$ rpki-client -vvf rpki-rsync.idnic.net/repo/57984e3a-48f9-4cda-be6c-4006c08f8fd2/0/3230322e3138302e34382e302f32342d3234203d3e203338313435.roa File: 3230322e3138302e34382e302f32342d3234203d3e203338313435.roa (raw, json) Hash identifier: ewQ6iXIhuUAl7kqR6m/ckq2ZC+S2rYtpx+y5kc5ryZc= Subject key identifier: 85:01:0B:8E:72:D0:D3:07:B9:0C:1F:3A:03:31:95:C3:33:1F:1B:EA Certificate issuer: /CN=FAF852347432F9918D1450C78A1EC83C3599937A Certificate serial: 5AE2BB4DC44771536C8899287BD2233AC484717E Authority key identifier: FA:F8:52:34:74:32:F9:91:8D:14:50:C7:8A:1E:C8:3C:35:99:93:7A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FAF852347432F9918D1450C78A1EC83C3599937A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/57984e3a-48f9-4cda-be6c-4006c08f8fd2/0/3230322e3138302e34382e302f32342d3234203d3e203338313435.roa Signing time: Sun 03 May 2026 02:34:34 +0000 ROA not before: Sun 03 May 2026 02:29:34 +0000 ROA not after: Sun 02 May 2027 02:34:34 +0000 asID: 38145 IP address blocks: 202.180.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/57984e3a-48f9-4cda-be6c-4006c08f8fd2/0/FAF852347432F9918D1450C78A1EC83C3599937A.crl rsync://rpki-rsync.idnic.net/repo/57984e3a-48f9-4cda-be6c-4006c08f8fd2/0/FAF852347432F9918D1450C78A1EC83C3599937A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FAF852347432F9918D1450C78A1EC83C3599937A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 23:20:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:e2:bb:4d:c4:47:71:53:6c:88:99:28:7b:d2:23:3a:c4:84:71:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FAF852347432F9918D1450C78A1EC83C3599937A Validity Not Before: May 3 02:29:34 2026 GMT Not After : May 2 02:34:34 2027 GMT Subject: CN=85010B8E72D0D307B90C1F3A033195C3331F1BEA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:88:2c:d1:83:26:25:7a:18:35:bc:89:5b:54: 0f:41:10:dd:be:0a:1d:11:42:32:c7:2b:6e:58:c7: 9b:18:ec:06:71:3c:8f:41:95:3b:32:d2:83:99:07: 88:42:83:52:3b:f4:44:06:a0:aa:f1:c8:ec:1d:75: 77:e7:3a:d4:64:3f:58:ad:cd:e3:b5:32:c7:95:89: 3b:e9:06:bc:ce:0f:37:d5:35:c5:0c:74:12:47:c4: 5a:d3:aa:16:43:55:f6:e3:3a:99:17:25:4c:3d:f7: 8a:db:b3:f9:18:d9:c5:e3:6c:50:1a:be:f3:56:1e: 9a:f1:d6:73:19:cb:b9:38:5e:d0:41:9e:bc:b6:2c: c5:bf:03:42:a5:aa:86:11:be:cb:65:11:19:cc:61: df:0e:55:37:77:70:0b:26:5d:5b:18:60:60:28:ba: 5f:f8:33:33:e6:5e:f4:7c:a9:11:9e:7e:11:0f:55: 5c:e6:ba:04:0e:c5:c5:4f:5f:1d:d3:6a:bf:bc:21: 1e:63:65:6e:e2:e5:ac:8d:96:82:07:a7:b7:78:ce: df:f9:f6:34:74:58:89:1d:5e:7c:0f:33:a9:37:68: 08:3c:1d:33:75:3a:63:6d:5c:88:e3:63:5c:a0:f9: c5:15:64:38:12:3c:6e:bb:91:11:5f:9e:6e:2d:86: 02:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:01:0B:8E:72:D0:D3:07:B9:0C:1F:3A:03:31:95:C3:33:1F:1B:EA X509v3 Authority Key Identifier: keyid:FA:F8:52:34:74:32:F9:91:8D:14:50:C7:8A:1E:C8:3C:35:99:93:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/57984e3a-48f9-4cda-be6c-4006c08f8fd2/0/FAF852347432F9918D1450C78A1EC83C3599937A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FAF852347432F9918D1450C78A1EC83C3599937A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/57984e3a-48f9-4cda-be6c-4006c08f8fd2/0/3230322e3138302e34382e302f32342d3234203d3e203338313435.