$ rpki-client -vvf rpki-rsync.idnic.net/repo/581274af-7cd0-40af-a321-676898d58db8/0/3230322e34372e3136322e302f32342d3234203d3e20313532303337.roa File: 3230322e34372e3136322e302f32342d3234203d3e20313532303337.roa (raw, json) Hash identifier: qkm6D0klaQyvN59pQnarOTQhutzEDT+u+1JdsHBl/VQ= Subject key identifier: 16:99:AA:FC:F3:1D:B9:3B:B6:71:E5:77:A5:01:BE:AD:6F:C0:DE:FF Certificate issuer: /CN=A655C14C173A3BE852B5A2C52C501937C4340242 Certificate serial: 6A1318F0CEC6C9DB3FE81221F19635B404502590 Authority key identifier: A6:55:C1:4C:17:3A:3B:E8:52:B5:A2:C5:2C:50:19:37:C4:34:02:42 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A655C14C173A3BE852B5A2C52C501937C4340242.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/581274af-7cd0-40af-a321-676898d58db8/0/3230322e34372e3136322e302f32342d3234203d3e20313532303337.roa Signing time: Sun 03 May 2026 02:34:49 +0000 ROA not before: Sun 03 May 2026 02:29:49 +0000 ROA not after: Sun 02 May 2027 02:34:49 +0000 asID: 152037 IP address blocks: 202.47.162.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/581274af-7cd0-40af-a321-676898d58db8/0/A655C14C173A3BE852B5A2C52C501937C4340242.crl rsync://rpki-rsync.idnic.net/repo/581274af-7cd0-40af-a321-676898d58db8/0/A655C14C173A3BE852B5A2C52C501937C4340242.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A655C14C173A3BE852B5A2C52C501937C4340242.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 23:05:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:13:18:f0:ce:c6:c9:db:3f:e8:12:21:f1:96:35:b4:04:50:25:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A655C14C173A3BE852B5A2C52C501937C4340242 Validity Not Before: May 3 02:29:49 2026 GMT Not After : May 2 02:34:49 2027 GMT Subject: CN=1699AAFCF31DB93BB671E577A501BEAD6FC0DEFF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:9e:9b:5b:63:2f:45:fa:36:3b:ea:19:a8:39: 3c:c5:37:2a:55:e1:aa:3f:93:39:e6:05:b3:45:ae: 4f:cc:0a:ab:62:65:a1:4c:03:ca:20:74:b8:f9:71: e8:a3:f7:bf:c2:45:3d:e2:7e:5c:d4:45:33:fe:86: 40:66:32:83:c8:53:1b:6c:d3:72:8c:37:64:4b:dd: 2b:89:f7:9a:0a:c0:33:a1:c5:62:09:a0:0f:60:d3: d7:f2:da:d5:e4:bf:38:2b:79:79:a1:31:a0:d7:76: 8b:84:46:ff:09:18:b9:d3:f3:97:3e:19:2f:92:46: 99:2b:15:48:4c:05:33:13:19:56:6e:62:bb:1b:b4: 73:5f:b5:f1:f8:e8:48:8f:11:83:c5:b9:99:96:38: 77:c6:98:93:4f:5e:f7:0e:19:61:0b:fc:c9:bb:d3: a4:0c:6d:ee:51:1f:12:30:ee:88:be:3d:a3:28:f3: 5c:aa:ef:a4:f6:9c:f5:60:73:c4:25:f7:c5:52:db: 84:a6:03:04:68:29:dd:82:36:40:da:48:09:d7:c3: 3e:d0:ef:ab:d3:17:56:c7:45:b2:1b:2f:76:af:33: 63:94:07:97:f3:26:bd:23:31:49:67:e7:f3:2b:03: 11:b7:5d:01:f0:f2:46:c4:6d:85:32:a8:c9:0b:f1: c5:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:99:AA:FC:F3:1D:B9:3B:B6:71:E5:77:A5:01:BE:AD:6F:C0:DE:FF X509v3 Authority Key Identifier: keyid:A6:55:C1:4C:17:3A:3B:E8:52:B5:A2:C5:2C:50:19:37:C4:34:02:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/581274af-7cd0-40af-a321-676898d58db8/0/A655C14C173A3BE852B5A2C52C501937C4340242.