$ rpki-client -vvf rpki-rsync.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/3230332e39362e3232382e302f32332d3234203d3e20313334363535.roa File: 3230332e39362e3232382e302f32332d3234203d3e20313334363535.roa (raw, json) Hash identifier: qct805YAJVrMqEwmp7GMGrHlEnZ8CXcTrUlU+oMYiDE= Subject key identifier: 65:F5:8E:28:A9:41:63:50:F0:61:C2:00:98:FD:53:30:38:65:16:59 Certificate issuer: /CN=EC464ACDD6858B613E13B13344BB988E92418A08 Certificate serial: 5D9564580144A63E971ABFD6750A865006FE5A67 Authority key identifier: EC:46:4A:CD:D6:85:8B:61:3E:13:B1:33:44:BB:98:8E:92:41:8A:08 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EC464ACDD6858B613E13B13344BB988E92418A08.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/3230332e39362e3232382e302f32332d3234203d3e20313334363535.roa Signing time: Sun 03 May 2026 02:40:23 +0000 ROA not before: Sun 03 May 2026 02:35:23 +0000 ROA not after: Sun 02 May 2027 02:40:23 +0000 asID: 134655 IP address blocks: 203.96.228.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/EC464ACDD6858B613E13B13344BB988E92418A08.crl rsync://rpki-rsync.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/EC464ACDD6858B613E13B13344BB988E92418A08.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EC464ACDD6858B613E13B13344BB988E92418A08.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 18:02:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:95:64:58:01:44:a6:3e:97:1a:bf:d6:75:0a:86:50:06:fe:5a:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EC464ACDD6858B613E13B13344BB988E92418A08 Validity Not Before: May 3 02:35:23 2026 GMT Not After : May 2 02:40:23 2027 GMT Subject: CN=65F58E28A9416350F061C20098FD533038651659 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:75:69:b2:37:4f:d3:3d:8a:c8:68:02:98:6e: 81:7c:c4:ea:0f:6e:8c:07:4a:31:86:81:23:dd:75: 98:83:35:c0:48:79:02:af:11:c9:51:d9:02:56:a8: 2e:05:e4:bb:b3:23:8c:87:41:04:b6:14:1e:12:90: 61:a4:cc:62:3f:eb:18:e2:2e:87:50:30:7c:d9:d9: c4:fe:8d:d1:20:cc:d5:08:71:b3:68:14:08:23:1e: 02:2c:2d:83:87:fe:27:b5:7b:ac:2a:a6:cb:3d:e2: a6:a4:af:8d:35:8f:b5:19:1b:b4:ae:0d:54:b6:c8: 58:d7:36:ca:a6:ac:4c:ba:22:9c:07:d1:f7:43:a4: f2:33:76:67:01:d0:64:6d:cb:8b:08:b2:4d:51:c1: e7:07:31:d1:66:27:f2:83:ef:b5:fb:e6:e4:81:a8: fe:b8:8b:59:90:e8:f9:6a:79:ab:44:b5:fb:8e:f1: 94:25:53:95:31:95:e0:16:09:f7:20:b0:5b:01:7d: e7:15:30:83:0a:d7:5f:9b:05:e2:e8:a4:23:bb:6d: c4:8f:ea:ad:26:93:20:f1:71:12:be:88:cf:3c:cf: d8:67:7e:68:aa:62:0d:f1:da:19:57:22:92:ee:b7: 8f:4f:f8:e2:ce:3b:c5:1e:04:30:5e:74:84:c1:79: 4c:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:F5:8E:28:A9:41:63:50:F0:61:C2:00:98:FD:53:30:38:65:16:59 X509v3 Authority Key Identifier: keyid:EC:46:4A:CD:D6:85:8B:61:3E:13:B1:33:44:BB:98:8E:92:41:8A:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/EC464ACDD6858B613E13B13344BB988E92418A08.