$ rpki-client -vvf rpki-rsync.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3230322e31302e34342e302f32332d3233203d3e203538343837.roa File: 3230322e31302e34342e302f32332d3233203d3e203538343837.roa (raw, json) Hash identifier: 5gGU6Ludw6Y05TY5TZpCEOfkE+AhTpTefa6G6vry47k= Subject key identifier: 5F:F0:02:BE:A4:4B:2F:0C:5E:79:29:EF:C4:82:62:86:79:03:59:8D Certificate issuer: /CN=91D8B8BF467FE8EAC193DF4D263C87F5A91259A9 Certificate serial: 3349EFABAE215945E62873A5F47F1958FA73F17C Authority key identifier: 91:D8:B8:BF:46:7F:E8:EA:C1:93:DF:4D:26:3C:87:F5:A9:12:59:A9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91D8B8BF467FE8EAC193DF4D263C87F5A91259A9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3230322e31302e34342e302f32332d3233203d3e203538343837.roa Signing time: Sun 03 May 2026 02:22:52 +0000 ROA not before: Sun 03 May 2026 02:17:52 +0000 ROA not after: Sun 02 May 2027 02:22:52 +0000 asID: 58487 IP address blocks: 202.10.44.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/91D8B8BF467FE8EAC193DF4D263C87F5A91259A9.crl rsync://rpki-rsync.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/91D8B8BF467FE8EAC193DF4D263C87F5A91259A9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91D8B8BF467FE8EAC193DF4D263C87F5A91259A9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:49:ef:ab:ae:21:59:45:e6:28:73:a5:f4:7f:19:58:fa:73:f1:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91D8B8BF467FE8EAC193DF4D263C87F5A91259A9 Validity Not Before: May 3 02:17:52 2026 GMT Not After : May 2 02:22:52 2027 GMT Subject: CN=5FF002BEA44B2F0C5E7929EFC48262867903598D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:fc:b7:93:74:7b:93:b8:8c:c7:9f:42:85:8b: a7:b3:15:49:74:8a:cb:0d:f1:18:6d:3c:1d:1e:c5: 5e:ed:cd:a7:4c:ed:a8:3c:95:de:96:d1:cd:6d:f6: 97:69:17:bc:48:18:4a:00:a0:cc:01:7f:e2:f2:d7: 32:10:25:f0:9f:50:06:86:32:d4:67:13:77:22:c0: 88:7b:e1:72:c5:21:b9:58:63:e3:e5:d6:2d:39:63: c4:73:a7:5e:7e:c6:48:de:0b:28:48:d9:94:8e:c1: 49:d9:3f:21:fc:a2:c2:b6:8b:88:06:55:7a:c8:f6: b7:d2:87:c1:25:6a:c9:9f:e8:00:bb:7a:ac:a4:95: ab:bd:ae:7f:fa:1b:5e:78:e8:9d:cb:05:31:5b:65: 46:01:54:bd:43:58:45:a4:e9:91:54:f4:5b:8e:74: 5a:1b:1a:20:d7:a4:be:ee:51:f8:94:98:48:ba:0f: c9:c9:4e:95:3a:29:f1:f1:90:de:29:46:cf:3a:db: 02:a0:5a:bb:46:93:9e:27:64:54:07:a6:5c:a9:04: ba:b1:96:69:aa:d1:4a:35:24:ea:38:3f:5d:23:b3: 2c:a2:33:23:10:b4:5f:10:5a:a8:33:9c:69:2b:85: 3d:d6:10:d8:b8:30:9b:c2:34:22:42:ef:3a:41:c8: 23:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:F0:02:BE:A4:4B:2F:0C:5E:79:29:EF:C4:82:62:86:79:03:59:8D X509v3 Authority Key Identifier: keyid:91:D8:B8:BF:46:7F:E8:EA:C1:93:DF:4D:26:3C:87:F5:A9:12:59:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/91D8B8BF467FE8EAC193DF4D263C87F5A91259A9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91D8B8BF467FE8EAC193DF4D263C87F5A91259A9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3230322e31302e34342e302f32332d3233203d3e203538343837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.10.44.0/23 