$ rpki-client -vvf rpki-rsync.idnic.net/repo/2410fa43-0be3-471a-9c20-81046291ca11/0/3230322e35322e35302e302f32342d3234203d3e203436303536.roa File: 3230322e35322e35302e302f32342d3234203d3e203436303536.roa (raw, json) Hash identifier: jclNRlrhqL+AfaCj+qvPSgX0Z4Wtr2IefaNqa2LPL2c= Subject key identifier: 87:FB:67:A5:56:04:0B:6E:B0:A0:2B:5C:D7:24:99:2E:3D:49:98:03 Certificate issuer: /CN=1587930E115B02B61F9967A961669E9C2E5D3155 Certificate serial: 0F565A5F92EC67A6B33EBA0230C4258025A4157A Authority key identifier: 15:87:93:0E:11:5B:02:B6:1F:99:67:A9:61:66:9E:9C:2E:5D:31:55 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1587930E115B02B61F9967A961669E9C2E5D3155.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2410fa43-0be3-471a-9c20-81046291ca11/0/3230322e35322e35302e302f32342d3234203d3e203436303536.roa Signing time: Sun 03 May 2026 02:20:11 +0000 ROA not before: Sun 03 May 2026 02:15:11 +0000 ROA not after: Sun 02 May 2027 02:20:11 +0000 asID: 46056 IP address blocks: 202.52.50.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2410fa43-0be3-471a-9c20-81046291ca11/0/1587930E115B02B61F9967A961669E9C2E5D3155.crl rsync://rpki-rsync.idnic.net/repo/2410fa43-0be3-471a-9c20-81046291ca11/0/1587930E115B02B61F9967A961669E9C2E5D3155.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1587930E115B02B61F9967A961669E9C2E5D3155.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 04:31:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:56:5a:5f:92:ec:67:a6:b3:3e:ba:02:30:c4:25:80:25:a4:15:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1587930E115B02B61F9967A961669E9C2E5D3155 Validity Not Before: May 3 02:15:11 2026 GMT Not After : May 2 02:20:11 2027 GMT Subject: CN=87FB67A556040B6EB0A02B5CD724992E3D499803 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:3c:1f:25:ce:f3:04:be:09:d8:3f:d7:73:54: 14:a5:31:6a:57:b0:6f:47:65:93:d4:af:c0:e3:86: 1b:f4:2f:6e:ea:7a:56:19:39:74:c7:73:57:e4:cf: 79:0b:5c:d0:11:a0:ab:eb:4b:9b:eb:f0:dc:9d:f2: 27:54:71:f6:94:30:71:2b:4b:88:fd:56:c8:22:b7: 1c:21:ab:d7:99:66:c1:8f:f6:2c:c5:9e:f0:11:45: 4a:14:17:2e:0d:55:ae:aa:a3:95:af:bc:64:3d:57: 8c:32:12:55:d4:5f:d3:78:af:da:7c:1c:f9:96:dc: d0:46:97:4c:29:0f:8e:eb:28:bb:6e:a0:5c:26:f2: dc:5f:c5:ba:70:33:f3:cb:83:ca:30:ef:ee:38:d9: e2:13:96:5d:90:e6:d7:54:56:f9:20:aa:4a:15:f2: 8f:c2:51:28:b8:a7:ad:fe:8e:f0:9d:df:6d:06:50: 70:c6:e3:be:fd:58:58:d4:73:7d:9b:17:3d:dc:84: c0:8e:dc:cf:4d:1b:a5:e8:28:6d:53:cb:e6:e7:bb: 91:30:7e:f9:87:25:7b:8a:73:07:b5:e3:e1:22:82: f0:a6:e3:4d:e8:0a:8c:31:4a:34:7a:30:e6:59:16: 50:5d:f6:43:ce:5b:15:88:ca:0d:88:a0:f9:6c:11: 12:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:FB:67:A5:56:04:0B:6E:B0:A0:2B:5C:D7:24:99:2E:3D:49:98:03 X509v3 Authority Key Identifier: keyid:15:87:93:0E:11:5B:02:B6:1F:99:67:A9:61:66:9E:9C:2E:5D:31:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2410fa43-0be3-471a-9c20-81046291ca11/0/1587930E115B02B61F9967A961669E9C2E5D3155.