$ rpki-client -vvf rpki-rsync.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/3230332e3135332e3132302e302f32332d3234203d3e203338353035.roa File: 3230332e3135332e3132302e302f32332d3234203d3e203338353035.roa (raw, json) Hash identifier: D63R0HJY3dfFSWeAvX/hnIAUP8j3QRAbibvDX3rchmw= Subject key identifier: CC:DB:F2:2C:9D:6D:04:B2:39:4A:4A:03:71:C9:E5:08:6A:6C:2C:53 Certificate issuer: /CN=04C8EF6F5260FDA06661D9E95304572B8E7C4993 Certificate serial: 5A2CB4AD7E50150A0B2E4657DB8B88885351C5B3 Authority key identifier: 04:C8:EF:6F:52:60:FD:A0:66:61:D9:E9:53:04:57:2B:8E:7C:49:93 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04C8EF6F5260FDA06661D9E95304572B8E7C4993.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/3230332e3135332e3132302e302f32332d3234203d3e203338353035.roa Signing time: Sun 03 May 2026 02:47:39 +0000 ROA not before: Sun 03 May 2026 02:42:39 +0000 ROA not after: Sun 02 May 2027 02:47:39 +0000 asID: 38505 IP address blocks: 203.153.120.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/04C8EF6F5260FDA06661D9E95304572B8E7C4993.crl rsync://rpki-rsync.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/04C8EF6F5260FDA06661D9E95304572B8E7C4993.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04C8EF6F5260FDA06661D9E95304572B8E7C4993.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:2c:b4:ad:7e:50:15:0a:0b:2e:46:57:db:8b:88:88:53:51:c5:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04C8EF6F5260FDA06661D9E95304572B8E7C4993 Validity Not Before: May 3 02:42:39 2026 GMT Not After : May 2 02:47:39 2027 GMT Subject: CN=CCDBF22C9D6D04B2394A4A0371C9E5086A6C2C53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:a2:d1:27:c0:cd:b6:37:17:c1:69:af:29:1b: d0:1e:34:ca:f7:af:69:9a:53:f7:4d:11:28:3b:60: 55:df:e3:0d:49:4d:19:f5:4d:51:41:fa:c3:b4:5c: e6:2e:04:8c:c8:03:2a:1c:a2:10:77:d6:34:ba:61: 33:2d:22:d9:c7:7b:57:0e:e3:5c:b2:f5:20:da:98: 49:95:2a:27:2f:64:bf:56:4f:6b:da:ad:ff:69:b6: de:03:ea:c1:57:98:63:5a:64:b5:f7:19:98:2e:6c: 5c:37:b0:8a:e2:78:6a:77:45:e6:56:45:bb:80:02: e5:0c:04:18:e6:89:30:8f:62:32:d0:78:e1:ab:97: 12:9a:73:5d:6f:7d:81:02:22:f1:d5:4a:bb:ac:4e: f6:4f:f8:ce:e9:ca:d3:11:70:ac:ee:5b:e9:74:86: 5f:07:f9:ec:41:d0:02:21:83:a5:7e:68:fb:77:10: 0d:6d:51:95:e3:02:9d:c7:28:db:a8:38:35:fd:9d: 78:fa:31:cf:45:34:e3:3c:cb:84:1f:0e:d1:11:e9: 13:f8:26:ff:93:ba:6f:84:b5:41:d1:0a:37:fc:52: c4:f7:a9:fc:70:5e:e4:aa:9e:f7:00:f7:bb:cd:8a: b7:f5:b6:58:e3:8b:6f:69:d1:22:df:52:bd:0c:b5: bd:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:DB:F2:2C:9D:6D:04:B2:39:4A:4A:03:71:C9:E5:08:6A:6C:2C:53 X509v3 Authority Key Identifier: keyid:04:C8:EF:6F:52:60:FD:A0:66:61:D9:E9:53:04:57:2B:8E:7C:49:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/04C8EF6F5260FDA06661D9E95304572B8E7C4993.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04C8EF6F5260FDA06661D9E95304572B8E7C4993.