$ rpki-client -vvf rpki-rsync.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3230322e31302e33382e302f32342d3234203d3e203538343837.roa File: 3230322e31302e33382e302f32342d3234203d3e203538343837.roa (raw, json) Hash identifier: BuU2j2Tzku9Y+Nv4sLTJnMWdagAd0n4W+YSomxmWS8w= Subject key identifier: EE:15:DE:75:62:FC:E4:01:57:FF:F6:ED:FC:BD:6F:33:9D:47:1D:4C Certificate issuer: /CN=91D8B8BF467FE8EAC193DF4D263C87F5A91259A9 Certificate serial: 24C2796C4CEB10DF91DC29223509F17067EEA1AF Authority key identifier: 91:D8:B8:BF:46:7F:E8:EA:C1:93:DF:4D:26:3C:87:F5:A9:12:59:A9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91D8B8BF467FE8EAC193DF4D263C87F5A91259A9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3230322e31302e33382e302f32342d3234203d3e203538343837.roa Signing time: Sun 03 May 2026 02:22:56 +0000 ROA not before: Sun 03 May 2026 02:17:56 +0000 ROA not after: Sun 02 May 2027 02:22:56 +0000 asID: 58487 IP address blocks: 202.10.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/91D8B8BF467FE8EAC193DF4D263C87F5A91259A9.crl rsync://rpki-rsync.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/91D8B8BF467FE8EAC193DF4D263C87F5A91259A9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91D8B8BF467FE8EAC193DF4D263C87F5A91259A9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:c2:79:6c:4c:eb:10:df:91:dc:29:22:35:09:f1:70:67:ee:a1:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91D8B8BF467FE8EAC193DF4D263C87F5A91259A9 Validity Not Before: May 3 02:17:56 2026 GMT Not After : May 2 02:22:56 2027 GMT Subject: CN=EE15DE7562FCE40157FFF6EDFCBD6F339D471D4C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:a3:4a:99:41:76:4f:2c:ac:3d:7c:a4:b1:dc: 04:e8:30:29:80:75:3d:78:d3:30:cc:81:79:08:ff: c1:75:7e:c8:d1:7f:67:1e:f8:c3:31:8e:aa:88:1f: 39:7b:36:90:d0:ea:16:55:a8:7c:a7:23:4e:51:4f: b1:ce:ea:3d:ac:64:d7:84:4c:12:a3:0a:24:1b:30: e1:a5:e6:5f:0f:af:b9:26:ea:4d:95:13:f1:7e:bd: 3f:f6:ac:fd:20:4d:92:9c:29:77:4d:9a:47:35:64: f8:bf:20:16:17:81:a6:ff:2d:bd:58:59:f7:c3:f5: 57:83:d0:71:8b:ef:5a:a9:0b:36:b9:09:3b:8f:8f: 24:5d:1c:bc:8c:2a:bf:29:a5:de:9e:1c:18:b6:90: 3a:d0:b9:d2:75:88:c0:45:0a:d7:8e:ed:25:9a:3e: f2:4a:6f:ff:09:30:41:eb:3d:a9:ba:72:51:54:78: 27:bc:cf:29:76:ad:39:e4:68:b3:78:df:3f:0c:87: d1:65:63:8d:01:00:1d:bf:61:1f:c3:50:3d:f2:3c: d5:a0:f9:c7:ed:cd:24:69:4e:a9:fe:e3:07:43:40: c7:56:b6:1c:76:69:d2:58:00:68:30:2b:eb:bc:5a: dd:70:47:83:29:c3:10:4b:4b:7e:36:54:8c:88:bb: e1:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:15:DE:75:62:FC:E4:01:57:FF:F6:ED:FC:BD:6F:33:9D:47:1D:4C X509v3 Authority Key Identifier: keyid:91:D8:B8:BF:46:7F:E8:EA:C1:93:DF:4D:26:3C:87:F5:A9:12:59:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/91D8B8BF467FE8EAC193DF4D263C87F5A91259A9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91D8B8BF467FE8EAC193DF4D263C87F5A91259A9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3230322e31302e33382e302f32342d3234203d3e203538343837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.10.38.0/24 