$ rpki-client -vvf rpki-rsync.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/3230332e3136312e31382e302f32342d3234203d3e20313333383430.roa File: 3230332e3136312e31382e302f32342d3234203d3e20313333383430.roa (raw, json) Hash identifier: ssBu2jXdvk42wwsEv5CkPxmyn7/LIefL5EcZ6039xsU= Subject key identifier: 62:84:B3:A7:15:E3:50:E1:F2:C6:46:4E:A0:BE:53:73:E7:A4:10:0E Certificate issuer: /CN=408DEB7465856EE053B64340FA814B862FA5ED30 Certificate serial: 06A941BAC3F7B21EF046D815DEB350DFFFBACDDE Authority key identifier: 40:8D:EB:74:65:85:6E:E0:53:B6:43:40:FA:81:4B:86:2F:A5:ED:30 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/408DEB7465856EE053B64340FA814B862FA5ED30.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/3230332e3136312e31382e302f32342d3234203d3e20313333383430.roa Signing time: Sun 03 May 2026 02:47:53 +0000 ROA not before: Sun 03 May 2026 02:42:53 +0000 ROA not after: Sun 02 May 2027 02:47:53 +0000 asID: 133840 IP address blocks: 203.161.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/408DEB7465856EE053B64340FA814B862FA5ED30.crl rsync://rpki-rsync.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/408DEB7465856EE053B64340FA814B862FA5ED30.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/408DEB7465856EE053B64340FA814B862FA5ED30.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:a9:41:ba:c3:f7:b2:1e:f0:46:d8:15:de:b3:50:df:ff:ba:cd:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=408DEB7465856EE053B64340FA814B862FA5ED30 Validity Not Before: May 3 02:42:53 2026 GMT Not After : May 2 02:47:53 2027 GMT Subject: CN=6284B3A715E350E1F2C6464EA0BE5373E7A4100E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:7c:b8:8f:b4:7b:59:a9:fa:27:54:a6:19:70: d2:6c:61:4c:a3:99:4e:5c:98:4a:8c:27:b3:97:54: 23:ed:a1:5b:ed:33:e5:cc:11:b1:90:c0:ee:db:e6: 21:c8:5d:01:c4:06:fd:3f:20:2c:95:86:dd:0e:a2: 11:84:bc:4e:64:30:ea:a9:9f:22:96:89:ab:0a:0c: a8:bf:9a:13:a9:82:2c:dc:b2:6b:f6:03:e3:8b:33: ec:68:a6:94:c7:b5:02:59:e4:8d:23:54:d5:92:d9: b0:32:22:e6:b4:8f:c3:99:61:9d:61:6b:cd:54:76: 88:6c:f6:5a:bf:f4:33:1d:2b:05:b6:5d:ac:7f:2c: c0:0c:7a:e8:f9:d9:34:ac:df:24:6f:60:49:55:b0: b0:f1:40:f4:4a:97:f2:46:23:ee:e8:51:e8:b6:8d: 59:e7:39:74:99:fe:67:6e:dc:57:0d:ff:4b:31:3e: b0:68:aa:ab:74:b2:7c:99:5c:f5:db:04:8b:02:b9: 69:f0:55:8d:96:8d:bb:41:6b:31:93:47:97:c6:e5: 5e:43:d3:a3:f4:73:9d:0d:28:a0:7d:44:cf:51:e9: 29:2c:5f:b9:2c:2c:bb:2d:cd:44:0e:9d:0b:9d:3b: d1:6f:4f:9d:9f:a5:6e:ed:c9:08:4a:a1:d7:c6:a1: 70:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:84:B3:A7:15:E3:50:E1:F2:C6:46:4E:A0:BE:53:73:E7:A4:10:0E X509v3 Authority Key Identifier: keyid:40:8D:EB:74:65:85:6E:E0:53:B6:43:40:FA:81:4B:86:2F:A5:ED:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/408DEB7465856EE053B64340FA814B862FA5ED30.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/408DEB7465856EE053B64340FA814B862FA5ED30.