$ rpki-client -vvf rpki-rsync.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/3230332e3139302e3234372e302f32342d3234203d3e203234323131.roa File: 3230332e3139302e3234372e302f32342d3234203d3e203234323131.roa (raw, json) Hash identifier: WRqUfw4kkLNha7EwV7NENaJIZvhb1ikV9t5ePDUcyD4= Subject key identifier: 87:BF:11:CC:38:24:62:74:33:12:7C:45:2D:2E:EB:D8:28:DE:60:71 Certificate issuer: /CN=68A727878748F40EF62D744B06303F71A6B3F75C Certificate serial: 69D594CB41CF0C4317C6889E9E0806B1DF902EB0 Authority key identifier: 68:A7:27:87:87:48:F4:0E:F6:2D:74:4B:06:30:3F:71:A6:B3:F7:5C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68A727878748F40EF62D744B06303F71A6B3F75C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/3230332e3139302e3234372e302f32342d3234203d3e203234323131.roa Signing time: Sun 03 May 2026 02:35:17 +0000 ROA not before: Sun 03 May 2026 02:30:17 +0000 ROA not after: Sun 02 May 2027 02:35:17 +0000 asID: 24211 IP address blocks: 203.190.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/68A727878748F40EF62D744B06303F71A6B3F75C.crl rsync://rpki-rsync.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/68A727878748F40EF62D744B06303F71A6B3F75C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68A727878748F40EF62D744B06303F71A6B3F75C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 12:40:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:d5:94:cb:41:cf:0c:43:17:c6:88:9e:9e:08:06:b1:df:90:2e:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68A727878748F40EF62D744B06303F71A6B3F75C Validity Not Before: May 3 02:30:17 2026 GMT Not After : May 2 02:35:17 2027 GMT Subject: CN=87BF11CC3824627433127C452D2EEBD828DE6071 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:c8:41:e8:86:fe:60:bf:c5:2e:bb:52:57:3b: b6:77:24:3a:92:fe:de:b8:aa:78:09:33:2e:ea:ce: 17:6c:ab:c7:4a:ad:77:1c:85:fb:29:25:3f:43:23: 91:dc:45:98:94:64:e0:75:7d:30:43:3e:88:d0:b8: fe:f4:8d:67:bb:80:56:95:21:a3:3f:14:06:7a:93: b2:27:7e:ce:9a:74:8e:7e:39:d1:f4:2c:03:8d:64: be:ad:08:f2:1d:35:d5:9f:65:3f:19:c9:b8:e1:3e: 2b:ad:95:00:bf:4d:4b:66:ac:ac:9a:08:4a:aa:f4: 60:5f:a9:6f:c7:c6:ed:ad:50:c0:a7:d0:02:4c:b6: 6a:3b:bb:99:5a:f3:31:90:f8:61:81:e6:07:02:d2: 9e:16:ea:f9:e9:ef:30:e6:cb:50:d2:33:59:44:25: 67:e5:7a:90:d3:5f:79:76:1b:b2:77:54:8e:3e:78: 5b:ef:97:3a:67:db:c7:12:83:19:70:85:54:95:ed: e4:b6:ed:bb:91:ad:5b:0d:c2:37:34:1c:f4:bf:04: fc:34:46:e3:d3:3a:87:3a:7d:b6:8a:6c:c9:a0:cf: 08:de:da:d3:1c:ad:73:df:96:39:d5:b1:f5:3a:0b: 10:12:0d:a8:64:b6:37:90:c4:68:9c:4d:18:2e:15: 1b:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:BF:11:CC:38:24:62:74:33:12:7C:45:2D:2E:EB:D8:28:DE:60:71 X509v3 Authority Key Identifier: keyid:68:A7:27:87:87:48:F4:0E:F6:2D:74:4B:06:30:3F:71:A6:B3:F7:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/68A727878748F40EF62D744B06303F71A6B3F75C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68A727878748F40EF62D744B06303F71A6B3F75C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/3230332e3139302e3234372e302f32342d3234203d3e203234323131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.190.247.0/24 Signature Algorithm: sha256WithRSAEncryption 47:eb:7d:b4:cb:55:2a:fa:f4:f3:dc:98:cf:cd:17:e7:da:ab: 75:9f:bc:06:75:d5:31:39:c9:16:f4:ea:0d:02:5d:fb:5b:11: 46:10:61:86:96:90:16:e8:29:b3:63:b7:20:91:74:d8:f1:dc: 8f:38:7a:f8:93:43:20:25:f6:97:66:f7:5c:e3:69:f3:cf:e7: dd:44:ed:44:62:0f:69:01:34:9b:20:8e:55:33:49:f8:9f:23: 56:38:05:36:c6:44:d9:a3:9d:36:37:d6:a8:cb:df:89:f7:7c: 4c:81:40:33:df:1b:bf:35:47:cf:28:1a:11:6e:46:e3:b6:e7: 79:04:4e:1b:af:59:25:a3:a4:10:92:63:1b:92:f1:92:60:72: 02:15:a2:74:77:59:f4:2d:eb:cb:22:4a:a1:24:04:b8:42:44: d3:39:d6:e1:79:fa:ef:ed:31:a1:09:72:bc:30:fb:b0:e9:6c: 93:5b:b7:e6:0d:3a:b1:63:1a:7e:11:d9:34:06:0f:3d:d7:76: 01:7b:54:4e:a9:38:4d:8f:17:37:66:9f:96:ea:b0:89:14:44: d2:19:f7:e1:38:6b:b7:02:91:af:d4:2f:b6:7a:b9:7a:8d:a4: 0c:b9:57:89:e0:09:27:95:b9:8d:40:5d:90:69:48:29:46:a5: 49:4c:bb:39 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUadWUy0HPDEMXxoienggGsd+QLrAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjhBNzI3ODc4NzQ4RjQwRUY2MkQ3NDRCMDYzMDNGNzFB NkIzRjc1QzAeFw0yNjA1MDMwMjMwMTdaFw0yNzA1MDIwMjM1MTdaMDMxMTAvBgNV BAMTKDg3QkYxMUNDMzgyNDYyNzQzMzEyN0M0NTJEMkVFQkQ4MjhERTYwNzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEyEHohv5gv8Uuu1JXO7Z3JDqS /t64qngJMy7qzhdsq8dKrXcchfspJT9DI5HcRZiUZOB1fTBDPojQuP70jWe7gFaV IaM/FAZ6k7Infs6adI5+OdH0LAONZL6tCPIdNdWfZT8ZybjhPiutlQC/TUtmrKya CEqq9GBfqW/Hxu2tUMCn0AJMtmo7u5la8zGQ+GGB5gcC0p4W6vnp7zDmy1DSM1lE JWflepDTX3l2G7J3VI4+eFvvlzpn28cSgxlwhVSV7eS27buRrVsNwjc0HPS/BPw0 RuPTOoc6fbaKbMmgzwje2tMcrXPfljnVsfU6CxASDahktjeQxGicTRguFRvjAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUh78RzDgkYnQzEnxFLS7r2CjeYHEwHwYDVR0j BBgwFoAUaKcnh4dI9A72LXRLBjA/caaz91wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTlmMDEzZjktYjRmNy00NThjLWFhYzUtMDgwNDFiM2Y2NWU2LzAvNjhBNzI3ODc4 NzQ4RjQwRUY2MkQ3NDRCMDYzMDNGNzFBNkIzRjc1Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82OEE3Mjc4Nzg3NDhGNDBFRjYyRDc0NEIwNjMwM0Y3MUE2QjNG NzVDLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzU5ZjAxM2Y5LWI0ZjctNDU4Yy1h YWM1LTA4MDQxYjNmNjVlNi8wLzMyMzAzMzJlMzEzOTMwMmUzMjM0MzcyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMjM0MzIzMTMxLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAy773MA0GCSqG SIb3DQEBCwUAA4IBAQBH6320y1Uq+vTz3JjPzRfn2qt1n7wGddUxOckW9OoNAl37 WxFGEGGGlpAW6CmzY7cgkXTY8dyPOHr4k0MgJfaXZvdc42nzz+fdRO1EYg9pATSb II5VM0n4nyNWOAU2xkTZo502N9aoy9+J93xMgUAz3xu/NUfPKBoRbkbjtud5BE4b r1klo6QQkmMbkvGSYHICFaJ0d1n0LevLIkqhJAS4QkTTOdbhefrv7TGhCXK8MPuw 6WyTW7fmDTqxYxp+Edk0Bg8913YBe1ROqThNjxc3Zp+W6rCJFETSGffhOGu3ApGv 1C+2erl6jaQMuVeJ4AknlbmNQF2QaUgpRqVJTLs5 -----END CERTIFICATE-----Generated at Wed May 13 04:03:48 2026 by rpki-client