$ rpki-client -vvf rpki-rsync.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/3230322e37322e3139382e302f32342d3234203d3e203538353532.roa File: 3230322e37322e3139382e302f32342d3234203d3e203538353532.roa (raw, json) Hash identifier: q93DQl+hjXIQfrcVhu9DN0JHvkzY8J25CxthuhIjous= Subject key identifier: 84:75:58:98:A4:BB:28:7B:0A:6E:EE:71:03:59:70:5D:09:CB:B5:81 Certificate issuer: /CN=2E7AB1335C4E07C6D34610DA5B920C496F6B61D0 Certificate serial: 7ECB452E5CD10AE93099C7252A36F9BFDD06808B Authority key identifier: 2E:7A:B1:33:5C:4E:07:C6:D3:46:10:DA:5B:92:0C:49:6F:6B:61:D0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E7AB1335C4E07C6D34610DA5B920C496F6B61D0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/3230322e37322e3139382e302f32342d3234203d3e203538353532.roa Signing time: Sun 03 May 2026 02:40:34 +0000 ROA not before: Sun 03 May 2026 02:35:34 +0000 ROA not after: Sun 02 May 2027 02:40:34 +0000 asID: 58552 IP address blocks: 202.72.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/2E7AB1335C4E07C6D34610DA5B920C496F6B61D0.crl rsync://rpki-rsync.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/2E7AB1335C4E07C6D34610DA5B920C496F6B61D0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E7AB1335C4E07C6D34610DA5B920C496F6B61D0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 19:51:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:cb:45:2e:5c:d1:0a:e9:30:99:c7:25:2a:36:f9:bf:dd:06:80:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E7AB1335C4E07C6D34610DA5B920C496F6B61D0 Validity Not Before: May 3 02:35:34 2026 GMT Not After : May 2 02:40:34 2027 GMT Subject: CN=84755898A4BB287B0A6EEE710359705D09CBB581 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:13:06:50:9a:6d:c0:ba:65:18:00:51:25:0e: 81:62:3c:17:a0:3c:40:4d:18:77:03:55:20:2d:88: 9d:0d:b4:9d:17:a8:4d:f0:00:44:cf:07:7a:46:96: 54:50:0e:d9:7c:6e:67:3b:d7:ac:bd:ac:c9:5c:17: 96:ac:9b:80:fe:b6:f9:e0:0a:a8:45:aa:45:2f:c8: 8b:c6:b8:08:b7:1a:fb:36:c1:1b:ee:90:fb:58:5e: 55:a1:2a:f0:50:36:0a:2f:d2:59:98:e9:07:6c:0b: 2d:0b:85:78:57:c8:0e:1b:3c:46:b2:e2:fc:6b:96: d0:c7:5b:6f:d1:b7:5a:ab:b1:b0:8e:50:f4:e6:34: 72:f8:46:43:27:bb:06:34:68:44:2f:2f:79:bd:36: 04:3a:5d:7a:bc:df:12:36:27:3e:d8:47:63:72:d2: 45:6e:47:aa:2f:07:e2:58:0e:a9:2a:34:7c:e4:b7: a2:c1:7d:4b:60:ff:c5:58:93:67:a2:63:c8:b8:b1: 0e:72:93:33:e7:60:76:25:f6:c0:11:07:fd:e1:d3: f4:fe:ac:51:f1:a6:45:2c:7b:07:ba:ee:aa:30:a9: d2:f3:19:5b:85:8a:76:07:de:26:39:88:35:46:ea: 8f:e1:26:f9:12:12:13:fc:f7:fd:bf:5e:44:fc:3d: 58:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:75:58:98:A4:BB:28:7B:0A:6E:EE:71:03:59:70:5D:09:CB:B5:81 X509v3 Authority Key Identifier: keyid:2E:7A:B1:33:5C:4E:07:C6:D3:46:10:DA:5B:92:0C:49:6F:6B:61:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/2E7AB1335C4E07C6D34610DA5B920C496F6B61D0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E7AB1335C4E07C6D34610DA5B920C496F6B61D0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/3230322e37322e3139382e302f32342d3234203d3e203538353532.