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A655C14C173A3BE852B5A2C52C501937C4340242.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/581274af-7cd0-40af-a321-676898d58db8/0/3230322e34372e3136322e302f32342d3234203d3e20313532303337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.47.162.0/24 Signature Algorithm: sha256WithRSAEncryption 0a:d2:ef:0e:54:1e:da:41:51:7c:fa:17:76:26:40:80:6b:a3: 47:c3:6c:0c:7f:0d:83:52:2e:11:ba:f4:ed:55:04:10:6a:a4: 2a:73:32:92:9a:a2:2f:f1:92:0e:2b:9b:87:1f:d3:9e:44:27: f3:9d:20:6c:28:1d:cc:c3:13:8d:ca:f4:5a:85:66:c8:fa:1d: da:21:e4:18:4f:e3:bb:5d:04:b9:5c:76:d9:9b:1a:4c:22:16: 6c:aa:b0:23:05:64:13:03:ef:93:0e:b4:aa:ca:42:59:5b:15: cd:15:f5:8c:7e:35:a6:3f:6f:3b:26:a6:4c:f6:a1:7a:e0:a5: 83:64:24:04:21:a3:11:9d:87:eb:e8:f3:f0:8c:d6:32:8a:ef: 83:40:8a:83:d5:90:18:de:a5:92:d2:55:ed:2b:e3:76:62:08: 2b:aa:ca:77:b3:ac:be:64:54:64:33:ac:64:93:5c:7b:aa:96: b8:c2:db:c7:e3:48:ea:9e:ec:54:ac:85:ac:79:26:07:e6:98: 2c:2c:6d:07:77:5b:0c:55:2b:ac:c7:6f:b9:2e:60:dd:de:1e: be:00:6e:f2:07:5e:94:2d:fa:87:a0:d5:00:f4:40:e7:96:f0: ac:ee:de:b2:3b:13:5f:54:7b:a8:b2:a5:80:4d:5c:3c:02:d7: ba:11:ac:27 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUahMY8M7Gyds/6BIh8ZY1tARQJZAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTY1NUMxNEMxNzNBM0JFODUyQjVBMkM1MkM1MDE5MzdD NDM0MDI0MjAeFw0yNjA1MDMwMjI5NDlaFw0yNzA1MDIwMjM0NDlaMDMxMTAvBgNV BAMTKDE2OTlBQUZDRjMxREI5M0JCNjcxRTU3N0E1MDFCRUFENkZDMERFRkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZnptbYy9F+jY76hmoOTzFNypV 4ao/kznmBbNFrk/MCqtiZaFMA8ogdLj5ceij97/CRT3iflzURTP+hkBmMoPIUxts 03KMN2RL3SuJ95oKwDOhxWIJoA9g09fy2tXkvzgreXmhMaDXdouERv8JGLnT85c+ GS+SRpkrFUhMBTMTGVZuYrsbtHNftfH46EiPEYPFuZmWOHfGmJNPXvcOGWEL/Mm7 06QMbe5RHxIw7oi+PaMo81yq76T2nPVgc8Ql98VS24SmAwRoKd2CNkDaSAnXwz7Q 76vTF1bHRbIbL3avM2OUB5fzJr0jMUln5/MrAxG3XQHw8kbEbYUyqMkL8cX9AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUFpmq/PMduTu2ceV3pQG+rW/A3v8wHwYDVR0j BBgwFoAUplXBTBc6O+hStaLFLFAZN8Q0AkIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTgxMjc0YWYtN2NkMC00MGFmLWEzMjEtNjc2ODk4ZDU4ZGI4LzAvQTY1NUMxNEMx NzNBM0JFODUyQjVBMkM1MkM1MDE5MzdDNDM0MDI0Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BNjU1QzE0QzE3M0EzQkU4NTJCNUEyQzUyQzUwMTkzN0M0MzQw MjQyLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzU4MTI3NGFmLTdjZDAtNDBhZi1h MzIxLTY3Njg5OGQ1OGRiOC8wLzMyMzAzMjJlMzQzNzJlMzEzNjMyMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNTMyMzAzMzM3LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyi+iMA0GCSqG SIb3DQEBCwUAA4IBAQAK0u8OVB7aQVF8+hd2JkCAa6NHw2wMfw2DUi4RuvTtVQQQ aqQqczKSmqIv8ZIOK5uHH9OeRCfznSBsKB3MwxONyvRahWbI+h3aIeQYT+O7XQS5 XHbZmxpMIhZsqrAjBWQTA++TDrSqykJZWxXNFfWMfjWmP287JqZM9qF64KWDZCQE IaMRnYfr6PPwjNYyiu+DQIqD1ZAY3qWS0lXtK+N2Yggrqsp3s6y+ZFRkM6xkk1x7 qpa4wtvH40jqnuxUrIWseSYH5pgsLG0Hd1sMVSusx2+5LmDd3h6+AG7yB16ULfqH oNUA9EDnlvCs7t6yOxNfVHuosqWATVw8Ate6Eawn -----END CERTIFICATE-----Generated at Wed May 13 08:27:59 2026 by rpki-client