$ rpki-client -vvf rpki-rsync.idnic.net/repo/66c1f51a-8645-4eb1-a2ff-e27c24c8e0c8/0/3230322e3134392e3132382e302f31392d3234203d3e2034383333.roa File: 3230322e3134392e3132382e302f31392d3234203d3e2034383333.roa (raw, json) Hash identifier: Zk2C8S3MwM5h7vXomg1WGWoihsk+uAiRDgp6DvLkrYk= Subject key identifier: 32:7A:9F:FE:AE:4B:37:32:14:A9:75:0D:B8:08:76:FC:DA:94:B3:AE Certificate issuer: /CN=1133578221407DA4E6D6E1F7DDBD402AD17142D1 Certificate serial: 6824CFAE9DD01F5204BD538A59460D9E9349D8D8 Authority key identifier: 11:33:57:82:21:40:7D:A4:E6:D6:E1:F7:DD:BD:40:2A:D1:71:42:D1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1133578221407DA4E6D6E1F7DDBD402AD17142D1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/66c1f51a-8645-4eb1-a2ff-e27c24c8e0c8/0/3230322e3134392e3132382e302f31392d3234203d3e2034383333.roa Signing time: Sun 03 May 2026 02:40:09 +0000 ROA not before: Sun 03 May 2026 02:35:09 +0000 ROA not after: Sun 02 May 2027 02:40:09 +0000 asID: 4833 IP address blocks: 202.149.128.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/66c1f51a-8645-4eb1-a2ff-e27c24c8e0c8/0/1133578221407DA4E6D6E1F7DDBD402AD17142D1.crl rsync://rpki-rsync.idnic.net/repo/66c1f51a-8645-4eb1-a2ff-e27c24c8e0c8/0/1133578221407DA4E6D6E1F7DDBD402AD17142D1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1133578221407DA4E6D6E1F7DDBD402AD17142D1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:24:cf:ae:9d:d0:1f:52:04:bd:53:8a:59:46:0d:9e:93:49:d8:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1133578221407DA4E6D6E1F7DDBD402AD17142D1 Validity Not Before: May 3 02:35:09 2026 GMT Not After : May 2 02:40:09 2027 GMT Subject: CN=327A9FFEAE4B373214A9750DB80876FCDA94B3AE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:57:3b:3c:fd:a7:4f:be:e5:c0:2f:a7:79:7d: 77:6d:b7:86:3c:93:69:9d:20:07:71:98:80:1c:27: e1:56:48:b3:ae:ff:04:6a:b6:d6:85:1c:9e:d9:d2: dd:37:9a:14:16:fb:8d:ce:27:2c:0e:ca:61:35:d7: 9a:ab:17:48:dc:4b:91:c4:51:9a:e7:83:ab:bf:2e: 57:6d:4a:69:60:db:53:58:dc:75:ea:ac:b9:8c:ba: 34:69:c4:8f:13:8c:25:5a:72:4e:86:7b:1a:17:44: e0:31:10:e4:19:f6:c2:d8:4e:a6:bf:29:0e:02:f3: 34:a0:62:8b:5a:8e:a1:32:a4:00:80:e7:b9:5d:27: b9:2d:8a:8c:2a:24:bf:eb:af:07:5a:83:5a:dc:f9: 35:74:8b:16:4e:e1:d1:41:7a:f1:d8:4c:d7:71:d8: f1:ed:e9:29:e8:2a:5c:a9:8d:24:50:2c:f5:bd:c0: 0e:5f:f6:f9:9a:c4:cb:27:f7:24:08:5e:da:b5:0e: 64:ab:72:d8:b2:78:66:98:92:55:5e:cf:67:26:93: 45:ed:07:f1:e0:27:79:99:3e:9a:7c:e6:2b:af:0d: b3:b7:97:1a:75:1b:db:56:b7:f7:ce:65:11:af:dc: 8c:09:e3:cd:56:ad:a8:86:34:4d:fd:e4:c9:e1:71: 47:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:7A:9F:FE:AE:4B:37:32:14:A9:75:0D:B8:08:76:FC:DA:94:B3:AE X509v3 Authority Key Identifier: keyid:11:33:57:82:21:40:7D:A4:E6:D6:E1:F7:DD:BD:40:2A:D1:71:42:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/66c1f51a-8645-4eb1-a2ff-e27c24c8e0c8/0/1133578221407DA4E6D6E1F7DDBD402AD17142D1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1133578221407DA4E6D6E1F7DDBD402AD17142D1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/66c1f51a-8645-4eb1-a2ff-e27c24c8e0c8/0/3230322e3134392e3132382e302f31392d3234203d3e2034383333.