$ rpki-client -vvf rpki-rsync.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3230322e31302e33372e302f32342d3234203d3e203538343837.roa File: 3230322e31302e33372e302f32342d3234203d3e203538343837.roa (raw, json) Hash identifier: 9q8vmFKL7oGsGWkB1BKhhu/P2e7OqlLbcokrLiJELeQ= Subject key identifier: B2:9A:0F:E9:BA:A6:16:75:D9:8F:B1:7A:AD:BB:32:10:C3:5D:C8:10 Certificate issuer: /CN=91D8B8BF467FE8EAC193DF4D263C87F5A91259A9 Certificate serial: 0E55D5B0B197B10C3211EF0471B137B15565FCAF Authority key identifier: 91:D8:B8:BF:46:7F:E8:EA:C1:93:DF:4D:26:3C:87:F5:A9:12:59:A9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91D8B8BF467FE8EAC193DF4D263C87F5A91259A9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3230322e31302e33372e302f32342d3234203d3e203538343837.roa Signing time: Sun 03 May 2026 02:22:51 +0000 ROA not before: Sun 03 May 2026 02:17:51 +0000 ROA not after: Sun 02 May 2027 02:22:51 +0000 asID: 58487 IP address blocks: 202.10.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/91D8B8BF467FE8EAC193DF4D263C87F5A91259A9.crl rsync://rpki-rsync.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/91D8B8BF467FE8EAC193DF4D263C87F5A91259A9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91D8B8BF467FE8EAC193DF4D263C87F5A91259A9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:55:d5:b0:b1:97:b1:0c:32:11:ef:04:71:b1:37:b1:55:65:fc:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91D8B8BF467FE8EAC193DF4D263C87F5A91259A9 Validity Not Before: May 3 02:17:51 2026 GMT Not After : May 2 02:22:51 2027 GMT Subject: CN=B29A0FE9BAA61675D98FB17AADBB3210C35DC810 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:e1:59:b6:d0:34:47:13:22:45:78:76:38:0d: 7e:51:c4:d4:13:e0:5b:57:bc:b7:6e:dc:3d:48:bb: a9:e5:23:1d:48:c4:ea:ae:cf:f9:54:53:b7:fa:9a: b3:46:b0:14:9c:1c:0f:11:8c:89:0e:ee:f1:ae:e9: 0d:7d:de:5e:0a:35:66:18:c6:9e:8d:03:8d:e1:22: 73:a9:ca:11:13:e4:d5:5c:7b:57:92:5c:7a:4d:a6: 80:3d:42:ff:42:9a:e2:d6:c4:af:ed:a7:db:2a:f9: 29:79:24:73:97:bf:da:7b:0d:9c:65:fd:20:cb:43: 37:2b:92:a0:16:48:f8:a5:f1:48:89:26:d4:b7:6e: 1e:d4:31:2a:4f:38:e4:ae:be:bd:59:76:7d:84:14: 54:c1:e5:58:b1:ad:ce:4f:d1:aa:4f:bc:d1:22:e9: f1:38:a8:a3:60:47:60:80:38:e6:3a:d6:63:fe:46: ad:9f:32:13:86:1c:86:26:dc:2a:5e:17:05:59:e0: 63:b8:54:c4:8d:d8:78:ec:b1:05:70:5a:3f:72:17: be:a6:30:83:62:23:fd:fa:30:96:29:e3:86:5a:8b: e0:f0:79:08:13:44:88:d1:38:39:f7:31:40:57:5b: 57:18:a9:33:2a:6e:96:31:9a:95:24:c9:0f:84:ca: a6:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:9A:0F:E9:BA:A6:16:75:D9:8F:B1:7A:AD:BB:32:10:C3:5D:C8:10 X509v3 Authority Key Identifier: keyid:91:D8:B8:BF:46:7F:E8:EA:C1:93:DF:4D:26:3C:87:F5:A9:12:59:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/91D8B8BF467FE8EAC193DF4D263C87F5A91259A9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91D8B8BF467FE8EAC193DF4D263C87F5A91259A9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3230322e31302e33372e302f32342d3234203d3e203538343837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.10.37.0/24 