$ rpki-client -vvf rpki-rsync.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/3230332e38302e382e302f32342d3234203d3e203234323034.roa File: 3230332e38302e382e302f32342d3234203d3e203234323034.roa (raw, json) Hash identifier: 0Yyl1JFAblaXf8Yb0JCPy2SmOr5D/U6YS39l5rE81q0= Subject key identifier: 2C:29:AD:36:69:84:E0:13:EA:35:A4:6F:7C:74:82:93:A1:F9:D7:5D Certificate issuer: /CN=E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9 Certificate serial: 4AE3FE447629ED04E00FE35A033D392ACE5DD5BD Authority key identifier: E4:50:1E:7F:DB:C5:71:60:C6:DA:F0:D3:BE:92:FB:D3:B1:32:4A:B9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/3230332e38302e382e302f32342d3234203d3e203234323034.roa Signing time: Sun 03 May 2026 02:33:05 +0000 ROA not before: Sun 03 May 2026 02:28:05 +0000 ROA not after: Sun 02 May 2027 02:33:05 +0000 asID: 24204 IP address blocks: 203.80.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9.crl rsync://rpki-rsync.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:e3:fe:44:76:29:ed:04:e0:0f:e3:5a:03:3d:39:2a:ce:5d:d5:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9 Validity Not Before: May 3 02:28:05 2026 GMT Not After : May 2 02:33:05 2027 GMT Subject: CN=2C29AD366984E013EA35A46F7C748293A1F9D75D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:db:9b:e0:5b:85:87:d3:26:05:c6:21:9e:3c: 83:0d:84:e7:2d:38:d8:2c:7b:41:26:24:88:42:1a: 1e:a9:b5:da:fa:dd:13:95:0c:00:54:33:6b:1b:63: d3:47:ea:16:85:94:f5:2f:a8:55:3f:6d:6b:9c:eb: fe:9b:ae:46:dc:dd:09:21:72:46:42:df:f6:0a:02: fe:3e:58:cf:80:5f:67:0c:90:24:2e:16:15:e0:41: 55:79:4b:c6:6e:38:56:58:86:b5:95:aa:b8:8e:13: df:80:0e:e2:42:73:f4:c9:24:34:9f:43:91:94:38: 4d:1c:05:7c:c2:f7:81:03:66:a5:77:45:b8:2d:d5: 25:a6:a2:cf:2c:b8:4e:2a:fa:79:f6:e2:78:e4:2f: ff:11:d4:80:27:70:da:a0:c1:75:81:af:fc:66:1b: ee:74:2d:ce:05:ba:a8:f8:5b:2e:b2:29:5a:92:2d: 02:68:39:e8:48:8a:48:94:62:16:9e:26:b8:0c:e4: bd:6b:34:65:57:04:c8:4c:26:63:3e:cf:2b:86:b1: 88:c5:01:79:84:b3:c9:10:7e:ef:4e:e6:8f:89:49: 8a:c0:09:13:e0:0f:be:67:48:54:99:84:63:4c:fb: 93:cf:5c:95:83:3d:2e:cb:4a:0e:03:e7:fc:47:e4: 06:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:29:AD:36:69:84:E0:13:EA:35:A4:6F:7C:74:82:93:A1:F9:D7:5D X509v3 Authority Key Identifier: keyid:E4:50:1E:7F:DB:C5:71:60:C6:DA:F0:D3:BE:92:FB:D3:B1:32:4A:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/3230332e38302e382e302f32342d3234203d3e203234323034.