$ rpki-client -vvf rpki-rsync.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/3230332e3139302e3234322e302f32332d3233203d3e203234323131.roa File: 3230332e3139302e3234322e302f32332d3233203d3e203234323131.roa (raw, json) Hash identifier: S8QwzcFeryIcuSdPBiMnAYW7dqUXcBjtqFkLeF9/BcE= Subject key identifier: AA:F1:83:8E:9B:ED:C8:92:44:2D:F4:4B:E9:C7:73:3E:1E:61:57:23 Certificate issuer: /CN=68A727878748F40EF62D744B06303F71A6B3F75C Certificate serial: 01FF3D3AA9E9F81269487DE80BC7A11F6411DA4D Authority key identifier: 68:A7:27:87:87:48:F4:0E:F6:2D:74:4B:06:30:3F:71:A6:B3:F7:5C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68A727878748F40EF62D744B06303F71A6B3F75C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/3230332e3139302e3234322e302f32332d3233203d3e203234323131.roa Signing time: Sun 03 May 2026 02:35:13 +0000 ROA not before: Sun 03 May 2026 02:30:13 +0000 ROA not after: Sun 02 May 2027 02:35:13 +0000 asID: 24211 IP address blocks: 203.190.242.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/68A727878748F40EF62D744B06303F71A6B3F75C.crl rsync://rpki-rsync.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/68A727878748F40EF62D744B06303F71A6B3F75C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68A727878748F40EF62D744B06303F71A6B3F75C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:ff:3d:3a:a9:e9:f8:12:69:48:7d:e8:0b:c7:a1:1f:64:11:da:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68A727878748F40EF62D744B06303F71A6B3F75C Validity Not Before: May 3 02:30:13 2026 GMT Not After : May 2 02:35:13 2027 GMT Subject: CN=AAF1838E9BEDC892442DF44BE9C7733E1E615723 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:28:bb:b6:a5:27:1a:30:82:09:6a:bf:da:c1: 0f:c5:12:dc:31:39:0b:c9:d0:d2:52:d5:64:70:7a: f6:28:3f:08:8b:52:34:10:4b:35:f9:72:db:53:cd: 58:e1:bb:44:2e:8d:7f:13:0f:35:7f:1c:4e:fe:6f: 04:be:06:bd:c4:e1:eb:ad:b3:24:b8:d5:30:b2:fa: 9c:8b:7b:2a:fa:76:cc:a2:7c:44:3b:5a:11:8e:3b: e0:57:d7:95:63:29:61:a3:84:f0:f6:54:d6:95:7c: 90:f9:e7:e6:4b:14:60:ff:22:e0:1a:74:21:0e:b9: e4:f2:6d:90:c8:af:89:49:fb:12:95:d6:b8:45:e1: f7:96:0e:44:00:47:0d:6c:29:88:82:9e:ef:f4:34: 86:0b:4a:da:fb:52:41:fb:74:be:ce:15:08:2e:1d: 65:98:2a:fd:10:80:d1:f1:47:96:6d:e1:69:91:0b: 05:cf:c1:bd:14:79:a1:ea:6c:11:d3:42:57:c1:b0: 14:02:20:ff:69:f0:43:77:dc:93:ff:10:d0:ef:f4: b8:0d:64:0e:77:e5:d8:05:30:31:bd:c2:4d:6b:9e: 76:1f:d7:be:09:07:8c:ee:49:4d:06:4d:0b:2c:17: 0f:c2:cd:a4:1d:82:36:da:03:5a:b4:53:f2:2d:c6: 33:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:F1:83:8E:9B:ED:C8:92:44:2D:F4:4B:E9:C7:73:3E:1E:61:57:23 X509v3 Authority Key Identifier: keyid:68:A7:27:87:87:48:F4:0E:F6:2D:74:4B:06:30:3F:71:A6:B3:F7:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/68A727878748F40EF62D744B06303F71A6B3F75C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68A727878748F40EF62D744B06303F71A6B3F75C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/3230332e3139302e3234322e302f32332d3233203d3e203234323131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.190.242.0/23 