$ rpki-client -vvf rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/3230322e3137332e38392e302f32342d3234203d3e203233363935.roa File: 3230322e3137332e38392e302f32342d3234203d3e203233363935.roa (raw, json) Hash identifier: twBR9cmqJlCntLXdyzg+FVeylX1cmGU/2l3YwztQGss= Subject key identifier: 0A:B8:5D:1B:31:0B:36:E0:7D:5F:F5:BA:0E:C8:D1:95:74:96:51:06 Certificate issuer: /CN=B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E Certificate serial: 25CA88865E59E6CCBED0218C922E1BF95E1CC415 Authority key identifier: B1:6F:3B:47:BB:02:1C:61:D2:68:F0:A4:DB:EA:15:69:F0:9F:3E:5E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/3230322e3137332e38392e302f32342d3234203d3e203233363935.roa Signing time: Sun 03 May 2026 02:42:05 +0000 ROA not before: Sun 03 May 2026 02:37:05 +0000 ROA not after: Sun 02 May 2027 02:42:05 +0000 asID: 23695 IP address blocks: 202.173.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.crl rsync://rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 14:40:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:ca:88:86:5e:59:e6:cc:be:d0:21:8c:92:2e:1b:f9:5e:1c:c4:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E Validity Not Before: May 3 02:37:05 2026 GMT Not After : May 2 02:42:05 2027 GMT Subject: CN=0AB85D1B310B36E07D5FF5BA0EC8D19574965106 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:5d:22:7b:50:6b:63:18:40:77:94:78:8f:1c: 1c:58:9d:36:f9:2f:d3:25:6d:50:90:ef:ea:9d:4d: bf:25:c0:33:47:f7:dc:37:5d:79:b9:d9:c8:e2:d5: 81:6e:6c:62:28:e2:cc:e2:47:1e:01:51:84:9a:72: b0:c8:50:a9:ee:ca:03:03:31:8b:75:bb:bc:59:4a: eb:6a:23:55:a6:38:bc:e5:31:ff:e7:bd:c1:ef:ff: d8:77:d2:72:e4:dd:82:87:7a:9b:d5:b3:b8:d1:2e: d7:d4:97:a8:f6:28:be:a1:86:25:ca:89:1f:54:38: 76:c8:a4:ee:cf:00:d3:30:18:25:2b:5c:48:f2:f6: 45:d1:66:27:44:4c:dd:38:0d:ba:d0:8c:ef:79:87: a0:a7:91:9d:bd:41:81:0d:d2:97:82:07:25:a5:6f: a0:92:b4:38:e6:60:14:50:67:86:63:f6:e7:eb:d0: a5:cc:08:a2:7d:64:b8:ef:aa:a2:dd:67:45:ea:aa: a2:21:f9:13:5a:f2:2c:67:21:bd:82:fe:22:13:3a: 10:94:c6:f7:2b:c3:97:56:e5:62:63:28:c7:4b:56: ea:82:10:3b:e2:67:aa:9c:05:1f:4e:fc:c0:0c:a2: 2f:95:e7:59:f5:9b:0c:61:52:d7:46:67:26:53:56: cf:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:B8:5D:1B:31:0B:36:E0:7D:5F:F5:BA:0E:C8:D1:95:74:96:51:06 X509v3 Authority Key Identifier: keyid:B1:6F:3B:47:BB:02:1C:61:D2:68:F0:A4:DB:EA:15:69:F0:9F:3E:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/3230322e3137332e38392e302f32342d3234203d3e203233363935.