$ rpki-client -vvf rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/3230322e3137332e38362e302f32342d3234203d3e203233363935.roa File: 3230322e3137332e38362e302f32342d3234203d3e203233363935.roa (raw, json) Hash identifier: FPBYgRAUbDvme8okydHssT8kdslcODKh4bgEVeiCFKk= Subject key identifier: 59:12:A8:9B:30:7A:64:E4:D6:9E:E5:B8:7D:95:EB:17:5F:39:B3:97 Certificate issuer: /CN=B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E Certificate serial: 0F8D792F6D02803EBC3E56B1344B897DB4DDA316 Authority key identifier: B1:6F:3B:47:BB:02:1C:61:D2:68:F0:A4:DB:EA:15:69:F0:9F:3E:5E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/3230322e3137332e38362e302f32342d3234203d3e203233363935.roa Signing time: Sun 03 May 2026 02:42:02 +0000 ROA not before: Sun 03 May 2026 02:37:02 +0000 ROA not after: Sun 02 May 2027 02:42:02 +0000 asID: 23695 IP address blocks: 202.173.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.crl rsync://rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 14:40:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:8d:79:2f:6d:02:80:3e:bc:3e:56:b1:34:4b:89:7d:b4:dd:a3:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E Validity Not Before: May 3 02:37:02 2026 GMT Not After : May 2 02:42:02 2027 GMT Subject: CN=5912A89B307A64E4D69EE5B87D95EB175F39B397 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:00:2c:f5:cf:0c:19:f3:c8:b9:cd:9a:9f:41: 6f:58:04:2b:20:0a:23:d4:75:89:fe:1f:fc:57:08: c7:25:26:06:7b:95:82:05:96:66:8a:c6:4f:ab:b5: 37:ea:63:ed:bc:66:17:f5:54:81:84:9e:30:5f:a9: 67:49:45:10:d1:cf:8f:07:3a:77:80:67:fb:5d:3a: 5e:56:d7:82:52:dd:17:e2:86:cc:63:c5:80:e1:61: c5:0a:85:39:30:bb:9d:1b:cc:eb:b4:b6:95:38:61: 8c:46:89:f2:71:73:1d:e8:82:9d:61:bd:10:20:57: b4:87:db:93:b6:85:5a:6b:f8:14:7c:b9:e4:86:95: b5:55:47:f9:67:43:eb:68:c6:30:32:04:2c:c3:11: 9f:1e:92:fd:19:27:f2:2c:8f:00:0c:5e:e0:54:3b: ba:fe:e1:80:82:c4:d5:65:60:0c:b9:40:26:90:2d: 79:03:d8:d8:c6:cb:e1:0f:a8:55:ac:2d:e4:d0:d7: 18:75:c4:44:85:87:28:f9:d7:f6:8d:e1:84:54:8d: fa:ca:95:7a:ef:32:6d:d9:ae:1e:c7:77:fe:80:57: 22:25:75:ff:35:02:59:7c:cf:8e:e9:38:41:c5:71: f5:6d:20:89:f6:2d:f8:34:7d:ed:35:20:3a:c0:b0: 8d:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:12:A8:9B:30:7A:64:E4:D6:9E:E5:B8:7D:95:EB:17:5F:39:B3:97 X509v3 Authority Key Identifier: keyid:B1:6F:3B:47:BB:02:1C:61:D2:68:F0:A4:DB:EA:15:69:F0:9F:3E:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/3230322e3137332e38362e302f32342d3234203d3e203233363935.