$ rpki-client -vvf rpki-rsync.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/3230322e35302e3230332e302f32342d3234203d3e203535363936.roa File: 3230322e35302e3230332e302f32342d3234203d3e203535363936.roa (raw, json) Hash identifier: QgX53d3ZPmwqUeHqTZtdjccW/DQcVacKXuBLz3xuE+Q= Subject key identifier: 6A:6C:0B:99:60:59:3D:77:6F:B1:B0:AD:2D:C3:15:A1:71:FF:AC:91 Certificate issuer: /CN=8FFAA6656CAEB189705F03C7B4148624E4A80597 Certificate serial: 4376E3CB6B4DE99408144043316D686D24DDF14B Authority key identifier: 8F:FA:A6:65:6C:AE:B1:89:70:5F:03:C7:B4:14:86:24:E4:A8:05:97 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8FFAA6656CAEB189705F03C7B4148624E4A80597.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/3230322e35302e3230332e302f32342d3234203d3e203535363936.roa Signing time: Sun 03 May 2026 02:33:13 +0000 ROA not before: Sun 03 May 2026 02:28:13 +0000 ROA not after: Sun 02 May 2027 02:33:13 +0000 asID: 55696 IP address blocks: 202.50.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/8FFAA6656CAEB189705F03C7B4148624E4A80597.crl rsync://rpki-rsync.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/8FFAA6656CAEB189705F03C7B4148624E4A80597.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8FFAA6656CAEB189705F03C7B4148624E4A80597.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 08:33:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:76:e3:cb:6b:4d:e9:94:08:14:40:43:31:6d:68:6d:24:dd:f1:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FFAA6656CAEB189705F03C7B4148624E4A80597 Validity Not Before: May 3 02:28:13 2026 GMT Not After : May 2 02:33:13 2027 GMT Subject: CN=6A6C0B9960593D776FB1B0AD2DC315A171FFAC91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:82:cc:c0:64:87:9a:e8:30:e9:16:4e:b1:d1: 83:3d:c6:81:59:c0:3d:ba:1c:58:6f:2e:cf:81:95: 45:62:1c:0d:01:4e:25:49:f4:4c:65:07:02:71:7e: 90:82:2e:6f:cc:41:d0:90:c9:95:e3:db:50:e6:da: 9c:97:53:ca:4e:15:a4:5f:fb:c5:17:b2:23:68:fc: be:1a:f3:6c:01:19:da:aa:f4:b8:53:e2:b0:9b:f8: e2:2c:fb:3d:6a:76:08:65:8a:e3:e2:d3:7b:89:c3: 62:74:67:14:5f:57:f8:8d:76:bf:a8:76:fc:45:2e: 77:21:a4:75:d1:ea:2d:3b:0a:34:97:2e:c2:36:0e: c5:2d:14:0e:5b:44:ef:52:fb:38:1c:7a:93:8b:1b: dd:6b:4e:3c:f2:0e:43:67:a9:b7:08:1a:df:40:80: 76:cc:1c:62:6c:48:49:1e:10:40:62:14:b5:15:cc: 1f:27:bb:2b:2e:45:67:c0:20:f1:10:67:88:d1:fa: 3c:ff:f5:fa:10:8d:ab:ed:73:1a:af:a4:a0:a5:33: 25:89:23:d7:36:11:63:8a:8b:63:85:41:35:bc:87: b3:23:c1:88:c5:51:60:5a:bf:1b:37:83:02:11:18: 87:2a:1b:b6:df:8e:d1:c3:1f:e4:f2:82:8d:c7:92: eb:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:6C:0B:99:60:59:3D:77:6F:B1:B0:AD:2D:C3:15:A1:71:FF:AC:91 X509v3 Authority Key Identifier: keyid:8F:FA:A6:65:6C:AE:B1:89:70:5F:03:C7:B4:14:86:24:E4:A8:05:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/8FFAA6656CAEB189705F03C7B4148624E4A80597.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8FFAA6656CAEB189705F03C7B4148624E4A80597.