$ rpki-client -vvf rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/3230322e3137332e38382e302f32342d3234203d3e203233363935.roa File: 3230322e3137332e38382e302f32342d3234203d3e203233363935.roa (raw, json) Hash identifier: C2Bj89qdIZGFpRvHXW9CmNm24CiIbBWqdxvQIhacUR0= Subject key identifier: 18:A6:0D:2C:A3:68:F5:B6:72:8B:F3:D5:CE:1F:EF:7B:90:B5:02:7D Certificate issuer: /CN=B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E Certificate serial: 3E28996D4CEDA77A3A61B16C8466730529B05306 Authority key identifier: B1:6F:3B:47:BB:02:1C:61:D2:68:F0:A4:DB:EA:15:69:F0:9F:3E:5E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/3230322e3137332e38382e302f32342d3234203d3e203233363935.roa Signing time: Sun 03 May 2026 02:41:59 +0000 ROA not before: Sun 03 May 2026 02:36:59 +0000 ROA not after: Sun 02 May 2027 02:41:59 +0000 asID: 23695 IP address blocks: 202.173.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.crl rsync://rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 14:40:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:28:99:6d:4c:ed:a7:7a:3a:61:b1:6c:84:66:73:05:29:b0:53:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E Validity Not Before: May 3 02:36:59 2026 GMT Not After : May 2 02:41:59 2027 GMT Subject: CN=18A60D2CA368F5B6728BF3D5CE1FEF7B90B5027D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:a2:61:08:61:18:fc:a9:a8:37:89:f9:16:70: f7:57:27:c5:5b:93:04:99:7e:e8:d3:01:8e:a7:ee: 08:5b:39:91:34:47:4c:ce:cb:2f:c0:f0:35:f2:24: 61:57:20:46:5d:c9:5c:f6:94:49:9e:74:75:32:81: 35:2f:5f:a0:31:33:aa:2d:75:ab:ce:c5:8e:3e:18: 12:50:52:37:35:40:15:ad:bc:12:eb:40:e1:1a:b4: dd:4c:9b:f1:3c:f9:82:61:4e:c2:1b:9c:03:17:b2: 32:47:76:77:4f:01:63:01:f1:67:c1:9c:46:97:b0: 1e:12:88:47:91:f4:ac:ac:f1:0e:91:1b:97:ab:93: 09:2c:ed:66:76:c8:31:2f:2f:17:1b:b9:3d:18:08: e1:fc:e1:78:85:f2:dd:da:11:f1:a0:33:e6:c5:60: 64:97:47:95:5c:f6:2c:14:45:6f:23:b3:0e:53:1e: 63:b7:e9:a3:8d:07:2c:07:68:a3:fb:2a:3c:15:4d: 8c:24:c5:97:c3:45:49:85:99:15:f9:d3:5b:f5:f5: 41:0a:c7:1d:82:c3:15:68:1a:e7:03:59:10:d0:ec: 5a:3c:5f:cc:36:2e:31:e3:bb:65:b1:41:c4:dd:ff: b6:82:ce:69:da:0d:99:46:a6:e9:06:b1:29:12:24: b7:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:A6:0D:2C:A3:68:F5:B6:72:8B:F3:D5:CE:1F:EF:7B:90:B5:02:7D X509v3 Authority Key Identifier: keyid:B1:6F:3B:47:BB:02:1C:61:D2:68:F0:A4:DB:EA:15:69:F0:9F:3E:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/3230322e3137332e38382e302f32342d3234203d3e203233363935.