$ rpki-client -vvf rpki-rsync.idnic.net/repo/74e1f370-f31f-47ed-8a41-b28bc8daf435/0/3230322e39302e3139392e302f32342d3234203d3e203338373739.roa File: 3230322e39302e3139392e302f32342d3234203d3e203338373739.roa (raw, json) Hash identifier: bAYJsjQtRu+aYVmaWgkshTJ01ed0qF6a1B1HjXmthuw= Subject key identifier: A1:1C:0C:24:8C:37:52:3B:68:EF:B9:33:06:F0:CA:C8:88:47:CC:BC Certificate issuer: /CN=03CEE5ECF5D82AC435BB8256960A6065A0A4EC90 Certificate serial: 384AAEB76DEC86F9CE82410ECEB1D1EB2462FD9E Authority key identifier: 03:CE:E5:EC:F5:D8:2A:C4:35:BB:82:56:96:0A:60:65:A0:A4:EC:90 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/03CEE5ECF5D82AC435BB8256960A6065A0A4EC90.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/74e1f370-f31f-47ed-8a41-b28bc8daf435/0/3230322e39302e3139392e302f32342d3234203d3e203338373739.roa Signing time: Sun 03 May 2026 02:43:29 +0000 ROA not before: Sun 03 May 2026 02:38:29 +0000 ROA not after: Sun 02 May 2027 02:43:29 +0000 asID: 38779 IP address blocks: 202.90.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/74e1f370-f31f-47ed-8a41-b28bc8daf435/0/03CEE5ECF5D82AC435BB8256960A6065A0A4EC90.crl rsync://rpki-rsync.idnic.net/repo/74e1f370-f31f-47ed-8a41-b28bc8daf435/0/03CEE5ECF5D82AC435BB8256960A6065A0A4EC90.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/03CEE5ECF5D82AC435BB8256960A6065A0A4EC90.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 16:53:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:4a:ae:b7:6d:ec:86:f9:ce:82:41:0e:ce:b1:d1:eb:24:62:fd:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03CEE5ECF5D82AC435BB8256960A6065A0A4EC90 Validity Not Before: May 3 02:38:29 2026 GMT Not After : May 2 02:43:29 2027 GMT Subject: CN=A11C0C248C37523B68EFB93306F0CAC88847CCBC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:d4:5b:e9:c6:aa:45:b6:fd:a7:12:fd:41:24: 64:e7:ee:dd:47:4d:c7:4f:55:11:6b:a5:1d:47:1c: 42:63:94:9d:f6:d2:0b:d0:f5:f6:20:03:57:87:b1: ec:7a:53:71:3b:e1:5a:b0:02:23:1b:3e:de:87:f9: dc:c7:0a:44:6d:07:97:62:b8:97:3d:8a:b1:c4:7d: 8d:5f:54:08:28:60:11:4c:1c:01:d3:b4:1c:c7:c3: 01:bd:8c:81:af:b2:a7:1a:5a:a7:46:5a:ad:89:9b: 87:ff:70:7f:03:c6:d4:3f:a5:f5:31:e8:37:aa:0c: fb:c8:47:00:39:52:c5:af:7e:61:0d:5d:3b:09:3d: 0d:f5:a4:c0:91:48:25:9e:45:36:77:57:c7:2e:a7: 09:9f:c3:d4:46:5c:ba:6b:97:63:63:54:bd:ec:71: a9:73:8c:44:4b:2d:68:04:b2:a4:02:1d:0c:43:ba: 7c:e6:79:8e:16:92:3e:84:24:cb:3d:c2:46:89:cf: f3:11:1d:4a:e8:76:27:b4:b7:fe:b5:18:72:26:ec: 5a:a4:20:15:03:1b:60:be:7f:c8:08:ef:54:96:9f: 40:17:0d:4b:a1:be:e4:10:38:7b:e5:11:8f:24:a5: 94:f8:e1:bf:b9:43:18:44:de:c8:6a:f1:36:18:a1: 90:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:1C:0C:24:8C:37:52:3B:68:EF:B9:33:06:F0:CA:C8:88:47:CC:BC X509v3 Authority Key Identifier: keyid:03:CE:E5:EC:F5:D8:2A:C4:35:BB:82:56:96:0A:60:65:A0:A4:EC:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/74e1f370-f31f-47ed-8a41-b28bc8daf435/0/03CEE5ECF5D82AC435BB8256960A6065A0A4EC90.