$ rpki-client -vvf rpki-rsync.idnic.net/repo/3c8ab3e0-ca68-42f6-98f6-654a252a8648/0/3230322e39332e32392e302f32342d3234203d3e203233393532.roa File: 3230322e39332e32392e302f32342d3234203d3e203233393532.roa (raw, json) Hash identifier: Omke75z/uNaQobGnfXKQ3d9K7J2R9/Q2eOXtQtif9WU= Subject key identifier: 86:FC:FB:78:20:E5:7F:5E:7C:79:CF:2D:E6:65:26:1C:7A:D1:9E:97 Certificate issuer: /CN=C2A90AC36481A19EE414BB5ACAA800241E570A1F Certificate serial: 1C8BE7927097E1339B0BB16D93FEF4FDC3E10E9B Authority key identifier: C2:A9:0A:C3:64:81:A1:9E:E4:14:BB:5A:CA:A8:00:24:1E:57:0A:1F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C2A90AC36481A19EE414BB5ACAA800241E570A1F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3c8ab3e0-ca68-42f6-98f6-654a252a8648/0/3230322e39332e32392e302f32342d3234203d3e203233393532.roa Signing time: Sun 03 May 2026 02:27:49 +0000 ROA not before: Sun 03 May 2026 02:22:49 +0000 ROA not after: Sun 02 May 2027 02:27:49 +0000 asID: 23952 IP address blocks: 202.93.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3c8ab3e0-ca68-42f6-98f6-654a252a8648/0/C2A90AC36481A19EE414BB5ACAA800241E570A1F.crl rsync://rpki-rsync.idnic.net/repo/3c8ab3e0-ca68-42f6-98f6-654a252a8648/0/C2A90AC36481A19EE414BB5ACAA800241E570A1F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C2A90AC36481A19EE414BB5ACAA800241E570A1F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 00:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:8b:e7:92:70:97:e1:33:9b:0b:b1:6d:93:fe:f4:fd:c3:e1:0e:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C2A90AC36481A19EE414BB5ACAA800241E570A1F Validity Not Before: May 3 02:22:49 2026 GMT Not After : May 2 02:27:49 2027 GMT Subject: CN=86FCFB7820E57F5E7C79CF2DE665261C7AD19E97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:c3:46:f7:f2:57:0a:8c:51:a2:2e:52:0b:eb: 57:b9:f8:43:5d:3f:69:eb:c0:f7:ce:f2:55:13:83: 85:eb:e8:7c:db:4a:2e:33:56:f3:21:31:89:78:d2: 33:29:a0:a4:a4:e6:21:09:fa:42:3a:39:43:ef:b6: b7:cc:88:78:38:d6:0d:85:e6:b8:ff:46:ee:73:a7: b6:ea:38:6b:04:c9:74:ba:7d:dd:31:30:0d:49:ab: 04:cd:44:3d:a9:9d:86:c1:23:03:d2:36:3e:4b:9c: 30:10:e5:ed:49:a6:5b:90:9e:95:65:6b:2a:85:16: ef:42:38:7d:29:7f:96:9e:fe:55:6a:d4:1a:97:ad: 0b:2b:2d:12:ea:a1:db:df:9c:17:cc:7d:03:ed:2a: d5:09:75:5e:7f:16:46:80:3e:09:1d:b4:80:b1:58: 4c:ac:ba:4c:cf:7e:63:fe:4b:bb:7b:db:32:6b:1c: 66:0c:3c:60:58:11:1e:9c:ac:bb:c2:bf:3a:99:a7: 45:ae:2e:d6:20:f5:92:7d:f7:e7:be:56:cc:48:98: 6c:df:c4:a2:f6:86:44:57:56:32:dd:67:22:44:1a: ff:1e:5b:01:b8:62:a8:ca:33:b3:0b:48:03:b2:1e: 91:f9:6e:23:df:fd:94:88:cb:a8:42:48:cc:42:3e: 9f:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:FC:FB:78:20:E5:7F:5E:7C:79:CF:2D:E6:65:26:1C:7A:D1:9E:97 X509v3 Authority Key Identifier: keyid:C2:A9:0A:C3:64:81:A1:9E:E4:14:BB:5A:CA:A8:00:24:1E:57:0A:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3c8ab3e0-ca68-42f6-98f6-654a252a8648/0/C2A90AC36481A19EE414BB5ACAA800241E570A1F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C2A90AC36481A19EE414BB5ACAA800241E570A1F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3c8ab3e0-ca68-42f6-98f6-654a252a8648/0/3230322e39332e32392e302f32342d3234203d3e203233393532.