Signature Algorithm: sha256WithRSAEncryption 15:1c:00:8d:b3:a4:c4:1f:c3:8a:ea:71:53:dd:c8:ac:bb:4e: 5c:e6:b0:fd:8f:26:76:29:04:f9:ac:d2:a7:f8:c9:56:4b:26: 1a:7c:0d:46:9a:63:ee:9a:b4:3d:83:d5:b8:dc:9e:97:33:28: b8:f3:7c:b8:b4:ce:44:9b:51:bf:e0:47:88:a7:13:63:aa:65: 90:4c:93:1d:f5:3e:89:ec:0a:d2:49:39:ab:d2:e2:b5:11:99: b9:84:17:ca:28:aa:cc:d2:23:b6:cb:61:36:86:0d:36:86:dc: 15:24:4f:96:5e:8a:c7:00:23:49:72:60:16:86:75:dc:cf:29: d2:bf:e9:0d:ec:c3:6e:ab:c0:70:34:92:32:61:b3:f6:e6:95: 6b:1b:83:78:a7:fa:7c:aa:ad:9f:1c:b8:ca:94:4a:ee:e0:62: 06:66:c8:fa:66:81:f0:23:87:e6:81:74:ca:eb:23:02:ad:60: 5d:a0:35:df:a7:0d:cf:56:35:33:df:4b:10:f2:47:7e:93:18: 80:74:74:ff:6e:03:86:b6:14:5c:09:75:ba:fd:2a:5d:83:73: 6c:8e:9a:6e:f5:a8:70:a7:05:9c:86:a1:b9:a4:cc:00:63:5c: de:7d:23:43:6b:cd:af:6f:55:ad:91:1a:2d:09:ad:16:d5:dc: 29:f0:f2:e6 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUJMJ5bEzrEN+R3CkiNQnxcGfuoa8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTFEOEI4QkY0NjdGRThFQUMxOTNERjREMjYzQzg3RjVB OTEyNTlBOTAeFw0yNjA1MDMwMjE3NTZaFw0yNzA1MDIwMjIyNTZaMDMxMTAvBgNV BAMTKEVFMTVERTc1NjJGQ0U0MDE1N0ZGRjZFREZDQkQ2RjMzOUQ0NzFENEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCHo0qZQXZPLKw9fKSx3AToMCmA dT140zDMgXkI/8F1fsjRf2ce+MMxjqqIHzl7NpDQ6hZVqHynI05RT7HO6j2sZNeE TBKjCiQbMOGl5l8Pr7km6k2VE/F+vT/2rP0gTZKcKXdNmkc1ZPi/IBYXgab/Lb1Y WffD9VeD0HGL71qpCza5CTuPjyRdHLyMKr8ppd6eHBi2kDrQudJ1iMBFCteO7SWa PvJKb/8JMEHrPam6clFUeCe8zyl2rTnkaLN43z8Mh9FlY40BAB2/YR/DUD3yPNWg +cftzSRpTqn+4wdDQMdWthx2adJYAGgwK+u8Wt1wR4MpwxBLS342VIyIu+H1AgMB AAGjggIwMIICLDAdBgNVHQ4EFgQU7hXedWL85AFX//bt/L1vM51HHUwwHwYDVR0j BBgwFoAUkdi4v0Z/6OrBk99NJjyH9akSWakwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmQ4ZjA2MGYtZTRiMy00YTRlLTk3ZmQtZjYxYWIxN2RlZWVkLzAvOTFEOEI4QkY0 NjdGRThFQUMxOTNERjREMjYzQzg3RjVBOTEyNTlBOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85MUQ4QjhCRjQ2N0ZFOEVBQzE5M0RGNEQyNjNDODdGNUE5MTI1 OUE5LmNlcjCBoQYIKwYBBQUHAQsEgZQwgZEwgY4GCCsGAQUFBzALhoGBcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzJkOGYwNjBmLWU0YjMtNGE0ZS05 N2ZkLWY2MWFiMTdkZWVlZC8wLzMyMzAzMjJlMzEzMDJlMzMzODJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDM1MzgzNDM4Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADKCiYwDQYJKoZIhvcN AQELBQADggEBABUcAI2zpMQfw4rqcVPdyKy7TlzmsP2PJnYpBPms0qf4yVZLJhp8 DUaaY+6atD2D1bjcnpczKLjzfLi0zkSbUb/gR4inE2OqZZBMkx31PonsCtJJOavS 4rURmbmEF8ooqszSI7bLYTaGDTaG3BUkT5ZeiscAI0lyYBaGddzPKdK/6Q3sw26r wHA0kjJhs/bmlWsbg3in+nyqrZ8cuMqUSu7gYgZmyPpmgfAjh+aBdMrrIwKtYF2g Nd+nDc9WNTPfSxDyR36TGIB0dP9uA4a2FFwJdbr9Kl2Dc2yOmm71qHCnBZyGobmk zABjXN59I0Nrza9vVa2RGi0JrRbV3Cnw8uY= -----END CERTIFICATE-----Generated at Wed May 13 01:14:20 2026 by rpki-client