$ rpki-client -vvf rpki-rsync.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3230322e31302e34322e302f32342d3234203d3e203538343837.roa File: 3230322e31302e34322e302f32342d3234203d3e203538343837.roa (raw, json) Hash identifier: iq+TPsb2JWtOfSocldqSjmo2icbhTwmo72t7zi5fLU4= Subject key identifier: 11:59:78:85:AB:E9:61:B1:A4:4D:73:D0:B9:DF:02:AA:F2:6B:24:DB Certificate issuer: /CN=91D8B8BF467FE8EAC193DF4D263C87F5A91259A9 Certificate serial: 58C9E3A96A5F4245215ABC5474AA1F5FF9B3E985 Authority key identifier: 91:D8:B8:BF:46:7F:E8:EA:C1:93:DF:4D:26:3C:87:F5:A9:12:59:A9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91D8B8BF467FE8EAC193DF4D263C87F5A91259A9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3230322e31302e34322e302f32342d3234203d3e203538343837.roa Signing time: Sun 03 May 2026 02:22:54 +0000 ROA not before: Sun 03 May 2026 02:17:54 +0000 ROA not after: Sun 02 May 2027 02:22:54 +0000 asID: 58487 IP address blocks: 202.10.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/91D8B8BF467FE8EAC193DF4D263C87F5A91259A9.crl rsync://rpki-rsync.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/91D8B8BF467FE8EAC193DF4D263C87F5A91259A9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91D8B8BF467FE8EAC193DF4D263C87F5A91259A9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:c9:e3:a9:6a:5f:42:45:21:5a:bc:54:74:aa:1f:5f:f9:b3:e9:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91D8B8BF467FE8EAC193DF4D263C87F5A91259A9 Validity Not Before: May 3 02:17:54 2026 GMT Not After : May 2 02:22:54 2027 GMT Subject: CN=11597885ABE961B1A44D73D0B9DF02AAF26B24DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:74:7b:59:74:bb:f4:17:97:89:75:d7:24:49: 67:be:bd:65:bc:e9:c1:b2:9c:8a:e3:e9:9d:4d:b5: 43:b9:43:3d:7b:0c:91:ea:03:d9:be:32:c8:26:d8: 00:bb:70:a4:92:49:4f:97:55:11:a1:f4:85:70:86: bf:bd:db:a7:61:c3:c3:d1:d0:28:29:af:8a:f2:ea: e4:1a:10:d4:d9:94:b9:42:40:e5:eb:a0:85:52:20: 59:54:86:f1:e9:bf:e0:72:b4:5c:1f:7e:89:65:e9: 30:8f:7d:73:eb:d2:01:b2:e9:2f:0f:cb:c6:dd:e0: 0f:99:f6:bd:20:54:1f:11:f5:29:fc:48:0b:70:6b: 44:bc:67:b0:17:03:21:49:5e:cc:0b:8c:3b:f1:63: 93:b0:1e:41:08:9e:95:80:2d:db:4d:38:d2:e7:d9: 57:86:8e:bd:f7:4b:c7:94:93:76:3e:cc:29:75:2f: 62:5c:ba:83:ea:63:33:5e:68:50:96:2a:d9:5b:8d: f3:3c:92:86:3b:94:4d:c2:0b:40:c1:8c:c8:de:e1: 70:77:8e:4a:9f:89:bb:33:ea:da:11:a2:0c:94:3f: 79:50:98:e6:8f:cd:62:5f:71:ff:4a:fb:3f:b4:48: 53:fc:f4:24:f7:08:a9:26:4d:d1:d1:18:36:1d:79: de:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:59:78:85:AB:E9:61:B1:A4:4D:73:D0:B9:DF:02:AA:F2:6B:24:DB X509v3 Authority Key Identifier: keyid:91:D8:B8:BF:46:7F:E8:EA:C1:93:DF:4D:26:3C:87:F5:A9:12:59:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/91D8B8BF467FE8EAC193DF4D263C87F5A91259A9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91D8B8BF467FE8EAC193DF4D263C87F5A91259A9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3230322e31302e34322e302f32342d3234203d3e203538343837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.10.42.0/24 