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1587930E115B02B61F9967A961669E9C2E5D3155.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2410fa43-0be3-471a-9c20-81046291ca11/0/3230322e35322e35302e302f32342d3234203d3e203436303536.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.52.50.0/24 Signature Algorithm: sha256WithRSAEncryption 60:b7:29:b3:45:54:7a:0a:e5:90:29:53:dd:fa:a2:75:4e:42: cc:6e:b7:ee:c7:29:03:ef:17:c6:e5:3a:98:c6:6d:2a:98:4e: 48:84:e7:6a:d3:ab:a5:3b:15:ae:fa:e9:8c:23:b5:74:ef:0d: 48:dc:95:5e:61:ef:6e:d7:7b:db:6f:cf:8c:cd:8e:95:5f:2b: ea:31:58:5d:e7:39:ae:74:5d:34:d4:dd:6f:2e:bd:fc:b6:72: 63:3e:06:bc:04:49:5f:d8:fe:09:e1:8d:13:aa:c1:a6:58:f6: 51:55:48:e6:96:04:4c:0a:af:fb:e3:e7:7d:cd:e1:6e:16:09: d0:63:01:3b:55:f0:87:d1:91:a5:d5:38:2f:b2:d9:68:31:42: 19:85:8a:b4:18:15:f4:9c:4f:dc:ee:03:1f:f0:6a:b1:89:ba: fa:1c:eb:a5:53:d8:b8:da:48:cf:8c:2a:52:63:b3:a4:2c:a9: 9c:a9:13:33:56:d9:ba:af:64:30:63:30:d4:13:a8:16:44:fd: 96:6d:44:9b:b2:32:09:90:c8:ee:5f:f9:8b:f6:2a:72:0c:fe: 7b:d5:22:f8:21:db:7e:dd:84:75:99:5c:c8:63:00:79:9e:d7: 43:b7:c1:0d:b8:0d:4b:52:f3:d9:0c:a1:56:28:38:23:ff:60: 6e:8d:ad:f7 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUD1ZaX5LsZ6azProCMMQlgCWkFXowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTU4NzkzMEUxMTVCMDJCNjFGOTk2N0E5NjE2NjlFOUMy RTVEMzE1NTAeFw0yNjA1MDMwMjE1MTFaFw0yNzA1MDIwMjIwMTFaMDMxMTAvBgNV BAMTKDg3RkI2N0E1NTYwNDBCNkVCMEEwMkI1Q0Q3MjQ5OTJFM0Q0OTk4MDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4PB8lzvMEvgnYP9dzVBSlMWpX sG9HZZPUr8Djhhv0L27qelYZOXTHc1fkz3kLXNARoKvrS5vr8Nyd8idUcfaUMHEr S4j9Vsgitxwhq9eZZsGP9izFnvARRUoUFy4NVa6qo5WvvGQ9V4wyElXUX9N4r9p8 HPmW3NBGl0wpD47rKLtuoFwm8txfxbpwM/PLg8ow7+442eITll2Q5tdUVvkgqkoV 8o/CUSi4p63+jvCd320GUHDG4779WFjUc32bFz3chMCO3M9NG6XoKG1Ty+bnu5Ew fvmHJXuKcwe14+EigvCm403oCowxSjR6MOZZFlBd9kPOWxWIyg2IoPlsERLXAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUh/tnpVYEC26woCtc1ySZLj1JmAMwHwYDVR0j BBgwFoAUFYeTDhFbArYfmWepYWaenC5dMVUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjQxMGZhNDMtMGJlMy00NzFhLTljMjAtODEwNDYyOTFjYTExLzAvMTU4NzkzMEUx MTVCMDJCNjFGOTk2N0E5NjE2NjlFOUMyRTVEMzE1NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xNTg3OTMwRTExNUIwMkI2MUY5OTY3QTk2MTY2OUU5QzJFNUQz MTU1LmNlcjCBoQYIKwYBBQUHAQsEgZQwgZEwgY4GCCsGAQUFBzALhoGBcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzI0MTBmYTQzLTBiZTMtNDcxYS05 YzIwLTgxMDQ2MjkxY2ExMS8wLzMyMzAzMjJlMzUzMjJlMzUzMDJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDM0MzYzMDM1MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADKNDIwDQYJKoZIhvcN AQELBQADggEBAGC3KbNFVHoK5ZApU936onVOQsxut+7HKQPvF8blOpjGbSqYTkiE 52rTq6U7Fa766YwjtXTvDUjclV5h727Xe9tvz4zNjpVfK+oxWF3nOa50XTTU3W8u vfy2cmM+BrwESV/Y/gnhjROqwaZY9lFVSOaWBEwKr/vj533N4W4WCdBjATtV8IfR kaXVOC+y2WgxQhmFirQYFfScT9zuAx/warGJuvoc66VT2LjaSM+MKlJjs6QsqZyp EzNW2bqvZDBjMNQTqBZE/ZZtRJuyMgmQyO5f+Yv2KnIM/nvVIvgh237dhHWZXMhj AHme10O3wQ24DUtS89kMoVYoOCP/YG6Nrfc= -----END CERTIFICATE-----Generated at Wed May 13 07:14:41 2026 by rpki-client