$ rpki-client -vvf rpki-rsync.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/3230332e3135332e3132342e302f32332d3234203d3e203338353035.roa File: 3230332e3135332e3132342e302f32332d3234203d3e203338353035.roa (raw, json) Hash identifier: mnaX8OyQaRRI+TIyOqMa6qm7Y6uLOjvzrF8R5k5MsjU= Subject key identifier: 9D:E7:67:97:B0:A6:DE:0F:14:39:B9:3E:E4:CE:D4:57:87:B2:99:20 Certificate issuer: /CN=04C8EF6F5260FDA06661D9E95304572B8E7C4993 Certificate serial: 351DF1B1432F1F7127E8BA7D0EB271D4FD57E450 Authority key identifier: 04:C8:EF:6F:52:60:FD:A0:66:61:D9:E9:53:04:57:2B:8E:7C:49:93 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04C8EF6F5260FDA06661D9E95304572B8E7C4993.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/3230332e3135332e3132342e302f32332d3234203d3e203338353035.roa Signing time: Sun 03 May 2026 02:47:37 +0000 ROA not before: Sun 03 May 2026 02:42:37 +0000 ROA not after: Sun 02 May 2027 02:47:37 +0000 asID: 38505 IP address blocks: 203.153.124.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/04C8EF6F5260FDA06661D9E95304572B8E7C4993.crl rsync://rpki-rsync.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/04C8EF6F5260FDA06661D9E95304572B8E7C4993.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04C8EF6F5260FDA06661D9E95304572B8E7C4993.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 05:39:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:1d:f1:b1:43:2f:1f:71:27:e8:ba:7d:0e:b2:71:d4:fd:57:e4:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04C8EF6F5260FDA06661D9E95304572B8E7C4993 Validity Not Before: May 3 02:42:37 2026 GMT Not After : May 2 02:47:37 2027 GMT Subject: CN=9DE76797B0A6DE0F1439B93EE4CED45787B29920 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e4:96:68:de:7c:4e:8d:6d:48:ed:d7:a5:ab: 2a:ed:77:0e:90:c6:93:37:20:2b:e3:12:ad:c5:77: d0:7b:4c:3d:17:b8:b1:c5:f9:ef:1a:db:f3:79:db: 4b:f4:38:62:96:5f:ab:ed:ed:c0:09:7c:f8:e9:db: d2:19:fd:34:d0:59:61:a3:75:4e:5f:fc:a0:9d:d6: 87:e5:01:1b:61:2c:ec:76:60:54:fe:12:2e:4f:50: 92:a9:38:df:ae:da:ce:1b:9c:15:54:b1:df:18:59: 66:4b:0e:9a:d4:d3:0d:c1:c5:f5:29:91:b6:de:4a: aa:f8:91:5b:0a:b3:81:d2:d8:a0:fa:38:4c:2a:ca: c1:d6:5e:77:59:0a:cb:74:db:cf:06:7f:a0:70:6f: 61:7e:c4:91:4c:1b:23:15:9e:3b:c3:96:36:e2:cf: 68:e6:8c:32:58:66:ac:b9:75:c3:28:cb:3c:c2:d3: 82:62:65:49:01:d8:8c:5c:bd:c3:a7:04:5d:a9:d4: 7f:0e:05:55:29:af:cf:73:a5:d8:f2:47:92:91:01: 42:d1:7f:d4:d8:cf:cb:7b:a5:2e:03:9f:8e:f6:86: 59:f0:ed:92:69:93:a3:2e:d4:8e:92:e8:2b:74:b1: 03:ee:c1:64:cf:c1:76:9e:73:0e:9f:60:a8:d5:4f: 7e:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:E7:67:97:B0:A6:DE:0F:14:39:B9:3E:E4:CE:D4:57:87:B2:99:20 X509v3 Authority Key Identifier: keyid:04:C8:EF:6F:52:60:FD:A0:66:61:D9:E9:53:04:57:2B:8E:7C:49:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/04C8EF6F5260FDA06661D9E95304572B8E7C4993.