$ rpki-client -vvf rpki-rsync.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/3230322e39312e33312e302f32342d3234203d3e20313532303639.roa File: 3230322e39312e33312e302f32342d3234203d3e20313532303639.roa (raw, json) Hash identifier: 1B1TVPRMyjlvdSS5PDnfi+a+7Z7dzoKNS0Tsds8V9X4= Subject key identifier: 5F:F1:1C:1F:64:E7:F0:C4:85:50:42:60:29:42:5F:40:2A:30:39:55 Certificate issuer: /CN=7229DFE2E0A3A570A93521601EB1A61FC0CEAE07 Certificate serial: 60937BEFDD6766846C6C85982182743942CCD9CC Authority key identifier: 72:29:DF:E2:E0:A3:A5:70:A9:35:21:60:1E:B1:A6:1F:C0:CE:AE:07 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7229DFE2E0A3A570A93521601EB1A61FC0CEAE07.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/3230322e39312e33312e302f32342d3234203d3e20313532303639.roa Signing time: Sun 03 May 2026 02:21:36 +0000 ROA not before: Sun 03 May 2026 02:16:36 +0000 ROA not after: Sun 02 May 2027 02:21:36 +0000 asID: 152069 IP address blocks: 202.91.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/7229DFE2E0A3A570A93521601EB1A61FC0CEAE07.crl rsync://rpki-rsync.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/7229DFE2E0A3A570A93521601EB1A61FC0CEAE07.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7229DFE2E0A3A570A93521601EB1A61FC0CEAE07.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 20:13:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:93:7b:ef:dd:67:66:84:6c:6c:85:98:21:82:74:39:42:cc:d9:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7229DFE2E0A3A570A93521601EB1A61FC0CEAE07 Validity Not Before: May 3 02:16:36 2026 GMT Not After : May 2 02:21:36 2027 GMT Subject: CN=5FF11C1F64E7F0C48550426029425F402A303955 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:91:f6:3f:51:26:70:ba:a0:f0:42:d7:9f:d6: f9:9b:79:74:26:80:6d:f9:df:54:03:91:d9:c1:29: 78:c3:2c:af:29:f9:30:ba:de:04:8c:4c:28:ee:94: ed:bb:cc:fb:23:1d:ee:dd:ef:f7:3c:72:8e:31:f4: a6:30:84:b3:32:cc:51:1b:56:c8:74:17:c1:a9:d0: fa:d3:b5:8b:cb:52:9a:71:b0:22:43:b0:3c:6b:9b: 40:be:f4:e0:ab:f1:4b:7c:d8:ee:29:d8:15:a1:8f: 36:02:f6:fc:90:96:7c:66:6c:41:ac:d0:a6:28:2f: 8a:fe:50:7a:42:cf:82:02:f5:e2:26:f7:15:5e:c4: 2e:7b:3e:ea:92:1f:ea:b9:f5:58:0a:b4:5f:8b:a3: bc:8d:71:13:86:38:a7:3c:6e:2e:e7:4e:bf:af:67: 7b:f2:be:08:a0:67:72:37:48:d1:18:71:cc:99:26: 1e:43:7c:82:32:da:f5:38:4b:a1:44:e5:a7:42:e8: 9e:54:40:24:b9:d3:dd:aa:93:6d:b0:ba:e2:5b:4e: d1:c9:ed:9b:8c:0d:d5:7e:96:bc:df:ab:6f:71:bc: cb:91:eb:39:25:22:0f:ac:27:fc:2b:d1:d3:c3:ff: 43:d2:4e:31:b8:3c:3c:09:48:96:2c:6f:2c:61:c9: f8:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:F1:1C:1F:64:E7:F0:C4:85:50:42:60:29:42:5F:40:2A:30:39:55 X509v3 Authority Key Identifier: keyid:72:29:DF:E2:E0:A3:A5:70:A9:35:21:60:1E:B1:A6:1F:C0:CE:AE:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/7229DFE2E0A3A570A93521601EB1A61FC0CEAE07.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7229DFE2E0A3A570A93521601EB1A61FC0CEAE07.