$ rpki-client -vvf rpki-rsync.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/3230332e38302e392e302f32342d3234203d3e203234323034.roa File: 3230332e38302e392e302f32342d3234203d3e203234323034.roa (raw, json) Hash identifier: ctsdmpn5r5VUvDq4FMqshtD+HVeYmHxVfhu5eYtcuDY= Subject key identifier: 29:87:CD:9E:76:2B:19:05:A0:82:A6:B9:87:28:D9:D6:F3:57:22:42 Certificate issuer: /CN=E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9 Certificate serial: 472E4341D2FD7FA1B9AB2986EBDA168C0A203314 Authority key identifier: E4:50:1E:7F:DB:C5:71:60:C6:DA:F0:D3:BE:92:FB:D3:B1:32:4A:B9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/3230332e38302e392e302f32342d3234203d3e203234323034.roa Signing time: Sun 03 May 2026 02:33:07 +0000 ROA not before: Sun 03 May 2026 02:28:07 +0000 ROA not after: Sun 02 May 2027 02:33:07 +0000 asID: 24204 IP address blocks: 203.80.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9.crl rsync://rpki-rsync.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:2e:43:41:d2:fd:7f:a1:b9:ab:29:86:eb:da:16:8c:0a:20:33:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9 Validity Not Before: May 3 02:28:07 2026 GMT Not After : May 2 02:33:07 2027 GMT Subject: CN=2987CD9E762B1905A082A6B98728D9D6F3572242 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:50:fd:af:6a:93:1c:52:44:11:f9:c2:de:61: ae:fc:42:fa:28:e9:ab:49:50:4f:49:c7:b5:22:b8: ff:bf:35:b8:2d:82:d8:eb:ab:fb:80:98:16:21:6a: 35:00:4f:de:b3:bf:94:75:b3:19:81:76:39:98:16: 35:ab:20:8e:83:d1:fd:ac:37:20:a8:f8:40:c8:d2: 0d:2a:5b:cf:80:d9:50:f0:13:21:0a:7f:a2:09:56: 2a:65:e0:4e:90:34:f5:06:52:40:cf:85:9c:c1:6a: 52:8f:ad:1e:f7:06:f0:2b:62:b6:bf:ab:a5:c2:0e: 37:63:e9:0f:46:1f:8a:07:5b:f6:24:c0:68:dd:3d: 6f:ab:8a:bd:e5:d4:4b:cd:dc:d8:4f:e3:bf:5e:bb: 25:80:a9:05:57:81:51:f1:20:18:c8:70:44:93:65: 49:6a:14:f3:28:42:c5:c4:ff:07:d1:74:3b:85:b7: a5:1b:9d:cd:03:7e:63:df:60:57:6d:2f:26:d4:36: 93:8c:61:0e:67:c6:8f:52:f3:43:09:05:e0:b8:1d: 50:77:17:43:44:64:4e:84:b6:4f:c2:a0:d2:0b:f9: 0f:ff:73:50:c6:99:cf:8b:bd:88:45:04:58:8c:10: 35:e2:0e:f7:fe:f5:83:97:cd:68:77:21:46:43:fa: 36:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:87:CD:9E:76:2B:19:05:A0:82:A6:B9:87:28:D9:D6:F3:57:22:42 X509v3 Authority Key Identifier: keyid:E4:50:1E:7F:DB:C5:71:60:C6:DA:F0:D3:BE:92:FB:D3:B1:32:4A:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/3230332e38302e392e302f32342d3234203d3e203234323034.