$ rpki-client -vvf rpki-rsync.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3230322e31302e34362e302f32342d3234203d3e203538343837.roa File: 3230322e31302e34362e302f32342d3234203d3e203538343837.roa (raw, json) Hash identifier: qBJmiieahiSmBerrZ+MrOlgczH6EjYj5/TLPwBkeogE= Subject key identifier: 67:0A:36:52:25:42:D2:52:75:74:C1:A8:5A:58:6D:98:18:7A:8E:17 Certificate issuer: /CN=91D8B8BF467FE8EAC193DF4D263C87F5A91259A9 Certificate serial: 2BEE4C486DEE0CF5A381E0ACA883CEA88D3FC831 Authority key identifier: 91:D8:B8:BF:46:7F:E8:EA:C1:93:DF:4D:26:3C:87:F5:A9:12:59:A9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91D8B8BF467FE8EAC193DF4D263C87F5A91259A9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3230322e31302e34362e302f32342d3234203d3e203538343837.roa Signing time: Sun 03 May 2026 02:22:58 +0000 ROA not before: Sun 03 May 2026 02:17:58 +0000 ROA not after: Sun 02 May 2027 02:22:58 +0000 asID: 58487 IP address blocks: 202.10.46.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/91D8B8BF467FE8EAC193DF4D263C87F5A91259A9.crl rsync://rpki-rsync.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/91D8B8BF467FE8EAC193DF4D263C87F5A91259A9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91D8B8BF467FE8EAC193DF4D263C87F5A91259A9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:ee:4c:48:6d:ee:0c:f5:a3:81:e0:ac:a8:83:ce:a8:8d:3f:c8:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91D8B8BF467FE8EAC193DF4D263C87F5A91259A9 Validity Not Before: May 3 02:17:58 2026 GMT Not After : May 2 02:22:58 2027 GMT Subject: CN=670A36522542D2527574C1A85A586D98187A8E17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:54:35:38:a4:94:18:8d:21:4f:33:77:fe:49: b0:29:12:8a:b3:e4:8c:65:25:b1:61:f9:9c:fe:f5: 17:1b:1e:e7:3c:b5:6b:18:1b:3c:e7:29:fd:f6:be: 88:f0:82:de:cf:74:d1:ed:b7:9d:92:25:a9:2c:84: 60:11:24:1d:46:21:27:be:89:ff:09:08:2d:3b:22: 97:45:eb:dc:e2:e9:19:25:21:85:c5:63:c2:e1:4f: 68:39:15:33:bb:ed:b6:66:96:da:04:f1:8d:c1:bd: f8:1b:e0:5b:ca:37:50:9b:ca:d0:f4:fe:c4:07:77: 6d:b8:40:9b:be:e6:f7:30:75:7b:25:f4:f3:9e:f4: e9:90:37:33:1e:32:91:37:66:0a:4a:c8:38:3b:4a: 70:9c:b5:0d:69:c1:58:f9:e8:52:db:e2:28:17:47: 5f:99:a6:37:d1:b8:12:27:38:8b:f3:f9:9e:8b:1f: 80:2d:bc:97:7b:44:f5:bd:a6:87:4e:51:24:e1:cb: 59:06:4b:46:9a:ba:93:b8:50:79:cb:80:f9:c2:6a: b2:58:13:5a:c9:d8:99:8e:66:1a:de:25:06:c1:71: 86:1e:7a:99:c1:f3:ef:5e:12:5f:5a:39:5f:16:1f: 51:31:43:45:eb:5d:36:67:71:f4:21:ab:48:ff:cc: 75:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:0A:36:52:25:42:D2:52:75:74:C1:A8:5A:58:6D:98:18:7A:8E:17 X509v3 Authority Key Identifier: keyid:91:D8:B8:BF:46:7F:E8:EA:C1:93:DF:4D:26:3C:87:F5:A9:12:59:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/91D8B8BF467FE8EAC193DF4D263C87F5A91259A9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91D8B8BF467FE8EAC193DF4D263C87F5A91259A9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3230322e31302e34362e302f32342d3234203d3e203538343837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.10.46.0/24 