$ rpki-client -vvf rpki-rsync.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/3230322e35372e32302e302f32342d3234203d3e20313431363733.roa File: 3230322e35372e32302e302f32342d3234203d3e20313431363733.roa (raw, json) Hash identifier: byBg5cGc6s1YP8fDSR7s5sO6wrvfj9UFsOHI5fDaKjw= Subject key identifier: 3A:94:0C:D2:DF:CD:A5:36:99:0D:96:AA:CE:F9:74:1B:04:11:70:43 Certificate issuer: /CN=9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C Certificate serial: 25C3C4574D096CB62819E446A75417B24EA7CA53 Authority key identifier: 9D:B8:C4:72:3E:3B:FD:D0:13:8A:79:16:A8:BB:12:C4:5C:82:CD:9C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/3230322e35372e32302e302f32342d3234203d3e20313431363733.roa Signing time: Sun 03 May 2026 02:13:07 +0000 ROA not before: Sun 03 May 2026 02:08:07 +0000 ROA not after: Sun 02 May 2027 02:13:07 +0000 asID: 141673 IP address blocks: 202.57.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C.crl rsync://rpki-rsync.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:c3:c4:57:4d:09:6c:b6:28:19:e4:46:a7:54:17:b2:4e:a7:ca:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C Validity Not Before: May 3 02:08:07 2026 GMT Not After : May 2 02:13:07 2027 GMT Subject: CN=3A940CD2DFCDA536990D96AACEF9741B04117043 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:f8:54:92:f4:9c:e1:b6:c5:49:cb:a2:ac:c4: 8f:ca:d2:b8:8b:e2:34:4e:84:72:4e:16:31:1b:dc: 4d:41:39:eb:e1:4f:0d:46:1f:3d:ae:0d:14:44:f6: 35:64:d4:88:be:46:21:6d:14:65:b2:5a:18:5b:f9: 7e:ee:51:54:b2:84:3a:84:cd:6b:37:d8:f5:ff:ed: d9:2a:d0:3b:0d:a1:78:11:93:ac:ab:e3:9a:64:85: 6f:24:a0:1a:9f:51:d4:ab:88:9b:86:84:cb:7b:bf: f5:53:3e:8a:bc:36:e4:fa:aa:b4:4f:7c:c3:df:ec: 04:92:ed:48:bf:e4:4a:3a:fd:af:eb:58:b6:8b:aa: 2b:09:35:eb:e1:18:38:cb:fe:55:04:fc:6a:d3:4c: 65:13:27:d3:66:f6:66:f0:21:86:37:13:65:b7:27: d2:87:61:6a:de:55:4c:3a:1b:5c:5b:0e:60:a2:2d: 1c:9b:1f:7e:6b:16:5e:e3:69:bf:b9:f2:01:3f:76: 56:3f:25:b6:88:46:1d:e2:1d:89:52:09:35:66:fc: 49:75:12:19:45:b0:00:4c:c3:52:d6:b7:08:54:cb: 87:94:6b:b6:1d:64:3b:e4:dc:a1:c4:8d:3f:f0:7c: 59:d2:11:65:91:f0:13:11:14:36:0a:c8:e4:68:d2: 05:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:94:0C:D2:DF:CD:A5:36:99:0D:96:AA:CE:F9:74:1B:04:11:70:43 X509v3 Authority Key Identifier: keyid:9D:B8:C4:72:3E:3B:FD:D0:13:8A:79:16:A8:BB:12:C4:5C:82:CD:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/3230322e35372e32302e302f32342d3234203d3e20313431363733.