$ rpki-client -vvf rpki-rsync.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/3230332e3136312e31362e302f32342d3234203d3e203535363835.roa File: 3230332e3136312e31362e302f32342d3234203d3e203535363835.roa (raw, json) Hash identifier: C5oUI2h3brm87AxUbd6SUzdb5uGx5flTFnQn9c0Rsx8= Subject key identifier: A3:89:9B:D6:B4:E9:DA:27:7A:7F:92:35:30:31:3B:0E:15:C5:29:52 Certificate issuer: /CN=408DEB7465856EE053B64340FA814B862FA5ED30 Certificate serial: 46C2868787C1E1A541A3E7B70C34F85630A2D2C7 Authority key identifier: 40:8D:EB:74:65:85:6E:E0:53:B6:43:40:FA:81:4B:86:2F:A5:ED:30 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/408DEB7465856EE053B64340FA814B862FA5ED30.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/3230332e3136312e31362e302f32342d3234203d3e203535363835.roa Signing time: Sun 03 May 2026 02:47:58 +0000 ROA not before: Sun 03 May 2026 02:42:58 +0000 ROA not after: Sun 02 May 2027 02:47:58 +0000 asID: 55685 IP address blocks: 203.161.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/408DEB7465856EE053B64340FA814B862FA5ED30.crl rsync://rpki-rsync.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/408DEB7465856EE053B64340FA814B862FA5ED30.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/408DEB7465856EE053B64340FA814B862FA5ED30.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:c2:86:87:87:c1:e1:a5:41:a3:e7:b7:0c:34:f8:56:30:a2:d2:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=408DEB7465856EE053B64340FA814B862FA5ED30 Validity Not Before: May 3 02:42:58 2026 GMT Not After : May 2 02:47:58 2027 GMT Subject: CN=A3899BD6B4E9DA277A7F923530313B0E15C52952 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:8a:27:48:f7:30:5f:cc:1f:8a:d7:53:20:96: ef:09:00:67:61:c9:87:17:ca:c2:e3:d0:82:ad:a8: 43:99:42:74:a8:23:65:b6:e8:6e:c8:65:76:17:88: 61:09:31:2e:a4:63:c8:4d:16:8c:fc:21:d9:83:b9: 72:68:22:b0:ea:56:d6:48:a0:b1:4d:6d:0c:2c:01: 54:3f:f4:6d:d8:f2:d0:db:6f:ce:e4:df:f3:2d:77: 30:50:8c:ae:36:a9:0f:0a:a9:dc:cc:3b:69:ca:86: 7f:1d:fc:a4:d3:11:99:7e:5c:43:ad:08:d5:4b:5f: 26:ca:18:63:0a:30:ba:a2:be:d2:83:d0:5d:ec:fa: 12:3c:23:aa:ab:30:ea:0a:08:4b:f5:3a:bc:93:b1: 3d:a4:0b:b7:a4:69:c5:5e:38:96:a4:55:f9:51:e6: c1:a9:ec:c9:db:14:6e:ce:62:96:69:b0:fb:6a:dc: f6:0d:36:3a:64:00:7d:11:50:53:af:e0:0d:48:82: e4:37:ea:d4:c0:34:eb:ae:80:47:10:cb:dd:31:69: 9b:f6:6d:1c:e6:57:c3:de:71:d3:eb:9a:3c:e3:81: d9:33:c7:6e:c6:99:a7:d5:e4:47:2c:48:64:90:32: 96:9e:b9:d4:81:3a:37:55:16:2a:65:6e:18:bc:e1: 1e:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:89:9B:D6:B4:E9:DA:27:7A:7F:92:35:30:31:3B:0E:15:C5:29:52 X509v3 Authority Key Identifier: keyid:40:8D:EB:74:65:85:6E:E0:53:B6:43:40:FA:81:4B:86:2F:A5:ED:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/408DEB7465856EE053B64340FA814B862FA5ED30.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/408DEB7465856EE053B64340FA814B862FA5ED30.