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.180.48.0/24 Signature Algorithm: sha256WithRSAEncryption 28:37:4f:0b:fb:c0:ee:71:28:aa:c9:83:5b:61:40:b8:d7:ca: 4e:c0:12:d1:24:1c:72:dc:25:b7:a3:44:4e:9b:0a:00:c0:6d: e5:f5:df:25:3c:9b:65:c6:b6:37:37:5b:ee:79:7f:10:b0:aa: 54:8d:c8:4c:d4:a9:71:b9:84:db:8b:54:cc:98:64:e5:60:f6: 3d:b4:27:24:02:23:35:d2:ba:53:32:99:2e:11:ad:39:dd:d0: d8:9c:96:c6:10:e1:c6:c2:92:1d:70:ff:cf:3c:db:9d:16:55: 70:8d:c7:50:14:dd:6a:81:ea:3e:b0:a9:68:48:ab:ab:b8:29: 62:5e:ac:4e:32:95:cf:d2:d5:6b:33:5a:81:e1:3a:2d:71:6e: 34:87:92:92:de:4a:6f:cf:81:e4:e7:69:6a:e1:e2:db:47:b4: 65:35:4a:cc:1a:60:b6:df:12:2a:cc:ef:7e:df:6e:f8:f1:25: cf:2f:89:af:b4:c8:76:ba:84:62:7a:37:c2:ff:60:66:9f:cd: f7:98:c5:fd:53:20:ed:5b:88:bf:6c:b6:5f:ef:47:fb:be:c8: fc:bb:ea:06:93:fc:3a:42:f9:0b:1b:3f:50:3f:ec:aa:4f:04: 3e:2d:0d:b5:a5:06:16:2c:d5:a0:29:75:fb:f2:46:95:dc:25: dc:6d:d1:d2 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUWuK7TcRHcVNsiJkoe9IjOsSEcX4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkFGODUyMzQ3NDMyRjk5MThEMTQ1MEM3OEExRUM4M0Mz NTk5OTM3QTAeFw0yNjA1MDMwMjI5MzRaFw0yNzA1MDIwMjM0MzRaMDMxMTAvBgNV BAMTKDg1MDEwQjhFNzJEMEQzMDdCOTBDMUYzQTAzMzE5NUMzMzMxRjFCRUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDiCzRgyYlehg1vIlbVA9BEN2+ Ch0RQjLHK25Yx5sY7AZxPI9BlTsy0oOZB4hCg1I79EQGoKrxyOwddXfnOtRkP1it zeO1MseViTvpBrzODzfVNcUMdBJHxFrTqhZDVfbjOpkXJUw994rbs/kY2cXjbFAa vvNWHprx1nMZy7k4XtBBnry2LMW/A0KlqoYRvstlERnMYd8OVTd3cAsmXVsYYGAo ul/4MzPmXvR8qRGefhEPVVzmugQOxcVPXx3Tar+8IR5jZW7i5ayNloIHp7d4zt/5 9jR0WIkdXnwPM6k3aAg8HTN1OmNtXIjjY1yg+cUVZDgSPG67kRFfnm4thgI5AgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUhQELjnLQ0we5DB86AzGVwzMfG+owHwYDVR0j BBgwFoAU+vhSNHQy+ZGNFFDHih7IPDWZk3owDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTc5ODRlM2EtNDhmOS00Y2RhLWJlNmMtNDAwNmMwOGY4ZmQyLzAvRkFGODUyMzQ3 NDMyRjk5MThEMTQ1MEM3OEExRUM4M0MzNTk5OTM3QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GQUY4NTIzNDc0MzJGOTkxOEQxNDUwQzc4QTFFQzgzQzM1OTk5 MzdBLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzU3OTg0ZTNhLTQ4ZjktNGNkYS1i ZTZjLTQwMDZjMDhmOGZkMi8wLzMyMzAzMjJlMzEzODMwMmUzNDM4MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzMzODMxMzQzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMq0MDANBgkqhkiG 9w0BAQsFAAOCAQEAKDdPC/vA7nEoqsmDW2FAuNfKTsAS0SQcctwlt6NETpsKAMBt 5fXfJTybZca2Nzdb7nl/ELCqVI3ITNSpcbmE24tUzJhk5WD2PbQnJAIjNdK6UzKZ LhGtOd3Q2JyWxhDhxsKSHXD/zzzbnRZVcI3HUBTdaoHqPrCpaEirq7gpYl6sTjKV z9LVazNageE6LXFuNIeSkt5Kb8+B5OdpauHi20e0ZTVKzBpgtt8SKszvft9u+PEl zy+Jr7TIdrqEYno3wv9gZp/N95jF/VMg7VuIv2y2X+9H+77I/LvqBpP8OkL5Cxs/ UD/sqk8EPi0NtaUGFizVoCl1+/JGldwl3G3R0g== -----END CERTIFICATE-----Generated at Wed May 13 04:02:54 2026 by rpki-client