$ rpki-client -vvf rpki-rsync.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/3230332e3139302e3234302e302f32342d3234203d3e203234323131.roa File: 3230332e3139302e3234302e302f32342d3234203d3e203234323131.roa (raw, json) Hash identifier: vW5w5IkuRb83zA5ANSFF1CJerE321mN8QnbQgdvihxM= Subject key identifier: 55:F7:75:77:50:2E:98:3C:F2:17:F2:50:F5:7C:4C:D9:F8:72:16:07 Certificate issuer: /CN=68A727878748F40EF62D744B06303F71A6B3F75C Certificate serial: 5006E015DC1346BABAA058480E857F6C49D23599 Authority key identifier: 68:A7:27:87:87:48:F4:0E:F6:2D:74:4B:06:30:3F:71:A6:B3:F7:5C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68A727878748F40EF62D744B06303F71A6B3F75C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/3230332e3139302e3234302e302f32342d3234203d3e203234323131.roa Signing time: Sun 03 May 2026 02:35:17 +0000 ROA not before: Sun 03 May 2026 02:30:17 +0000 ROA not after: Sun 02 May 2027 02:35:17 +0000 asID: 24211 IP address blocks: 203.190.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/68A727878748F40EF62D744B06303F71A6B3F75C.crl rsync://rpki-rsync.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/68A727878748F40EF62D744B06303F71A6B3F75C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68A727878748F40EF62D744B06303F71A6B3F75C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 12:40:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:06:e0:15:dc:13:46:ba:ba:a0:58:48:0e:85:7f:6c:49:d2:35:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68A727878748F40EF62D744B06303F71A6B3F75C Validity Not Before: May 3 02:30:17 2026 GMT Not After : May 2 02:35:17 2027 GMT Subject: CN=55F77577502E983CF217F250F57C4CD9F8721607 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:89:f1:75:d0:af:82:db:6f:45:26:87:e8:b4: 73:ac:c5:cd:17:98:48:15:72:54:74:5a:c0:51:72: 54:1a:e9:da:27:db:32:b2:24:4f:68:63:6f:70:d6: c1:1d:dd:4a:e5:ba:59:21:94:9c:e5:a0:2c:b0:6d: 4f:d7:2f:1d:82:19:cc:b9:e1:92:0a:b5:d7:87:19: 70:39:74:ac:6f:9b:04:42:cb:89:92:77:66:c2:29: ca:ae:0a:13:40:74:b3:8d:42:34:18:04:e8:69:67: 35:9c:47:89:d5:bd:a1:ac:98:94:2b:f2:5c:8b:06: 77:cc:20:7a:e6:db:68:e3:22:cd:af:00:11:8d:c7: 94:42:79:f1:93:aa:f1:41:e4:4c:05:7b:7f:4e:75: 92:c0:3d:8f:47:fc:48:18:ae:51:6c:9b:cc:d6:c3: d2:f8:c6:fb:0f:c4:68:86:55:3d:02:14:a9:72:a9: a4:a9:8a:be:08:8c:30:44:9d:1e:03:68:b7:cf:ae: 75:4c:07:1e:95:86:62:61:be:0b:5b:26:97:0b:2f: 46:6d:58:8e:19:ea:19:85:3f:7f:3b:98:d2:1c:cb: 8c:31:51:d6:8e:ad:0e:7b:69:01:7a:f6:10:43:cc: 17:1b:ac:53:de:3f:9e:73:99:4d:de:84:13:bf:d0: b7:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:F7:75:77:50:2E:98:3C:F2:17:F2:50:F5:7C:4C:D9:F8:72:16:07 X509v3 Authority Key Identifier: