$ rpki-client -vvf rpki-rsync.idnic.net/repo/1ee94014-87fa-4bc2-b1c6-7fd2a89476f3/0/3230322e34372e3138392e302f32342d3234203d3e203435333035.roa File: 3230322e34372e3138392e302f32342d3234203d3e203435333035.roa (raw, json) Hash identifier: l0DIBrvHKOmdXYA8EMn7r3ept4hzvTyfATy5T2AkXgc= Subject key identifier: 10:12:71:08:AA:BC:E6:E8:00:C7:40:E1:FB:24:FC:C0:0B:F4:2C:BA Certificate issuer: /CN=8863D43C2CD36E9DE28C7E55F1891CC25C4F2985 Certificate serial: 26DECF16924D57E3CF46F52E1773005AD628E79E Authority key identifier: 88:63:D4:3C:2C:D3:6E:9D:E2:8C:7E:55:F1:89:1C:C2:5C:4F:29:85 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8863D43C2CD36E9DE28C7E55F1891CC25C4F2985.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1ee94014-87fa-4bc2-b1c6-7fd2a89476f3/0/3230322e34372e3138392e302f32342d3234203d3e203435333035.roa Signing time: Sun 03 May 2026 02:18:27 +0000 ROA not before: Sun 03 May 2026 02:13:27 +0000 ROA not after: Sun 02 May 2027 02:18:27 +0000 asID: 45305 IP address blocks: 202.47.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1ee94014-87fa-4bc2-b1c6-7fd2a89476f3/0/8863D43C2CD36E9DE28C7E55F1891CC25C4F2985.crl rsync://rpki-rsync.idnic.net/repo/1ee94014-87fa-4bc2-b1c6-7fd2a89476f3/0/8863D43C2CD36E9DE28C7E55F1891CC25C4F2985.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8863D43C2CD36E9DE28C7E55F1891CC25C4F2985.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 22:20:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:de:cf:16:92:4d:57:e3:cf:46:f5:2e:17:73:00:5a:d6:28:e7:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8863D43C2CD36E9DE28C7E55F1891CC25C4F2985 Validity Not Before: May 3 02:13:27 2026 GMT Not After : May 2 02:18:27 2027 GMT Subject: CN=10127108AABCE6E800C740E1FB24FCC00BF42CBA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:46:d9:83:ec:a1:c3:34:d5:7d:3c:3b:65:c0: 65:a5:3a:90:d5:7d:5f:13:df:58:37:0e:c9:c8:af: 6c:2e:68:4e:71:41:c2:08:f6:0a:42:d7:e6:4e:b2: bc:e3:c0:cd:03:79:b5:41:58:dc:9b:84:8f:a1:cc: ba:9f:8d:bd:47:8a:0b:b9:db:90:0d:d2:18:e8:b4: 9e:ef:59:8e:41:be:78:be:25:3e:40:72:98:56:b4: 36:a1:56:9f:65:9a:fc:06:b8:3f:fe:01:34:cd:1c: 87:82:92:6a:d4:cc:f5:82:1d:4b:ee:d4:d1:80:07: f7:a6:22:ba:f2:2a:1f:c7:02:b8:4e:e4:a4:4d:04: 5b:da:33:d8:0a:21:2e:71:1d:35:1b:bc:26:4c:38: 6d:4a:ea:8d:61:8f:72:7a:04:93:86:89:1b:c5:09: d0:5e:28:5c:9b:3e:64:ed:4d:b3:10:50:bc:8d:ff: db:39:bc:d0:a2:0e:1a:71:dc:b7:bd:3b:22:10:7a: bf:ab:cd:16:3e:e7:82:d1:f1:fc:a9:56:42:b8:44: a5:88:67:13:17:9a:3b:f2:36:f2:7a:48:d8:eb:9d: e2:10:70:16:d8:6c:41:78:4b:d9:57:a2:d1:0b:23: 67:4c:71:51:db:cc:16:b3:f2:ff:32:e8:95:f9:c3: 0c:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:12:71:08:AA:BC:E6:E8:00:C7:40:E1:FB:24:FC:C0:0B:F4:2C:BA X509v3 Authority Key Identifier: keyid:88:63:D4:3C:2C:D3:6E:9D:E2:8C:7E:55:F1:89:1C:C2:5C:4F:29:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1ee94014-87fa-4bc2-b1c6-7fd2a89476f3/0/8863D43C2CD36E9DE28C7E55F1891CC25C4F2985.