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/3230332e3136312e31362e302f32342d3234203d3e203535363835.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.161.16.0/24 Signature Algorithm: sha256WithRSAEncryption 95:36:8a:77:0d:fd:74:5a:46:5d:0b:2e:58:f8:11:7f:51:2b: ad:6b:c6:6e:99:f5:d5:15:47:ee:9e:22:87:27:88:90:67:bd: 1c:d7:1f:55:da:a8:cf:04:3c:4a:84:31:b1:d8:e3:94:82:8f: b4:5a:2a:10:30:fa:f7:f0:47:46:4e:24:b2:41:ba:57:a7:07: 5f:79:ed:2c:15:8b:57:1c:52:4c:be:4b:6d:fd:cb:87:1e:ad: 5c:d6:60:ed:3c:f1:e8:01:3e:77:90:3e:9f:22:14:4f:3c:89: 99:41:83:e9:9a:38:8a:98:a9:1e:92:2f:df:79:3b:60:48:b1: 57:0c:80:6d:70:c3:71:94:8e:c1:79:5d:fd:8a:77:62:fe:78: 6d:43:46:70:79:79:eb:39:2b:17:20:9b:97:ae:13:50:d5:45: 44:de:59:7b:39:ff:58:53:9b:40:15:25:c9:07:85:12:8a:31: d6:8c:71:73:48:8d:18:8a:4b:cc:71:bd:57:f3:63:3d:94:36: 2f:90:1f:a4:0a:cf:22:40:93:40:01:16:e4:b2:f0:bc:79:86: 2b:04:0a:0c:72:9e:b3:3d:2f:97:58:4b:e1:94:42:81:ff:06: 43:15:f8:a3:31:b4:11:5a:59:bf:b0:ed:76:e4:99:bf:1a:b9: d2:91:8d:4b -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIURsKGh4fB4aVBo+e3DDT4VjCi0scwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDA4REVCNzQ2NTg1NkVFMDUzQjY0MzQwRkE4MTRCODYy RkE1RUQzMDAeFw0yNjA1MDMwMjQyNThaFw0yNzA1MDIwMjQ3NThaMDMxMTAvBgNV BAMTKEEzODk5QkQ2QjRFOURBMjc3QTdGOTIzNTMwMzEzQjBFMTVDNTI5NTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCviidI9zBfzB+K11Mglu8JAGdh yYcXysLj0IKtqEOZQnSoI2W26G7IZXYXiGEJMS6kY8hNFoz8IdmDuXJoIrDqVtZI oLFNbQwsAVQ/9G3Y8tDbb87k3/MtdzBQjK42qQ8KqdzMO2nKhn8d/KTTEZl+XEOt CNVLXybKGGMKMLqivtKD0F3s+hI8I6qrMOoKCEv1OryTsT2kC7ekacVeOJakVflR 5sGp7MnbFG7OYpZpsPtq3PYNNjpkAH0RUFOv4A1IguQ36tTANOuugEcQy90xaZv2 bRzmV8PecdPrmjzjgdkzx27GmafV5EcsSGSQMpaeudSBOjdVFiplbhi84R6FAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUo4mb1rTp2id6f5I1MDE7DhXFKVIwHwYDVR0j BBgwFoAUQI3rdGWFbuBTtkNA+oFLhi+l7TAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODVkOGRhYjQtOGJiNi00ZWQwLThkYWItNWE0MDYxNjdiOTlkLzAvNDA4REVCNzQ2 NTg1NkVFMDUzQjY0MzQwRkE4MTRCODYyRkE1RUQzMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80MDhERUI3NDY1ODU2RUUwNTNCNjQzNDBGQTgxNEI4NjJGQTVF RDMwLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzg1ZDhkYWI0LThiYjYtNGVkMC04 ZGFiLTVhNDA2MTY3Yjk5ZC8wLzMyMzAzMzJlMzEzNjMxMmUzMTM2MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzUzNTM2MzgzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMuhEDANBgkqhkiG 9w0BAQsFAAOCAQEAlTaKdw39dFpGXQsuWPgRf1ErrWvGbpn11RVH7p4ihyeIkGe9 HNcfVdqozwQ8SoQxsdjjlIKPtFoqEDD69/BHRk4kskG6V6cHX3ntLBWLVxxSTL5L bf3Lhx6tXNZg7Tzx6AE+d5A+nyIUTzyJmUGD6Zo4ipipHpIv33k7YEixVwyAbXDD cZSOwXld/Yp3Yv54bUNGcHl56zkrFyCbl64TUNVFRN5Zezn/WFObQBUlyQeFEoox 1oxxc0iNGIpLzHG9V/NjPZQ2L5AfpArPIkCTQAEW5LLwvHmGKwQKDHKesz0vl1hL 4ZRCgf8GQxX4ozG0EVpZv7DtduSZvxq50pGNSw== -----END CERTIFICATE-----Generated at Wed May 13 01:40:54 2026 by rpki-client