$ rpki-client -vvf rpki-rsync.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3230322e3136322e3230362e302f32332d3234203d3e20313338383431.roa File: 3230322e3136322e3230362e302f32332d3234203d3e20313338383431.roa (raw, json) Hash identifier: NlK1m/VjRVxuFjnxhOd5Oz2qsnYSll7kSrkgs6lFxAc= Subject key identifier: C0:83:1B:A2:C5:5C:26:D8:98:EC:16:1C:77:C0:E5:6F:DE:C7:C5:DD Certificate issuer: /CN=D09EA95FF10C0166C2954C997A8A4989BD890A87 Certificate serial: 138A31AAEEC659623BE3B69F51A8C9F1509C4536 Authority key identifier: D0:9E:A9:5F:F1:0C:01:66:C2:95:4C:99:7A:8A:49:89:BD:89:0A:87 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D09EA95FF10C0166C2954C997A8A4989BD890A87.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3230322e3136322e3230362e302f32332d3234203d3e20313338383431.roa Signing time: Sun 03 May 2026 02:18:42 +0000 ROA not before: Sun 03 May 2026 02:13:42 +0000 ROA not after: Sun 02 May 2027 02:18:42 +0000 asID: 138841 IP address blocks: 202.162.206.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/D09EA95FF10C0166C2954C997A8A4989BD890A87.crl rsync://rpki-rsync.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/D09EA95FF10C0166C2954C997A8A4989BD890A87.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D09EA95FF10C0166C2954C997A8A4989BD890A87.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 02:11:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:8a:31:aa:ee:c6:59:62:3b:e3:b6:9f:51:a8:c9:f1:50:9c:45:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D09EA95FF10C0166C2954C997A8A4989BD890A87 Validity Not Before: May 3 02:13:42 2026 GMT Not After : May 2 02:18:42 2027 GMT Subject: CN=C0831BA2C55C26D898EC161C77C0E56FDEC7C5DD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:71:6c:78:2d:6b:dc:cb:6e:92:72:3c:63:29: 73:da:da:51:07:ea:4d:c0:21:d2:bf:cb:4e:11:86: 3c:65:d0:81:7d:be:46:2a:ff:85:41:ef:6a:03:f1: a2:23:27:6b:ab:d8:71:09:db:1f:64:c9:d6:64:e5: dd:fa:bd:c4:11:22:1c:88:b5:9a:96:8e:c6:6b:15: cc:ce:e7:f5:50:0e:c9:75:8a:73:02:6e:c9:be:e9: 05:78:e3:07:30:da:c1:51:f6:73:95:d1:03:8d:15: c1:cd:e0:e2:f0:1f:0e:5a:56:e6:4a:d0:0c:d4:35: eb:8e:c9:4b:71:66:9f:64:22:f4:de:6e:d7:a1:e3: 62:30:71:77:7e:46:2b:cf:87:91:e6:97:ab:05:18: 57:ce:82:d4:12:78:90:87:78:d4:04:25:b0:6d:e6: d5:03:38:19:1d:c3:e4:ce:42:12:f6:20:cc:31:85: b9:74:d7:73:7e:9e:7a:62:48:9b:38:1e:c0:78:cb: 4e:b6:08:85:88:fc:e6:8e:91:46:9c:68:d9:68:83: a9:36:fb:ee:4e:00:87:9b:f1:1a:bb:3e:36:88:10: 9e:b4:21:40:dc:f3:19:2c:a7:8b:38:74:6c:f6:59: 76:5e:45:ff:5f:71:5d:11:4b:4e:61:71:b3:8c:a0: 63:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:83:1B:A2:C5:5C:26:D8:98:EC:16:1C:77:C0:E5:6F:DE:C7:C5:DD X509v3 Authority Key Identifier: keyid:D0:9E:A9:5F:F1:0C:01:66:C2:95:4C:99:7A:8A:49:89:BD:89:0A:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/D09EA95FF10C0166C2954C997A8A4989BD890A87.