$ rpki-client -vvf rpki-rsync.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/3230322e39312e31322e302f32342d3234203d3e203338313530.roa File: 3230322e39312e31322e302f32342d3234203d3e203338313530.roa (raw, json) Hash identifier: rxmp8zrUV8LmDcLuaoUqV9tezcrFbbsMQfNjGLGu+lk= Subject key identifier: 07:26:8D:CA:02:96:D0:BA:04:2D:AF:0D:3B:D4:3B:4E:58:8A:6C:53 Certificate issuer: /CN=102CB228255AC59C06F56BF9291AABDD49CD72E1 Certificate serial: 1BD2DC5EBEB18F6318D691996BDD3DD1E922302E Authority key identifier: 10:2C:B2:28:25:5A:C5:9C:06:F5:6B:F9:29:1A:AB:DD:49:CD:72:E1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/102CB228255AC59C06F56BF9291AABDD49CD72E1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/3230322e39312e31322e302f32342d3234203d3e203338313530.roa Signing time: Sun 03 May 2026 02:15:54 +0000 ROA not before: Sun 03 May 2026 02:10:54 +0000 ROA not after: Sun 02 May 2027 02:15:54 +0000 asID: 38150 IP address blocks: 202.91.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/102CB228255AC59C06F56BF9291AABDD49CD72E1.crl rsync://rpki-rsync.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/102CB228255AC59C06F56BF9291AABDD49CD72E1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/102CB228255AC59C06F56BF9291AABDD49CD72E1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 04:24:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:d2:dc:5e:be:b1:8f:63:18:d6:91:99:6b:dd:3d:d1:e9:22:30:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=102CB228255AC59C06F56BF9291AABDD49CD72E1 Validity Not Before: May 3 02:10:54 2026 GMT Not After : May 2 02:15:54 2027 GMT Subject: CN=07268DCA0296D0BA042DAF0D3BD43B4E588A6C53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:1f:3d:d4:c9:4d:ca:3f:74:f6:cf:91:b6:f1: e3:76:fd:cf:56:ad:54:4a:ff:81:d9:a5:99:ed:93: 7f:ee:fd:a9:65:63:67:00:61:08:f1:ab:cb:94:42: c5:27:93:f7:31:b3:dd:f9:28:b8:0d:f2:a8:33:66: 18:12:ff:fd:68:77:ce:74:0e:5a:21:6d:b9:18:c7: 8e:a0:5d:8f:59:ed:c5:67:db:4c:78:5e:65:77:bd: 08:22:26:a4:d2:02:ee:41:a6:5c:4d:c3:cc:95:82: 5f:dd:c7:5f:3d:24:04:fa:25:07:09:71:32:a7:c1: fd:df:c1:bd:d0:b1:16:76:2d:51:b5:f1:97:92:43: 72:e5:40:44:a1:70:7f:7e:4d:29:3f:55:af:f5:c4: 78:86:48:e1:a9:be:ad:04:01:c8:41:bb:47:c6:9f: 21:7c:4f:bc:4f:ce:67:a9:30:72:7f:4c:69:dc:a9: 5c:dd:8a:80:3c:23:ce:8f:b7:41:fe:29:43:65:ae: 02:de:92:c3:e5:68:23:df:75:05:3d:f4:4f:99:db: a9:22:91:d3:81:53:70:2e:83:40:78:bd:be:a1:72: 55:0e:b5:20:39:a5:b7:23:cf:cb:7a:e8:54:37:63: 5f:cf:74:55:0b:bf:36:50:6b:3c:88:41:4b:83:6d: 8e:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:26:8D:CA:02:96:D0:BA:04:2D:AF:0D:3B:D4:3B:4E:58:8A:6C:53 X509v3 Authority Key Identifier: keyid:10:2C:B2:28:25:5A:C5:9C:06:F5:6B:F9:29:1A:AB:DD:49:CD:72:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/102CB228255AC59C06F56BF9291AABDD49CD72E1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/102CB228255AC59C06F56BF9291AABDD49CD72E1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/3230322e39312e31322e302f32342d3234203d3e203338313530.