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.173.88.0/24 Signature Algorithm: sha256WithRSAEncryption 04:28:c9:e5:2f:59:56:22:2d:26:67:fb:a3:af:20:b1:8f:9b: 73:11:84:cb:a7:50:35:20:af:5e:8e:b5:9c:c3:ea:63:52:89: a1:0c:30:5f:42:26:da:4a:1d:68:3f:d4:d6:ec:f0:70:01:69: 97:07:cd:f7:75:f0:27:7f:b8:16:8d:1d:6e:d5:af:31:7e:7e: 52:a4:5a:4d:ca:0b:26:c1:1e:56:ea:72:9a:26:21:c2:e5:c8: 79:42:e6:05:20:6b:47:4c:ab:51:5a:17:40:f4:a6:5c:c7:bb: 87:18:44:8a:b1:49:1d:5f:d7:9e:bb:ec:6a:36:6b:58:59:33: 89:8d:e7:00:d4:44:01:d5:e4:19:2d:bd:d2:7c:7a:ae:44:e0: 67:8f:9b:bd:2c:58:6c:5b:dd:f7:92:37:e7:77:64:1f:04:63: d4:dc:2b:64:92:ef:c2:18:08:cc:81:fd:7f:4b:43:aa:35:d3: 24:11:cf:84:a6:b1:a7:8d:ed:f4:ba:69:ac:e5:43:11:71:8c: a7:78:d1:0d:15:c9:13:d4:a4:a6:18:81:9b:f9:48:f1:65:ac: 0d:ae:92:9a:df:96:9a:70:b8:1a:ec:9c:b8:6f:3f:9a:57:b5: e7:04:06:75:1f:1f:87:49:02:2d:13:d8:ef:dc:0b:b9:f0:cd: 9c:05:44:58 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUPiiZbUztp3o6YbFshGZzBSmwUwYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjE2RjNCNDdCQjAyMUM2MUQyNjhGMEE0REJFQTE1NjlG MDlGM0U1RTAeFw0yNjA1MDMwMjM2NTlaFw0yNzA1MDIwMjQxNTlaMDMxMTAvBgNV BAMTKDE4QTYwRDJDQTM2OEY1QjY3MjhCRjNENUNFMUZFRjdCOTBCNTAyN0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNomEIYRj8qag3ifkWcPdXJ8Vb kwSZfujTAY6n7ghbOZE0R0zOyy/A8DXyJGFXIEZdyVz2lEmedHUygTUvX6AxM6ot davOxY4+GBJQUjc1QBWtvBLrQOEatN1Mm/E8+YJhTsIbnAMXsjJHdndPAWMB8WfB nEaXsB4SiEeR9Kys8Q6RG5erkwks7WZ2yDEvLxcbuT0YCOH84XiF8t3aEfGgM+bF YGSXR5Vc9iwURW8jsw5THmO36aONBywHaKP7KjwVTYwkxZfDRUmFmRX501v19UEK xx2CwxVoGucDWRDQ7Fo8X8w2LjHju2WxQcTd/7aCzmnaDZlGpukGsSkSJLcVAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUGKYNLKNo9bZyi/PVzh/ve5C1An0wHwYDVR0j BBgwFoAUsW87R7sCHGHSaPCk2+oVafCfPl4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmYwZjJiZDktNDJhZS00NDlhLThkNTctYjI2ZGEwNGQ3ZWUxLzAvQjE2RjNCNDdC QjAyMUM2MUQyNjhGMEE0REJFQTE1NjlGMDlGM0U1RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CMTZGM0I0N0JCMDIxQzYxRDI2OEYwQTREQkVBMTU2OUYwOUYz RTVFLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzZmMGYyYmQ5LTQyYWUtNDQ5YS04 ZDU3LWIyNmRhMDRkN2VlMS8wLzMyMzAzMjJlMzEzNzMzMmUzODM4MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzIzMzM2MzkzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMqtWDANBgkqhkiG 9w0BAQsFAAOCAQEABCjJ5S9ZViItJmf7o68gsY+bcxGEy6dQNSCvXo61nMPqY1KJ oQwwX0Im2kodaD/U1uzwcAFplwfN93XwJ3+4Fo0dbtWvMX5+UqRaTcoLJsEeVupy miYhwuXIeULmBSBrR0yrUVoXQPSmXMe7hxhEirFJHV/XnrvsajZrWFkziY3nANRE AdXkGS290nx6rkTgZ4+bvSxYbFvd95I353dkHwRj1NwrZJLvwhgIzIH9f0tDqjXT JBHPhKaxp43t9LpprOVDEXGMp3jRDRXJE9SkphiBm/lI8WWsDa6Smt+WmnC4Guyc uG8/mle15wQGdR8fh0kCLRPY79wLufDNnAVEWA== -----END CERTIFICATE-----Generated at Wed May 13 05:14:46 2026 by rpki-client