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.80.9.0/24 Signature Algorithm: sha256WithRSAEncryption 61:ef:1c:e1:20:a5:01:b3:9d:ab:da:12:d6:e5:69:ee:af:e5: bb:f4:74:03:4a:e3:03:33:2a:de:fc:81:c0:da:7b:da:71:fb: 50:26:4c:93:29:9f:38:11:7b:ef:83:00:61:e6:79:42:11:1e: b6:92:96:55:05:ca:e7:9f:23:4f:78:15:75:69:50:19:e0:ff: c1:d0:23:e9:88:40:33:25:8e:ec:fa:94:1e:fd:47:cc:07:3a: 8e:e1:96:d7:d0:6e:0f:29:08:98:45:49:5c:ab:78:ae:ea:89: 9e:b6:e3:b8:77:b6:72:e7:52:59:25:ea:31:f8:a2:3c:9a:43: 47:8d:30:bd:1b:5c:7d:9c:ed:85:10:d0:39:61:6a:e7:1f:c9: a9:57:ef:43:b0:d9:d0:c7:59:8a:af:2b:52:be:f9:86:e7:87: f6:8b:3c:d4:66:ce:6e:39:d4:ff:90:0d:3e:94:c2:6c:57:fa: 0e:83:e8:be:08:f1:76:3c:44:02:b2:38:5b:46:2c:d8:80:18: dd:5c:a8:d8:5c:8b:0b:0f:37:5f:22:01:2e:fc:45:3e:80:fa: b0:1d:35:98:37:1e:1d:72:b2:79:da:e0:d6:c4:e3:64:d7:e3: 92:62:bc:13:a7:36:b0:09:d6:f0:76:90:ee:85:7d:d4:f4:a2: fa:72:e5:b7 -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgIURy5DQdL9f6G5qymG69oWjAogMxQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTQ1MDFFN0ZEQkM1NzE2MEM2REFGMEQzQkU5MkZCRDNC MTMyNEFCOTAeFw0yNjA1MDMwMjI4MDdaFw0yNzA1MDIwMjMzMDdaMDMxMTAvBgNV BAMTKDI5ODdDRDlFNzYyQjE5MDVBMDgyQTZCOTg3MjhEOUQ2RjM1NzIyNDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGUP2vapMcUkQR+cLeYa78Qvoo 6atJUE9Jx7UiuP+/Nbgtgtjrq/uAmBYhajUAT96zv5R1sxmBdjmYFjWrII6D0f2s NyCo+EDI0g0qW8+A2VDwEyEKf6IJVipl4E6QNPUGUkDPhZzBalKPrR73BvArYra/ q6XCDjdj6Q9GH4oHW/YkwGjdPW+rir3l1EvN3NhP479euyWAqQVXgVHxIBjIcEST ZUlqFPMoQsXE/wfRdDuFt6Ubnc0DfmPfYFdtLybUNpOMYQ5nxo9S80MJBeC4HVB3 F0NEZE6Etk/CoNIL+Q//c1DGmc+LvYhFBFiMEDXiDvf+9YOXzWh3IUZD+jZZAgMB AAGjggItMIICKTAdBgNVHQ4EFgQUKYfNnnYrGQWggqa5hyjZ1vNXIkIwHwYDVR0j BBgwFoAU5FAef9vFcWDG2vDTvpL707EySrkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTI0YTkxMDUtOGQyYS00YjM4LWE2YWUtMDVlYWQ2OTcxOWEzLzAvRTQ1MDFFN0ZE QkM1NzE2MEM2REFGMEQzQkU5MkZCRDNCMTMyNEFCOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FNDUwMUU3RkRCQzU3MTYwQzZEQUYwRDNCRTkyRkJEM0IxMzI0 QUI5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUFBzALhn9yc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTI0YTkxMDUtOGQyYS00YjM4LWE2 YWUtMDVlYWQ2OTcxOWEzLzAvMzIzMDMzMmUzODMwMmUzOTJlMzAyZjMyMzQyZDMy MzQyMDNkM2UyMDMyMzQzMjMwMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADLUAkwDQYJKoZIhvcNAQEL BQADggEBAGHvHOEgpQGznavaEtblae6v5bv0dANK4wMzKt78gcDae9px+1AmTJMp nzgRe++DAGHmeUIRHraSllUFyuefI094FXVpUBng/8HQI+mIQDMljuz6lB79R8wH Oo7hltfQbg8pCJhFSVyreK7qiZ6247h3tnLnUlkl6jH4ojyaQ0eNML0bXH2c7YUQ 0DlhaucfyalX70Ow2dDHWYqvK1K++Ybnh/aLPNRmzm451P+QDT6UwmxX+g6D6L4I 8XY8RAKyOFtGLNiAGN1cqNhciwsPN18iAS78RT6A+rAdNZg3Hh1ysnna4NbE42TX 45JivBOnNrAJ1vB2kO6FfdT0ovpy5bc= -----END CERTIFICATE-----Generated at Wed May 13 01:17:02 2026 by rpki-client