$ rpki-client -vvf rpki-rsync.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/3230322e34332e37322e302f32342d3234203d3e203435323938.roa File: 3230322e34332e37322e302f32342d3234203d3e203435323938.roa (raw, json) Hash identifier: C+WZEP5EJdoW5MzIg59OBi6Rygyt+/g8wsJNOBEEwbk= Subject key identifier: A0:61:FB:66:B8:29:B2:06:83:9C:EA:15:FA:50:8E:E2:03:2C:E0:00 Certificate issuer: /CN=4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0 Certificate serial: 7B80FBEC6A53E53E052EB8074B168FF8A56523E9 Authority key identifier: 4A:4E:AE:6D:F7:EB:F8:D5:B4:40:4D:BA:E4:87:48:CC:F2:70:F7:A0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/3230322e34332e37322e302f32342d3234203d3e203435323938.roa Signing time: Sun 03 May 2026 02:39:50 +0000 ROA not before: Sun 03 May 2026 02:34:50 +0000 ROA not after: Sun 02 May 2027 02:39:50 +0000 asID: 45298 IP address blocks: 202.43.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0.crl rsync://rpki-rsync.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 04:31:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:80:fb:ec:6a:53:e5:3e:05:2e:b8:07:4b:16:8f:f8:a5:65:23:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0 Validity Not Before: May 3 02:34:50 2026 GMT Not After : May 2 02:39:50 2027 GMT Subject: CN=A061FB66B829B206839CEA15FA508EE2032CE000 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:1c:30:af:eb:68:2c:8b:52:00:e9:44:87:18: a6:35:7a:4d:9d:0a:59:62:7d:6f:67:d4:35:89:b7: 8a:6a:76:53:20:27:23:fa:0c:64:64:ff:c1:a7:c4: de:bc:3b:4e:01:ac:68:42:43:12:9c:a3:e4:ef:15: 60:71:54:50:a9:ab:59:df:2e:42:91:03:07:fa:ca: b1:a5:24:d6:d8:af:c7:d5:fa:6a:98:f3:ea:eb:ed: c9:63:ec:6c:88:ef:fd:0e:5c:b9:ce:42:3e:e9:d7: 9d:b0:78:c3:ea:8a:2b:5c:d4:bc:72:61:c0:9a:52: e6:20:5c:7c:1c:4e:df:ae:56:6d:ce:f1:83:63:c6: 3d:99:7e:4d:73:50:54:2a:78:f0:42:32:fa:2b:03: af:f9:30:10:81:19:d0:1c:de:8c:c9:31:b6:87:9a: 28:4b:bc:c7:f3:78:67:2b:85:2b:33:ca:32:49:b1: 34:f0:04:bf:af:e7:12:9b:1c:50:97:a0:55:34:1c: cc:ef:c9:2b:15:43:43:9b:8d:f9:1f:43:0c:bf:6d: 7a:e5:c2:c8:a3:c7:1e:ba:4d:b6:43:56:c0:35:49: 80:c5:34:84:f3:f9:75:0d:65:b3:19:ed:3a:b3:62: e3:48:2f:01:3c:d9:91:04:99:87:73:f3:b0:cc:ed: 67:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:61:FB:66:B8:29:B2:06:83:9C:EA:15:FA:50:8E:E2:03:2C:E0:00 X509v3 Authority Key Identifier: keyid:4A:4E:AE:6D:F7:EB:F8:D5:B4:40:4D:BA:E4:87:48:CC:F2:70:F7:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/3230322e34332e37322e302f32342d3234203d3e203435323938.