$ rpki-client -vvf rpki-rsync.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3230322e31302e34322e302f32332d3233203d3e203538343837.roa File: 3230322e31302e34322e302f32332d3233203d3e203538343837.roa (raw, json) Hash identifier: zIT7bQQsfuFKgRAuHb2rpJgo4iUY2OkkcZskjqMXX/8= Subject key identifier: 27:4D:8B:B3:66:E8:76:B0:A4:11:3B:6C:80:15:E9:66:14:47:D7:45 Certificate issuer: /CN=91D8B8BF467FE8EAC193DF4D263C87F5A91259A9 Certificate serial: 5C5109501BAE0502E1A07F7BB3B58CD646CE53FD Authority key identifier: 91:D8:B8:BF:46:7F:E8:EA:C1:93:DF:4D:26:3C:87:F5:A9:12:59:A9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91D8B8BF467FE8EAC193DF4D263C87F5A91259A9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3230322e31302e34322e302f32332d3233203d3e203538343837.roa Signing time: Sun 03 May 2026 02:22:51 +0000 ROA not before: Sun 03 May 2026 02:17:51 +0000 ROA not after: Sun 02 May 2027 02:22:51 +0000 asID: 58487 IP address blocks: 202.10.42.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/91D8B8BF467FE8EAC193DF4D263C87F5A91259A9.crl rsync://rpki-rsync.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/91D8B8BF467FE8EAC193DF4D263C87F5A91259A9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91D8B8BF467FE8EAC193DF4D263C87F5A91259A9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:51:09:50:1b:ae:05:02:e1:a0:7f:7b:b3:b5:8c:d6:46:ce:53:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91D8B8BF467FE8EAC193DF4D263C87F5A91259A9 Validity Not Before: May 3 02:17:51 2026 GMT Not After : May 2 02:22:51 2027 GMT Subject: CN=274D8BB366E876B0A4113B6C8015E9661447D745 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:56:40:ce:95:cd:7c:78:bc:36:72:6b:69:05: 6c:de:7b:f2:85:10:fd:43:2b:cb:88:64:c2:3f:9f: 9a:d7:b5:d7:de:82:64:9a:29:d6:fd:93:b9:21:f6: 40:6d:b7:db:f4:54:28:37:7e:00:7e:42:b2:86:08: d3:7b:d3:57:a1:5d:c7:51:a3:6e:63:c9:ee:78:2c: b5:21:7d:8b:85:3d:76:29:7a:1a:d5:af:c7:11:c1: 08:fe:85:f9:c3:d3:17:ca:2d:46:c3:1a:47:0c:83: 5c:8d:c8:a9:2b:99:5c:fe:8a:d4:49:80:bd:98:0c: a4:2a:ec:6f:bc:7d:32:a7:fb:4d:3f:fa:47:1b:a6: 2f:61:ab:57:65:55:a6:e1:a7:fc:b9:a9:67:86:f9: 4e:31:e9:e2:ca:67:a5:85:56:5b:5c:cb:fd:36:b2: 34:90:64:fc:35:e4:97:8c:ff:0a:f4:29:b0:76:e6: 63:f7:22:ac:81:16:36:43:2b:37:8d:49:6d:0a:67: d2:30:da:22:69:90:ce:64:98:4a:a9:71:46:f8:30: 5e:c9:b0:29:a0:3b:a5:2a:29:ea:95:0f:e1:da:9e: d5:e3:8c:03:8a:70:f3:8d:86:fd:bd:d4:64:02:f3: 16:1e:2e:1d:72:18:bd:53:5b:3a:7a:a4:44:23:fc: 7f:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:4D:8B:B3:66:E8:76:B0:A4:11:3B:6C:80:15:E9:66:14:47:D7:45 X509v3 Authority Key Identifier: keyid:91:D8:B8:BF:46:7F:E8:EA:C1:93:DF:4D:26:3C:87:F5:A9:12:59:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/91D8B8BF467FE8EAC193DF4D263C87F5A91259A9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91D8B8BF467FE8EAC193DF4D263C87F5A91259A9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3230322e31302e34322e302f32332d3233203d3e203538343837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.10.42.0/23 