Signature Algorithm: sha256WithRSAEncryption 4e:e7:7d:bd:4b:0a:b1:1b:45:18:5c:70:b3:bf:a9:37:bf:ba: a0:ee:d3:03:d3:d0:e7:10:1d:f7:ab:87:50:15:c5:34:b2:1c: 7b:53:c4:b9:3e:0b:bb:97:4b:85:d4:24:63:12:6c:72:97:8b: ae:27:f5:a2:d4:3f:68:9d:6d:3a:50:78:68:04:43:80:bb:4a: 8f:4f:83:91:75:25:a6:ea:1a:f1:a2:23:0a:14:29:ab:6a:ef: b7:8f:eb:63:ba:0e:de:03:66:e7:a5:00:32:31:b4:0e:d5:89: a2:63:c4:c3:10:f1:13:63:3d:74:89:d6:95:e4:43:e4:0d:0f: 95:1b:19:fd:9c:db:a6:66:38:2e:e6:f8:89:38:36:bf:e7:90: 64:34:51:ac:cb:bc:ff:83:8e:48:be:6f:47:34:36:7b:61:4f: 0f:88:bb:0d:dd:40:64:20:7f:f8:96:f1:5e:75:ec:ae:c5:f1: 34:9e:4d:5b:ad:4f:64:e6:a9:94:e9:e6:57:3d:07:44:49:56: e9:dc:f6:91:6a:43:e6:2a:f2:e4:1d:38:86:c1:d8:87:d6:a3: 43:03:12:bc:8f:71:ae:f3:f5:e2:1b:aa:02:81:fc:85:f4:f4: 5c:1a:9b:6f:81:2f:ae:45:c5:ea:d5:d4:98:6d:56:fa:1f:89: 4a:1a:ad:ca -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUM0nvq64hWUXmKHOl9H8ZWPpz8XwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTFEOEI4QkY0NjdGRThFQUMxOTNERjREMjYzQzg3RjVB OTEyNTlBOTAeFw0yNjA1MDMwMjE3NTJaFw0yNzA1MDIwMjIyNTJaMDMxMTAvBgNV BAMTKDVGRjAwMkJFQTQ0QjJGMEM1RTc5MjlFRkM0ODI2Mjg2NzkwMzU5OEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDj/LeTdHuTuIzHn0KFi6ezFUl0 issN8RhtPB0exV7tzadM7ag8ld6W0c1t9pdpF7xIGEoAoMwBf+Ly1zIQJfCfUAaG MtRnE3ciwIh74XLFIblYY+Pl1i05Y8Rzp15+xkjeCyhI2ZSOwUnZPyH8osK2i4gG VXrI9rfSh8Elasmf6AC7eqyklau9rn/6G1546J3LBTFbZUYBVL1DWEWk6ZFU9FuO dFobGiDXpL7uUfiUmEi6D8nJTpU6KfHxkN4pRs862wKgWrtGk54nZFQHplypBLqx lmmq0Uo1JOo4P10jsyyiMyMQtF8QWqgznGkrhT3WENi4MJvCNCJC7zpByCN5AgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUX/ACvqRLLwxeeSnvxIJihnkDWY0wHwYDVR0j BBgwFoAUkdi4v0Z/6OrBk99NJjyH9akSWakwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmQ4ZjA2MGYtZTRiMy00YTRlLTk3ZmQtZjYxYWIxN2RlZWVkLzAvOTFEOEI4QkY0 NjdGRThFQUMxOTNERjREMjYzQzg3RjVBOTEyNTlBOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85MUQ4QjhCRjQ2N0ZFOEVBQzE5M0RGNEQyNjNDODdGNUE5MTI1 OUE5LmNlcjCBoQYIKwYBBQUHAQsEgZQwgZEwgY4GCCsGAQUFBzALhoGBcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzJkOGYwNjBmLWU0YjMtNGE0ZS05 N2ZkLWY2MWFiMTdkZWVlZC8wLzMyMzAzMjJlMzEzMDJlMzQzNDJlMzAyZjMyMzMy ZDMyMzMyMDNkM2UyMDM1MzgzNDM4Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAHKCiwwDQYJKoZIhvcN AQELBQADggEBAE7nfb1LCrEbRRhccLO/qTe/uqDu0wPT0OcQHferh1AVxTSyHHtT xLk+C7uXS4XUJGMSbHKXi64n9aLUP2idbTpQeGgEQ4C7So9Pg5F1JabqGvGiIwoU Katq77eP62O6Dt4DZuelADIxtA7ViaJjxMMQ8RNjPXSJ1pXkQ+QND5UbGf2c26Zm OC7m+Ik4Nr/nkGQ0UazLvP+Djki+b0c0NnthTw+Iuw3dQGQgf/iW8V517K7F8TSe TVutT2TmqZTp5lc9B0RJVunc9pFqQ+Yq8uQdOIbB2IfWo0MDEryPca7z9eIbqgKB /IX09Fwam2+BL65FxerV1JhtVvofiUoarco= -----END CERTIFICATE-----Generated at Tue May 12 22:56:36 2026 by rpki-client