Signature Algorithm: sha256WithRSAEncryption 41:29:a6:c6:dd:51:2f:de:f9:9f:ab:eb:8b:57:56:2d:d5:08: a5:e6:16:01:2b:9d:c6:7e:c0:c2:89:8d:d0:ec:6a:be:33:7f: 0f:07:d8:ca:bf:ba:71:06:e5:94:41:10:b2:5f:e1:d2:73:33: 16:c2:d3:85:b3:2e:ac:a6:29:df:a6:57:5f:4a:37:60:04:b4: 37:48:f2:1a:db:7e:4b:67:13:4d:f7:3c:c7:1f:12:82:c9:2e: c9:f1:ed:e4:c9:c7:fa:a0:69:3f:45:e9:c2:27:50:96:45:70: da:79:f2:6c:cc:2a:f7:27:a0:b4:6f:91:d3:8a:05:34:8b:4d: 5a:34:62:16:7f:b8:ff:bc:90:f2:79:e1:e0:bd:e9:6b:0c:a8: b6:58:9f:cc:f4:b0:d4:7c:4b:ab:bb:38:ec:63:f8:70:24:c9: b7:95:57:aa:7b:cf:61:e9:7e:26:9b:b9:56:42:56:b2:75:89: 60:6b:fe:43:1b:97:17:f1:c3:c3:b9:5c:61:ad:3d:43:56:4d: ed:d2:37:c3:8b:42:d4:f0:92:1a:d4:30:26:5e:d6:98:ed:ab: 1a:66:2d:19:20:50:6f:48:29:2e:f0:e5:87:98:08:34:f1:5a: b6:b3:42:3f:4c:ec:4d:2d:71:52:f5:ad:92:12:79:ce:aa:a5: 52:c5:23:2a -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUDlXVsLGXsQwyEe8EcbE3sVVl/K8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTFEOEI4QkY0NjdGRThFQUMxOTNERjREMjYzQzg3RjVB OTEyNTlBOTAeFw0yNjA1MDMwMjE3NTFaFw0yNzA1MDIwMjIyNTFaMDMxMTAvBgNV BAMTKEIyOUEwRkU5QkFBNjE2NzVEOThGQjE3QUFEQkIzMjEwQzM1REM4MTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC94Vm20DRHEyJFeHY4DX5RxNQT 4FtXvLdu3D1Iu6nlIx1IxOquz/lUU7f6mrNGsBScHA8RjIkO7vGu6Q193l4KNWYY xp6NA43hInOpyhET5NVce1eSXHpNpoA9Qv9CmuLWxK/tp9sq+Sl5JHOXv9p7DZxl /SDLQzcrkqAWSPil8UiJJtS3bh7UMSpPOOSuvr1Zdn2EFFTB5Vixrc5P0apPvNEi 6fE4qKNgR2CAOOY61mP+Rq2fMhOGHIYm3CpeFwVZ4GO4VMSN2HjssQVwWj9yF76m MINiI/36MJYp44Zai+DweQgTRIjRODn3MUBXW1cYqTMqbpYxmpUkyQ+EyqaZAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUspoP6bqmFnXZj7F6rbsyEMNdyBAwHwYDVR0j BBgwFoAUkdi4v0Z/6OrBk99NJjyH9akSWakwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmQ4ZjA2MGYtZTRiMy00YTRlLTk3ZmQtZjYxYWIxN2RlZWVkLzAvOTFEOEI4QkY0 NjdGRThFQUMxOTNERjREMjYzQzg3RjVBOTEyNTlBOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85MUQ4QjhCRjQ2N0ZFOEVBQzE5M0RGNEQyNjNDODdGNUE5MTI1 OUE5LmNlcjCBoQYIKwYBBQUHAQsEgZQwgZEwgY4GCCsGAQUFBzALhoGBcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzJkOGYwNjBmLWU0YjMtNGE0ZS05 N2ZkLWY2MWFiMTdkZWVlZC8wLzMyMzAzMjJlMzEzMDJlMzMzNzJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDM1MzgzNDM4Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADKCiUwDQYJKoZIhvcN AQELBQADggEBAEEppsbdUS/e+Z+r64tXVi3VCKXmFgErncZ+wMKJjdDsar4zfw8H 2Mq/unEG5ZRBELJf4dJzMxbC04WzLqymKd+mV19KN2AEtDdI8hrbfktnE033PMcf EoLJLsnx7eTJx/qgaT9F6cInUJZFcNp58mzMKvcnoLRvkdOKBTSLTVo0YhZ/uP+8 kPJ54eC96WsMqLZYn8z0sNR8S6u7OOxj+HAkybeVV6p7z2HpfiabuVZCVrJ1iWBr /kMblxfxw8O5XGGtPUNWTe3SN8OLQtTwkhrUMCZe1pjtqxpmLRkgUG9IKS7w5YeY CDTxWrazQj9M7E0tcVL1rZISec6qpVLFIyo= -----END CERTIFICATE-----Generated at Wed May 13 01:11:24 2026 by rpki-client