keyid:68:A7:27:87:87:48:F4:0E:F6:2D:74:4B:06:30:3F:71:A6:B3:F7:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/68A727878748F40EF62D744B06303F71A6B3F75C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68A727878748F40EF62D744B06303F71A6B3F75C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/3230332e3139302e3234302e302f32342d3234203d3e203234323131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.190.240.0/24 Signature Algorithm: sha256WithRSAEncryption 5f:0e:cf:b5:e1:45:fe:c4:89:af:07:fc:4a:e2:6d:c5:01:2b: 77:c7:1c:fb:cf:0f:db:1c:2e:07:43:fc:a1:82:14:8f:4c:09: 7b:82:59:c2:b1:e7:a6:ad:d4:37:e1:46:0f:e2:56:91:4a:b5: 13:08:20:22:5e:ca:17:11:e4:30:13:b5:89:77:d2:53:13:ff: 9b:eb:76:b5:dc:fd:10:b8:fc:a4:84:62:c7:43:31:fa:6e:fb: 79:6c:41:d0:32:94:7a:ca:67:45:0c:17:02:84:0d:0b:73:d9: 67:38:37:ed:01:13:21:ed:3b:40:47:ac:f4:76:f8:6c:6c:7b: 46:7b:e7:4c:fa:a1:5c:74:2c:b2:fb:1c:7b:dc:fb:b4:7c:12: 5a:5e:fb:55:0c:89:a6:a6:e8:10:02:4a:f1:01:bd:9b:73:d5: 5a:57:0f:02:42:e6:c5:67:ad:a6:58:f2:ac:c2:4e:fa:57:3e: ba:28:c5:87:1f:5e:a0:d0:25:f3:1f:fa:a5:3e:d5:b2:a1:87: 94:ca:2f:93:a9:40:f2:f4:83:48:c6:42:79:86:89:11:aa:c5: 2d:a3:8b:6f:ff:b8:b0:22:a1:46:70:f5:71:13:56:c6:36:d7: d9:e1:a4:72:26:c2:22:35:ab:c3:c3:23:b4:88:26:45:2b:c7: e9:39:6c:7c -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUUAbgFdwTRrq6oFhIDoV/bEnSNZkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjhBNzI3ODc4NzQ4RjQwRUY2MkQ3NDRCMDYzMDNGNzFB NkIzRjc1QzAeFw0yNjA1MDMwMjMwMTdaFw0yNzA1MDIwMjM1MTdaMDMxMTAvBgNV BAMTKDU1Rjc3NTc3NTAyRTk4M0NGMjE3RjI1MEY1N0M0Q0Q5Rjg3MjE2MDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAifF10K+C229FJofotHOsxc0X mEgVclR0WsBRclQa6don2zKyJE9oY29w1sEd3UrlulkhlJzloCywbU/XLx2CGcy5 4ZIKtdeHGXA5dKxvmwRCy4mSd2bCKcquChNAdLONQjQYBOhpZzWcR4nVvaGsmJQr 8lyLBnfMIHrm22jjIs2vABGNx5RCefGTqvFB5EwFe39OdZLAPY9H/EgYrlFsm8zW w9L4xvsPxGiGVT0CFKlyqaSpir4IjDBEnR4DaLfPrnVMBx6VhmJhvgtbJpcLL0Zt WI4Z6hmFP387mNIcy4wxUdaOrQ57aQF69hBDzBcbrFPeP55zmU3ehBO/0LcpAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUVfd1d1AumDzyF/JQ9XxM2fhyFgcwHwYDVR0j BBgwFoAUaKcnh4dI9A72LXRLBjA/caaz91wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTlmMDEzZjktYjRmNy00NThjLWFhYzUtMDgwNDFiM2Y2NWU2LzAvNjhBNzI3ODc4 NzQ4RjQwRUY2MkQ3NDRCMDYzMDNGNzFBNkIzRjc1Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82OEE3Mjc4Nzg3NDhGNDBFRjYyRDc0NEIwNjMwM0Y3MUE2QjNG NzVDLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzU5ZjAxM2Y5LWI0ZjctNDU4Yy1h YWM1LTA4MDQxYjNmNjVlNi8wLzMyMzAzMzJlMzEzOTMwMmUzMjM0MzAyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMjM0MzIzMTMxLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAy77wMA0GCSqG SIb3DQEBCwUAA4IBAQBfDs+14UX+xImvB/xK4m3FASt3xxz7zw/bHC4HQ/yhghSP TAl7glnCseemrdQ34UYP4laRSrUTCCAiXsoXEeQwE7WJd9JTE/+b63a13P0QuPyk hGLHQzH6bvt5bEHQMpR6ymdFDBcChA0Lc9lnODftARMh7TtAR6z0dvhsbHtGe+dM +qFcdCyy+xx73Pu0fBJaXvtVDImmpugQAkrxAb2bc9VaVw8CQubFZ62mWPKswk76 Vz66KMWHH16g0CXzH/qlPtWyoYeUyi+TqUDy9INIxkJ5hokRqsUto4tv/7iwIqFG cPVxE1bGNtfZ4aRyJsIiNavDwyO0iCZFK8fpOWx8 -----END CERTIFICATE-----Generated at Wed May 13 04:19:20 2026 by rpki-client