$ rpki-client -vvf rpki-rsync.idnic.net/repo/8015a855-b29c-4502-af81-cbb8b4f7f0f7/0/3230332e3135332e3231322e302f32322d3234203d3e20313331373238.roa File: 3230332e3135332e3231322e302f32322d3234203d3e20313331373238.roa (raw, json) Hash identifier: egwsjKMYT0IZpyV4Dfttqi4c4pxw5Vm+1yP8BdfUm90= Subject key identifier: DC:95:0A:C1:00:9E:7D:7C:F1:76:0A:71:A1:D9:57:14:D5:86:77:75 Certificate issuer: /CN=3AF015F925061D7540F9BBFA45C6C7A944312663 Certificate serial: 3A8098106EAF4E36CA3CE5C47FC28C169E1EE2B5 Authority key identifier: 3A:F0:15:F9:25:06:1D:75:40:F9:BB:FA:45:C6:C7:A9:44:31:26:63 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3AF015F925061D7540F9BBFA45C6C7A944312663.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8015a855-b29c-4502-af81-cbb8b4f7f0f7/0/3230332e3135332e3231322e302f32322d3234203d3e20313331373238.roa Signing time: Sun 03 May 2026 02:46:35 +0000 ROA not before: Sun 03 May 2026 02:41:35 +0000 ROA not after: Sun 02 May 2027 02:46:35 +0000 asID: 131728 IP address blocks: 203.153.212.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8015a855-b29c-4502-af81-cbb8b4f7f0f7/0/3AF015F925061D7540F9BBFA45C6C7A944312663.crl rsync://rpki-rsync.idnic.net/repo/8015a855-b29c-4502-af81-cbb8b4f7f0f7/0/3AF015F925061D7540F9BBFA45C6C7A944312663.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3AF015F925061D7540F9BBFA45C6C7A944312663.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 03:56:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:80:98:10:6e:af:4e:36:ca:3c:e5:c4:7f:c2:8c:16:9e:1e:e2:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3AF015F925061D7540F9BBFA45C6C7A944312663 Validity Not Before: May 3 02:41:35 2026 GMT Not After : May 2 02:46:35 2027 GMT Subject: CN=DC950AC1009E7D7CF1760A71A1D95714D5867775 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:40:68:5e:1c:e1:a8:cd:eb:50:06:d1:87:32: 93:4d:3b:11:4c:39:a8:24:78:00:c4:c4:00:23:a0: 3c:ea:23:71:eb:89:73:9c:9f:42:dd:85:73:48:e2: f4:5f:4b:12:ae:d7:78:20:e4:57:5f:fe:80:cb:d0: 0d:4b:6e:15:7c:cd:a5:30:51:7f:6c:a1:47:69:c2: ad:01:78:02:93:49:ce:f1:8d:4e:d0:41:ba:0d:94: 2e:9e:6e:31:a0:4a:02:f6:28:95:90:64:31:83:89: 78:ab:aa:b3:25:11:fa:af:d3:75:ad:96:59:52:63: 54:84:f5:03:54:77:97:0e:38:e3:2c:67:39:0b:62: 9e:bd:fe:f0:ec:82:d6:b5:9e:0a:49:dd:99:9d:d4: c1:a8:f9:a7:b8:64:e0:dc:d0:e0:85:76:91:fc:08: ea:e3:17:4c:f0:89:a9:c8:f3:7e:13:93:e2:96:98: c1:4c:6a:23:1d:6d:a4:77:58:04:44:f3:32:dd:3b: ca:5b:f8:b0:c3:c0:db:18:39:2a:26:b4:8f:11:d6: 7f:2c:e3:46:a8:0e:e6:2a:6e:6e:f0:5d:fc:de:5a: 0e:9a:42:dc:91:a7:ee:a7:4f:01:5f:9b:af:a3:d8: 0f:18:1a:ac:5d:33:15:eb:c0:f2:8b:ec:c4:f8:7a: 62:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:95:0A:C1:00:9E:7D:7C:F1:76:0A:71:A1:D9:57:14:D5:86:77:75 X509v3 Authority Key Identifier: keyid:3A:F0:15:F9:25:06:1D:75:40:F9:BB:FA:45:C6:C7:A9:44:31:26:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8015a855-b29c-4502-af81-cbb8b4f7f0f7/0/3AF015F925061D7540F9BBFA45C6C7A944312663.