$ rpki-client -vvf rpki-rsync.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/3230322e39312e31342e302f32342d3234203d3e203338313530.roa File: 3230322e39312e31342e302f32342d3234203d3e203338313530.roa (raw, json) Hash identifier: LrSilx8qH4y/sFG5VI5lyVEcXDtGQaCk1j5qW1FFbZY= Subject key identifier: 6B:FE:84:4F:11:B2:7B:6A:FA:99:99:FB:FA:A0:3F:26:C0:C2:1D:7A Certificate issuer: /CN=102CB228255AC59C06F56BF9291AABDD49CD72E1 Certificate serial: 39AC60A2D3DB17BFA4CDAB33861E6D6ECFCA4190 Authority key identifier: 10:2C:B2:28:25:5A:C5:9C:06:F5:6B:F9:29:1A:AB:DD:49:CD:72:E1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/102CB228255AC59C06F56BF9291AABDD49CD72E1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/3230322e39312e31342e302f32342d3234203d3e203338313530.roa Signing time: Sun 03 May 2026 02:15:58 +0000 ROA not before: Sun 03 May 2026 02:10:58 +0000 ROA not after: Sun 02 May 2027 02:15:58 +0000 asID: 38150 IP address blocks: 202.91.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/102CB228255AC59C06F56BF9291AABDD49CD72E1.crl rsync://rpki-rsync.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/102CB228255AC59C06F56BF9291AABDD49CD72E1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/102CB228255AC59C06F56BF9291AABDD49CD72E1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 10:58:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:ac:60:a2:d3:db:17:bf:a4:cd:ab:33:86:1e:6d:6e:cf:ca:41:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=102CB228255AC59C06F56BF9291AABDD49CD72E1 Validity Not Before: May 3 02:10:58 2026 GMT Not After : May 2 02:15:58 2027 GMT Subject: CN=6BFE844F11B27B6AFA9999FBFAA03F26C0C21D7A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:e5:60:04:56:26:dd:c9:bb:90:88:96:b7:c2: 19:0c:f4:82:41:6b:06:07:cf:06:ea:d8:0b:4e:52: 5b:04:95:0d:8f:24:9c:fc:e7:0b:06:cd:9e:52:a8: 9d:d3:a6:f8:43:08:da:be:ce:ba:0e:aa:02:8c:ac: 18:0c:11:70:da:30:8a:cd:04:1e:ce:db:62:33:87: ea:ee:52:ab:73:e3:8a:f0:5c:31:bb:78:68:ba:12: bd:82:be:0f:e8:77:80:03:37:d8:a9:b7:33:0f:67: 05:83:17:38:09:f4:10:1c:ed:d4:83:93:6a:cf:08: f7:a8:ca:3a:11:d2:55:d4:0d:45:46:1f:85:cd:7e: 7d:5a:12:bb:30:19:ff:63:46:c2:22:22:07:71:93: 07:6a:87:79:e4:6f:9b:e4:fd:b7:de:93:9d:7d:72: ae:06:5d:a4:4e:57:e6:b5:64:b9:fe:c0:dc:bc:d1: 97:ca:2d:21:f2:9c:ac:c9:bb:b5:ae:b8:08:52:84: 06:ee:81:9e:c6:24:38:d2:61:a3:df:6c:5d:ea:55: a5:0e:84:91:78:6d:cf:3b:10:fe:28:02:61:c8:d2: 8b:27:86:7e:2b:43:86:fe:12:43:b6:7e:dd:56:c1: 65:a6:a0:cb:d8:53:94:fb:f0:92:9b:18:1e:5b:7d: 61:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:FE:84:4F:11:B2:7B:6A:FA:99:99:FB:FA:A0:3F:26:C0:C2:1D:7A X509v3 Authority Key Identifier: keyid:10:2C:B2:28:25:5A:C5:9C:06:F5:6B:F9:29:1A:AB:DD:49:CD:72:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/102CB228255AC59C06F56BF9291AABDD49CD72E1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/102CB228255AC59C06F56BF9291AABDD49CD72E1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/3230322e39312e31342e302f32342d3234203d3e203338313530.