$ rpki-client -vvf rpki-rsync.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/3230322e35372e32362e302f32332d3233203d3e20313430343639.roa File: 3230322e35372e32362e302f32332d3233203d3e20313430343639.roa (raw, json) Hash identifier: 0uTllQF8wo+NL3Ts0DUiJLkGlZst9OmTPcws3XPvVM8= Subject key identifier: 2E:57:AA:26:99:F9:0E:98:70:9F:BB:9C:9A:D2:00:15:F9:BA:67:D9 Certificate issuer: /CN=9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C Certificate serial: 345DD8DAA997F32439E264241FD32285E788CEC8 Authority key identifier: 9D:B8:C4:72:3E:3B:FD:D0:13:8A:79:16:A8:BB:12:C4:5C:82:CD:9C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/3230322e35372e32362e302f32332d3233203d3e20313430343639.roa Signing time: Sun 03 May 2026 02:13:09 +0000 ROA not before: Sun 03 May 2026 02:08:09 +0000 ROA not after: Sun 02 May 2027 02:13:09 +0000 asID: 140469 IP address blocks: 202.57.26.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C.crl rsync://rpki-rsync.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:5d:d8:da:a9:97:f3:24:39:e2:64:24:1f:d3:22:85:e7:88:ce:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C Validity Not Before: May 3 02:08:09 2026 GMT Not After : May 2 02:13:09 2027 GMT Subject: CN=2E57AA2699F90E98709FBB9C9AD20015F9BA67D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:24:92:fb:da:67:79:ce:0d:e5:25:20:1e:bd: 0f:e0:d5:b5:5a:6a:68:09:78:3f:73:c0:0a:f0:70: ae:32:e9:4e:bf:41:0c:86:5a:c1:23:80:c6:72:c6: 4d:0b:64:61:d0:49:24:ca:1b:25:fb:65:02:59:43: 63:09:f8:17:3c:c8:a9:7b:d6:ff:00:06:e2:02:23: a2:f5:bd:a7:38:91:94:0a:ee:5b:cb:6e:a9:9a:88: 69:c1:8e:67:d6:07:c9:94:7b:77:10:c2:fc:7b:e7: f7:bc:c2:d4:eb:ef:aa:3e:fa:14:24:38:66:99:7c: e3:6e:db:d1:b2:32:12:c6:aa:dc:1b:20:56:41:9e: b2:bf:c2:02:5f:a6:00:63:7c:31:41:bf:3b:a8:3d: c0:ca:37:e5:72:8e:8f:df:fe:be:f7:e6:aa:0f:a8: ba:6a:39:b3:30:69:6f:57:f2:6d:35:a1:30:f0:a9: 80:84:e2:03:3f:2a:65:66:cc:a0:6d:2b:03:ba:03: 3f:aa:c5:04:6a:4a:51:6c:6a:a0:ef:9e:6c:c6:c7: c6:9b:17:c8:6a:18:6e:c0:32:d4:68:be:e1:c0:f6: f0:ec:0d:91:95:a9:44:01:90:cb:f4:07:85:f1:bc: 65:04:93:e2:cf:99:f2:45:53:5a:a9:a4:02:63:f7: 0f:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:57:AA:26:99:F9:0E:98:70:9F:BB:9C:9A:D2:00:15:F9:BA:67:D9 X509v3 Authority Key Identifier: keyid:9D:B8:C4:72:3E:3B:FD:D0:13:8A:79:16:A8:BB:12:C4:5C:82:CD:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/3230322e35372e32362e302f32332d3233203d3e20313430343639.