$ rpki-client -vvf rpki-rsync.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/3230322e3137392e3139312e302f32342d3234203d3e203338373530.roa File: 3230322e3137392e3139312e302f32342d3234203d3e203338373530.roa (raw, json) Hash identifier: wtJefws1IQawoe8yb4jVgj5X5P3cewMGRSuqKr8w5/I= Subject key identifier: 07:E9:53:A7:1E:A5:B8:A2:7D:1F:8F:DA:81:21:BD:6F:A6:BE:09:D9 Certificate issuer: /CN=99F0E6DE02C602D1E485455474F4B21207D2D7F8 Certificate serial: 103BC695240ED6DE08724A92028C271B50BDEC11 Authority key identifier: 99:F0:E6:DE:02:C6:02:D1:E4:85:45:54:74:F4:B2:12:07:D2:D7:F8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/99F0E6DE02C602D1E485455474F4B21207D2D7F8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/3230322e3137392e3139312e302f32342d3234203d3e203338373530.roa Signing time: Sun 03 May 2026 02:42:34 +0000 ROA not before: Sun 03 May 2026 02:37:34 +0000 ROA not after: Sun 02 May 2027 02:42:34 +0000 asID: 38750 IP address blocks: 202.179.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/99F0E6DE02C602D1E485455474F4B21207D2D7F8.crl rsync://rpki-rsync.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/99F0E6DE02C602D1E485455474F4B21207D2D7F8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/99F0E6DE02C602D1E485455474F4B21207D2D7F8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 18:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:3b:c6:95:24:0e:d6:de:08:72:4a:92:02:8c:27:1b:50:bd:ec:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99F0E6DE02C602D1E485455474F4B21207D2D7F8 Validity Not Before: May 3 02:37:34 2026 GMT Not After : May 2 02:42:34 2027 GMT Subject: CN=07E953A71EA5B8A27D1F8FDA8121BD6FA6BE09D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:77:cb:59:32:3b:19:c1:1c:c9:d3:25:cc:f9: 5d:0a:85:2f:97:04:c8:88:3f:63:f4:b2:9e:69:ea: 99:fd:99:79:d3:62:8a:32:9c:38:89:fc:36:44:40: 57:61:c2:1f:fc:c0:5c:39:ad:33:b7:df:f8:7a:53: 95:64:fc:8e:ce:e6:c0:60:1e:53:7d:de:66:53:bd: 76:b1:5c:51:10:8f:a9:f2:ca:53:cd:a7:a5:fd:b2: 00:9a:1b:40:22:fc:62:5e:05:05:58:f0:38:42:84: 3e:44:20:6f:35:72:5c:e1:11:6e:8b:6b:ea:20:8e: af:66:27:df:58:15:da:6a:68:f4:34:cc:7b:37:24: 85:ab:e2:2d:5f:d0:2f:dc:eb:44:99:2a:4f:aa:ae: ab:ac:df:3f:f4:62:b2:cb:13:71:99:40:ed:5f:b2: b4:26:46:0f:4b:a4:f1:f2:11:df:db:48:52:59:66: bd:17:fd:46:6d:c4:f1:d1:73:a8:a4:62:11:01:40: d5:b6:34:0e:99:61:25:b4:47:48:16:0e:f0:d8:4e: 27:23:f3:3c:06:08:3c:a8:19:e8:e1:fe:9c:76:ed: 33:e1:8b:95:72:02:05:5d:d0:75:bd:ea:64:06:98: 76:6e:c5:cd:40:9e:c7:87:b1:38:2e:27:0c:45:d4: 18:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:E9:53:A7:1E:A5:B8:A2:7D:1F:8F:DA:81:21:BD:6F:A6:BE:09:D9 X509v3 Authority Key Identifier: keyid:99:F0:E6:DE:02:C6:02:D1:E4:85:45:54:74:F4:B2:12:07:D2:D7:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/99F0E6DE02C602D1E485455474F4B21207D2D7F8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/99F0E6DE02C602D1E485455474F4B21207D2D7F8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/3230322e3137392e3139312e302f32342d3234203d3e203338373530.