$ rpki-client -vvf rpki-rsync.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/3230332e3136312e32312e302f32342d3234203d3e20313333383430.roa File: 3230332e3136312e32312e302f32342d3234203d3e20313333383430.roa (raw, json) Hash identifier: m52mPeFqa+8/0Tpk86Gx6fbXpZzKnUzkFHaj1U3ilBo= Subject key identifier: 5F:E3:FA:EB:C2:46:1E:26:ED:C1:9A:71:F2:96:D6:C1:CC:82:BA:71 Certificate issuer: /CN=408DEB7465856EE053B64340FA814B862FA5ED30 Certificate serial: 218529B3BB8A61F6755015548043583384ADA324 Authority key identifier: 40:8D:EB:74:65:85:6E:E0:53:B6:43:40:FA:81:4B:86:2F:A5:ED:30 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/408DEB7465856EE053B64340FA814B862FA5ED30.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/3230332e3136312e32312e302f32342d3234203d3e20313333383430.roa Signing time: Sun 03 May 2026 02:47:57 +0000 ROA not before: Sun 03 May 2026 02:42:57 +0000 ROA not after: Sun 02 May 2027 02:47:57 +0000 asID: 133840 IP address blocks: 203.161.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/408DEB7465856EE053B64340FA814B862FA5ED30.crl rsync://rpki-rsync.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/408DEB7465856EE053B64340FA814B862FA5ED30.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/408DEB7465856EE053B64340FA814B862FA5ED30.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:85:29:b3:bb:8a:61:f6:75:50:15:54:80:43:58:33:84:ad:a3:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=408DEB7465856EE053B64340FA814B862FA5ED30 Validity Not Before: May 3 02:42:57 2026 GMT Not After : May 2 02:47:57 2027 GMT Subject: CN=5FE3FAEBC2461E26EDC19A71F296D6C1CC82BA71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:fd:62:2f:ae:c3:d2:b3:59:64:23:d9:26:7c: c7:69:1c:50:c6:50:9c:1d:ac:65:61:61:18:c5:0f: 23:c8:4e:ac:9a:5a:ce:89:f0:dc:28:a8:60:b0:70: d0:49:0d:87:c3:69:e7:a5:3f:7e:cd:08:66:8e:b0: 07:1c:b1:45:58:3b:b9:b1:27:54:da:fc:e4:93:3f: 0e:b8:74:b9:a5:19:1d:3c:29:e0:3b:c8:d2:83:94: 5b:2b:99:54:da:12:a9:d7:c0:4d:08:44:a8:0f:b2: 0c:37:28:30:c5:d5:dd:73:c3:4a:5f:13:ec:da:e8: e7:d3:21:29:7b:33:f5:b0:5c:e0:dd:a2:83:9e:64: c5:56:6f:76:78:ec:4f:03:d4:ba:58:a2:19:6b:a9: c8:5c:c2:12:b8:3b:ba:8e:13:05:6d:eb:9f:36:d8: 00:a9:4f:d3:ef:fc:aa:22:7c:f0:9d:c5:83:42:85: 71:11:16:11:db:58:89:e3:ca:a7:bc:67:45:5a:6e: b1:b5:41:4b:6b:e8:6c:fd:85:d6:ce:2b:46:f2:c1: 33:61:c7:87:54:b1:40:cf:30:9d:d0:59:66:ed:d4: f3:c5:a5:cc:83:23:00:df:bc:08:1a:79:d4:34:1c: 35:9a:9b:d9:7f:28:7a:33:77:af:ca:3a:23:3f:cb: 04:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:E3:FA:EB:C2:46:1E:26:ED:C1:9A:71:F2:96:D6:C1:CC:82:BA:71 X509v3 Authority Key Identifier: keyid:40:8D:EB:74:65:85:6E:E0:53:B6:43:40:FA:81:4B:86:2F:A5:ED:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/408DEB7465856EE053B64340FA814B862FA5ED30.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/408DEB7465856EE053B64340FA814B862FA5ED30.