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.57.20.0/24 Signature Algorithm: sha256WithRSAEncryption 09:46:3c:ef:ab:58:40:9b:4f:9a:a3:1e:53:d6:6c:47:ff:bc: 95:6c:c8:96:4f:fd:fe:03:92:00:bd:ca:28:c7:86:f7:00:85: e8:66:c5:24:ca:dd:cd:65:38:71:ad:6d:bb:c1:bd:a1:86:24: 86:aa:fa:3e:04:db:52:1b:09:f0:37:fc:b0:4b:65:fc:7b:00: 98:c6:6a:15:be:f5:ef:43:d4:61:05:09:9f:25:0b:af:27:2c: d8:99:c9:e4:a0:77:59:77:47:3d:88:ad:4d:4f:69:30:ef:99: b3:01:c1:88:1c:67:64:70:5d:90:b4:98:6c:93:2f:13:bd:71: 58:71:ca:93:bc:e2:44:c6:7a:0a:db:f6:5c:3c:fc:23:59:b1: 63:ac:eb:73:db:31:0b:95:de:c0:70:10:a8:34:37:70:5b:fa: e3:02:65:28:19:86:15:97:07:37:b3:2a:e7:c5:ab:54:54:bd: 87:70:2d:e8:f9:21:86:a7:d6:3f:b7:c9:ac:9a:55:14:0a:2c: c9:d3:4b:51:ba:f1:e0:07:26:15:4b:a8:91:15:b5:3e:1d:2d: ec:04:9c:11:37:9b:22:38:78:78:c7:cc:c4:0b:5d:1b:9f:8b: ea:ee:2b:85:13:54:ba:37:64:bd:79:87:da:47:93:34:92:85: 88:33:51:67 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUJcPEV00JbLYoGeRGp1QXsk6nylMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOURCOEM0NzIzRTNCRkREMDEzOEE3OTE2QThCQjEyQzQ1 QzgyQ0Q5QzAeFw0yNjA1MDMwMjA4MDdaFw0yNzA1MDIwMjEzMDdaMDMxMTAvBgNV BAMTKDNBOTQwQ0QyREZDREE1MzY5OTBEOTZBQUNFRjk3NDFCMDQxMTcwNDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo+FSS9JzhtsVJy6KsxI/K0riL 4jROhHJOFjEb3E1BOevhTw1GHz2uDRRE9jVk1Ii+RiFtFGWyWhhb+X7uUVSyhDqE zWs32PX/7dkq0DsNoXgRk6yr45pkhW8koBqfUdSriJuGhMt7v/VTPoq8NuT6qrRP fMPf7ASS7Ui/5Eo6/a/rWLaLqisJNevhGDjL/lUE/GrTTGUTJ9Nm9mbwIYY3E2W3 J9KHYWreVUw6G1xbDmCiLRybH35rFl7jab+58gE/dlY/JbaIRh3iHYlSCTVm/El1 EhlFsABMw1LWtwhUy4eUa7YdZDvk3KHEjT/wfFnSEWWR8BMRFDYKyORo0gVnAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUOpQM0t/NpTaZDZaqzvl0GwQRcEMwHwYDVR0j BBgwFoAUnbjEcj47/dATinkWqLsSxFyCzZwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGQzZjA5NWItNzEzMC00MTIyLWFmMjUtN2QyZTdhMTFiMWIxLzAvOURCOEM0NzIz RTNCRkREMDEzOEE3OTE2QThCQjEyQzQ1QzgyQ0Q5Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85REI4QzQ3MjNFM0JGREQwMTM4QTc5MTZBOEJCMTJDNDVDODJD RDlDLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzBkM2YwOTViLTcxMzAtNDEyMi1h ZjI1LTdkMmU3YTExYjFiMS8wLzMyMzAzMjJlMzUzNzJlMzIzMDJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMxMzQzMTM2MzczMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMo5FDANBgkqhkiG 9w0BAQsFAAOCAQEACUY876tYQJtPmqMeU9ZsR/+8lWzIlk/9/gOSAL3KKMeG9wCF 6GbFJMrdzWU4ca1tu8G9oYYkhqr6PgTbUhsJ8Df8sEtl/HsAmMZqFb7170PUYQUJ nyULrycs2JnJ5KB3WXdHPYitTU9pMO+ZswHBiBxnZHBdkLSYbJMvE71xWHHKk7zi RMZ6Ctv2XDz8I1mxY6zrc9sxC5XewHAQqDQ3cFv64wJlKBmGFZcHN7Mq58WrVFS9 h3At6PkhhqfWP7fJrJpVFAosydNLUbrx4AcmFUuokRW1Ph0t7AScETebIjh4eMfM xAtdG5+L6u4rhRNUujdkvXmH2keTNJKFiDNRZw== -----END CERTIFICATE-----Generated at Wed May 13 03:23:13 2026 by rpki-client