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.173.86.0/24 Signature Algorithm: sha256WithRSAEncryption 0b:70:0a:6c:9e:92:1b:63:07:36:a7:9e:f2:f5:c4:ba:14:78: ac:a3:48:67:81:b1:64:e1:a0:a5:32:84:ce:3a:1a:31:f8:e2: b0:7c:73:0c:95:5c:88:b7:7e:c5:7b:59:21:62:f3:96:20:45: 84:74:aa:de:59:c6:32:42:53:c7:0e:99:aa:87:53:5b:8a:76: 5b:ad:ae:15:f7:65:90:72:92:5d:35:d9:43:e1:bd:71:e0:91: 9a:44:12:ce:23:aa:b9:98:ac:f6:44:3b:14:7e:a9:ed:0c:b7: fa:c0:ff:35:09:1c:50:1f:ab:43:5f:a7:56:4f:53:06:f0:57: af:36:af:15:2f:e0:ad:16:3b:83:0b:2f:34:ce:40:1e:25:3f: d4:32:8a:69:e9:a1:d7:af:4d:c7:39:4f:11:bb:9e:e5:d4:8f: 36:d7:a7:57:13:49:dd:bb:fb:ca:36:36:1e:15:80:43:c8:0e: db:45:fa:b9:3a:ea:0a:16:6a:3d:d5:bb:02:a8:de:e4:5e:39: 32:23:4d:f9:f4:e1:95:ab:e2:91:fa:a8:a4:e1:9e:66:f4:41: e9:f4:84:26:bf:30:c9:41:71:ef:55:7a:b4:12:f1:d1:b5:e9: be:52:3a:85:ac:4c:61:0a:42:37:f1:6a:07:15:4a:c9:b3:bd: 32:3e:0a:32 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUD415L20CgD68PlaxNEuJfbTdoxYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjE2RjNCNDdCQjAyMUM2MUQyNjhGMEE0REJFQTE1NjlG MDlGM0U1RTAeFw0yNjA1MDMwMjM3MDJaFw0yNzA1MDIwMjQyMDJaMDMxMTAvBgNV BAMTKDU5MTJBODlCMzA3QTY0RTRENjlFRTVCODdEOTVFQjE3NUYzOUIzOTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1ACz1zwwZ88i5zZqfQW9YBCsg CiPUdYn+H/xXCMclJgZ7lYIFlmaKxk+rtTfqY+28Zhf1VIGEnjBfqWdJRRDRz48H OneAZ/tdOl5W14JS3RfihsxjxYDhYcUKhTkwu50bzOu0tpU4YYxGifJxcx3ogp1h vRAgV7SH25O2hVpr+BR8ueSGlbVVR/lnQ+toxjAyBCzDEZ8ekv0ZJ/IsjwAMXuBU O7r+4YCCxNVlYAy5QCaQLXkD2NjGy+EPqFWsLeTQ1xh1xESFhyj51/aN4YRUjfrK lXrvMm3Zrh7Hd/6AVyIldf81All8z47pOEHFcfVtIIn2Lfg0fe01IDrAsI1dAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUWRKomzB6ZOTWnuW4fZXrF185s5cwHwYDVR0j BBgwFoAUsW87R7sCHGHSaPCk2+oVafCfPl4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmYwZjJiZDktNDJhZS00NDlhLThkNTctYjI2ZGEwNGQ3ZWUxLzAvQjE2RjNCNDdC QjAyMUM2MUQyNjhGMEE0REJFQTE1NjlGMDlGM0U1RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CMTZGM0I0N0JCMDIxQzYxRDI2OEYwQTREQkVBMTU2OUYwOUYz RTVFLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzZmMGYyYmQ5LTQyYWUtNDQ5YS04 ZDU3LWIyNmRhMDRkN2VlMS8wLzMyMzAzMjJlMzEzNzMzMmUzODM2MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzIzMzM2MzkzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMqtVjANBgkqhkiG 9w0BAQsFAAOCAQEAC3AKbJ6SG2MHNqee8vXEuhR4rKNIZ4GxZOGgpTKEzjoaMfji sHxzDJVciLd+xXtZIWLzliBFhHSq3lnGMkJTxw6ZqodTW4p2W62uFfdlkHKSXTXZ Q+G9ceCRmkQSziOquZis9kQ7FH6p7Qy3+sD/NQkcUB+rQ1+nVk9TBvBXrzavFS/g rRY7gwsvNM5AHiU/1DKKaemh169NxzlPEbue5dSPNtenVxNJ3bv7yjY2HhWAQ8gO 20X6uTrqChZqPdW7Aqje5F45MiNN+fThlavikfqopOGeZvRB6fSEJr8wyUFx71V6 tBLx0bXpvlI6haxMYQpCN/FqBxVKybO9Mj4KMg== -----END CERTIFICATE-----Generated at Wed May 13 04:50:49 2026 by rpki-client