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/3230332e3136312e31382e302f32342d3234203d3e20313333383430.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.161.18.0/24 Signature Algorithm: sha256WithRSAEncryption 37:49:09:e1:35:a8:34:00:a1:c2:c2:0a:97:f0:81:e0:1a:fd: 92:0d:03:da:ea:bd:e0:63:e4:10:57:bf:33:47:ba:96:0f:60: 24:c5:5c:ac:36:24:96:ec:61:6d:f8:69:16:3f:a5:18:76:5e: 97:2b:67:af:09:f1:6a:73:d4:ff:62:df:fb:2f:52:d6:51:67: ba:e7:f5:81:d6:ce:a9:0e:79:3d:5a:99:22:b2:c0:c7:7e:c4: 63:f9:34:12:34:8f:02:c8:c5:3a:7f:5e:8f:b8:b4:4a:6a:db: 86:03:f6:3f:de:78:d9:2a:af:0b:a1:03:60:4c:3a:48:b7:98: 4f:97:89:a6:52:ec:38:2b:4f:57:3b:ec:28:05:7e:d0:38:a3: 22:c6:69:1e:79:0e:8f:e1:95:e1:0a:18:69:96:84:01:32:71: 88:a8:56:46:38:15:25:1a:ac:ff:d9:53:a6:9b:d2:d1:e3:64: 3e:ff:5b:17:d7:7d:8c:2e:75:ae:6e:90:6e:1a:20:9e:f3:cb: 7c:ad:06:5e:a6:88:ec:3b:71:10:82:fc:c9:c7:f5:b7:a0:0f: 78:99:14:e6:05:4a:90:e6:27:04:2d:aa:46:8f:76:f3:75:18: 48:e7:0c:0c:45:99:80:aa:22:13:4d:c6:2f:36:68:fc:81:2c: 9a:a1:09:b9 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUBqlBusP3sh7wRtgV3rNQ3/+6zd4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDA4REVCNzQ2NTg1NkVFMDUzQjY0MzQwRkE4MTRCODYy RkE1RUQzMDAeFw0yNjA1MDMwMjQyNTNaFw0yNzA1MDIwMjQ3NTNaMDMxMTAvBgNV BAMTKDYyODRCM0E3MTVFMzUwRTFGMkM2NDY0RUEwQkU1MzczRTdBNDEwMEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3fLiPtHtZqfonVKYZcNJsYUyj mU5cmEqMJ7OXVCPtoVvtM+XMEbGQwO7b5iHIXQHEBv0/ICyVht0OohGEvE5kMOqp nyKWiasKDKi/mhOpgizcsmv2A+OLM+xoppTHtQJZ5I0jVNWS2bAyIua0j8OZYZ1h a81Udohs9lq/9DMdKwW2Xax/LMAMeuj52TSs3yRvYElVsLDxQPRKl/JGI+7oUei2 jVnnOXSZ/mdu3FcN/0sxPrBoqqt0snyZXPXbBIsCuWnwVY2WjbtBazGTR5fG5V5D 06P0c50NKKB9RM9R6SksX7ksLLstzUQOnQudO9FvT52fpW7tyQhKodfGoXBxAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUYoSzpxXjUOHyxkZOoL5Tc+ekEA4wHwYDVR0j BBgwFoAUQI3rdGWFbuBTtkNA+oFLhi+l7TAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODVkOGRhYjQtOGJiNi00ZWQwLThkYWItNWE0MDYxNjdiOTlkLzAvNDA4REVCNzQ2 NTg1NkVFMDUzQjY0MzQwRkE4MTRCODYyRkE1RUQzMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80MDhERUI3NDY1ODU2RUUwNTNCNjQzNDBGQTgxNEI4NjJGQTVF RDMwLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzg1ZDhkYWI0LThiYjYtNGVkMC04 ZGFiLTVhNDA2MTY3Yjk5ZC8wLzMyMzAzMzJlMzEzNjMxMmUzMTM4MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzMzMzgzNDMwLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAy6ESMA0GCSqG SIb3DQEBCwUAA4IBAQA3SQnhNag0AKHCwgqX8IHgGv2SDQPa6r3gY+QQV78zR7qW D2AkxVysNiSW7GFt+GkWP6UYdl6XK2evCfFqc9T/Yt/7L1LWUWe65/WB1s6pDnk9 WpkissDHfsRj+TQSNI8CyMU6f16PuLRKatuGA/Y/3njZKq8LoQNgTDpIt5hPl4mm Uuw4K09XO+woBX7QOKMixmkeeQ6P4ZXhChhploQBMnGIqFZGOBUlGqz/2VOmm9LR 42Q+/1sX132MLnWubpBuGiCe88t8rQZepojsO3EQgvzJx/W3oA94mRTmBUqQ5icE LapGj3bzdRhI5wwMRZmAqiITTcYvNmj8gSyaoQm5 -----END CERTIFICATE-----Generated at Wed May 13 02:12:48 2026 by rpki-client