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.179.191.0/24 Signature Algorithm: sha256WithRSAEncryption 2b:0d:21:bf:f3:dd:55:cc:93:9f:c0:53:19:0e:11:75:f8:78: ef:1e:12:4e:b4:54:48:c4:02:ec:6b:14:53:5d:6b:1c:be:36: d5:05:e4:cc:4e:db:44:55:83:87:f5:49:ba:65:4c:13:56:b7: 4d:cd:7d:bc:86:39:3e:1b:4a:81:db:b4:e8:83:d8:95:40:6d: 51:41:16:75:98:ac:bb:eb:31:c2:fe:f0:08:97:86:cb:46:91: e3:cc:a1:ac:ce:6b:96:51:e5:56:95:3d:35:c9:28:1a:ce:0f: 73:c5:35:8e:7c:81:6b:cf:20:23:7a:a3:a1:40:4e:eb:6c:4a: 04:d3:3b:de:80:95:50:83:2d:2a:38:79:a1:27:3d:3b:ef:af: 94:19:89:7f:aa:bb:5c:03:3e:50:f1:8a:f9:96:85:ed:48:6f: db:bf:b1:94:53:16:ef:75:11:13:5a:eb:c6:9b:9e:22:d2:2a: f9:7c:69:a8:71:21:35:c5:4f:41:b9:d5:ac:7f:1d:d1:5e:81: 60:00:17:d7:31:d1:1e:30:ff:3e:61:93:16:52:75:4e:1c:d0: 2d:a4:bd:87:50:cd:38:04:af:c5:0e:6d:ef:8c:33:d1:e2:9f: 6f:95:1d:9f:ca:4f:b9:3e:ab:71:cb:4f:66:eb:31:3f:7e:11: 0e:f3:84:cc -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUEDvGlSQO1t4IckqSAownG1C97BEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTlGMEU2REUwMkM2MDJEMUU0ODU0NTU0NzRGNEIyMTIw N0QyRDdGODAeFw0yNjA1MDMwMjM3MzRaFw0yNzA1MDIwMjQyMzRaMDMxMTAvBgNV BAMTKDA3RTk1M0E3MUVBNUI4QTI3RDFGOEZEQTgxMjFCRDZGQTZCRTA5RDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOd8tZMjsZwRzJ0yXM+V0KhS+X BMiIP2P0sp5p6pn9mXnTYooynDiJ/DZEQFdhwh/8wFw5rTO33/h6U5Vk/I7O5sBg HlN93mZTvXaxXFEQj6nyylPNp6X9sgCaG0Ai/GJeBQVY8DhChD5EIG81clzhEW6L a+ogjq9mJ99YFdpqaPQ0zHs3JIWr4i1f0C/c60SZKk+qrqus3z/0YrLLE3GZQO1f srQmRg9LpPHyEd/bSFJZZr0X/UZtxPHRc6ikYhEBQNW2NA6ZYSW0R0gWDvDYTicj 8zwGCDyoGejh/px27TPhi5VyAgVd0HW96mQGmHZuxc1AnseHsTguJwxF1BhpAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUB+lTpx6luKJ9H4/agSG9b6a+CdkwHwYDVR0j BBgwFoAUmfDm3gLGAtHkhUVUdPSyEgfS1/gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzBmNWNmZGItNzk4Ny00MzUxLWJjMmUtNjZjMjRmNDlmNDQwLzAvOTlGMEU2REUw MkM2MDJEMUU0ODU0NTU0NzRGNEIyMTIwN0QyRDdGOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85OUYwRTZERTAyQzYwMkQxRTQ4NTQ1NTQ3NEY0QjIxMjA3RDJE N0Y4LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzcwZjVjZmRiLTc5ODctNDM1MS1i YzJlLTY2YzI0ZjQ5ZjQ0MC8wLzMyMzAzMjJlMzEzNzM5MmUzMTM5MzEyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMzM4MzczNTMwLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyrO/MA0GCSqG SIb3DQEBCwUAA4IBAQArDSG/891VzJOfwFMZDhF1+HjvHhJOtFRIxALsaxRTXWsc vjbVBeTMTttEVYOH9Um6ZUwTVrdNzX28hjk+G0qB27Tog9iVQG1RQRZ1mKy76zHC /vAIl4bLRpHjzKGszmuWUeVWlT01ySgazg9zxTWOfIFrzyAjeqOhQE7rbEoE0zve gJVQgy0qOHmhJz0776+UGYl/qrtcAz5Q8Yr5loXtSG/bv7GUUxbvdRETWuvGm54i 0ir5fGmocSE1xU9BudWsfx3RXoFgABfXMdEeMP8+YZMWUnVOHNAtpL2HUM04BK/F Dm3vjDPR4p9vlR2fyk+5Pqtxy09m6zE/fhEO84TM -----END CERTIFICATE-----Generated at Wed May 13 04:50:52 2026 by rpki-client