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.91.12.0/24 Signature Algorithm: sha256WithRSAEncryption 1d:1a:a5:b0:91:c1:da:21:49:54:a8:d6:0c:25:0a:19:41:a9: 5f:1a:90:51:f7:c5:94:04:13:4a:47:c4:b0:1d:bf:58:62:0e: 07:9f:b0:35:f4:82:1c:1f:66:19:16:cf:60:06:9c:c6:c5:fb: f2:35:39:57:98:28:f5:df:96:f0:e7:49:a3:6a:84:db:30:9c: 3f:e5:31:f8:13:77:f2:71:0d:64:42:b9:d7:cd:82:ca:d2:e0: 4f:6d:84:6b:37:88:0a:45:2b:22:1a:f3:37:4c:c4:ce:9b:1a: e1:1e:2b:c9:95:4c:25:48:9a:4c:25:27:0c:90:11:1b:e7:91: cc:9c:86:8e:d9:5e:30:87:c1:c3:ff:d0:c1:20:a8:7b:f7:3e: b0:fa:72:b0:60:50:f0:23:08:f1:4c:39:5f:08:8b:fe:12:b0: cd:dc:40:53:32:bf:3b:4f:5e:79:22:d0:8c:39:a4:4a:95:64: cf:da:57:b6:11:46:8c:c0:84:f3:f3:42:94:57:2d:41:12:c4: e5:da:15:68:f9:af:39:69:4a:f4:73:ac:0c:4b:aa:a9:19:78: 04:b7:7e:be:9e:2c:cf:67:41:33:cc:37:a0:8d:f9:7f:f9:06: b7:a2:23:53:c5:2f:ae:85:13:db:8c:c7:07:af:43:03:ba:c2: 20:eb:8c:6c -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUG9LcXr6xj2MY1pGZa9090ekiMC4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTAyQ0IyMjgyNTVBQzU5QzA2RjU2QkY5MjkxQUFCREQ0 OUNENzJFMTAeFw0yNjA1MDMwMjEwNTRaFw0yNzA1MDIwMjE1NTRaMDMxMTAvBgNV BAMTKDA3MjY4RENBMDI5NkQwQkEwNDJEQUYwRDNCRDQzQjRFNTg4QTZDNTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIHz3UyU3KP3T2z5G28eN2/c9W rVRK/4HZpZntk3/u/allY2cAYQjxq8uUQsUnk/cxs935KLgN8qgzZhgS//1od850 DlohbbkYx46gXY9Z7cVn20x4XmV3vQgiJqTSAu5BplxNw8yVgl/dx189JAT6JQcJ cTKnwf3fwb3QsRZ2LVG18ZeSQ3LlQEShcH9+TSk/Va/1xHiGSOGpvq0EAchBu0fG nyF8T7xPzmepMHJ/TGncqVzdioA8I86Pt0H+KUNlrgLeksPlaCPfdQU99E+Z26ki kdOBU3Aug0B4vb6hclUOtSA5pbcjz8t66FQ3Y1/PdFULvzZQazyIQUuDbY6JAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUByaNygKW0LoELa8NO9Q7TliKbFMwHwYDVR0j BBgwFoAUECyyKCVaxZwG9Wv5KRqr3UnNcuEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTdlNjViNjctOTA1Yy00MDNjLThjNzktMjMxNTY1OTY2OGFhLzAvMTAyQ0IyMjgy NTVBQzU5QzA2RjU2QkY5MjkxQUFCREQ0OUNENzJFMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xMDJDQjIyODI1NUFDNTlDMDZGNTZCRjkyOTFBQUJERDQ5Q0Q3 MkUxLmNlcjCBoQYIKwYBBQUHAQsEgZQwgZEwgY4GCCsGAQUFBzALhoGBcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzE3ZTY1YjY3LTkwNWMtNDAzYy04 Yzc5LTIzMTU2NTk2NjhhYS8wLzMyMzAzMjJlMzkzMTJlMzEzMjJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMzMzgzMTM1MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADKWwwwDQYJKoZIhvcN AQELBQADggEBAB0apbCRwdohSVSo1gwlChlBqV8akFH3xZQEE0pHxLAdv1hiDgef sDX0ghwfZhkWz2AGnMbF+/I1OVeYKPXflvDnSaNqhNswnD/lMfgTd/JxDWRCudfN gsrS4E9thGs3iApFKyIa8zdMxM6bGuEeK8mVTCVImkwlJwyQERvnkcycho7ZXjCH wcP/0MEgqHv3PrD6crBgUPAjCPFMOV8Ii/4SsM3cQFMyvztPXnki0Iw5pEqVZM/a V7YRRozAhPPzQpRXLUESxOXaFWj5rzlpSvRzrAxLqqkZeAS3fr6eLM9nQTPMN6CN +X/5BreiI1PFL66FE9uMxwevQwO6wiDrjGw= -----END CERTIFICATE-----Generated at Wed May 13 08:45:11 2026 by rpki-client