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EC464ACDD6858B613E13B13344BB988E92418A08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/3230332e39362e3232382e302f32332d3234203d3e20313334363535.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.96.228.0/23 Signature Algorithm: sha256WithRSAEncryption 31:a4:b8:c3:74:da:12:02:d8:cf:f0:8c:d2:eb:df:1e:7d:92: d9:a7:a2:18:6c:79:46:a2:45:e0:22:38:28:a0:2b:d1:59:8c: 17:6c:59:b4:2b:96:7f:86:e0:6d:04:a4:09:c9:9c:29:40:a0: 14:97:9f:12:d9:c7:09:79:bf:36:49:32:26:99:67:c1:81:e8: 15:3d:9f:fe:01:f9:53:d8:e3:7b:b1:94:6b:51:21:a8:b4:59: 2b:7d:e1:04:0c:aa:f3:c8:8e:17:9f:12:a5:9d:33:c8:18:7b: 02:92:3d:74:e5:0c:ee:1b:6e:24:97:d6:ca:e3:68:d0:31:71: 6c:00:c2:1f:9e:f7:ad:be:ed:7c:76:34:19:dd:54:7e:4b:8c: 2c:97:5e:8d:54:d8:ec:89:b5:97:5d:5b:7d:ef:f2:cc:27:07: de:13:3f:56:37:36:94:90:73:16:ca:5e:ce:74:ec:7b:7e:f0: 5e:3f:da:f6:64:f4:d0:30:89:8c:71:43:6e:6e:cf:17:6d:da: 60:dd:4b:6c:10:7d:aa:c1:63:46:56:de:28:c4:c2:88:a8:1f: d2:d2:0f:40:08:a4:9c:a4:02:66:79:fa:bd:54:14:b2:cd:94: e6:22:df:4a:d6:e2:16:6b:2b:5d:b7:2d:17:0c:4b:bd:a0:b1: 47:a7:d0:14 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUXZVkWAFEpj6XGr/WdQqGUAb+WmcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUM0NjRBQ0RENjg1OEI2MTNFMTNCMTMzNDRCQjk4OEU5 MjQxOEEwODAeFw0yNjA1MDMwMjM1MjNaFw0yNzA1MDIwMjQwMjNaMDMxMTAvBgNV BAMTKDY1RjU4RTI4QTk0MTYzNTBGMDYxQzIwMDk4RkQ1MzMwMzg2NTE2NTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvdWmyN0/TPYrIaAKYboF8xOoP bowHSjGGgSPddZiDNcBIeQKvEclR2QJWqC4F5LuzI4yHQQS2FB4SkGGkzGI/6xji LodQMHzZ2cT+jdEgzNUIcbNoFAgjHgIsLYOH/ie1e6wqpss94qakr401j7UZG7Su DVS2yFjXNsqmrEy6IpwH0fdDpPIzdmcB0GRty4sIsk1RwecHMdFmJ/KD77X75uSB qP64i1mQ6PlqeatEtfuO8ZQlU5UxleAWCfcgsFsBfecVMIMK11+bBeLopCO7bcSP 6q0mkyDxcRK+iM88z9hnfmiqYg3x2hlXIpLut49P+OLOO8UeBDBedITBeUy5AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUZfWOKKlBY1DwYcIAmP1TMDhlFlkwHwYDVR0j BBgwFoAU7EZKzdaFi2E+E7EzRLuYjpJBiggwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjkzOWRiZjEtMzA3NS00NTE5LWJhOTAtY2VlOGQzOTc5ZmNkLzAvRUM0NjRBQ0RE Njg1OEI2MTNFMTNCMTMzNDRCQjk4OEU5MjQxOEEwOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FQzQ2NEFDREQ2ODU4QjYxM0UxM0IxMzM0NEJCOTg4RTkyNDE4 QTA4LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzY5MzlkYmYxLTMwNzUtNDUxOS1i YTkwLWNlZThkMzk3OWZjZC8wLzMyMzAzMzJlMzkzNjJlMzIzMjM4MmUzMDJmMzIz MzJkMzIzNDIwM2QzZTIwMzEzMzM0MzYzNTM1LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBy2DkMA0GCSqG SIb3DQEBCwUAA4IBAQAxpLjDdNoSAtjP8IzS698efZLZp6IYbHlGokXgIjgooCvR WYwXbFm0K5Z/huBtBKQJyZwpQKAUl58S2ccJeb82STImmWfBgegVPZ/+AflT2ON7 sZRrUSGotFkrfeEEDKrzyI4XnxKlnTPIGHsCkj105QzuG24kl9bK42jQMXFsAMIf nvetvu18djQZ3VR+S4wsl16NVNjsibWXXVt97/LMJwfeEz9WNzaUkHMWyl7OdOx7 fvBeP9r2ZPTQMImMcUNubs8Xbdpg3UtsEH2qwWNGVt4oxMKIqB/S0g9ACKScpAJm efq9VBSyzZTmIt9K1uIWaytdty0XDEu9oLFHp9AU -----END CERTIFICATE-----Generated at Wed May 13 03:48:40 2026 by rpki-client