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.57.26.0/23 Signature Algorithm: sha256WithRSAEncryption b7:07:b4:73:5e:21:2e:53:bc:a8:22:3f:0f:d4:ce:17:52:b4: f3:29:7c:4e:13:77:dd:c2:a6:3b:c5:64:dc:40:b9:4d:ba:d3: dd:03:32:95:dc:05:35:88:e2:d5:ec:bb:35:27:39:a5:d8:3c: c5:a5:9a:f5:72:a9:03:6a:b3:3e:c5:0c:97:57:4b:bb:73:61: 98:ea:bc:ff:60:d8:ac:41:8a:7d:0f:d6:5d:07:71:62:f8:bf: 7d:76:9f:26:1e:6b:08:72:87:87:43:b5:e5:1c:39:5e:ba:22: 01:5d:eb:45:fa:83:de:b8:ac:0b:d3:04:61:21:99:6f:d9:29: 85:aa:e2:a3:e4:fa:f7:de:51:a0:3e:18:00:26:6c:ba:ca:3b: 1c:17:51:02:45:86:c7:85:bc:79:17:cf:8d:eb:ee:07:5b:94: d1:60:7b:4d:f1:0f:4d:b7:48:a2:ca:44:f8:db:56:e7:5f:73: 94:b3:0d:5c:1c:97:78:a3:47:e9:78:3a:05:7f:4a:ed:01:4e: 05:68:e5:30:c7:19:3e:4f:06:19:31:4b:46:4f:45:df:78:b5: c3:ca:4a:44:10:c5:5c:56:44:35:52:5d:2d:20:88:61:b8:24: ee:a6:c5:fb:e9:44:c1:32:2c:70:8b:81:97:4c:5b:a8:fe:46: 56:5f:26:92 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUNF3Y2qmX8yQ54mQkH9MiheeIzsgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOURCOEM0NzIzRTNCRkREMDEzOEE3OTE2QThCQjEyQzQ1 QzgyQ0Q5QzAeFw0yNjA1MDMwMjA4MDlaFw0yNzA1MDIwMjEzMDlaMDMxMTAvBgNV BAMTKDJFNTdBQTI2OTlGOTBFOTg3MDlGQkI5QzlBRDIwMDE1RjlCQTY3RDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcJJL72md5zg3lJSAevQ/g1bVa amgJeD9zwArwcK4y6U6/QQyGWsEjgMZyxk0LZGHQSSTKGyX7ZQJZQ2MJ+Bc8yKl7 1v8ABuICI6L1vac4kZQK7lvLbqmaiGnBjmfWB8mUe3cQwvx75/e8wtTr76o++hQk OGaZfONu29GyMhLGqtwbIFZBnrK/wgJfpgBjfDFBvzuoPcDKN+Vyjo/f/r735qoP qLpqObMwaW9X8m01oTDwqYCE4gM/KmVmzKBtKwO6Az+qxQRqSlFsaqDvnmzGx8ab F8hqGG7AMtRovuHA9vDsDZGVqUQBkMv0B4XxvGUEk+LPmfJFU1qppAJj9w/5AgMB AAGjggIyMIICLjAdBgNVHQ4EFgQULleqJpn5Dphwn7ucmtIAFfm6Z9kwHwYDVR0j BBgwFoAUnbjEcj47/dATinkWqLsSxFyCzZwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGQzZjA5NWItNzEzMC00MTIyLWFmMjUtN2QyZTdhMTFiMWIxLzAvOURCOEM0NzIz RTNCRkREMDEzOEE3OTE2QThCQjEyQzQ1QzgyQ0Q5Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85REI4QzQ3MjNFM0JGREQwMTM4QTc5MTZBOEJCMTJDNDVDODJD RDlDLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzBkM2YwOTViLTcxMzAtNDEyMi1h ZjI1LTdkMmU3YTExYjFiMS8wLzMyMzAzMjJlMzUzNzJlMzIzNjJlMzAyZjMyMzMy ZDMyMzMyMDNkM2UyMDMxMzQzMDM0MzYzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAco5GjANBgkqhkiG 9w0BAQsFAAOCAQEAtwe0c14hLlO8qCI/D9TOF1K08yl8ThN33cKmO8Vk3EC5TbrT 3QMyldwFNYji1ey7NSc5pdg8xaWa9XKpA2qzPsUMl1dLu3NhmOq8/2DYrEGKfQ/W XQdxYvi/fXafJh5rCHKHh0O15Rw5XroiAV3rRfqD3risC9MEYSGZb9kphario+T6 995RoD4YACZsuso7HBdRAkWGx4W8eRfPjevuB1uU0WB7TfEPTbdIospE+NtW519z lLMNXByXeKNH6Xg6BX9K7QFOBWjlMMcZPk8GGTFLRk9F33i1w8pKRBDFXFZENVJd LSCIYbgk7qbF++lEwTIscIuBl0xbqP5GVl8mkg== -----END CERTIFICATE-----Generated at Wed May 13 03:22:58 2026 by rpki-client