$ rpki-client -vvf rpki-rsync.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/3230332e3135332e3132362e302f32332d3234203d3e203338353035.roa File: 3230332e3135332e3132362e302f32332d3234203d3e203338353035.roa (raw, json) Hash identifier: E7icouKmlM2nRKVKG7S5JwzSzIgKbeMao7gLF/MZ7HU= Subject key identifier: 7B:C0:0B:70:E5:6B:6F:3D:19:AD:F2:3B:DD:EE:3F:DE:7E:24:92:8C Certificate issuer: /CN=04C8EF6F5260FDA06661D9E95304572B8E7C4993 Certificate serial: 788ADB09DE7713B46767FA07ACA99C8912B7F89C Authority key identifier: 04:C8:EF:6F:52:60:FD:A0:66:61:D9:E9:53:04:57:2B:8E:7C:49:93 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04C8EF6F5260FDA06661D9E95304572B8E7C4993.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/3230332e3135332e3132362e302f32332d3234203d3e203338353035.roa Signing time: Sun 03 May 2026 02:47:41 +0000 ROA not before: Sun 03 May 2026 02:42:41 +0000 ROA not after: Sun 02 May 2027 02:47:41 +0000 asID: 38505 IP address blocks: 203.153.126.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/04C8EF6F5260FDA06661D9E95304572B8E7C4993.crl rsync://rpki-rsync.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/04C8EF6F5260FDA06661D9E95304572B8E7C4993.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04C8EF6F5260FDA06661D9E95304572B8E7C4993.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:8a:db:09:de:77:13:b4:67:67:fa:07:ac:a9:9c:89:12:b7:f8:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04C8EF6F5260FDA06661D9E95304572B8E7C4993 Validity Not Before: May 3 02:42:41 2026 GMT Not After : May 2 02:47:41 2027 GMT Subject: CN=7BC00B70E56B6F3D19ADF23BDDEE3FDE7E24928C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:2b:6d:8f:fc:52:49:7a:74:2d:af:91:69:d5: 8b:b1:af:c5:62:9c:6e:62:79:57:31:80:3a:e4:a9: 42:9c:b2:6d:bf:48:d9:d4:ef:ae:31:8a:a1:0d:71: 00:88:4f:15:62:77:00:75:2f:99:38:a3:a9:13:53: 8b:54:7e:f4:49:a9:b5:91:c5:fe:c2:7b:ca:1b:71: af:8c:61:70:8a:14:cc:eb:3a:79:60:51:1e:33:a8: 01:34:91:3f:97:a8:bb:fd:78:08:29:ef:c7:e2:d8: 34:b6:07:9e:ca:81:92:54:4a:76:5c:2d:6f:66:22: 74:79:62:dc:9d:fd:c2:76:c8:d4:e7:75:27:8a:63: d2:15:74:84:3b:25:56:e0:1f:dc:e8:7a:53:37:a4: b2:2f:95:19:b1:76:da:7d:76:1f:d8:a4:4b:c1:37: ec:64:d5:42:57:03:54:b4:aa:90:33:ab:55:d8:d6: b2:a1:eb:da:81:e1:31:f1:c1:e0:e5:0b:e7:0a:cb: b3:0d:7d:58:99:de:06:d0:54:c5:41:e8:41:cc:cc: 7a:22:44:22:d8:01:6e:05:cd:0f:e6:2a:d6:fb:fb: 77:53:eb:0b:29:05:ec:41:d4:16:9e:b6:30:36:71: 7b:f8:4d:95:33:0e:11:75:68:f2:54:b0:1d:75:26: bb:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:C0:0B:70:E5:6B:6F:3D:19:AD:F2:3B:DD:EE:3F:DE:7E:24:92:8C X509v3 Authority Key Identifier: keyid:04:C8:EF:6F:52:60:FD:A0:66:61:D9:E9:53:04:57:2B:8E:7C:49:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/04C8EF6F5260FDA06661D9E95304572B8E7C4993.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04C8EF6F5260FDA06661D9E95304572B8E7C4993.