$ rpki-client -vvf rpki-rsync.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/3232302e3135372e39362e302f32302d3234203d3e2039373835.roa File: 3232302e3135372e39362e302f32302d3234203d3e2039373835.roa (raw, json) Hash identifier: BTFNI8KSCzEVQjrkzQTwBs7yIRfL1AV/7o2X6tYhvoE= Subject key identifier: 26:42:8F:21:A5:D4:76:79:55:F9:A7:99:F9:FA:77:76:E2:C1:31:3D Certificate issuer: /CN=9DD7FD1C0A74FE317EDA41E4D1CDC857AFC1779D Certificate serial: 331A744108FD7A5BCCBEA21B669B826B4F0205BB Authority key identifier: 9D:D7:FD:1C:0A:74:FE:31:7E:DA:41:E4:D1:CD:C8:57:AF:C1:77:9D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9DD7FD1C0A74FE317EDA41E4D1CDC857AFC1779D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/3232302e3135372e39362e302f32302d3234203d3e2039373835.roa Signing time: Sun 03 May 2026 02:40:22 +0000 ROA not before: Sun 03 May 2026 02:35:22 +0000 ROA not after: Sun 02 May 2027 02:40:22 +0000 asID: 9785 IP address blocks: 220.157.96.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/9DD7FD1C0A74FE317EDA41E4D1CDC857AFC1779D.crl rsync://rpki-rsync.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/9DD7FD1C0A74FE317EDA41E4D1CDC857AFC1779D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9DD7FD1C0A74FE317EDA41E4D1CDC857AFC1779D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 10:12:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:1a:74:41:08:fd:7a:5b:cc:be:a2:1b:66:9b:82:6b:4f:02:05:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9DD7FD1C0A74FE317EDA41E4D1CDC857AFC1779D Validity Not Before: May 3 02:35:22 2026 GMT Not After : May 2 02:40:22 2027 GMT Subject: CN=26428F21A5D4767955F9A799F9FA7776E2C1313D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:ff:cd:31:0b:77:1d:6c:13:b3:ff:b3:e3:3b: 8f:f1:f0:8f:99:ff:b0:47:4e:30:4f:de:bb:2f:61: e9:4a:58:6e:3a:59:c4:1b:67:e6:ac:8c:c8:31:43: 03:2e:25:b9:2c:e8:76:1d:fb:68:4c:24:c3:f6:54: 80:14:70:5b:4d:87:12:d7:0b:ae:54:50:ba:37:22: f6:a9:f1:4f:6e:74:03:3e:cf:14:fb:b1:c8:9c:ac: f2:ec:d9:f0:4f:82:ca:ec:6e:32:d3:4a:bd:db:e2: 3d:15:54:97:85:f4:ff:e1:77:f8:41:19:02:64:bd: fd:5e:9b:91:fe:bd:38:7d:83:75:f3:30:0c:81:57: 88:89:3a:90:2d:fc:fc:dd:de:39:20:e6:06:60:d0: a4:88:50:f1:50:11:0b:d9:3f:36:f0:b2:e3:d5:45: c6:45:64:2b:fe:48:fb:fe:b3:4e:7d:98:e4:e6:b5: 58:81:9f:46:c5:72:7a:af:b8:67:90:de:15:56:f3: d3:67:1e:b7:fe:d7:f6:e9:e3:ab:c1:30:a2:e7:4c: 7b:9a:5b:48:c7:db:a8:e8:49:02:48:77:03:28:68: df:25:30:e7:a7:26:aa:86:d3:cc:8a:c2:11:33:68: cf:16:d4:03:f1:9b:d9:fa:07:3e:0a:f0:2c:91:5b: 63:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:42:8F:21:A5:D4:76:79:55:F9:A7:99:F9:FA:77:76:E2:C1:31:3D X509v3 Authority Key Identifier: keyid:9D:D7:FD:1C:0A:74:FE:31:7E:DA:41:E4:D1:CD:C8:57:AF:C1:77:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/9DD7FD1C0A74FE317EDA41E4D1CDC857AFC1779D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9DD7FD1C0A74FE317EDA41E4D1CDC857AFC1779D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/3232302e3135372e39362e302f32302d3234203d3e2039373835.