Signature Algorithm: sha256WithRSAEncryption 25:a1:f9:25:db:20:3f:b4:24:19:fd:11:e6:94:f6:5e:91:66: 05:ec:82:42:ca:20:e7:c6:5b:7e:2c:f7:be:e9:ec:51:87:6c: 28:3c:ae:64:cb:1c:c7:84:c9:f0:0c:c0:cb:53:f5:2c:bc:50: 20:4e:71:48:26:df:35:0b:4a:fd:b6:8f:87:25:3d:86:49:c4: a8:ac:3a:b2:2f:89:c2:49:86:25:41:84:8e:22:ef:ae:4a:e4: ec:2d:74:6d:64:47:53:4f:5f:ff:1d:48:d6:bf:16:58:89:e0: c2:ca:e2:d5:0f:6e:09:be:45:cc:18:72:9a:b4:3a:5a:ff:2a: 94:bb:c7:65:88:e4:cb:f8:81:7a:e9:cd:ab:22:21:3f:79:02: cf:d0:6e:de:31:7e:f8:2d:a3:8c:ee:be:12:a3:7c:65:d1:60: 72:5f:00:cf:ba:03:0d:62:4b:7a:54:99:64:33:e7:ea:67:df: 82:a2:48:e2:8a:3f:6f:e3:4e:b1:23:6e:02:df:ec:04:27:93: b6:10:da:c5:e5:62:3b:9f:46:5d:46:b1:2e:c5:71:a9:9f:4b: 50:ac:76:e8:b1:57:30:db:5d:b7:4e:db:9e:85:54:32:15:42: 7d:a4:84:6b:26:a7:04:d7:bf:09:c3:dc:41:cb:42:54:8e:41: 98:5e:0d:61 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUAf89Oqnp+BJpSH3oC8ehH2QR2k0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjhBNzI3ODc4NzQ4RjQwRUY2MkQ3NDRCMDYzMDNGNzFB NkIzRjc1QzAeFw0yNjA1MDMwMjMwMTNaFw0yNzA1MDIwMjM1MTNaMDMxMTAvBgNV BAMTKEFBRjE4MzhFOUJFREM4OTI0NDJERjQ0QkU5Qzc3MzNFMUU2MTU3MjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnKLu2pScaMIIJar/awQ/FEtwx OQvJ0NJS1WRwevYoPwiLUjQQSzX5cttTzVjhu0QujX8TDzV/HE7+bwS+Br3E4eut syS41TCy+pyLeyr6dsyifEQ7WhGOO+BX15VjKWGjhPD2VNaVfJD55+ZLFGD/IuAa dCEOueTybZDIr4lJ+xKV1rhF4feWDkQARw1sKYiCnu/0NIYLStr7UkH7dL7OFQgu HWWYKv0QgNHxR5Zt4WmRCwXPwb0UeaHqbBHTQlfBsBQCIP9p8EN33JP/ENDv9LgN ZA535dgFMDG9wk1rnnYf174JB4zuSU0GTQssFw/CzaQdgjbaA1q0U/ItxjMBAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUqvGDjpvtyJJELfRL6cdzPh5hVyMwHwYDVR0j BBgwFoAUaKcnh4dI9A72LXRLBjA/caaz91wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTlmMDEzZjktYjRmNy00NThjLWFhYzUtMDgwNDFiM2Y2NWU2LzAvNjhBNzI3ODc4 NzQ4RjQwRUY2MkQ3NDRCMDYzMDNGNzFBNkIzRjc1Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82OEE3Mjc4Nzg3NDhGNDBFRjYyRDc0NEIwNjMwM0Y3MUE2QjNG NzVDLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzU5ZjAxM2Y5LWI0ZjctNDU4Yy1h YWM1LTA4MDQxYjNmNjVlNi8wLzMyMzAzMzJlMzEzOTMwMmUzMjM0MzIyZTMwMmYz MjMzMmQzMjMzMjAzZDNlMjAzMjM0MzIzMTMxLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBy77yMA0GCSqG SIb3DQEBCwUAA4IBAQAlofkl2yA/tCQZ/RHmlPZekWYF7IJCyiDnxlt+LPe+6exR h2woPK5kyxzHhMnwDMDLU/UsvFAgTnFIJt81C0r9to+HJT2GScSorDqyL4nCSYYl QYSOIu+uSuTsLXRtZEdTT1//HUjWvxZYieDCyuLVD24JvkXMGHKatDpa/yqUu8dl iOTL+IF66c2rIiE/eQLP0G7eMX74LaOM7r4So3xl0WByXwDPugMNYkt6VJlkM+fq Z9+Cokjiij9v406xI24C3+wEJ5O2ENrF5WI7n0ZdRrEuxXGpn0tQrHbosVcw2123 TtuehVQyFUJ9pIRrJqcE178Jw9xBy0JUjkGYXg1h -----END CERTIFICATE-----Generated at Wed May 13 02:51:00 2026 by rpki-client