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/3230322e39312e33312e302f32342d3234203d3e20313532303639.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.91.31.0/24 Signature Algorithm: sha256WithRSAEncryption 08:8b:0a:10:a6:8c:d9:ea:d3:2d:64:28:35:8d:6e:a6:c5:33: 49:b9:dc:47:ca:f0:16:43:41:f3:a9:17:36:94:6f:98:cb:cc: 97:d0:fe:1e:c2:24:8a:57:ec:c1:43:25:b3:27:ad:62:1b:50: be:42:2c:83:ac:46:26:01:9d:97:37:67:58:71:fd:67:ce:48: 54:90:4c:89:e5:f0:15:01:31:7d:30:e4:17:b8:8e:a1:c4:93: a5:16:ca:7a:1c:90:ea:67:45:b7:46:2c:69:3d:92:ec:15:24: 82:8f:98:be:36:55:a2:68:09:64:33:11:cc:dc:bf:70:81:39: 56:df:31:b9:f4:5d:3a:61:ee:a0:a3:58:8c:f9:84:46:f2:f5: 78:6a:0e:c9:d3:9f:31:7a:a1:d3:33:3e:74:3e:bb:98:aa:ec: 01:ff:a0:c4:9c:0f:2f:c2:3c:2c:2f:d2:50:44:94:8e:20:b1: da:91:7d:ee:8a:84:62:bd:9b:2e:c9:5b:17:f2:f2:a3:a8:af: 6a:45:3f:43:ba:36:1f:b4:e5:c1:1b:74:66:2a:73:8d:2a:39: b0:aa:0c:9e:d5:d7:bf:20:e8:ec:63:8f:87:d0:34:7c:db:45: 36:03:ba:8b:0e:06:43:84:9d:8a:52:e5:c2:7a:cd:00:b9:56: 16:11:c0:33 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUYJN7791nZoRsbIWYIYJ0OULM2cwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzIyOURGRTJFMEEzQTU3MEE5MzUyMTYwMUVCMUE2MUZD MENFQUUwNzAeFw0yNjA1MDMwMjE2MzZaFw0yNzA1MDIwMjIxMzZaMDMxMTAvBgNV BAMTKDVGRjExQzFGNjRFN0YwQzQ4NTUwNDI2MDI5NDI1RjQwMkEzMDM5NTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6kfY/USZwuqDwQtef1vmbeXQm gG3531QDkdnBKXjDLK8p+TC63gSMTCjulO27zPsjHe7d7/c8co4x9KYwhLMyzFEb Vsh0F8Gp0PrTtYvLUppxsCJDsDxrm0C+9OCr8Ut82O4p2BWhjzYC9vyQlnxmbEGs 0KYoL4r+UHpCz4IC9eIm9xVexC57PuqSH+q59VgKtF+Lo7yNcROGOKc8bi7nTr+v Z3vyvgigZ3I3SNEYccyZJh5DfIIy2vU4S6FE5adC6J5UQCS5092qk22wuuJbTtHJ 7ZuMDdV+lrzfq29xvMuR6zklIg+sJ/wr0dPD/0PSTjG4PDwJSJYsbyxhyfhbAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUX/EcH2Tn8MSFUEJgKUJfQCowOVUwHwYDVR0j BBgwFoAUcinf4uCjpXCpNSFgHrGmH8DOrgcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjlhYjYwYjEtYTI0NC00YTc4LWIzMWItZmVjYTNkMTRlZDlmLzAvNzIyOURGRTJF MEEzQTU3MEE5MzUyMTYwMUVCMUE2MUZDMENFQUUwNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83MjI5REZFMkUwQTNBNTcwQTkzNTIxNjAxRUIxQTYxRkMwQ0VB RTA3LmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzI5YWI2MGIxLWEyNDQtNGE3OC1i MzFiLWZlY2EzZDE0ZWQ5Zi8wLzMyMzAzMjJlMzkzMTJlMzMzMTJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMxMzUzMjMwMzYzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMpbHzANBgkqhkiG 9w0BAQsFAAOCAQEACIsKEKaM2erTLWQoNY1upsUzSbncR8rwFkNB86kXNpRvmMvM l9D+HsIkilfswUMlsyetYhtQvkIsg6xGJgGdlzdnWHH9Z85IVJBMieXwFQExfTDk F7iOocSTpRbKehyQ6mdFt0YsaT2S7BUkgo+YvjZVomgJZDMRzNy/cIE5Vt8xufRd OmHuoKNYjPmERvL1eGoOydOfMXqh0zM+dD67mKrsAf+gxJwPL8I8LC/SUESUjiCx 2pF97oqEYr2bLslbF/Lyo6ivakU/Q7o2H7TlwRt0ZipzjSo5sKoMntXXvyDo7GOP h9A0fNtFNgO6iw4GQ4SdilLlwnrNALlWFhHAMw== -----END CERTIFICATE-----Generated at Wed May 13 12:40:51 2026 by rpki-client