$ rpki-client -vvf rpki-rsync.idnic.net/repo/3c8ab3e0-ca68-42f6-98f6-654a252a8648/0/3230322e39332e32342e302f32342d3234203d3e203233393532.roa File: 3230322e39332e32342e302f32342d3234203d3e203233393532.roa (raw, json) Hash identifier: 13PIyETCXWDo1Gv/U6Oaqwz2KRpjJgPdWNVs0uRPBXw= Subject key identifier: 6C:20:E0:02:2D:79:F7:4C:A7:75:AE:F8:1B:07:88:4F:2F:17:1B:7D Certificate issuer: /CN=C2A90AC36481A19EE414BB5ACAA800241E570A1F Certificate serial: 0ADD0008C33BB1AA532D458E1A5C364749BB270F Authority key identifier: C2:A9:0A:C3:64:81:A1:9E:E4:14:BB:5A:CA:A8:00:24:1E:57:0A:1F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C2A90AC36481A19EE414BB5ACAA800241E570A1F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3c8ab3e0-ca68-42f6-98f6-654a252a8648/0/3230322e39332e32342e302f32342d3234203d3e203233393532.roa Signing time: Sun 03 May 2026 02:27:48 +0000 ROA not before: Sun 03 May 2026 02:22:48 +0000 ROA not after: Sun 02 May 2027 02:27:48 +0000 asID: 23952 IP address blocks: 202.93.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3c8ab3e0-ca68-42f6-98f6-654a252a8648/0/C2A90AC36481A19EE414BB5ACAA800241E570A1F.crl rsync://rpki-rsync.idnic.net/repo/3c8ab3e0-ca68-42f6-98f6-654a252a8648/0/C2A90AC36481A19EE414BB5ACAA800241E570A1F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C2A90AC36481A19EE414BB5ACAA800241E570A1F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:dd:00:08:c3:3b:b1:aa:53:2d:45:8e:1a:5c:36:47:49:bb:27:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C2A90AC36481A19EE414BB5ACAA800241E570A1F Validity Not Before: May 3 02:22:48 2026 GMT Not After : May 2 02:27:48 2027 GMT Subject: CN=6C20E0022D79F74CA775AEF81B07884F2F171B7D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:5a:d9:ba:40:7d:61:87:0f:f9:4f:1a:74:24: 12:54:6d:d0:5b:6b:42:31:f8:c1:84:71:43:f7:e1: c9:ec:7d:3e:27:55:cf:cc:15:ce:a9:b3:13:08:1a: 08:25:9b:da:00:f6:ac:03:4b:b7:78:37:f5:8b:80: f7:6d:85:84:e6:f4:fa:38:29:2e:3e:14:64:94:3c: 67:5f:72:de:bc:66:ee:bf:0f:59:5f:8d:27:1b:fc: 0d:74:ac:3d:1f:b1:ee:99:20:30:19:05:67:72:06: e2:69:7a:37:f5:92:13:bf:81:3a:32:20:d6:dc:cb: f0:77:d3:58:7a:30:e2:99:85:1e:cb:da:e9:8e:ed: e8:c0:f5:4b:27:be:89:d1:67:71:ee:9e:54:f4:3b: 82:65:5c:8a:b1:25:68:8e:ce:6f:29:81:1e:ad:cf: 42:f5:0f:41:99:d9:12:62:87:81:90:11:a8:96:05: c5:63:1e:2f:67:6e:08:24:ce:63:34:c8:26:f6:9a: e7:7e:b1:55:22:2b:9f:73:5c:9f:30:74:e4:63:7a: 68:11:3e:ec:09:c4:f1:b0:80:bb:fc:c2:91:64:6e: 11:78:8f:08:84:cd:35:60:01:5a:83:bc:98:24:68: 10:41:e8:88:d0:6d:c7:f2:a0:a9:57:73:a9:95:d1: 6d:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:20:E0:02:2D:79:F7:4C:A7:75:AE:F8:1B:07:88:4F:2F:17:1B:7D X509v3 Authority Key Identifier: keyid:C2:A9:0A:C3:64:81:A1:9E:E4:14:BB:5A:CA:A8:00:24:1E:57:0A:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3c8ab3e0-ca68-42f6-98f6-654a252a8648/0/C2A90AC36481A19EE414BB5ACAA800241E570A1F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C2A90AC36481A19EE414BB5ACAA800241E570A1F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3c8ab3e0-ca68-42f6-98f6-654a252a8648/0/3230322e39332e32342e302f32342d3234203d3e203233393532.