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/3230332e3135332e3132362e302f32332d3234203d3e203338353035.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.153.126.0/23 Signature Algorithm: sha256WithRSAEncryption 4e:ca:d9:18:03:57:e5:ed:8d:ac:3a:15:6c:2b:b1:97:6d:86: 02:a2:b2:c5:7c:c7:cf:0e:05:76:28:b6:0b:94:ec:1e:ae:40: f8:08:ca:ea:5b:06:46:07:9a:99:60:eb:04:6c:a5:29:94:fa: 89:fe:47:ee:82:4a:1a:17:ed:13:77:11:7b:94:02:d2:61:d6: 34:4e:56:e6:ea:d1:c0:b0:a2:99:ca:d2:53:b4:73:4a:23:d5: 7a:c4:25:dd:66:af:f9:3f:dd:ca:1b:41:c5:51:b8:cd:c4:11: 88:dc:f5:44:4c:df:e5:86:b3:d9:82:09:cc:11:44:37:2c:c3: db:f1:d4:9a:a3:86:7e:0a:a8:bc:e5:b3:e0:74:2c:c5:a3:64: d3:73:4c:85:b3:ac:ea:cf:3e:05:cc:8b:c3:86:54:21:15:77: 4b:42:9d:ed:c4:18:71:8a:7e:66:f5:37:ee:b0:f2:b3:fe:ba: 84:7d:50:23:b5:01:58:29:13:c1:30:75:91:05:bc:76:0e:5a: 19:0e:66:76:97:66:e3:3d:5d:ac:17:cf:30:19:f6:a3:b5:4c: 8b:f6:85:4c:e8:c7:8e:1d:42:2a:2c:32:30:a7:53:8f:4b:66: b1:eb:3b:eb:12:37:80:17:e3:74:e6:e0:1e:40:b3:36:08:d7: 21:22:1d:ed -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUeIrbCd53E7RnZ/oHrKmciRK3+JwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDRDOEVGNkY1MjYwRkRBMDY2NjFEOUU5NTMwNDU3MkI4 RTdDNDk5MzAeFw0yNjA1MDMwMjQyNDFaFw0yNzA1MDIwMjQ3NDFaMDMxMTAvBgNV BAMTKDdCQzAwQjcwRTU2QjZGM0QxOUFERjIzQkRERUUzRkRFN0UyNDkyOEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkK22P/FJJenQtr5Fp1Yuxr8Vi nG5ieVcxgDrkqUKcsm2/SNnU764xiqENcQCITxVidwB1L5k4o6kTU4tUfvRJqbWR xf7Ce8obca+MYXCKFMzrOnlgUR4zqAE0kT+XqLv9eAgp78fi2DS2B57KgZJUSnZc LW9mInR5Ytyd/cJ2yNTndSeKY9IVdIQ7JVbgH9zoelM3pLIvlRmxdtp9dh/YpEvB N+xk1UJXA1S0qpAzq1XY1rKh69qB4THxweDlC+cKy7MNfViZ3gbQVMVB6EHMzHoi RCLYAW4FzQ/mKtb7+3dT6wspBexB1BaetjA2cXv4TZUzDhF1aPJUsB11JrtDAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUe8ALcOVrbz0ZrfI73e4/3n4kkowwHwYDVR0j BBgwFoAUBMjvb1Jg/aBmYdnpUwRXK458SZMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODNkMDc4NmQtM2QzZS00NWI3LTk2NjUtOGQ0NzRmZDE0YWVhLzAvMDRDOEVGNkY1 MjYwRkRBMDY2NjFEOUU5NTMwNDU3MkI4RTdDNDk5My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wNEM4RUY2RjUyNjBGREEwNjY2MUQ5RTk1MzA0NTcyQjhFN0M0 OTkzLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzgzZDA3ODZkLTNkM2UtNDViNy05 NjY1LThkNDc0ZmQxNGFlYS8wLzMyMzAzMzJlMzEzNTMzMmUzMTMyMzYyZTMwMmYz MjMzMmQzMjM0MjAzZDNlMjAzMzM4MzUzMDM1LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBy5l+MA0GCSqG SIb3DQEBCwUAA4IBAQBOytkYA1fl7Y2sOhVsK7GXbYYCorLFfMfPDgV2KLYLlOwe rkD4CMrqWwZGB5qZYOsEbKUplPqJ/kfugkoaF+0TdxF7lALSYdY0Tlbm6tHAsKKZ ytJTtHNKI9V6xCXdZq/5P93KG0HFUbjNxBGI3PVETN/lhrPZggnMEUQ3LMPb8dSa o4Z+Cqi85bPgdCzFo2TTc0yFs6zqzz4FzIvDhlQhFXdLQp3txBhxin5m9TfusPKz /rqEfVAjtQFYKRPBMHWRBbx2DloZDmZ2l2bjPV2sF88wGfajtUyL9oVM6MeOHUIq LDIwp1OPS2ax6zvrEjeAF+N05uAeQLM2CNchIh3t -----END CERTIFICATE-----Generated at Wed May 13 02:49:57 2026 by rpki-client