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/3230332e3135332e3132302e302f32332d3234203d3e203338353035.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.153.120.0/23 Signature Algorithm: sha256WithRSAEncryption 07:93:f5:a4:26:f9:22:02:d4:63:4e:64:63:c2:e5:d1:a1:35: 3a:5d:a2:b2:21:86:a0:7d:00:dd:ba:01:47:29:c2:b9:f6:71: 43:c1:f1:be:d9:82:a4:ab:98:1b:a9:05:02:2b:a5:a9:de:60: 7e:08:af:62:6d:dd:e1:ab:c8:88:9d:ed:7f:ef:04:19:19:87: 6d:77:88:2f:a6:d8:35:b6:f1:89:21:9b:8f:52:7e:0b:33:eb: 94:92:c8:07:98:ed:8a:29:89:2d:20:16:b5:38:2d:a1:a0:ad: 64:94:43:81:2d:f9:e7:de:a1:17:e0:81:f7:46:38:76:59:29: 37:0c:a7:41:dc:4e:da:df:20:ee:9b:bf:da:25:93:91:eb:d0: 93:bb:a1:88:bc:54:f2:88:9b:7e:6c:87:79:18:55:3b:81:3c: 20:4e:28:72:44:23:b2:27:73:fd:bb:77:bd:d1:83:86:6b:7e: 38:e5:13:69:81:df:9f:39:5c:aa:ce:b4:66:b8:46:03:18:dd: c7:9e:1c:07:ef:72:0d:61:c6:ea:41:d2:ad:03:32:6c:07:74: 59:de:c3:39:b2:37:b8:d8:fe:b4:55:b7:d2:26:5c:c3:89:e6: 41:4e:a6:72:28:f8:f6:c8:d0:93:7c:b5:77:2c:cf:27:59:60: 0f:b3:38:20 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUWiy0rX5QFQoLLkZX24uIiFNRxbMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDRDOEVGNkY1MjYwRkRBMDY2NjFEOUU5NTMwNDU3MkI4 RTdDNDk5MzAeFw0yNjA1MDMwMjQyMzlaFw0yNzA1MDIwMjQ3MzlaMDMxMTAvBgNV BAMTKENDREJGMjJDOUQ2RDA0QjIzOTRBNEEwMzcxQzlFNTA4NkE2QzJDNTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEotEnwM22NxfBaa8pG9AeNMr3 r2maU/dNESg7YFXf4w1JTRn1TVFB+sO0XOYuBIzIAyocohB31jS6YTMtItnHe1cO 41yy9SDamEmVKicvZL9WT2varf9ptt4D6sFXmGNaZLX3GZgubFw3sIrieGp3ReZW RbuAAuUMBBjmiTCPYjLQeOGrlxKac11vfYECIvHVSrusTvZP+M7pytMRcKzuW+l0 hl8H+exB0AIhg6V+aPt3EA1tUZXjAp3HKNuoODX9nXj6Mc9FNOM8y4QfDtER6RP4 Jv+Tum+EtUHRCjf8UsT3qfxwXuSqnvcA97vNirf1tljji29p0SLfUr0Mtb0vAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUzNvyLJ1tBLI5SkoDccnlCGpsLFMwHwYDVR0j BBgwFoAUBMjvb1Jg/aBmYdnpUwRXK458SZMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODNkMDc4NmQtM2QzZS00NWI3LTk2NjUtOGQ0NzRmZDE0YWVhLzAvMDRDOEVGNkY1 MjYwRkRBMDY2NjFEOUU5NTMwNDU3MkI4RTdDNDk5My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wNEM4RUY2RjUyNjBGREEwNjY2MUQ5RTk1MzA0NTcyQjhFN0M0 OTkzLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzgzZDA3ODZkLTNkM2UtNDViNy05 NjY1LThkNDc0ZmQxNGFlYS8wLzMyMzAzMzJlMzEzNTMzMmUzMTMyMzAyZTMwMmYz MjMzMmQzMjM0MjAzZDNlMjAzMzM4MzUzMDM1LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBy5l4MA0GCSqG SIb3DQEBCwUAA4IBAQAHk/WkJvkiAtRjTmRjwuXRoTU6XaKyIYagfQDdugFHKcK5 9nFDwfG+2YKkq5gbqQUCK6Wp3mB+CK9ibd3hq8iIne1/7wQZGYdtd4gvptg1tvGJ IZuPUn4LM+uUksgHmO2KKYktIBa1OC2hoK1klEOBLfnn3qEX4IH3Rjh2WSk3DKdB 3E7a3yDum7/aJZOR69CTu6GIvFTyiJt+bId5GFU7gTwgTihyRCOyJ3P9u3e90YOG a3445RNpgd+fOVyqzrRmuEYDGN3HnhwH73INYcbqQdKtAzJsB3RZ3sM5sje42P60 VbfSJlzDieZBTqZyKPj2yNCTfLV3LM8nWWAPszgg -----END CERTIFICATE-----Generated at Wed May 13 02:37:22 2026 by rpki-client