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.72.198.0/24 Signature Algorithm: sha256WithRSAEncryption 06:9f:62:9c:39:45:f4:45:d6:d7:d9:de:e9:c9:a7:fa:94:aa: 2e:f3:36:36:af:27:09:fc:5f:1e:f5:da:e8:e4:ff:af:b2:3e: 58:64:5d:e7:92:e2:20:22:25:a5:26:90:8e:f4:f7:51:3b:46: f7:82:1c:6f:b7:35:82:77:81:03:a6:3f:36:1b:8a:27:ea:35: 2f:27:85:7d:e7:61:e8:5f:24:00:07:a7:02:65:e5:9d:00:52: 7a:19:d9:b9:9f:a1:85:bd:10:df:e6:d3:ee:8a:78:e4:6b:97: 0a:ab:59:c4:c1:56:13:10:d8:54:bf:19:05:7e:db:41:8e:bf: 9d:d8:ac:9c:04:2c:2a:cf:6f:a8:13:58:55:d6:e9:e6:a6:6f: c5:47:8a:c2:e8:ad:a5:9c:0b:c7:4e:1c:3e:e4:6f:e6:54:55: b8:9e:84:57:38:6f:bb:be:f0:ed:e8:8b:85:18:a6:ad:9a:89: a3:98:7d:c5:96:24:2c:e7:f7:db:ff:7a:92:34:f7:9a:07:30: d0:09:b4:c5:50:bc:34:40:52:d0:05:08:e3:54:ed:ab:02:9f: c0:f0:13:97:8f:16:68:d6:f1:5f:05:01:d7:ec:5e:de:67:cd: 19:97:c6:91:a0:c0:c4:4e:37:08:93:0c:8f:2c:e9:7d:a7:7e: 7f:d4:86:44 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUfstFLlzRCukwmcclKjb5v90GgIswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkU3QUIxMzM1QzRFMDdDNkQzNDYxMERBNUI5MjBDNDk2 RjZCNjFEMDAeFw0yNjA1MDMwMjM1MzRaFw0yNzA1MDIwMjQwMzRaMDMxMTAvBgNV BAMTKDg0NzU1ODk4QTRCQjI4N0IwQTZFRUU3MTAzNTk3MDVEMDlDQkI1ODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtEwZQmm3AumUYAFElDoFiPBeg PEBNGHcDVSAtiJ0NtJ0XqE3wAETPB3pGllRQDtl8bmc716y9rMlcF5asm4D+tvng CqhFqkUvyIvGuAi3Gvs2wRvukPtYXlWhKvBQNgov0lmY6QdsCy0LhXhXyA4bPEay 4vxrltDHW2/Rt1qrsbCOUPTmNHL4RkMnuwY0aEQvL3m9NgQ6XXq83xI2Jz7YR2Ny 0kVuR6ovB+JYDqkqNHzkt6LBfUtg/8VYk2eiY8i4sQ5ykzPnYHYl9sARB/3h0/T+ rFHxpkUsewe67qowqdLzGVuFinYH3iY5iDVG6o/hJvkSEhP89/2/XkT8PVjTAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUhHVYmKS7KHsKbu5xA1lwXQnLtYEwHwYDVR0j BBgwFoAULnqxM1xOB8bTRhDaW5IMSW9rYdAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjlhY2I0YTgtNzgwNC00NTI2LTg0ZDItODY5YjkxYTY3MTlkLzAvMkU3QUIxMzM1 QzRFMDdDNkQzNDYxMERBNUI5MjBDNDk2RjZCNjFEMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yRTdBQjEzMzVDNEUwN0M2RDM0NjEwREE1QjkyMEM0OTZGNkI2 MUQwLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzY5YWNiNGE4LTc4MDQtNDUyNi04 NGQyLTg2OWI5MWE2NzE5ZC8wLzMyMzAzMjJlMzczMjJlMzEzOTM4MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzUzODM1MzUzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMpIxjANBgkqhkiG 9w0BAQsFAAOCAQEABp9inDlF9EXW19ne6cmn+pSqLvM2Nq8nCfxfHvXa6OT/r7I+ WGRd55LiICIlpSaQjvT3UTtG94Icb7c1gneBA6Y/NhuKJ+o1LyeFfedh6F8kAAen AmXlnQBSehnZuZ+hhb0Q3+bT7op45GuXCqtZxMFWExDYVL8ZBX7bQY6/ndisnAQs Ks9vqBNYVdbp5qZvxUeKwuitpZwLx04cPuRv5lRVuJ6EVzhvu77w7eiLhRimrZqJ o5h9xZYkLOf32/96kjT3mgcw0Am0xVC8NEBS0AUI41TtqwKfwPATl48WaNbxXwUB 1+xe3mfNGZfGkaDAxE43CJMMjyzpfad+f9SGRA== -----END CERTIFICATE-----Generated at Wed May 13 09:51:24 2026 by rpki-client