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.149.128.0/19 Signature Algorithm: sha256WithRSAEncryption b3:c8:cf:15:a0:7b:7d:fd:2c:72:86:96:12:b9:ad:47:68:62: c2:bf:48:3c:d4:13:e2:4c:bd:e7:f8:41:fc:70:f7:57:a8:46: 6a:a1:fa:49:6e:9b:39:6f:3b:09:71:5a:76:8e:67:90:25:31: 98:87:36:0f:a1:d5:3c:8f:a8:75:f5:d7:a4:c0:52:d4:dd:07: 4f:71:92:d4:45:31:a4:45:5d:02:82:51:02:52:b1:8d:ef:df: 8e:f9:8b:1d:90:38:e6:16:e8:51:c7:be:55:36:9d:61:88:4b: 3d:8c:d5:55:27:e7:2d:48:a4:1b:b6:6a:42:4b:2d:c7:03:9d: cc:25:f4:ac:08:04:d3:7a:21:48:df:4e:24:3c:dd:1b:f9:c3: f8:7c:e2:31:db:bb:4c:d4:32:cf:1e:40:2f:0e:89:be:fb:45: 4f:b1:c5:ed:e1:7c:38:83:40:ad:86:66:ce:ee:02:b3:a2:2d: 92:cd:0a:10:82:66:64:76:4e:76:9a:be:32:38:a4:90:6c:d1: 2e:2f:ab:96:ca:4b:22:77:d9:8e:7d:35:d3:f5:a6:fc:f8:25: d6:89:a2:84:e1:c4:0e:37:c7:8f:4b:f6:06:11:2a:09:a3:a4: cc:df:ca:f8:00:cd:cf:8f:03:c1:81:8e:84:4d:a2:4d:43:b3: 5b:f3:50:dc -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUaCTPrp3QH1IEvVOKWUYNnpNJ2NgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTEzMzU3ODIyMTQwN0RBNEU2RDZFMUY3RERCRDQwMkFE MTcxNDJEMTAeFw0yNjA1MDMwMjM1MDlaFw0yNzA1MDIwMjQwMDlaMDMxMTAvBgNV BAMTKDMyN0E5RkZFQUU0QjM3MzIxNEE5NzUwREI4MDg3NkZDREE5NEIzQUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXVzs8/adPvuXAL6d5fXdtt4Y8 k2mdIAdxmIAcJ+FWSLOu/wRqttaFHJ7Z0t03mhQW+43OJywOymE115qrF0jcS5HE UZrng6u/LldtSmlg21NY3HXqrLmMujRpxI8TjCVack6GexoXROAxEOQZ9sLYTqa/ KQ4C8zSgYotajqEypACA57ldJ7ktiowqJL/rrwdag1rc+TV0ixZO4dFBevHYTNdx 2PHt6SnoKlypjSRQLPW9wA5f9vmaxMsn9yQIXtq1DmSrctiyeGaYklVez2cmk0Xt B/HgJ3mZPpp85iuvDbO3lxp1G9tWt/fOZRGv3IwJ481WraiGNE395MnhcUdnAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUMnqf/q5LNzIUqXUNuAh2/NqUs64wHwYDVR0j BBgwFoAUETNXgiFAfaTm1uH33b1AKtFxQtEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjZjMWY1MWEtODY0NS00ZWIxLWEyZmYtZTI3YzI0YzhlMGM4LzAvMTEzMzU3ODIy MTQwN0RBNEU2RDZFMUY3RERCRDQwMkFEMTcxNDJEMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xMTMzNTc4MjIxNDA3REE0RTZENkUxRjdEREJENDAyQUQxNzE0 MkQxLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzY2YzFmNTFhLTg2NDUtNGViMS1h MmZmLWUyN2MyNGM4ZTBjOC8wLzMyMzAzMjJlMzEzNDM5MmUzMTMyMzgyZTMwMmYz MTM5MmQzMjM0MjAzZDNlMjAzNDM4MzMzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBcqVgDANBgkqhkiG 9w0BAQsFAAOCAQEAs8jPFaB7ff0scoaWErmtR2hiwr9IPNQT4ky95/hB/HD3V6hG aqH6SW6bOW87CXFado5nkCUxmIc2D6HVPI+odfXXpMBS1N0HT3GS1EUxpEVdAoJR AlKxje/fjvmLHZA45hboUce+VTadYYhLPYzVVSfnLUikG7ZqQkstxwOdzCX0rAgE 03ohSN9OJDzdG/nD+HziMdu7TNQyzx5ALw6JvvtFT7HF7eF8OINArYZmzu4Cs6It ks0KEIJmZHZOdpq+MjikkGzRLi+rlspLInfZjn010/Wm/Pgl1omihOHEDjfHj0v2 BhEqCaOkzN/K+ADNz48DwYGOhE2iTUOzW/NQ3A== -----END CERTIFICATE-----Generated at Wed May 13 03:16:32 2026 by rpki-client