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/03CEE5ECF5D82AC435BB8256960A6065A0A4EC90.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/74e1f370-f31f-47ed-8a41-b28bc8daf435/0/3230322e39302e3139392e302f32342d3234203d3e203338373739.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.90.199.0/24 Signature Algorithm: sha256WithRSAEncryption 15:ed:13:96:32:8c:bc:7b:3b:93:49:0f:18:24:86:d1:27:00: 99:1a:f3:97:57:56:6f:5f:4c:6c:f3:bd:22:bc:2e:a3:0b:09: bf:d2:31:e7:5d:f8:93:d7:3d:03:64:74:0f:99:e2:1b:5d:01: 1c:f1:90:b7:0c:03:41:79:22:2c:94:25:99:5b:e5:7a:73:72: 9c:44:7a:b5:6b:64:59:f9:31:6b:28:6a:8f:e1:ba:96:f2:06: 86:95:af:0b:e8:6b:31:0f:1a:73:24:05:da:80:a7:e8:0b:87: 0b:e3:db:a2:1b:64:4b:c7:0f:f6:04:bb:6e:38:04:3f:88:59: 6a:3f:b9:f6:2d:02:b5:ea:09:0a:6f:80:c5:e9:15:19:d9:b4: 60:a6:54:f3:07:0d:b9:0d:73:d1:c0:51:49:c9:c3:f0:9e:09: 8e:6f:0d:b7:25:8e:99:e2:e7:a8:a1:d0:e3:76:bd:db:71:77: 6b:62:3e:66:0a:a8:76:0c:c7:3f:6e:c9:33:1c:5f:ec:60:58: d8:ea:dc:86:9b:00:ef:4c:c9:81:40:be:b5:96:30:12:8a:41: 05:c8:9e:8c:8a:a5:b7:b2:27:dd:f5:2e:dd:c5:cf:f9:f9:e5: 63:b6:b1:b2:ff:9c:6a:98:8f:f8:d9:ed:35:84:15:d7:c0:06: 18:55:86:7b -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUOEqut23shvnOgkEOzrHR6yRi/Z4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDNDRUU1RUNGNUQ4MkFDNDM1QkI4MjU2OTYwQTYwNjVB MEE0RUM5MDAeFw0yNjA1MDMwMjM4MjlaFw0yNzA1MDIwMjQzMjlaMDMxMTAvBgNV BAMTKEExMUMwQzI0OEMzNzUyM0I2OEVGQjkzMzA2RjBDQUM4ODg0N0NDQkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCM1FvpxqpFtv2nEv1BJGTn7t1H TcdPVRFrpR1HHEJjlJ320gvQ9fYgA1eHsex6U3E74VqwAiMbPt6H+dzHCkRtB5di uJc9irHEfY1fVAgoYBFMHAHTtBzHwwG9jIGvsqcaWqdGWq2Jm4f/cH8DxtQ/pfUx 6DeqDPvIRwA5UsWvfmENXTsJPQ31pMCRSCWeRTZ3V8cupwmfw9RGXLprl2NjVL3s calzjERLLWgEsqQCHQxDunzmeY4Wkj6EJMs9wkaJz/MRHUrodie0t/61GHIm7Fqk IBUDG2C+f8gI71SWn0AXDUuhvuQQOHvlEY8kpZT44b+5QxhE3shq8TYYoZAJAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUoRwMJIw3Ujto77kzBvDKyIhHzLwwHwYDVR0j BBgwFoAUA87l7PXYKsQ1u4JWlgpgZaCk7JAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzRlMWYzNzAtZjMxZi00N2VkLThhNDEtYjI4YmM4ZGFmNDM1LzAvMDNDRUU1RUNG NUQ4MkFDNDM1QkI4MjU2OTYwQTYwNjVBMEE0RUM5MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wM0NFRTVFQ0Y1RDgyQUM0MzVCQjgyNTY5NjBBNjA2NUEwQTRF QzkwLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzc0ZTFmMzcwLWYzMWYtNDdlZC04 YTQxLWIyOGJjOGRhZjQzNS8wLzMyMzAzMjJlMzkzMDJlMzEzOTM5MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzMzODM3MzczOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMpaxzANBgkqhkiG 9w0BAQsFAAOCAQEAFe0TljKMvHs7k0kPGCSG0ScAmRrzl1dWb19MbPO9IrwuowsJ v9Ix5134k9c9A2R0D5niG10BHPGQtwwDQXkiLJQlmVvlenNynER6tWtkWfkxayhq j+G6lvIGhpWvC+hrMQ8acyQF2oCn6AuHC+PbohtkS8cP9gS7bjgEP4hZaj+59i0C teoJCm+AxekVGdm0YKZU8wcNuQ1z0cBRScnD8J4Jjm8NtyWOmeLnqKHQ43a923F3 a2I+ZgqodgzHP27JMxxf7GBY2OrchpsA70zJgUC+tZYwEopBBciejIqlt7In3fUu 3cXP+fnlY7axsv+capiP+NntNYQV18AGGFWGew== -----END CERTIFICATE-----Generated at Wed May 13 09:24:22 2026 by rpki-client