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.93.24.0/24 Signature Algorithm: sha256WithRSAEncryption 8d:1f:77:d3:32:ab:00:f9:b5:e7:3d:5b:bd:10:c4:6d:8d:71: 8d:0d:de:91:95:bc:6e:cf:01:3a:85:10:21:e3:07:79:b6:7d: b3:7e:9e:f7:a0:0a:35:58:15:a4:28:cf:42:74:2e:b2:be:63: ba:d9:9e:69:43:ed:32:10:dc:d2:a9:ac:de:e0:b2:d9:b9:17: 13:92:c2:fd:36:83:43:5f:7b:c7:bf:f0:b0:1c:e6:5b:8d:1b: da:77:dd:19:92:c4:32:80:46:99:28:61:dc:5b:27:dc:78:0f: 97:da:0f:50:5d:86:c6:82:99:45:ac:a5:bf:47:94:ff:f2:d3: c2:fd:2a:26:27:6b:da:50:d4:6a:04:3f:ef:be:73:30:53:9e: 07:4c:10:b0:a0:c0:8c:a9:0f:3e:fd:fa:5d:3d:93:6b:52:3d: ab:ac:df:b6:a3:78:e6:98:04:7e:93:61:5a:7a:7b:13:c9:ce: b2:4c:f5:8d:52:f2:00:24:2d:26:87:5e:bb:da:79:3c:41:a1: f0:7b:c2:9d:2e:bc:34:4f:ba:9c:29:bc:4d:09:f1:a6:e6:13: 1d:3e:15:76:88:2c:9b:27:d2:09:ab:2a:c5:d0:b8:df:e8:74: 9a:11:75:74:a2:d8:44:68:af:dd:66:46:98:4c:d3:4e:4f:98: ed:2a:73:c3 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUCt0ACMM7sapTLUWOGlw2R0m7Jw8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzJBOTBBQzM2NDgxQTE5RUU0MTRCQjVBQ0FBODAwMjQx RTU3MEExRjAeFw0yNjA1MDMwMjIyNDhaFw0yNzA1MDIwMjI3NDhaMDMxMTAvBgNV BAMTKDZDMjBFMDAyMkQ3OUY3NENBNzc1QUVGODFCMDc4ODRGMkYxNzFCN0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdWtm6QH1hhw/5Txp0JBJUbdBb a0Ix+MGEcUP34cnsfT4nVc/MFc6psxMIGgglm9oA9qwDS7d4N/WLgPdthYTm9Po4 KS4+FGSUPGdfct68Zu6/D1lfjScb/A10rD0fse6ZIDAZBWdyBuJpejf1khO/gToy INbcy/B301h6MOKZhR7L2umO7ejA9UsnvonRZ3HunlT0O4JlXIqxJWiOzm8pgR6t z0L1D0GZ2RJih4GQEaiWBcVjHi9nbggkzmM0yCb2mud+sVUiK59zXJ8wdORjemgR PuwJxPGwgLv8wpFkbhF4jwiEzTVgAVqDvJgkaBBB6IjQbcfyoKlXc6mV0W0TAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUbCDgAi1590ynda74GweITy8XG30wHwYDVR0j BBgwFoAUwqkKw2SBoZ7kFLtayqgAJB5XCh8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2M4YWIzZTAtY2E2OC00MmY2LTk4ZjYtNjU0YTI1MmE4NjQ4LzAvQzJBOTBBQzM2 NDgxQTE5RUU0MTRCQjVBQ0FBODAwMjQxRTU3MEExRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DMkE5MEFDMzY0ODFBMTlFRTQxNEJCNUFDQUE4MDAyNDFFNTcw QTFGLmNlcjCBoQYIKwYBBQUHAQsEgZQwgZEwgY4GCCsGAQUFBzALhoGBcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzNjOGFiM2UwLWNhNjgtNDJmNi05 OGY2LTY1NGEyNTJhODY0OC8wLzMyMzAzMjJlMzkzMzJlMzIzNDJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMyMzMzOTM1MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADKXRgwDQYJKoZIhvcN AQELBQADggEBAI0fd9MyqwD5tec9W70QxG2NcY0N3pGVvG7PATqFECHjB3m2fbN+ nvegCjVYFaQoz0J0LrK+Y7rZnmlD7TIQ3NKprN7gstm5FxOSwv02g0Nfe8e/8LAc 5luNG9p33RmSxDKARpkoYdxbJ9x4D5faD1BdhsaCmUWspb9HlP/y08L9KiYna9pQ 1GoEP+++czBTngdMELCgwIypDz79+l09k2tSPaus37ajeOaYBH6TYVp6exPJzrJM 9Y1S8gAkLSaHXrvaeTxBofB7wp0uvDRPupwpvE0J8abmEx0+FXaILJsn0gmrKsXQ uN/odJoRdXSi2ERor91mRphM005PmO0qc8M= -----END CERTIFICATE-----Generated at Wed May 13 02:36:25 2026 by rpki-client