Signature Algorithm: sha256WithRSAEncryption 8e:4a:7d:5c:a5:6c:e5:f4:25:e7:c9:bb:0c:c9:03:23:81:ce: d4:cb:40:68:f9:79:4f:09:0d:00:92:d8:38:a3:a8:54:ab:4a: 4d:a9:d2:ad:fe:be:e8:36:de:5b:f7:8f:53:66:99:56:6b:46: c5:eb:dc:84:db:f1:72:8a:3f:2d:51:73:23:b8:8f:57:17:5c: 9d:b0:94:f3:57:5a:3b:eb:1c:85:2a:2e:d5:be:68:2a:3e:cd: 94:a1:92:43:53:21:65:b2:8f:76:2b:81:bd:1d:c8:d3:1f:d1: 73:0b:0e:24:2f:23:cc:12:27:b0:61:f5:d4:e8:d4:62:7f:e4: 99:95:d7:ab:2a:18:aa:9c:e3:23:b9:04:a4:ad:16:44:f3:9c: 5a:6f:40:de:be:ec:10:e5:89:36:f5:5a:1f:65:cc:9e:c4:c7: 0e:6d:26:ba:87:20:45:8a:1b:bc:f1:d8:83:2f:8c:0c:ff:2a: 52:62:55:46:6a:38:77:4a:86:4d:97:70:c3:7d:e4:fe:02:e2: f4:4f:ce:9b:7f:07:75:7c:0d:4d:72:d1:2f:b3:55:3d:55:39: 50:db:be:e6:e0:68:11:60:e2:59:6d:0f:7b:bb:3f:44:dc:15: ed:f5:69:12:e3:02:95:58:0c:f6:08:a7:d7:63:11:06:9e:f5: 15:e2:80:e0 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUWMnjqWpfQkUhWrxUdKofX/mz6YUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTFEOEI4QkY0NjdGRThFQUMxOTNERjREMjYzQzg3RjVB OTEyNTlBOTAeFw0yNjA1MDMwMjE3NTRaFw0yNzA1MDIwMjIyNTRaMDMxMTAvBgNV BAMTKDExNTk3ODg1QUJFOTYxQjFBNDRENzNEMEI5REYwMkFBRjI2QjI0REIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1dHtZdLv0F5eJddckSWe+vWW8 6cGynIrj6Z1NtUO5Qz17DJHqA9m+Msgm2AC7cKSSSU+XVRGh9IVwhr+926dhw8PR 0Cgpr4ry6uQaENTZlLlCQOXroIVSIFlUhvHpv+BytFwffoll6TCPfXPr0gGy6S8P y8bd4A+Z9r0gVB8R9Sn8SAtwa0S8Z7AXAyFJXswLjDvxY5OwHkEInpWALdtNONLn 2VeGjr33S8eUk3Y+zCl1L2JcuoPqYzNeaFCWKtlbjfM8koY7lE3CC0DBjMje4XB3 jkqfibsz6toRogyUP3lQmOaPzWJfcf9K+z+0SFP89CT3CKkmTdHRGDYded6xAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUEVl4havpYbGkTXPQud8CqvJrJNswHwYDVR0j BBgwFoAUkdi4v0Z/6OrBk99NJjyH9akSWakwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmQ4ZjA2MGYtZTRiMy00YTRlLTk3ZmQtZjYxYWIxN2RlZWVkLzAvOTFEOEI4QkY0 NjdGRThFQUMxOTNERjREMjYzQzg3RjVBOTEyNTlBOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85MUQ4QjhCRjQ2N0ZFOEVBQzE5M0RGNEQyNjNDODdGNUE5MTI1 OUE5LmNlcjCBoQYIKwYBBQUHAQsEgZQwgZEwgY4GCCsGAQUFBzALhoGBcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzJkOGYwNjBmLWU0YjMtNGE0ZS05 N2ZkLWY2MWFiMTdkZWVlZC8wLzMyMzAzMjJlMzEzMDJlMzQzMjJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDM1MzgzNDM4Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADKCiowDQYJKoZIhvcN AQELBQADggEBAI5KfVylbOX0JefJuwzJAyOBztTLQGj5eU8JDQCS2DijqFSrSk2p 0q3+vug23lv3j1NmmVZrRsXr3ITb8XKKPy1RcyO4j1cXXJ2wlPNXWjvrHIUqLtW+ aCo+zZShkkNTIWWyj3Yrgb0dyNMf0XMLDiQvI8wSJ7Bh9dTo1GJ/5JmV16sqGKqc 4yO5BKStFkTznFpvQN6+7BDliTb1Wh9lzJ7Exw5tJrqHIEWKG7zx2IMvjAz/KlJi VUZqOHdKhk2XcMN95P4C4vRPzpt/B3V8DU1y0S+zVT1VOVDbvubgaBFg4lltD3u7 P0TcFe31aRLjApVYDPYIp9djEQae9RXigOA= -----END CERTIFICATE-----Generated at Wed May 13 00:44:24 2026 by rpki-client