$ rpki-client -vvf rpki-rsync.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3230322e31302e33342e302f32342d3234203d3e203538343837.roa File: 3230322e31302e33342e302f32342d3234203d3e203538343837.roa (raw, json) Hash identifier: P0Lt12HkMOn7Oz1k9JyvB66m4KQafgfYAgd99v0Pdkg= Subject key identifier: 39:F4:E8:F5:B0:19:27:11:1F:91:3A:B8:56:16:D6:14:2A:4A:8D:81 Certificate issuer: /CN=91D8B8BF467FE8EAC193DF4D263C87F5A91259A9 Certificate serial: 374DA99DD295BA98040AF51094DDAB2740CE94CD Authority key identifier: 91:D8:B8:BF:46:7F:E8:EA:C1:93:DF:4D:26:3C:87:F5:A9:12:59:A9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91D8B8BF467FE8EAC193DF4D263C87F5A91259A9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3230322e31302e33342e302f32342d3234203d3e203538343837.roa Signing time: Sun 03 May 2026 02:22:55 +0000 ROA not before: Sun 03 May 2026 02:17:55 +0000 ROA not after: Sun 02 May 2027 02:22:55 +0000 asID: 58487 IP address blocks: 202.10.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/91D8B8BF467FE8EAC193DF4D263C87F5A91259A9.crl rsync://rpki-rsync.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/91D8B8BF467FE8EAC193DF4D263C87F5A91259A9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91D8B8BF467FE8EAC193DF4D263C87F5A91259A9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:4d:a9:9d:d2:95:ba:98:04:0a:f5:10:94:dd:ab:27:40:ce:94:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91D8B8BF467FE8EAC193DF4D263C87F5A91259A9 Validity Not Before: May 3 02:17:55 2026 GMT Not After : May 2 02:22:55 2027 GMT Subject: CN=39F4E8F5B01927111F913AB85616D6142A4A8D81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:fe:45:de:89:e1:61:7d:13:2b:c4:a5:93:04: 59:fa:03:d5:e9:d3:3b:58:87:c5:47:a5:62:a6:50: dd:06:9a:f4:56:02:7c:36:24:2c:64:85:62:4d:e3: 7a:25:81:20:0f:4e:2a:89:82:fe:f2:41:37:fa:32: 43:f9:8e:f7:bf:f5:c1:5f:84:d0:09:17:b1:f0:51: e4:2b:24:5b:77:65:16:b0:7c:be:28:92:5c:0b:f2: bd:8d:4c:18:9d:3a:98:bc:d6:d2:73:85:bc:17:8a: 34:d7:12:d8:3b:a4:a3:fe:71:cc:41:5d:7e:56:61: 50:6f:88:c2:da:fc:6b:8d:81:0a:51:cc:78:9f:63: 5c:1a:ce:60:a0:73:95:66:14:cf:6a:52:f7:a0:ac: 80:91:1c:0a:f7:d9:b4:68:5f:4f:e7:72:5c:23:56: b1:40:4e:fa:a6:8f:99:14:9c:07:4e:5b:2f:6c:90: ea:7f:06:ae:b4:30:74:b6:6f:e8:4b:c6:90:3e:2b: 72:fd:ac:1b:be:93:c2:8a:37:51:0f:f0:9b:13:4e: 62:53:0f:d3:97:c9:6c:18:c8:01:93:14:d0:7f:b1: 64:2a:8e:d3:09:96:75:b5:ad:02:ac:a6:32:f5:d1: eb:09:49:55:3a:a9:f2:1b:2a:61:f5:f5:21:96:93: 7b:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:F4:E8:F5:B0:19:27:11:1F:91:3A:B8:56:16:D6:14:2A:4A:8D:81 X509v3 Authority Key Identifier: keyid:91:D8:B8:BF:46:7F:E8:EA:C1:93:DF:4D:26:3C:87:F5:A9:12:59:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/91D8B8BF467FE8EAC193DF4D263C87F5A91259A9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91D8B8BF467FE8EAC193DF4D263C87F5A91259A9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3230322e31302e33342e302f32342d3234203d3e203538343837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.10.34.0/24 