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.93.29.0/24 Signature Algorithm: sha256WithRSAEncryption 0d:11:d1:ea:7c:fa:d7:b5:01:ea:98:f2:26:9b:8a:62:78:49: 75:28:1c:b2:4d:67:8d:75:4d:0c:d3:f0:5b:3c:3d:5c:cf:4a: b0:4a:3f:6e:e3:5e:f6:3d:9c:0c:b1:dc:6f:a1:ee:6f:8c:b4: 89:ef:79:94:39:ac:a0:e9:23:92:6d:63:aa:9e:d5:2f:a7:8b: 58:56:db:21:b8:40:e2:eb:0f:04:39:2e:a5:4b:36:3f:b7:d4: b8:dd:60:8b:62:c0:5a:44:42:5a:3c:9f:1a:88:2a:a5:bf:d4: 40:a6:1a:29:60:b0:38:4d:5f:4c:d7:91:03:a9:03:00:cd:b7: 22:82:40:3b:5e:95:86:6f:15:c8:55:52:fd:cd:5e:89:a1:bc: 0d:e3:75:13:0a:d6:71:38:2f:ec:f6:80:29:7f:dc:4c:e1:13: c1:d8:1d:8c:7f:b2:02:87:1f:f9:5a:26:02:ec:24:c2:76:d4: f5:cd:d5:25:c3:f2:cd:69:c4:62:11:ea:c6:85:42:9b:c2:4d: 53:cf:f9:10:8c:76:9f:df:d0:42:68:03:41:0e:d2:b1:46:d6: 54:e2:f6:18:f5:2d:f7:ad:10:bf:f0:97:a6:d6:fd:d0:45:b5: 39:a8:51:7f:6c:07:8a:27:6f:a1:f2:66:48:06:0f:b9:de:63: 5c:b3:29:81 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUHIvnknCX4TObC7Ftk/70/cPhDpswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzJBOTBBQzM2NDgxQTE5RUU0MTRCQjVBQ0FBODAwMjQx RTU3MEExRjAeFw0yNjA1MDMwMjIyNDlaFw0yNzA1MDIwMjI3NDlaMDMxMTAvBgNV BAMTKDg2RkNGQjc4MjBFNTdGNUU3Qzc5Q0YyREU2NjUyNjFDN0FEMTlFOTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdw0b38lcKjFGiLlIL61e5+ENd P2nrwPfO8lUTg4Xr6HzbSi4zVvMhMYl40jMpoKSk5iEJ+kI6OUPvtrfMiHg41g2F 5rj/Ru5zp7bqOGsEyXS6fd0xMA1JqwTNRD2pnYbBIwPSNj5LnDAQ5e1JpluQnpVl ayqFFu9COH0pf5ae/lVq1BqXrQsrLRLqodvfnBfMfQPtKtUJdV5/FkaAPgkdtICx WEysukzPfmP+S7t72zJrHGYMPGBYER6crLvCvzqZp0WuLtYg9ZJ99+e+VsxImGzf xKL2hkRXVjLdZyJEGv8eWwG4YqjKM7MLSAOyHpH5biPf/ZSIy6hCSMxCPp/VAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUhvz7eCDlf158ec8t5mUmHHrRnpcwHwYDVR0j BBgwFoAUwqkKw2SBoZ7kFLtayqgAJB5XCh8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2M4YWIzZTAtY2E2OC00MmY2LTk4ZjYtNjU0YTI1MmE4NjQ4LzAvQzJBOTBBQzM2 NDgxQTE5RUU0MTRCQjVBQ0FBODAwMjQxRTU3MEExRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DMkE5MEFDMzY0ODFBMTlFRTQxNEJCNUFDQUE4MDAyNDFFNTcw QTFGLmNlcjCBoQYIKwYBBQUHAQsEgZQwgZEwgY4GCCsGAQUFBzALhoGBcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzNjOGFiM2UwLWNhNjgtNDJmNi05 OGY2LTY1NGEyNTJhODY0OC8wLzMyMzAzMjJlMzkzMzJlMzIzOTJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMyMzMzOTM1MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADKXR0wDQYJKoZIhvcN AQELBQADggEBAA0R0ep8+te1AeqY8iabimJ4SXUoHLJNZ411TQzT8Fs8PVzPSrBK P27jXvY9nAyx3G+h7m+MtInveZQ5rKDpI5JtY6qe1S+ni1hW2yG4QOLrDwQ5LqVL Nj+31LjdYItiwFpEQlo8nxqIKqW/1ECmGilgsDhNX0zXkQOpAwDNtyKCQDtelYZv FchVUv3NXomhvA3jdRMK1nE4L+z2gCl/3EzhE8HYHYx/sgKHH/laJgLsJMJ21PXN 1SXD8s1pxGIR6saFQpvCTVPP+RCMdp/f0EJoA0EO0rFG1lTi9hj1LfetEL/wl6bW /dBFtTmoUX9sB4onb6HyZkgGD7neY1yzKYE= -----END CERTIFICATE-----Generated at Wed May 13 05:43:09 2026 by rpki-client