09:17:08:80:49:67:c6:e1:06:76:78:fe:8c:e3: 4c:79:87:99:20:57:20:b2:b1:79:2e:7a:cd:bb:11: 59:55:a4:7f:35:aa:39:e3:3c:dc:8f:41:65:7d:be: 62:30:da:e9:25:81:16:94:af:36:13:70:e5:42:62: b3:f7:48:87:83:be:b8:bc:4f:48:0c:8b:14:4a:38: 6f:35:9a:a3:7e:50:14:fb:93:a1:8d:c5:e4:c8:ed: 9b:cb:b9:d4:0e:2b:02:a6:cd:95:a6:b7:63:20:e2: 8e:5f:41:24:b9:52:be:fe:08:c4:25:7c:47:93:d9: fa:60:56:48:dc:58:36:e0:ca:ae:58:e2:a8:e5:63: 70:1e:2c:ea:15:86:7c:cc:c7:df:ba:62:3c:dc:12: a4:f3:dd:b6:5f:e3:ec:c0:b7:61:86:c0:7b:c0:c1: 95:f0:9a:fd:5b:e4:05:08:49:47:44:b2:f3:f4:8b: 23:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:38:06:E5:18:BD:61:2D:15:14:7B:90:8D:08:80:F9:74:C3:C3:F2 X509v3 Authority Key Identifier: keyid:AA:23:A6:85:C6:72:62:26:B6:31:C7:DF:6C:89:BB:44:13:F6:F3:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0463ae7c-a6ff-4fd8-96f2-0ba1880133c7/0/AA23A685C6726226B631C7DF6C89BB4413F6F3B6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AA23A685C6726226B631C7DF6C89BB4413F6F3B6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0463ae7c-a6ff-4fd8-96f2-0ba1880133c7/0/3230332e3131342e3232362e302f32332d3233203d3e203435373033.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.114.226.0/23 Signature Algorithm: sha256WithRSAEncryption 11:36:0f:0c:ce:67:71:76:5c:42:c0:6d:28:a3:02:35:d1:0a: eb:f0:1b:b8:4f:c3:c6:b5:33:e2:ae:a3:a9:28:67:13:bf:ae: e8:27:db:1b:d9:43:b4:eb:a7:85:63:74:1b:7e:77:e9:17:63: 0e:87:64:a8:33:b9:66:81:2b:3b:da:c2:d1:67:1b:42:23:54: 58:75:fd:e5:0b:7a:44:e2:d1:03:46:0e:a3:9d:e2:ba:7f:3c: 29:07:b7:0b:d6:a2:ab:ed:74:b7:86:bf:44:65:0e:34:1d:08: 92:88:c8:11:7a:08:b8:87:10:1f:57:6c:7f:58:34:c9:4a:6d: 9f:c3:dc:8c:a8:8a:89:79:88:b4:df:2f:82:73:59:89:6f:25: 99:26:08:41:37:dd:d1:74:e2:8a:90:ef:fd:82:d3:6c:24:6c: 1f:34:2a:53:9b:28:c6:25:b3:f2:07:b5:7e:59:4d:73:a9:b3: 16:da:73:c4:93:26:5f:1f:73:b5:4f:f7:48:fc:e5:74:cb:cc: dc:35:8b:55:be:2e:03:15:28:b8:1f:f3:a8:fc:d6:fd:c6:29: d0:72:d5:a2:9a:b5:6c:bc:a9:1e:f3:42:15:30:f0:e1:5a:59: 7d:5c:6f:3e:aa:40:ac:d0:b2:40:6a:0f:3f:e4:69:43:07:85: 92:b3:d5:cd -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUWxJP8GaU+ueDMXZcXhuuJ9OvgwAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUEyM0E2ODVDNjcyNjIyNkI2MzFDN0RGNkM4OUJCNDQx M0Y2RjNCNjAeFw0yNjA1MDMwMjA1NThaFw0yNzA1MDIwMjEwNThaMDMxMTAvBgNV BAMTKDQ3MzgwNkU1MThCRDYxMkQxNTE0N0I5MDhEMDg4MEY5NzRDM0MzRjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVrCEVMB1JUkCfbg1Z/ULDyRNX tdpVkY0IpMNJVhuEX3lFy7ELt54WX1eP8M7eZWSb+NNPtg/pv3XuJQdDVkIhpcn2 EIvdPAyuT40JFwiASWfG4QZ2eP6M40x5h5kgVyCysXkues27EVlVpH81qjnjPNyP QWV9vmIw2uklgRaUrzYTcOVCYrP3SIeDvri8T0gMixRKOG81mqN+UBT7k6GNxeTI 7ZvLudQOKwKmzZWmt2Mg4o5fQSS5Ur7+CMQlfEeT2fpgVkjcWDbgyq5Y4qjlY3Ae LOoVhnzMx9+6YjzcEqTz3bZf4+zAt2GGwHvAwZXwmv1b5AUISUdEsvP0iyMvAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQURzgG5Ri9YS0VFHuQjQiA+XTDw/IwHwYDVR0j BBgwFoAUqiOmhcZyYia2McffbIm7RBP287YwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDQ2M2FlN2MtYTZmZi00ZmQ4LTk2ZjItMGJhMTg4MDEzM2M3LzAvQUEyM0E2ODVD NjcyNjIyNkI2MzFDN0RGNkM4OUJCNDQxM0Y2RjNCNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BQTIzQTY4NUM2NzI2MjI2QjYzMUM3REY2Qzg5QkI0NDEzRjZG M0I2LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzA0NjNhZTdjLWE2ZmYtNGZkOC05 NmYyLTBiYTE4ODAxMzNjNy8wLzMyMzAzMzJlMzEzMTM0MmUzMjMyMzYyZTMwMmYz MjMzMmQzMjMzMjAzZDNlMjAzNDM1MzczMDMzLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBy3LiMA0GCSqG SIb3DQEBCwUAA4IBAQARNg8MzmdxdlxCwG0oowI10Qrr8Bu4T8PGtTPirqOpKGcT v67oJ9sb2UO066eFY3QbfnfpF2MOh2SoM7lmgSs72sLRZxtCI1RYdf3lC3pE4tED Rg6jneK6fzwpB7cL1qKr7XS3hr9EZQ40HQiSiMgRegi4hxAfV2x/WDTJSm2fw9yM qIqJeYi03y+Cc1mJbyWZJghBN93RdOKKkO/9gtNsJGwfNCpTmyjGJbPyB7V+WU1z qbMW2nPEkyZfH3O1T/dI/OV0y8zcNYtVvi4DFSi4H/Oo/Nb9xinQctWimrVsvKke 80IVMPDhWll9XG8+qkCs0LJAag8/5GlDB4WSs9XN -----END CERTIFICATE-----Generated at Wed May 13 03:17:09 2026 by rpki-client