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8863D43C2CD36E9DE28C7E55F1891CC25C4F2985.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1ee94014-87fa-4bc2-b1c6-7fd2a89476f3/0/3230322e34372e3138392e302f32342d3234203d3e203435333035.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.47.189.0/24 Signature Algorithm: sha256WithRSAEncryption 3c:36:ef:67:30:78:96:04:44:56:6c:44:d9:2c:d3:ef:46:23: 11:0d:73:39:43:3d:0d:72:e2:52:51:c9:71:a8:c8:44:99:d0: 9a:ac:79:fd:14:e1:7a:21:a9:8b:a3:8f:5c:a1:a8:09:6f:8f: 6c:ba:c8:ad:0e:7a:83:0a:9e:d3:26:e0:db:8d:93:bc:17:9f: f5:fa:9d:a0:cf:dd:25:09:b5:b8:84:96:a6:04:2f:8f:1a:dd: b8:af:fc:da:37:05:e0:f8:02:2d:cd:4a:4f:17:57:47:22:32: b5:d2:03:23:8d:4d:af:e5:dd:32:d5:2a:06:f2:de:85:ef:03: d6:70:e2:e3:bf:3a:00:f4:c3:b1:ec:69:fc:7b:ab:ae:70:27: 46:59:54:b6:22:fa:49:fd:bf:91:68:f0:71:1a:ac:eb:34:b5: 4f:2f:aa:65:ce:a7:49:67:74:8f:6b:82:c2:41:81:e0:26:cd: 16:77:9b:8f:ed:78:d7:b0:9c:84:52:00:6c:95:ab:3e:7c:f3: 02:c3:37:a6:62:55:46:5f:e3:ff:53:c6:b0:0c:5f:22:41:4b: 8d:23:2a:18:6c:5b:2b:bf:f0:39:dd:7e:5a:67:ef:a0:70:54: 5a:98:40:5d:32:70:ab:84:e8:db:6d:87:dc:b7:42:81:15:1e: 26:5b:8e:7c -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUJt7PFpJNV+PPRvUuF3MAWtYo554wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODg2M0Q0M0MyQ0QzNkU5REUyOEM3RTU1RjE4OTFDQzI1 QzRGMjk4NTAeFw0yNjA1MDMwMjEzMjdaFw0yNzA1MDIwMjE4MjdaMDMxMTAvBgNV BAMTKDEwMTI3MTA4QUFCQ0U2RTgwMEM3NDBFMUZCMjRGQ0MwMEJGNDJDQkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSRtmD7KHDNNV9PDtlwGWlOpDV fV8T31g3DsnIr2wuaE5xQcII9gpC1+ZOsrzjwM0DebVBWNybhI+hzLqfjb1Higu5 25AN0hjotJ7vWY5Bvni+JT5AcphWtDahVp9lmvwGuD/+ATTNHIeCkmrUzPWCHUvu 1NGAB/emIrryKh/HArhO5KRNBFvaM9gKIS5xHTUbvCZMOG1K6o1hj3J6BJOGiRvF CdBeKFybPmTtTbMQULyN/9s5vNCiDhpx3Le9OyIQer+rzRY+54LR8fypVkK4RKWI ZxMXmjvyNvJ6SNjrneIQcBbYbEF4S9lXotELI2dMcVHbzBaz8v8y6JX5wwzpAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUEBJxCKq85ugAx0Dh+yT8wAv0LLowHwYDVR0j BBgwFoAUiGPUPCzTbp3ijH5V8YkcwlxPKYUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWVlOTQwMTQtODdmYS00YmMyLWIxYzYtN2ZkMmE4OTQ3NmYzLzAvODg2M0Q0M0My Q0QzNkU5REUyOEM3RTU1RjE4OTFDQzI1QzRGMjk4NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84ODYzRDQzQzJDRDM2RTlERTI4QzdFNTVGMTg5MUNDMjVDNEYy OTg1LmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzFlZTk0MDE0LTg3ZmEtNGJjMi1i MWM2LTdmZDJhODk0NzZmMy8wLzMyMzAzMjJlMzQzNzJlMzEzODM5MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzQzNTMzMzAzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMovvTANBgkqhkiG 9w0BAQsFAAOCAQEAPDbvZzB4lgREVmxE2SzT70YjEQ1zOUM9DXLiUlHJcajIRJnQ mqx5/RTheiGpi6OPXKGoCW+PbLrIrQ56gwqe0ybg242TvBef9fqdoM/dJQm1uISW pgQvjxrduK/82jcF4PgCLc1KTxdXRyIytdIDI41Nr+XdMtUqBvLehe8D1nDi4786 APTDsexp/HurrnAnRllUtiL6Sf2/kWjwcRqs6zS1Ty+qZc6nSWd0j2uCwkGB4CbN Fnebj+1417CchFIAbJWrPnzzAsM3pmJVRl/j/1PGsAxfIkFLjSMqGGxbK7/wOd1+ WmfvoHBUWphAXTJwq4To222H3LdCgRUeJluOfA== -----END CERTIFICATE-----Generated at Wed May 13 03:51:24 2026 by rpki-client