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 220.157.96.0/20 Signature Algorithm: sha256WithRSAEncryption 32:e5:da:ba:4d:24:b8:3c:ea:74:f5:90:c8:80:31:37:88:ac: 14:63:dd:e1:3a:e9:7f:79:65:d8:3d:c7:ae:7e:d2:3d:eb:43: e0:a7:36:57:fc:f8:67:2b:45:ef:08:ec:3d:06:d0:33:b2:92: d8:41:31:7d:0d:48:33:76:f4:45:54:8c:53:98:4e:54:b4:f9: c1:23:27:70:c3:0b:95:c4:19:50:5c:bd:b1:7e:31:8a:15:57: 2f:55:cb:36:1e:8f:fa:ec:79:36:63:10:f5:6b:2b:d1:9c:b2: d9:79:95:a8:b8:25:7f:23:d9:55:e2:2c:16:71:b6:ed:6e:e6: be:5a:a1:b9:6a:fb:0d:38:52:02:c1:d6:28:07:c4:59:ab:94: de:16:30:a1:d7:00:2e:88:6a:46:4c:7a:c5:f6:7f:cf:0a:3b: a2:25:89:87:65:7b:31:3b:70:d9:78:73:02:3c:f7:67:bd:8d: 89:39:b8:7f:c4:d1:46:cb:be:af:3f:5e:d2:b2:9c:09:c5:71: 15:0f:8f:91:75:3e:ea:a5:9a:47:9c:26:22:6a:6f:d6:34:de: f0:63:19:dc:b8:b8:37:05:d4:7b:36:ae:93:b4:b1:25:20:64: 36:18:5d:66:47:d3:7e:cf:fd:cd:34:63:95:7e:05:50:c3:56: ab:ea:5f:56 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUMxp0QQj9elvMvqIbZpuCa08CBbswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUREN0ZEMUMwQTc0RkUzMTdFREE0MUU0RDFDREM4NTdB RkMxNzc5RDAeFw0yNjA1MDMwMjM1MjJaFw0yNzA1MDIwMjQwMjJaMDMxMTAvBgNV BAMTKDI2NDI4RjIxQTVENDc2Nzk1NUY5QTc5OUY5RkE3Nzc2RTJDMTMxM0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCc/80xC3cdbBOz/7PjO4/x8I+Z /7BHTjBP3rsvYelKWG46WcQbZ+asjMgxQwMuJbks6HYd+2hMJMP2VIAUcFtNhxLX C65UULo3Ivap8U9udAM+zxT7scicrPLs2fBPgsrsbjLTSr3b4j0VVJeF9P/hd/hB GQJkvf1em5H+vTh9g3XzMAyBV4iJOpAt/Pzd3jkg5gZg0KSIUPFQEQvZPzbwsuPV RcZFZCv+SPv+s059mOTmtViBn0bFcnqvuGeQ3hVW89NnHrf+1/bp46vBMKLnTHua W0jH26joSQJIdwMoaN8lMOenJqqG08yKwhEzaM8W1APxm9n6Bz4K8CyRW2OxAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUJkKPIaXUdnlV+aeZ+fp3duLBMT0wHwYDVR0j BBgwFoAUndf9HAp0/jF+2kHk0c3IV6/Bd50wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjkwYzkwMDktYWQ1My00ZmE2LWExODMtMzRiMzQ1N2JlYTAzLzAvOUREN0ZEMUMw QTc0RkUzMTdFREE0MUU0RDFDREM4NTdBRkMxNzc5RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85REQ3RkQxQzBBNzRGRTMxN0VEQTQxRTREMUNEQzg1N0FGQzE3 NzlELmNlcjCBoQYIKwYBBQUHAQsEgZQwgZEwgY4GCCsGAQUFBzALhoGBcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzY5MGM5MDA5LWFkNTMtNGZhNi1h MTgzLTM0YjM0NTdiZWEwMy8wLzMyMzIzMDJlMzEzNTM3MmUzOTM2MmUzMDJmMzIz MDJkMzIzNDIwM2QzZTIwMzkzNzM4MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBATcnWAwDQYJKoZIhvcN AQELBQADggEBADLl2rpNJLg86nT1kMiAMTeIrBRj3eE66X95Zdg9x65+0j3rQ+Cn Nlf8+GcrRe8I7D0G0DOykthBMX0NSDN29EVUjFOYTlS0+cEjJ3DDC5XEGVBcvbF+ MYoVVy9VyzYej/rseTZjEPVrK9Gcstl5lai4JX8j2VXiLBZxtu1u5r5aoblq+w04 UgLB1igHxFmrlN4WMKHXAC6IakZMesX2f88KO6IliYdlezE7cNl4cwI892e9jYk5 uH/E0UbLvq8/XtKynAnFcRUPj5F1PuqlmkecJiJqb9Y03vBjGdy4uDcF1Hs2rpO0 sSUgZDYYXWZH037P/c00Y5V+BVDDVqvqX1Y= -----END CERTIFICATE-----Generated at Wed May 13 05:36:23 2026 by rpki-client