$ rpki-client -vvf rpki-rsync.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3230322e31302e33362e302f32342d3234203d3e203538343837.roa File: 3230322e31302e33362e302f32342d3234203d3e203538343837.roa (raw, json) Hash identifier: QhlhHRS58TOKP2TlkeSZ3GSiJh6rVZb0yknG88DBN/8= Subject key identifier: CD:D2:BF:03:73:56:3F:F5:83:C1:C4:3A:FD:49:2A:B2:D0:40:83:C9 Certificate issuer: /CN=91D8B8BF467FE8EAC193DF4D263C87F5A91259A9 Certificate serial: 3F56568877252C8EFC693874813C8B2289B89B3E Authority key identifier: 91:D8:B8:BF:46:7F:E8:EA:C1:93:DF:4D:26:3C:87:F5:A9:12:59:A9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91D8B8BF467FE8EAC193DF4D263C87F5A91259A9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3230322e31302e33362e302f32342d3234203d3e203538343837.roa Signing time: Sun 03 May 2026 02:22:54 +0000 ROA not before: Sun 03 May 2026 02:17:54 +0000 ROA not after: Sun 02 May 2027 02:22:54 +0000 asID: 58487 IP address blocks: 202.10.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/91D8B8BF467FE8EAC193DF4D263C87F5A91259A9.crl rsync://rpki-rsync.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/91D8B8BF467FE8EAC193DF4D263C87F5A91259A9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91D8B8BF467FE8EAC193DF4D263C87F5A91259A9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:56:56:88:77:25:2c:8e:fc:69:38:74:81:3c:8b:22:89:b8:9b:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91D8B8BF467FE8EAC193DF4D263C87F5A91259A9 Validity Not Before: May 3 02:17:54 2026 GMT Not After : May 2 02:22:54 2027 GMT Subject: CN=CDD2BF0373563FF583C1C43AFD492AB2D04083C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:d5:cf:86:b6:06:7e:09:88:35:06:3d:e8:a1: 99:ac:9e:05:4c:b2:c8:f7:37:92:91:11:3a:4a:79: ba:3e:18:1b:74:0e:25:08:c7:3c:cf:d7:cb:d7:d0: e9:5b:d6:3c:fd:a3:76:f1:98:6e:4f:1a:ab:d4:73: fd:60:c1:07:ad:ec:8d:81:6d:f3:85:62:33:b6:0b: 27:d6:59:17:48:99:9d:29:76:1a:eb:5e:90:40:a6: 37:71:54:70:45:76:44:ec:70:b8:72:30:20:a6:a1: 0e:b2:1e:80:23:a6:b8:43:8b:6d:27:60:3c:99:02: 83:68:12:cc:18:3d:9c:52:b5:11:fd:06:f1:2f:c5: db:4a:cf:12:7f:c6:1e:36:f9:d8:94:e2:5c:21:0c: df:c0:47:c8:c7:01:df:90:bb:dc:90:b1:cd:9d:3a: ae:dd:9b:42:9f:66:a8:36:cc:14:17:fc:01:35:72: 7c:0d:35:d7:1c:fe:99:54:0e:74:6e:89:13:7c:1c: 4f:90:20:7b:9e:d0:6f:08:ec:0c:a0:bd:33:66:3a: a2:b8:b0:36:82:b6:0a:58:ee:11:00:99:73:da:71: d4:9d:09:41:10:c1:a1:72:58:ef:f1:5d:8b:d5:a0: 26:b4:de:5d:80:3b:73:83:f3:e8:47:0c:f4:07:eb: 73:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:D2:BF:03:73:56:3F:F5:83:C1:C4:3A:FD:49:2A:B2:D0:40:83:C9 X509v3 Authority Key Identifier: keyid:91:D8:B8:BF:46:7F:E8:EA:C1:93:DF:4D:26:3C:87:F5:A9:12:59:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/91D8B8BF467FE8EAC193DF4D263C87F5A91259A9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91D8B8BF467FE8EAC193DF4D263C87F5A91259A9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3230322e31302e33362e302f32342d3234203d3e203538343837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.10.36.0/24 