Signature Algorithm: sha256WithRSAEncryption 7c:90:ca:44:e0:b1:49:76:5d:52:c2:a1:62:3a:14:a7:49:f3: aa:57:04:3b:0b:91:7b:31:8b:09:27:33:73:35:8b:01:a1:c1: c2:13:92:d7:b9:9d:fb:28:84:fa:02:33:f2:e2:60:c3:52:56: b1:eb:a8:9c:09:06:de:77:2b:f2:60:15:bd:f2:aa:a9:36:5b: f2:9d:53:d0:58:e5:a4:8c:75:b5:4c:4e:21:4e:b0:f4:55:e6: 55:8f:03:3e:e7:82:61:c4:2a:e4:38:c6:f2:91:9a:a8:e7:58: 92:79:5a:12:f2:22:98:16:10:8f:63:c2:e4:71:eb:6a:38:a4: ee:b0:9f:19:4b:7a:d1:ae:bc:ca:61:44:de:e3:ee:71:e5:e3: 65:a5:e3:4d:fe:cb:85:63:a6:23:a7:8d:1a:a5:54:ec:00:5b: 01:ca:d2:f8:d7:c0:08:13:65:38:dc:34:e8:dd:c2:06:d5:26: 33:d0:b7:18:47:a9:81:93:e0:5e:5d:20:a1:e8:d8:73:7f:6e: b2:19:fd:27:61:10:57:f5:c8:e1:6c:6b:ad:fe:b6:2e:ea:76: 00:55:cc:5c:ca:9d:36:70:c5:4c:75:42:f5:87:61:b2:47:15: 32:d1:0a:c9:5d:0b:c6:8d:41:c0:57:60:cd:14:9d:cb:8e:a0: 91:c3:ee:06 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUXFEJUBuuBQLhoH97s7WM1kbOU/0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTFEOEI4QkY0NjdGRThFQUMxOTNERjREMjYzQzg3RjVB OTEyNTlBOTAeFw0yNjA1MDMwMjE3NTFaFw0yNzA1MDIwMjIyNTFaMDMxMTAvBgNV BAMTKDI3NEQ4QkIzNjZFODc2QjBBNDExM0I2QzgwMTVFOTY2MTQ0N0Q3NDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWVkDOlc18eLw2cmtpBWzee/KF EP1DK8uIZMI/n5rXtdfegmSaKdb9k7kh9kBtt9v0VCg3fgB+QrKGCNN701ehXcdR o25jye54LLUhfYuFPXYpehrVr8cRwQj+hfnD0xfKLUbDGkcMg1yNyKkrmVz+itRJ gL2YDKQq7G+8fTKn+00/+kcbpi9hq1dlVabhp/y5qWeG+U4x6eLKZ6WFVltcy/02 sjSQZPw15JeM/wr0KbB25mP3IqyBFjZDKzeNSW0KZ9Iw2iJpkM5kmEqpcUb4MF7J sCmgO6UqKeqVD+HantXjjAOKcPONhv291GQC8xYeLh1yGL1TWzp6pEQj/H9/AgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUJ02Ls2bodrCkETtsgBXpZhRH10UwHwYDVR0j BBgwFoAUkdi4v0Z/6OrBk99NJjyH9akSWakwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmQ4ZjA2MGYtZTRiMy00YTRlLTk3ZmQtZjYxYWIxN2RlZWVkLzAvOTFEOEI4QkY0 NjdGRThFQUMxOTNERjREMjYzQzg3RjVBOTEyNTlBOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85MUQ4QjhCRjQ2N0ZFOEVBQzE5M0RGNEQyNjNDODdGNUE5MTI1 OUE5LmNlcjCBoQYIKwYBBQUHAQsEgZQwgZEwgY4GCCsGAQUFBzALhoGBcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzJkOGYwNjBmLWU0YjMtNGE0ZS05 N2ZkLWY2MWFiMTdkZWVlZC8wLzMyMzAzMjJlMzEzMDJlMzQzMjJlMzAyZjMyMzMy ZDMyMzMyMDNkM2UyMDM1MzgzNDM4Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAHKCiowDQYJKoZIhvcN AQELBQADggEBAHyQykTgsUl2XVLCoWI6FKdJ86pXBDsLkXsxiwknM3M1iwGhwcIT kte5nfsohPoCM/LiYMNSVrHrqJwJBt53K/JgFb3yqqk2W/KdU9BY5aSMdbVMTiFO sPRV5lWPAz7ngmHEKuQ4xvKRmqjnWJJ5WhLyIpgWEI9jwuRx62o4pO6wnxlLetGu vMphRN7j7nHl42Wl403+y4VjpiOnjRqlVOwAWwHK0vjXwAgTZTjcNOjdwgbVJjPQ txhHqYGT4F5dIKHo2HN/brIZ/SdhEFf1yOFsa63+ti7qdgBVzFzKnTZwxUx1QvWH YbJHFTLRCsldC8aNQcBXYM0UncuOoJHD7gY= -----END CERTIFICATE-----Generated at Tue May 12 23:45:44 2026 by rpki-client