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D09EA95FF10C0166C2954C997A8A4989BD890A87.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3230322e3136322e3230362e302f32332d3234203d3e20313338383431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.162.206.0/23 Signature Algorithm: sha256WithRSAEncryption 4b:73:3c:41:f1:44:be:70:d3:71:26:f9:a2:c5:0f:f8:ea:25: e0:6d:cb:4b:e1:fd:14:7d:19:90:0f:45:cc:d9:df:8c:2a:05: 2c:e7:8e:20:30:b8:cd:53:3e:f0:83:8c:e2:60:ea:7f:b3:8d: 8a:4b:d4:29:23:85:d3:31:f2:36:a2:0d:6e:16:b3:41:01:5d: 4f:9a:d0:0b:82:ce:8f:1d:2c:aa:c3:63:51:83:4d:f4:e2:a6: f4:7a:3a:c8:09:1f:86:2c:fb:d3:7e:3a:e1:1b:65:34:ff:f5: 01:8c:70:db:ed:55:60:27:36:ce:71:fd:88:7a:14:6f:e1:61: 10:b9:a7:b1:cf:1d:3e:03:38:03:08:fe:0e:fb:7b:17:bb:89: f2:e5:de:fc:30:53:0a:b0:fe:05:a3:46:2c:6c:96:b8:97:b4: 7c:a5:19:97:50:72:4e:cc:2d:b9:a3:76:c3:22:0c:8d:b1:5d: 2c:13:bf:9a:0b:f6:0f:16:3d:a7:d2:51:13:15:35:16:e9:cf: 0c:ac:79:53:8e:9b:a3:ac:d4:80:ef:4e:c0:2c:9b:99:47:58: 80:80:2c:2b:da:a4:65:f3:dc:6d:54:76:6c:0b:27:2c:ac:6b: 59:ca:d3:28:93:27:66:a2:0e:89:eb:6b:a5:d8:4b:50:53:06: f4:32:a9:7d -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUE4oxqu7GWWI747afUajJ8VCcRTYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDA5RUE5NUZGMTBDMDE2NkMyOTU0Qzk5N0E4QTQ5ODlC RDg5MEE4NzAeFw0yNjA1MDMwMjEzNDJaFw0yNzA1MDIwMjE4NDJaMDMxMTAvBgNV BAMTKEMwODMxQkEyQzU1QzI2RDg5OEVDMTYxQzc3QzBFNTZGREVDN0M1REQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0cWx4LWvcy26ScjxjKXPa2lEH 6k3AIdK/y04Rhjxl0IF9vkYq/4VB72oD8aIjJ2ur2HEJ2x9kydZk5d36vcQRIhyI tZqWjsZrFczO5/VQDsl1inMCbsm+6QV44wcw2sFR9nOV0QONFcHN4OLwHw5aVuZK 0AzUNeuOyUtxZp9kIvTebteh42IwcXd+RivPh5Hml6sFGFfOgtQSeJCHeNQEJbBt 5tUDOBkdw+TOQhL2IMwxhbl013N+nnpiSJs4HsB4y062CIWI/OaOkUacaNlog6k2 ++5OAIeb8Rq7PjaIEJ60IUDc8xksp4s4dGz2WXZeRf9fcV0RS05hcbOMoGNzAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUwIMbosVcJtiY7BYcd8Dlb97Hxd0wHwYDVR0j BBgwFoAU0J6pX/EMAWbClUyZeopJib2JCocwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjAxNDMyY2MtM2JjOS00ODU4LWI1MDYtMjE4YWFiMGIwODljLzAvRDA5RUE5NUZG MTBDMDE2NkMyOTU0Qzk5N0E4QTQ5ODlCRDg5MEE4Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EMDlFQTk1RkYxMEMwMTY2QzI5NTRDOTk3QThBNDk4OUJEODkw QTg3LmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzIwMTQzMmNjLTNiYzktNDg1OC1i NTA2LTIxOGFhYjBiMDg5Yy8wLzMyMzAzMjJlMzEzNjMyMmUzMjMwMzYyZTMwMmYz MjMzMmQzMjM0MjAzZDNlMjAzMTMzMzgzODM0MzEucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAHKos4wDQYJ KoZIhvcNAQELBQADggEBAEtzPEHxRL5w03Em+aLFD/jqJeBty0vh/RR9GZAPRczZ 34wqBSznjiAwuM1TPvCDjOJg6n+zjYpL1CkjhdMx8jaiDW4Ws0EBXU+a0AuCzo8d LKrDY1GDTfTipvR6OsgJH4Ys+9N+OuEbZTT/9QGMcNvtVWAnNs5x/Yh6FG/hYRC5 p7HPHT4DOAMI/g77exe7ifLl3vwwUwqw/gWjRixslriXtHylGZdQck7MLbmjdsMi DI2xXSwTv5oL9g8WPafSURMVNRbpzwyseVOOm6Os1IDvTsAsm5lHWICALCvapGXz 3G1UdmwLJyysa1nK0yiTJ2aiDonra6XYS1BTBvQyqX0= -----END CERTIFICATE-----Generated at Wed May 13 08:48:55 2026 by rpki-client