Signature Algorithm: sha256WithRSAEncryption 4e:e4:82:36:c4:73:9b:56:98:a1:1f:20:f2:4c:15:1a:be:21: 45:e3:01:1f:24:91:66:59:1d:28:3b:0e:0d:0d:e9:1e:16:1a: c2:4b:fa:0d:11:f8:e0:5c:27:78:36:10:92:d3:15:b8:12:c5: 57:76:1c:4a:02:08:41:4c:7a:62:c1:21:4d:91:35:86:7a:ff: c3:2d:5d:b9:e6:b1:c1:e2:7d:3b:7d:8c:96:ca:02:bc:31:97: ca:21:b0:0c:47:57:f4:c9:75:49:fa:8e:34:2a:93:00:c8:77: 15:99:30:f2:0d:8a:7e:29:a1:7a:3d:a4:21:8d:c2:94:7f:fd: 55:87:5f:2e:e7:f3:a9:8b:8b:9d:eb:16:1a:85:c3:ca:ff:bb: 47:12:dd:ba:7a:82:5f:de:19:d5:93:09:6f:66:9b:d3:5c:af: e7:69:07:27:b4:40:4b:8e:ce:29:cf:50:42:2f:88:e7:6f:0a: 55:51:ef:08:6f:c9:87:5a:5f:fe:2d:81:26:c0:b8:17:72:0b: d5:de:28:77:ee:65:dd:7d:8f:e4:87:2b:78:16:22:2f:d8:c6: 04:6e:27:31:50:5c:3d:6f:28:8d:1e:9e:9c:8c:7e:99:38:9e: 6d:a6:5e:77:84:64:ed:28:9e:ad:1d:ba:77:56:64:20:85:0c: 3e:a5:0f:8d -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUN02pndKVupgECvUQlN2rJ0DOlM0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTFEOEI4QkY0NjdGRThFQUMxOTNERjREMjYzQzg3RjVB OTEyNTlBOTAeFw0yNjA1MDMwMjE3NTVaFw0yNzA1MDIwMjIyNTVaMDMxMTAvBgNV BAMTKDM5RjRFOEY1QjAxOTI3MTExRjkxM0FCODU2MTZENjE0MkE0QThEODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB/kXeieFhfRMrxKWTBFn6A9Xp 0ztYh8VHpWKmUN0GmvRWAnw2JCxkhWJN43olgSAPTiqJgv7yQTf6MkP5jve/9cFf hNAJF7HwUeQrJFt3ZRawfL4oklwL8r2NTBidOpi81tJzhbwXijTXEtg7pKP+ccxB XX5WYVBviMLa/GuNgQpRzHifY1wazmCgc5VmFM9qUvegrICRHAr32bRoX0/nclwj VrFATvqmj5kUnAdOWy9skOp/Bq60MHS2b+hLxpA+K3L9rBu+k8KKN1EP8JsTTmJT D9OXyWwYyAGTFNB/sWQqjtMJlnW1rQKspjL10esJSVU6qfIbKmH19SGWk3txAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUOfTo9bAZJxEfkTq4VhbWFCpKjYEwHwYDVR0j BBgwFoAUkdi4v0Z/6OrBk99NJjyH9akSWakwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmQ4ZjA2MGYtZTRiMy00YTRlLTk3ZmQtZjYxYWIxN2RlZWVkLzAvOTFEOEI4QkY0 NjdGRThFQUMxOTNERjREMjYzQzg3RjVBOTEyNTlBOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85MUQ4QjhCRjQ2N0ZFOEVBQzE5M0RGNEQyNjNDODdGNUE5MTI1 OUE5LmNlcjCBoQYIKwYBBQUHAQsEgZQwgZEwgY4GCCsGAQUFBzALhoGBcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzJkOGYwNjBmLWU0YjMtNGE0ZS05 N2ZkLWY2MWFiMTdkZWVlZC8wLzMyMzAzMjJlMzEzMDJlMzMzNDJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDM1MzgzNDM4Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADKCiIwDQYJKoZIhvcN AQELBQADggEBAE7kgjbEc5tWmKEfIPJMFRq+IUXjAR8kkWZZHSg7Dg0N6R4WGsJL +g0R+OBcJ3g2EJLTFbgSxVd2HEoCCEFMemLBIU2RNYZ6/8MtXbnmscHifTt9jJbK Arwxl8ohsAxHV/TJdUn6jjQqkwDIdxWZMPINin4poXo9pCGNwpR//VWHXy7n86mL i53rFhqFw8r/u0cS3bp6gl/eGdWTCW9mm9Ncr+dpBye0QEuOzinPUEIviOdvClVR 7whvyYdaX/4tgSbAuBdyC9XeKHfuZd19j+SHK3gWIi/YxgRuJzFQXD1vKI0enpyM fpk4nm2mXneEZO0onq0dundWZCCFDD6lD40= -----END CERTIFICATE-----Generated at Wed May 13 01:14:46 2026 by rpki-client