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/3230332e3136312e32312e302f32342d3234203d3e20313333383430.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.161.21.0/24 Signature Algorithm: sha256WithRSAEncryption 2f:d8:93:ad:82:87:78:eb:f7:de:ab:35:e2:a0:39:01:f4:de: f3:91:c3:c8:38:34:0b:20:99:c9:d7:44:b4:72:57:8b:fd:6d: 1e:2b:0c:a1:da:46:7f:04:a6:df:5a:bf:db:4e:d2:6f:90:3d: 71:c6:8c:04:95:00:e1:53:71:00:4e:36:0f:8c:2b:0a:39:aa: aa:7a:3b:4c:e8:91:9d:95:8c:3a:d1:2b:8a:3a:82:6a:5f:fa: a5:d4:76:2c:6e:3a:ee:bc:f6:96:cb:54:ac:81:36:36:46:3b: d2:ff:f4:6b:38:9d:4e:09:d4:40:c5:df:68:96:98:7e:4c:34: 3b:ab:5d:77:e9:cd:68:ca:af:69:17:9f:6a:a7:43:7c:e6:cd: 63:6c:b5:0a:fc:06:10:48:72:7a:a7:b5:94:2a:19:1f:37:fd: af:10:29:18:38:89:25:96:7c:6a:72:21:9f:20:84:c2:e6:a1: 0d:35:d0:14:22:d5:8b:47:b7:6b:4b:73:f2:87:81:55:62:71: 00:9c:6e:d3:f8:bc:8d:3d:f3:a8:fb:81:9d:34:c3:77:77:09: a7:37:72:10:ed:bc:7f:c7:8e:64:d5:d4:b8:8c:c8:10:37:39: 72:a2:61:c2:1e:14:91:17:6d:27:da:69:8d:a1:f1:bd:0b:91: 89:31:8a:8e -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUIYUps7uKYfZ1UBVUgENYM4StoyQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDA4REVCNzQ2NTg1NkVFMDUzQjY0MzQwRkE4MTRCODYy RkE1RUQzMDAeFw0yNjA1MDMwMjQyNTdaFw0yNzA1MDIwMjQ3NTdaMDMxMTAvBgNV BAMTKDVGRTNGQUVCQzI0NjFFMjZFREMxOUE3MUYyOTZENkMxQ0M4MkJBNzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq/WIvrsPSs1lkI9kmfMdpHFDG UJwdrGVhYRjFDyPITqyaWs6J8NwoqGCwcNBJDYfDaeelP37NCGaOsAccsUVYO7mx J1Ta/OSTPw64dLmlGR08KeA7yNKDlFsrmVTaEqnXwE0IRKgPsgw3KDDF1d1zw0pf E+za6OfTISl7M/WwXODdooOeZMVWb3Z47E8D1LpYohlrqchcwhK4O7qOEwVt6582 2ACpT9Pv/KoifPCdxYNChXERFhHbWInjyqe8Z0VabrG1QUtr6Gz9hdbOK0bywTNh x4dUsUDPMJ3QWWbt1PPFpcyDIwDfvAgaedQ0HDWam9l/KHozd6/KOiM/ywR5AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUX+P668JGHibtwZpx8pbWwcyCunEwHwYDVR0j BBgwFoAUQI3rdGWFbuBTtkNA+oFLhi+l7TAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODVkOGRhYjQtOGJiNi00ZWQwLThkYWItNWE0MDYxNjdiOTlkLzAvNDA4REVCNzQ2 NTg1NkVFMDUzQjY0MzQwRkE4MTRCODYyRkE1RUQzMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80MDhERUI3NDY1ODU2RUUwNTNCNjQzNDBGQTgxNEI4NjJGQTVF RDMwLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzg1ZDhkYWI0LThiYjYtNGVkMC04 ZGFiLTVhNDA2MTY3Yjk5ZC8wLzMyMzAzMzJlMzEzNjMxMmUzMjMxMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzMzMzgzNDMwLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAy6EVMA0GCSqG SIb3DQEBCwUAA4IBAQAv2JOtgod46/feqzXioDkB9N7zkcPIODQLIJnJ10S0cleL /W0eKwyh2kZ/BKbfWr/bTtJvkD1xxowElQDhU3EATjYPjCsKOaqqejtM6JGdlYw6 0SuKOoJqX/ql1HYsbjruvPaWy1SsgTY2RjvS//RrOJ1OCdRAxd9olph+TDQ7q113 6c1oyq9pF59qp0N85s1jbLUK/AYQSHJ6p7WUKhkfN/2vECkYOIkllnxqciGfIITC 5qENNdAUItWLR7drS3Pyh4FVYnEAnG7T+LyNPfOo+4GdNMN3dwmnN3IQ7bx/x45k 1dS4jMgQNzlyomHCHhSRF20n2mmNofG9C5GJMYqO -----END CERTIFICATE-----Generated at Wed May 13 02:40:26 2026 by rpki-client