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3AF015F925061D7540F9BBFA45C6C7A944312663.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8015a855-b29c-4502-af81-cbb8b4f7f0f7/0/3230332e3135332e3231322e302f32322d3234203d3e20313331373238.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.153.212.0/22 Signature Algorithm: sha256WithRSAEncryption 59:18:14:4c:c3:6f:30:cd:9e:fb:c9:1f:58:ba:59:82:d8:08: 8c:1b:ad:4b:6d:10:f5:e1:89:c0:be:24:0b:f6:27:53:e7:0d: 7c:04:cb:7d:c2:c1:39:d0:36:fa:3c:69:33:e3:95:0a:c2:98: b4:f6:53:57:b1:74:e9:22:89:b0:a1:45:72:f7:d3:8c:25:c7: 89:8e:03:40:b7:7c:3f:44:52:37:c8:54:e2:ae:fc:6b:7f:91: 05:9d:c9:a1:8a:06:47:cb:a1:3a:09:89:d9:db:cc:0d:0f:12: f9:2f:78:f4:26:6f:75:d0:a0:fc:0b:dd:ac:4b:44:de:a4:8b: 85:7c:f7:3d:d1:79:d6:b1:9a:6c:9f:68:d0:29:e6:de:ca:88: 40:c3:3a:35:61:f7:76:5a:bf:4f:a6:8f:d4:35:d0:be:6b:9f: 2e:c9:18:eb:64:28:c4:8f:28:08:f8:3b:5a:6b:ef:f4:0c:50: 79:cc:41:2c:1c:28:e4:16:93:7e:29:db:04:8e:9f:c2:73:1d: bd:e0:60:80:a9:a0:3d:93:b1:fa:47:0b:5d:1c:0a:e9:87:94: f0:16:37:79:35:66:52:d3:56:90:7e:68:92:6f:0b:55:12:99: 25:42:7d:5b:63:8f:5e:f9:d7:83:0e:fb:8b:72:cc:e3:79:b2: 4a:04:7e:17 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUOoCYEG6vTjbKPOXEf8KMFp4e4rUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0FGMDE1RjkyNTA2MUQ3NTQwRjlCQkZBNDVDNkM3QTk0 NDMxMjY2MzAeFw0yNjA1MDMwMjQxMzVaFw0yNzA1MDIwMjQ2MzVaMDMxMTAvBgNV BAMTKERDOTUwQUMxMDA5RTdEN0NGMTc2MEE3MUExRDk1NzE0RDU4Njc3NzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMQGheHOGozetQBtGHMpNNOxFM OagkeADExAAjoDzqI3HriXOcn0LdhXNI4vRfSxKu13gg5Fdf/oDL0A1LbhV8zaUw UX9soUdpwq0BeAKTSc7xjU7QQboNlC6ebjGgSgL2KJWQZDGDiXirqrMlEfqv03Wt lllSY1SE9QNUd5cOOOMsZzkLYp69/vDsgta1ngpJ3Zmd1MGo+ae4ZODc0OCFdpH8 COrjF0zwianI834Tk+KWmMFMaiMdbaR3WARE8zLdO8pb+LDDwNsYOSomtI8R1n8s 40aoDuYqbm7wXfzeWg6aQtyRp+6nTwFfm6+j2A8YGqxdMxXrwPKL7MT4emLxAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQU3JUKwQCefXzxdgpxodlXFNWGd3UwHwYDVR0j BBgwFoAUOvAV+SUGHXVA+bv6RcbHqUQxJmMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODAxNWE4NTUtYjI5Yy00NTAyLWFmODEtY2JiOGI0ZjdmMGY3LzAvM0FGMDE1Rjky NTA2MUQ3NTQwRjlCQkZBNDVDNkM3QTk0NDMxMjY2My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zQUYwMTVGOTI1MDYxRDc1NDBGOUJCRkE0NUM2QzdBOTQ0MzEy NjYzLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzgwMTVhODU1LWIyOWMtNDUwMi1h ZjgxLWNiYjhiNGY3ZjBmNy8wLzMyMzAzMzJlMzEzNTMzMmUzMjMxMzIyZTMwMmYz MjMyMmQzMjM0MjAzZDNlMjAzMTMzMzEzNzMyMzgucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBALLmdQwDQYJ KoZIhvcNAQELBQADggEBAFkYFEzDbzDNnvvJH1i6WYLYCIwbrUttEPXhicC+JAv2 J1PnDXwEy33CwTnQNvo8aTPjlQrCmLT2U1exdOkiibChRXL304wlx4mOA0C3fD9E UjfIVOKu/Gt/kQWdyaGKBkfLoToJidnbzA0PEvkvePQmb3XQoPwL3axLRN6ki4V8 9z3RedaxmmyfaNAp5t7KiEDDOjVh93Zav0+mj9Q10L5rny7JGOtkKMSPKAj4O1pr 7/QMUHnMQSwcKOQWk34p2wSOn8JzHb3gYICpoD2TsfpHC10cCumHlPAWN3k1ZlLT VpB+aJJvC1USmSVCfVtjj17514MO+4tyzON5skoEfhc= -----END CERTIFICATE-----Generated at Wed May 13 07:35:47 2026 by rpki-client