Signature Algorithm: sha256WithRSAEncryption 63:6b:95:c8:f6:25:7f:5b:f4:27:de:53:57:49:1f:d8:cf:74: 53:26:c0:0a:2b:1c:df:2d:c1:be:56:52:61:5f:8a:c8:94:0e: 53:7a:a8:01:18:79:70:d9:d9:00:89:e9:49:fe:0c:92:b4:88: f8:76:fb:c4:f8:14:1d:46:2c:f9:1e:0b:8b:e8:0e:15:a8:53: a0:09:0a:db:2d:30:bd:13:28:79:73:34:eb:6e:78:f9:c4:4b: e5:95:16:96:0d:f0:67:93:5e:2a:8b:63:dd:96:04:ad:aa:9b: 2b:b1:53:b5:ec:9e:09:9a:37:2d:bc:71:6a:55:c2:bc:72:bb: 62:69:d6:a8:96:0f:f2:22:98:fe:9d:12:6b:6a:0d:f7:20:92: a4:20:e9:73:c5:1b:b9:79:15:af:98:41:cc:50:15:41:2c:f6: a4:7f:6e:2a:3f:36:34:21:e2:24:b4:6f:1e:5d:1b:da:0a:91: 5a:2e:d7:38:be:a1:a4:ca:ed:29:bd:dd:fd:9c:03:49:a7:c8: 73:1e:9c:5f:8d:d1:de:58:79:05:2c:21:ed:99:56:32:cc:7c: 4e:9e:e7:79:b6:77:68:37:3f:49:ce:cf:47:28:d0:a7:c2:00: 5c:0f:2e:e2:f2:c2:a6:b6:79:ef:42:f4:7b:2b:41:bc:e7:14: e3:39:65:9f -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUK+5MSG3uDPWjgeCsqIPOqI0/yDEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTFEOEI4QkY0NjdGRThFQUMxOTNERjREMjYzQzg3RjVB OTEyNTlBOTAeFw0yNjA1MDMwMjE3NThaFw0yNzA1MDIwMjIyNThaMDMxMTAvBgNV BAMTKDY3MEEzNjUyMjU0MkQyNTI3NTc0QzFBODVBNTg2RDk4MTg3QThFMTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwVDU4pJQYjSFPM3f+SbApEoqz 5IxlJbFh+Zz+9RcbHuc8tWsYGzznKf32vojwgt7PdNHtt52SJakshGARJB1GISe+ if8JCC07IpdF69zi6RklIYXFY8LhT2g5FTO77bZmltoE8Y3Bvfgb4FvKN1CbytD0 /sQHd224QJu+5vcwdXsl9POe9OmQNzMeMpE3ZgpKyDg7SnCctQ1pwVj56FLb4igX R1+ZpjfRuBInOIvz+Z6LH4AtvJd7RPW9podOUSThy1kGS0aaupO4UHnLgPnCarJY E1rJ2JmOZhreJQbBcYYeepnB8+9eEl9aOV8WH1ExQ0XrXTZncfQhq0j/zHXtAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUZwo2UiVC0lJ1dMGoWlhtmBh6jhcwHwYDVR0j BBgwFoAUkdi4v0Z/6OrBk99NJjyH9akSWakwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmQ4ZjA2MGYtZTRiMy00YTRlLTk3ZmQtZjYxYWIxN2RlZWVkLzAvOTFEOEI4QkY0 NjdGRThFQUMxOTNERjREMjYzQzg3RjVBOTEyNTlBOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85MUQ4QjhCRjQ2N0ZFOEVBQzE5M0RGNEQyNjNDODdGNUE5MTI1 OUE5LmNlcjCBoQYIKwYBBQUHAQsEgZQwgZEwgY4GCCsGAQUFBzALhoGBcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzJkOGYwNjBmLWU0YjMtNGE0ZS05 N2ZkLWY2MWFiMTdkZWVlZC8wLzMyMzAzMjJlMzEzMDJlMzQzNjJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDM1MzgzNDM4Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADKCi4wDQYJKoZIhvcN AQELBQADggEBAGNrlcj2JX9b9CfeU1dJH9jPdFMmwAorHN8twb5WUmFfisiUDlN6 qAEYeXDZ2QCJ6Un+DJK0iPh2+8T4FB1GLPkeC4voDhWoU6AJCtstML0TKHlzNOtu ePnES+WVFpYN8GeTXiqLY92WBK2qmyuxU7XsngmaNy28cWpVwrxyu2Jp1qiWD/Ii mP6dEmtqDfcgkqQg6XPFG7l5Fa+YQcxQFUEs9qR/bio/NjQh4iS0bx5dG9oKkVou 1zi+oaTK7Sm93f2cA0mnyHMenF+N0d5YeQUsIe2ZVjLMfE6e53m2d2g3P0nOz0co 0KfCAFwPLuLywqa2ee9C9HsrQbznFOM5ZZ8= -----END CERTIFICATE-----Generated at Wed May 13 01:14:16 2026 by rpki-client