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.173.89.0/24 Signature Algorithm: sha256WithRSAEncryption 64:e8:7a:dd:d4:6e:fd:f0:5a:a0:c7:3a:0f:6d:ee:5e:db:b5: 54:d5:ac:88:d3:59:b3:5d:dd:48:1e:3d:d2:77:38:07:70:a2: 04:3e:7a:88:16:e8:74:ca:2e:5a:f6:65:6c:8a:a5:de:33:a9: 52:11:07:83:a2:23:78:10:a3:b9:f3:1e:90:41:00:c4:34:a4: d7:18:e9:29:60:98:1c:41:7a:a2:5d:65:f8:41:2b:94:80:9a: b1:19:7c:2f:e1:29:de:03:6c:33:a8:d4:6f:72:c1:53:9b:fd: 0e:a7:fe:2a:a8:60:a2:4a:f4:68:b6:f9:32:af:6a:0d:c9:cc: 86:7a:9c:6b:70:7f:72:d2:0d:33:68:79:c5:f3:91:d6:de:c2: 93:1f:2f:a5:f9:90:f1:82:e3:97:7c:3c:41:f0:27:b1:4f:e8: 05:59:85:ce:b5:9d:6b:01:22:f5:62:cf:97:fd:ab:91:22:4a: 12:b1:5f:2f:15:b3:a0:65:c0:c5:0a:a0:31:26:c7:bb:bc:d9: 3b:cd:9b:2b:c2:a5:52:60:9f:df:38:31:25:96:7f:41:53:99: 51:ba:81:2d:9a:86:4b:12:7e:3f:e0:4c:58:0a:4b:97:92:a2: a0:6e:d9:9e:9d:d7:85:41:f9:58:03:cb:4b:17:69:b1:5a:9f: e7:3a:09:ad -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUJcqIhl5Z5sy+0CGMki4b+V4cxBUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjE2RjNCNDdCQjAyMUM2MUQyNjhGMEE0REJFQTE1NjlG MDlGM0U1RTAeFw0yNjA1MDMwMjM3MDVaFw0yNzA1MDIwMjQyMDVaMDMxMTAvBgNV BAMTKDBBQjg1RDFCMzEwQjM2RTA3RDVGRjVCQTBFQzhEMTk1NzQ5NjUxMDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpXSJ7UGtjGEB3lHiPHBxYnTb5 L9MlbVCQ7+qdTb8lwDNH99w3XXm52cji1YFubGIo4sziRx4BUYSacrDIUKnuygMD MYt1u7xZSutqI1WmOLzlMf/nvcHv/9h30nLk3YKHepvVs7jRLtfUl6j2KL6hhiXK iR9UOHbIpO7PANMwGCUrXEjy9kXRZidETN04DbrQjO95h6CnkZ29QYEN0peCByWl b6CStDjmYBRQZ4Zj9ufr0KXMCKJ9ZLjvqqLdZ0XqqqIh+RNa8ixnIb2C/iITOhCU xvcrw5dW5WJjKMdLVuqCEDviZ6qcBR9O/MAMoi+V51n1mwxhUtdGZyZTVs+3AgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUCrhdGzELNuB9X/W6DsjRlXSWUQYwHwYDVR0j BBgwFoAUsW87R7sCHGHSaPCk2+oVafCfPl4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmYwZjJiZDktNDJhZS00NDlhLThkNTctYjI2ZGEwNGQ3ZWUxLzAvQjE2RjNCNDdC QjAyMUM2MUQyNjhGMEE0REJFQTE1NjlGMDlGM0U1RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CMTZGM0I0N0JCMDIxQzYxRDI2OEYwQTREQkVBMTU2OUYwOUYz RTVFLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzZmMGYyYmQ5LTQyYWUtNDQ5YS04 ZDU3LWIyNmRhMDRkN2VlMS8wLzMyMzAzMjJlMzEzNzMzMmUzODM5MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzIzMzM2MzkzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMqtWTANBgkqhkiG 9w0BAQsFAAOCAQEAZOh63dRu/fBaoMc6D23uXtu1VNWsiNNZs13dSB490nc4B3Ci BD56iBbodMouWvZlbIql3jOpUhEHg6IjeBCjufMekEEAxDSk1xjpKWCYHEF6ol1l +EErlICasRl8L+Ep3gNsM6jUb3LBU5v9Dqf+Kqhgokr0aLb5Mq9qDcnMhnqca3B/ ctINM2h5xfOR1t7Ckx8vpfmQ8YLjl3w8QfAnsU/oBVmFzrWdawEi9WLPl/2rkSJK ErFfLxWzoGXAxQqgMSbHu7zZO82bK8KlUmCf3zgxJZZ/QVOZUbqBLZqGSxJ+P+BM WApLl5KioG7Znp3XhUH5WAPLSxdpsVqf5zoJrQ== -----END CERTIFICATE-----Generated at Wed May 13 05:44:13 2026 by rpki-client