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/3230322e35302e3230332e302f32342d3234203d3e203535363936.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.50.203.0/24 Signature Algorithm: sha256WithRSAEncryption 27:0e:82:a0:cc:b9:29:37:9d:9a:af:da:db:bf:34:b5:9e:a3: 47:b9:b1:79:80:01:ea:5f:f2:c5:7d:53:18:be:21:c0:13:64: 26:dc:4d:7b:f2:24:8f:ce:a1:af:a2:9c:1b:06:cd:72:08:0a: 2a:08:d0:fa:32:87:b7:da:95:fc:1a:2a:c3:60:23:07:20:a0: 54:da:4f:f6:5e:5d:95:98:68:9c:b2:0e:84:25:d0:c9:15:5e: 30:5c:58:df:10:e7:12:39:43:ae:e7:a7:e1:c6:6a:33:aa:e8: d1:00:07:ab:a8:65:bf:33:cc:b8:03:f7:f1:46:83:4c:86:7d: e7:4c:9c:76:f2:e8:a6:f9:ed:07:e8:d9:00:68:30:1b:5d:f4: 4d:79:d2:aa:fc:09:47:97:f1:43:8d:b9:94:c5:09:06:46:78: b0:81:5e:57:52:b3:bb:fe:d5:d4:dd:b8:a2:68:a5:8f:a4:49: 09:2f:c5:21:50:14:2f:86:c9:0a:fc:2e:ea:20:d6:a4:c6:6c: d8:4a:84:f8:5e:be:06:0e:65:c9:85:82:c1:8d:73:d5:84:39: f8:f6:bf:de:fc:57:48:0d:98:06:81:f7:a3:39:26:11:d4:65: ff:14:89:e0:d0:ad:82:f6:03:d0:3a:d7:6f:e1:a4:7e:96:e4: 3b:d7:0b:3b -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUQ3bjy2tN6ZQIFEBDMW1obSTd8UswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZGQUE2NjU2Q0FFQjE4OTcwNUYwM0M3QjQxNDg2MjRF NEE4MDU5NzAeFw0yNjA1MDMwMjI4MTNaFw0yNzA1MDIwMjMzMTNaMDMxMTAvBgNV BAMTKDZBNkMwQjk5NjA1OTNENzc2RkIxQjBBRDJEQzMxNUExNzFGRkFDOTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvgszAZIea6DDpFk6x0YM9xoFZ wD26HFhvLs+BlUViHA0BTiVJ9ExlBwJxfpCCLm/MQdCQyZXj21Dm2pyXU8pOFaRf +8UXsiNo/L4a82wBGdqq9LhT4rCb+OIs+z1qdghliuPi03uJw2J0ZxRfV/iNdr+o dvxFLnchpHXR6i07CjSXLsI2DsUtFA5bRO9S+zgcepOLG91rTjzyDkNnqbcIGt9A gHbMHGJsSEkeEEBiFLUVzB8nuysuRWfAIPEQZ4jR+jz/9foQjavtcxqvpKClMyWJ I9c2EWOKi2OFQTW8h7MjwYjFUWBavxs3gwIRGIcqG7bfjtHDH+Tygo3HkuulAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUamwLmWBZPXdvsbCtLcMVoXH/rJEwHwYDVR0j BBgwFoAUj/qmZWyusYlwXwPHtBSGJOSoBZcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTI4ODBkZWUtN2FhMi00YmU0LWJmMzUtY2RiZDExZDc5NTA3LzAvOEZGQUE2NjU2 Q0FFQjE4OTcwNUYwM0M3QjQxNDg2MjRFNEE4MDU5Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84RkZBQTY2NTZDQUVCMTg5NzA1RjAzQzdCNDE0ODYyNEU0QTgw NTk3LmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzUyODgwZGVlLTdhYTItNGJlNC1i ZjM1LWNkYmQxMWQ3OTUwNy8wLzMyMzAzMjJlMzUzMDJlMzIzMDMzMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzUzNTM2MzkzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMoyyzANBgkqhkiG 9w0BAQsFAAOCAQEAJw6CoMy5KTedmq/a2780tZ6jR7mxeYAB6l/yxX1TGL4hwBNk JtxNe/Ikj86hr6KcGwbNcggKKgjQ+jKHt9qV/Boqw2AjByCgVNpP9l5dlZhonLIO hCXQyRVeMFxY3xDnEjlDruen4cZqM6ro0QAHq6hlvzPMuAP38UaDTIZ950ycdvLo pvntB+jZAGgwG130TXnSqvwJR5fxQ425lMUJBkZ4sIFeV1Kzu/7V1N24omilj6RJ CS/FIVAUL4bJCvwu6iDWpMZs2EqE+F6+Bg5lyYWCwY1z1YQ5+Pa/3vxXSA2YBoH3 ozkmEdRl/xSJ4NCtgvYD0DrXb+GkfpbkO9cLOw== -----END CERTIFICATE-----Generated at Wed May 13 01:41:54 2026 by rpki-client