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.80.8.0/24 Signature Algorithm: sha256WithRSAEncryption aa:67:7a:d5:c5:7f:c4:42:17:e7:95:19:67:c4:36:f4:15:68: 35:98:cc:8f:2f:e5:ca:59:aa:66:92:25:e9:8c:ea:39:67:00: 08:30:d7:77:d9:8d:84:fe:03:16:8f:f0:89:e6:9b:f8:e8:1d: 0d:34:c2:a3:b0:68:a8:5b:83:06:42:fd:7b:50:8e:8f:ae:1a: 47:04:7b:48:ad:a3:5f:bd:de:32:1f:7a:8f:a0:c3:b7:d5:b7: b3:96:17:a2:23:25:31:17:2e:d9:76:6b:39:27:01:2b:28:dd: fd:0e:71:4d:b9:ac:c3:ac:1f:e4:75:d1:b4:ee:9a:dd:dd:14: 38:41:da:40:02:d9:c5:ef:c1:15:6d:54:eb:c5:6e:6e:4c:54: bf:52:80:48:20:67:f1:77:2f:34:e8:52:13:03:6f:96:49:b2: cb:81:20:1c:4d:ee:44:bb:b9:0d:e4:f5:49:88:74:6a:8b:8e: d1:02:d3:5f:95:a8:58:b9:32:a6:0b:60:95:0d:65:c1:71:45: fb:b4:a8:b3:56:41:61:f4:c2:53:f4:26:10:4b:fa:0b:d0:28: 7a:83:88:f9:b1:43:52:2d:f7:18:ac:1b:bd:96:ec:be:c4:44: 2a:01:14:cd:34:ec:51:1a:63:dc:18:97:87:19:c7:c1:36:95: ad:d4:1c:b7 -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgIUSuP+RHYp7QTgD+NaAz05Ks5d1b0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTQ1MDFFN0ZEQkM1NzE2MEM2REFGMEQzQkU5MkZCRDNC MTMyNEFCOTAeFw0yNjA1MDMwMjI4MDVaFw0yNzA1MDIwMjMzMDVaMDMxMTAvBgNV BAMTKDJDMjlBRDM2Njk4NEUwMTNFQTM1QTQ2RjdDNzQ4MjkzQTFGOUQ3NUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDg25vgW4WH0yYFxiGePIMNhOct ONgse0EmJIhCGh6ptdr63ROVDABUM2sbY9NH6haFlPUvqFU/bWuc6/6brkbc3Qkh ckZC3/YKAv4+WM+AX2cMkCQuFhXgQVV5S8ZuOFZYhrWVqriOE9+ADuJCc/TJJDSf Q5GUOE0cBXzC94EDZqV3Rbgt1SWmos8suE4q+nn24njkL/8R1IAncNqgwXWBr/xm G+50Lc4Fuqj4Wy6yKVqSLQJoOehIikiUYhaeJrgM5L1rNGVXBMhMJmM+zyuGsYjF AXmEs8kQfu9O5o+JSYrACRPgD75nSFSZhGNM+5PPXJWDPS7LSg4D5/xH5AYXAgMB AAGjggItMIICKTAdBgNVHQ4EFgQULCmtNmmE4BPqNaRvfHSCk6H5110wHwYDVR0j BBgwFoAU5FAef9vFcWDG2vDTvpL707EySrkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTI0YTkxMDUtOGQyYS00YjM4LWE2YWUtMDVlYWQ2OTcxOWEzLzAvRTQ1MDFFN0ZE QkM1NzE2MEM2REFGMEQzQkU5MkZCRDNCMTMyNEFCOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FNDUwMUU3RkRCQzU3MTYwQzZEQUYwRDNCRTkyRkJEM0IxMzI0 QUI5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUFBzALhn9yc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTI0YTkxMDUtOGQyYS00YjM4LWE2 YWUtMDVlYWQ2OTcxOWEzLzAvMzIzMDMzMmUzODMwMmUzODJlMzAyZjMyMzQyZDMy MzQyMDNkM2UyMDMyMzQzMjMwMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADLUAgwDQYJKoZIhvcNAQEL BQADggEBAKpnetXFf8RCF+eVGWfENvQVaDWYzI8v5cpZqmaSJemM6jlnAAgw13fZ jYT+AxaP8Inmm/joHQ00wqOwaKhbgwZC/XtQjo+uGkcEe0ito1+93jIfeo+gw7fV t7OWF6IjJTEXLtl2azknASso3f0OcU25rMOsH+R10bTumt3dFDhB2kAC2cXvwRVt VOvFbm5MVL9SgEggZ/F3LzToUhMDb5ZJssuBIBxN7kS7uQ3k9UmIdGqLjtEC01+V qFi5MqYLYJUNZcFxRfu0qLNWQWH0wlP0JhBL+gvQKHqDiPmxQ1It9xisG72W7L7E RCoBFM007FEaY9wYl4cZx8E2la3UHLc= -----END CERTIFICATE-----Generated at Wed May 13 02:40:43 2026 by rpki-client