Signature Algorithm: sha256WithRSAEncryption a4:33:5b:51:d6:40:f7:0e:78:fe:f3:0e:da:25:3a:5c:b8:c0: d0:26:9a:0b:d7:0c:b3:bd:15:00:0f:36:d9:86:76:14:6e:93: 9f:1d:ae:d3:49:23:29:f6:8f:bc:18:98:0f:73:37:30:92:28: a4:5b:e1:01:db:54:be:5c:02:ff:17:6a:c5:e4:7d:2a:28:de: 70:3d:db:1e:85:55:16:89:05:de:ff:e7:45:e6:ac:5e:b0:46: ef:1e:6a:3d:64:aa:87:bf:0f:c5:3c:03:b4:5d:c6:cb:20:a9: 4a:d8:8e:67:24:d4:4d:68:1b:98:78:52:e6:e0:45:7d:94:69: 4f:b1:f3:e9:65:4a:4a:fc:59:0c:23:fc:0a:0b:86:4a:4d:8a: 5d:5a:85:9a:f3:7e:ab:3f:f6:f9:03:53:43:d7:d8:82:ce:29: 68:32:ab:ba:08:c8:62:52:b3:77:aa:f6:5c:95:e8:bf:9b:30: f8:fb:3d:83:d8:d2:94:ab:8c:e0:ff:2e:53:ba:0b:1c:d6:3a: 16:7a:9d:a9:cb:aa:0f:1f:2b:75:f7:8d:d2:27:b4:36:bf:5d: cc:bf:cd:21:c5:5d:7d:cd:2b:99:a6:52:e1:a1:29:9a:03:25: b7:6b:ac:0d:c4:67:cc:0b:a5:40:38:96:20:b5:38:68:83:06: 24:88:75:39 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUP1ZWiHclLI78aTh0gTyLIom4mz4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTFEOEI4QkY0NjdGRThFQUMxOTNERjREMjYzQzg3RjVB OTEyNTlBOTAeFw0yNjA1MDMwMjE3NTRaFw0yNzA1MDIwMjIyNTRaMDMxMTAvBgNV BAMTKENERDJCRjAzNzM1NjNGRjU4M0MxQzQzQUZENDkyQUIyRDA0MDgzQzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr1c+GtgZ+CYg1Bj3ooZmsngVM ssj3N5KRETpKebo+GBt0DiUIxzzP18vX0Olb1jz9o3bxmG5PGqvUc/1gwQet7I2B bfOFYjO2CyfWWRdImZ0pdhrrXpBApjdxVHBFdkTscLhyMCCmoQ6yHoAjprhDi20n YDyZAoNoEswYPZxStRH9BvEvxdtKzxJ/xh42+diU4lwhDN/AR8jHAd+Qu9yQsc2d Oq7dm0KfZqg2zBQX/AE1cnwNNdcc/plUDnRuiRN8HE+QIHue0G8I7AygvTNmOqK4 sDaCtgpY7hEAmXPacdSdCUEQwaFyWO/xXYvVoCa03l2AO3OD8+hHDPQH63M1AgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUzdK/A3NWP/WDwcQ6/UkqstBAg8kwHwYDVR0j BBgwFoAUkdi4v0Z/6OrBk99NJjyH9akSWakwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmQ4ZjA2MGYtZTRiMy00YTRlLTk3ZmQtZjYxYWIxN2RlZWVkLzAvOTFEOEI4QkY0 NjdGRThFQUMxOTNERjREMjYzQzg3RjVBOTEyNTlBOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85MUQ4QjhCRjQ2N0ZFOEVBQzE5M0RGNEQyNjNDODdGNUE5MTI1 OUE5LmNlcjCBoQYIKwYBBQUHAQsEgZQwgZEwgY4GCCsGAQUFBzALhoGBcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzJkOGYwNjBmLWU0YjMtNGE0ZS05 N2ZkLWY2MWFiMTdkZWVlZC8wLzMyMzAzMjJlMzEzMDJlMzMzNjJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDM1MzgzNDM4Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADKCiQwDQYJKoZIhvcN AQELBQADggEBAKQzW1HWQPcOeP7zDtolOly4wNAmmgvXDLO9FQAPNtmGdhRuk58d rtNJIyn2j7wYmA9zNzCSKKRb4QHbVL5cAv8XasXkfSoo3nA92x6FVRaJBd7/50Xm rF6wRu8eaj1kqoe/D8U8A7RdxssgqUrYjmck1E1oG5h4UubgRX2UaU+x8+llSkr8 WQwj/AoLhkpNil1ahZrzfqs/9vkDU0PX2ILOKWgyq7oIyGJSs3eq9lyV6L+bMPj7 PYPY0pSrjOD/LlO6CxzWOhZ6nanLqg8fK3X3jdIntDa/Xcy/zSHFXX3NK5mmUuGh KZoDJbdrrA3EZ8wLpUA4liC1OGiDBiSIdTk= -----END CERTIFICATE-----Generated at Wed May 13 01:11:02 2026 by rpki-client