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04C8EF6F5260FDA06661D9E95304572B8E7C4993.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/3230332e3135332e3132342e302f32332d3234203d3e203338353035.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.153.124.0/23 Signature Algorithm: sha256WithRSAEncryption a4:16:4d:82:90:ee:b7:df:15:01:0f:b4:61:c0:e0:dc:d5:5e: 8b:be:ab:3c:91:4a:22:b2:ae:d6:9e:ff:19:3a:e3:a3:d0:53: c2:d7:1e:0f:8f:0c:08:40:63:37:9a:c8:ee:f8:61:4e:57:a6: 26:67:b0:4f:43:db:eb:a2:5f:b4:a2:79:b9:2b:bd:53:22:e1: 75:07:a1:e9:57:2e:3e:17:10:42:3e:12:e9:d4:bb:86:df:ef: e4:36:b2:14:13:82:04:12:8b:e7:37:59:54:ba:16:12:c0:08: 42:8e:5f:69:3c:be:62:b7:db:07:fc:5c:f3:fe:a2:1b:53:00: e9:ab:ad:21:b9:ef:4b:d8:15:b6:bd:6e:b8:5e:74:2c:bb:f4: db:07:84:de:a3:d4:0b:1a:be:43:f2:be:9c:62:11:14:dc:af: a9:ff:c5:a0:ad:bc:13:2a:01:3d:eb:ad:8e:19:c4:77:43:cc: c4:e6:cc:a4:37:2b:8d:10:6e:b0:aa:fa:bb:9a:1f:a8:14:da: 0b:04:c2:a5:96:13:3c:7a:eb:47:1e:f5:6d:61:20:d2:08:ac: 18:45:ab:70:74:48:b8:6d:11:75:9e:53:ce:6b:7f:ed:c9:00: e4:e0:91:a2:a8:d7:25:3e:46:0a:a8:85:ca:50:79:dc:4b:31: 1d:d0:51:0a -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUNR3xsUMvH3En6Lp9DrJx1P1X5FAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDRDOEVGNkY1MjYwRkRBMDY2NjFEOUU5NTMwNDU3MkI4 RTdDNDk5MzAeFw0yNjA1MDMwMjQyMzdaFw0yNzA1MDIwMjQ3MzdaMDMxMTAvBgNV BAMTKDlERTc2Nzk3QjBBNkRFMEYxNDM5QjkzRUU0Q0VENDU3ODdCMjk5MjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC05JZo3nxOjW1I7delqyrtdw6Q xpM3ICvjEq3Fd9B7TD0XuLHF+e8a2/N520v0OGKWX6vt7cAJfPjp29IZ/TTQWWGj dU5f/KCd1oflARthLOx2YFT+Ei5PUJKpON+u2s4bnBVUsd8YWWZLDprU0w3BxfUp kbbeSqr4kVsKs4HS2KD6OEwqysHWXndZCst0288Gf6Bwb2F+xJFMGyMVnjvDljbi z2jmjDJYZqy5dcMoyzzC04JiZUkB2IxcvcOnBF2p1H8OBVUpr89zpdjyR5KRAULR f9TYz8t7pS4Dn472hlnw7ZJpk6Mu1I6S6Ct0sQPuwWTPwXaecw6fYKjVT36LAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUnednl7Cm3g8UObk+5M7UV4eymSAwHwYDVR0j BBgwFoAUBMjvb1Jg/aBmYdnpUwRXK458SZMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODNkMDc4NmQtM2QzZS00NWI3LTk2NjUtOGQ0NzRmZDE0YWVhLzAvMDRDOEVGNkY1 MjYwRkRBMDY2NjFEOUU5NTMwNDU3MkI4RTdDNDk5My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wNEM4RUY2RjUyNjBGREEwNjY2MUQ5RTk1MzA0NTcyQjhFN0M0 OTkzLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzgzZDA3ODZkLTNkM2UtNDViNy05 NjY1LThkNDc0ZmQxNGFlYS8wLzMyMzAzMzJlMzEzNTMzMmUzMTMyMzQyZTMwMmYz MjMzMmQzMjM0MjAzZDNlMjAzMzM4MzUzMDM1LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBy5l8MA0GCSqG SIb3DQEBCwUAA4IBAQCkFk2CkO633xUBD7RhwODc1V6Lvqs8kUoisq7Wnv8ZOuOj 0FPC1x4PjwwIQGM3msju+GFOV6YmZ7BPQ9vrol+0onm5K71TIuF1B6HpVy4+FxBC PhLp1LuG3+/kNrIUE4IEEovnN1lUuhYSwAhCjl9pPL5it9sH/Fzz/qIbUwDpq60h ue9L2BW2vW64XnQsu/TbB4Teo9QLGr5D8r6cYhEU3K+p/8WgrbwTKgE9662OGcR3 Q8zE5sykNyuNEG6wqvq7mh+oFNoLBMKllhM8eutHHvVtYSDSCKwYRatwdEi4bRF1 nlPOa3/tyQDk4JGiqNclPkYKqIXKUHncSzEd0FEK -----END CERTIFICATE-----Generated at Tue May 12 22:32:47 2026 by rpki-client