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.43.72.0/24 Signature Algorithm: sha256WithRSAEncryption b5:a2:a5:e2:98:6e:ba:c2:1a:04:47:74:16:55:8e:46:19:38: e8:a1:16:ad:cb:8b:21:e9:a3:f2:fd:87:05:d4:4c:9a:70:6a: 68:c8:ab:d7:35:59:cf:97:42:60:b5:d3:58:39:1f:d0:ea:57: bf:87:fb:81:d1:f0:53:83:e9:6a:15:b6:d4:cf:ee:bf:44:49: 64:87:a5:83:26:c6:6b:6e:a6:82:cf:81:0b:15:74:87:9f:92: ff:60:28:0f:ee:07:0e:99:96:b3:b5:69:97:77:a9:4d:7b:d4: 96:db:fa:11:ba:90:1f:e7:18:97:14:f0:61:95:71:e0:6f:69: 84:40:f2:c9:d6:1e:d7:ca:8e:5a:a6:4c:79:66:04:eb:e9:ce: c3:97:94:c6:23:88:fb:bd:7a:09:c0:8e:a0:c2:a9:19:52:c0: df:ed:98:2a:c5:3e:b4:2c:d8:5d:61:a1:3d:32:4a:45:66:74: e7:5c:a4:0a:eb:6e:1d:e1:a8:df:35:c6:36:14:c9:d0:32:9a: 0a:0b:c3:eb:b2:9f:e8:c2:a6:57:27:5a:be:6a:b2:4e:00:33: f1:41:ce:5e:ce:cc:19:eb:71:f7:1c:ef:d0:f0:35:b1:cf:07: 5f:c4:ee:2d:9b:d1:b0:62:49:06:3e:c3:52:51:79:85:5a:13: 89:0d:0a:7f -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUe4D77GpT5T4FLrgHSxaP+KVlI+kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEE0RUFFNkRGN0VCRjhENUI0NDA0REJBRTQ4NzQ4Q0NG MjcwRjdBMDAeFw0yNjA1MDMwMjM0NTBaFw0yNzA1MDIwMjM5NTBaMDMxMTAvBgNV BAMTKEEwNjFGQjY2QjgyOUIyMDY4MzlDRUExNUZBNTA4RUUyMDMyQ0UwMDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeHDCv62gsi1IA6USHGKY1ek2d CllifW9n1DWJt4pqdlMgJyP6DGRk/8GnxN68O04BrGhCQxKco+TvFWBxVFCpq1nf LkKRAwf6yrGlJNbYr8fV+mqY8+rr7clj7GyI7/0OXLnOQj7p152weMPqiitc1Lxy YcCaUuYgXHwcTt+uVm3O8YNjxj2Zfk1zUFQqePBCMvorA6/5MBCBGdAc3ozJMbaH mihLvMfzeGcrhSszyjJJsTTwBL+v5xKbHFCXoFU0HMzvySsVQ0ObjfkfQwy/bXrl wsijxx66TbZDVsA1SYDFNITz+XUNZbMZ7TqzYuNILwE82ZEEmYdz87DM7WeHAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUoGH7ZrgpsgaDnOoV+lCO4gMs4AAwHwYDVR0j BBgwFoAUSk6ubffr+NW0QE265IdIzPJw96AwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjVlYzI1ZTQtOWFhOC00YmVmLTkwOTctYzBiZWMwYjI2NmE3LzAvNEE0RUFFNkRG N0VCRjhENUI0NDA0REJBRTQ4NzQ4Q0NGMjcwRjdBMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80QTRFQUU2REY3RUJGOEQ1QjQ0MDREQkFFNDg3NDhDQ0YyNzBG N0EwLmNlcjCBoQYIKwYBBQUHAQsEgZQwgZEwgY4GCCsGAQUFBzALhoGBcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzY1ZWMyNWU0LTlhYTgtNGJlZi05 MDk3LWMwYmVjMGIyNjZhNy8wLzMyMzAzMjJlMzQzMzJlMzczMjJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDM0MzUzMjM5Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADKK0gwDQYJKoZIhvcN AQELBQADggEBALWipeKYbrrCGgRHdBZVjkYZOOihFq3LiyHpo/L9hwXUTJpwamjI q9c1Wc+XQmC101g5H9DqV7+H+4HR8FOD6WoVttTP7r9ESWSHpYMmxmtupoLPgQsV dIefkv9gKA/uBw6ZlrO1aZd3qU171Jbb+hG6kB/nGJcU8GGVceBvaYRA8snWHtfK jlqmTHlmBOvpzsOXlMYjiPu9egnAjqDCqRlSwN/tmCrFPrQs2F1hoT0ySkVmdOdc pArrbh3hqN81xjYUydAymgoLw+uyn+jCplcnWr5qsk4AM/FBzl7OzBnrcfcc79Dw NbHPB1/E7i2b0bBiSQY+w1JReYVaE4kNCn8= -----END CERTIFICATE-----Generated at Wed May 13 06:26:19 2026 by rpki-client