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.91.14.0/24 Signature Algorithm: sha256WithRSAEncryption 2d:2a:6c:3c:79:34:2b:1a:0f:c3:81:1a:10:af:fa:64:c5:c1: 25:7e:b4:99:58:f7:f3:7d:3f:d4:79:fd:69:c1:23:89:ab:79: 1b:88:09:79:d6:b2:87:5c:bc:87:30:ad:3f:a9:15:0f:b0:06: 81:21:82:6a:4e:6d:35:d7:59:64:68:7e:14:9b:a4:ad:98:e4: fc:49:01:b4:72:9e:be:8d:68:f7:ca:ab:97:c0:47:0c:75:a3: 75:91:3e:d2:b7:10:e3:24:fe:7b:52:72:9f:e7:f5:28:27:ab: 70:b5:7a:dd:e9:83:50:e2:66:e5:bf:4c:43:1f:e1:c6:aa:37: fe:8d:42:01:6e:95:d4:05:1b:2d:df:98:68:3f:fd:ec:78:67: 7d:ae:be:a8:90:74:ba:cf:f5:7b:19:d5:e1:42:fa:01:7e:65: 5c:78:10:85:16:28:5b:2f:70:41:07:21:89:8a:c4:d7:10:33: da:ba:ef:c4:22:20:5b:4a:b6:8e:bc:a6:d8:d4:c4:58:9a:97: 52:08:7f:24:88:30:8d:80:6d:d8:2a:ad:f0:fd:7d:63:a7:99: 6c:b7:89:98:43:08:c9:bb:b2:3c:3b:bc:63:24:51:b4:ee:2b: e8:1f:b3:9b:dc:a4:73:70:c6:56:72:66:4c:88:33:9c:f6:74: 67:0f:74:d2 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUOaxgotPbF7+kzaszhh5tbs/KQZAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTAyQ0IyMjgyNTVBQzU5QzA2RjU2QkY5MjkxQUFCREQ0 OUNENzJFMTAeFw0yNjA1MDMwMjEwNThaFw0yNzA1MDIwMjE1NThaMDMxMTAvBgNV BAMTKDZCRkU4NDRGMTFCMjdCNkFGQTk5OTlGQkZBQTAzRjI2QzBDMjFEN0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCV5WAEVibdybuQiJa3whkM9IJB awYHzwbq2AtOUlsElQ2PJJz85wsGzZ5SqJ3TpvhDCNq+zroOqgKMrBgMEXDaMIrN BB7O22Izh+ruUqtz44rwXDG7eGi6Er2Cvg/od4ADN9iptzMPZwWDFzgJ9BAc7dSD k2rPCPeoyjoR0lXUDUVGH4XNfn1aErswGf9jRsIiIgdxkwdqh3nkb5vk/bfek519 cq4GXaROV+a1ZLn+wNy80ZfKLSHynKzJu7WuuAhShAbugZ7GJDjSYaPfbF3qVaUO hJF4bc87EP4oAmHI0osnhn4rQ4b+EkO2ft1WwWWmoMvYU5T78JKbGB5bfWGDAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUa/6ETxGye2r6mZn7+qA/JsDCHXowHwYDVR0j BBgwFoAUECyyKCVaxZwG9Wv5KRqr3UnNcuEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTdlNjViNjctOTA1Yy00MDNjLThjNzktMjMxNTY1OTY2OGFhLzAvMTAyQ0IyMjgy NTVBQzU5QzA2RjU2QkY5MjkxQUFCREQ0OUNENzJFMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xMDJDQjIyODI1NUFDNTlDMDZGNTZCRjkyOTFBQUJERDQ5Q0Q3 MkUxLmNlcjCBoQYIKwYBBQUHAQsEgZQwgZEwgY4GCCsGAQUFBzALhoGBcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzE3ZTY1YjY3LTkwNWMtNDAzYy04 Yzc5LTIzMTU2NTk2NjhhYS8wLzMyMzAzMjJlMzkzMTJlMzEzNDJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMzMzgzMTM1MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADKWw4wDQYJKoZIhvcN AQELBQADggEBAC0qbDx5NCsaD8OBGhCv+mTFwSV+tJlY9/N9P9R5/WnBI4mreRuI CXnWsodcvIcwrT+pFQ+wBoEhgmpObTXXWWRofhSbpK2Y5PxJAbRynr6NaPfKq5fA Rwx1o3WRPtK3EOMk/ntScp/n9Sgnq3C1et3pg1DiZuW/TEMf4caqN/6NQgFuldQF Gy3fmGg//ex4Z32uvqiQdLrP9XsZ1eFC+gF+ZVx4EIUWKFsvcEEHIYmKxNcQM9q6 78QiIFtKto68ptjUxFial1IIfySIMI2AbdgqrfD9fWOnmWy3iZhDCMm7sjw7vGMk UbTuK+gfs5vcpHNwxlZyZkyIM5z2dGcPdNI= -----END CERTIFICATE-----Generated at Wed May 13 03:56:19 2026 by rpki-client