$ rpki-client -vvf rpki-rsync.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/3230322e35362e3136302e302f32322d3234203d3e203435323837.roa File: 3230322e35362e3136302e302f32322d3234203d3e203435323837.roa (raw, json) Hash identifier: QiGX1QkZSjLaMXHZar4XrbmTjiSd8XSa/Ltq8nabR1Q= Subject key identifier: BA:9D:4D:53:5A:F3:F8:C6:98:EF:C7:EE:C8:B2:53:35:73:51:42:DD Certificate issuer: /CN=19F593FB6094A53D2F567FA23EBD00CEE6BD7F63 Certificate serial: 701F1A4CFB0F81FBB7BD9928382295CA1475F104 Authority key identifier: 19:F5:93:FB:60:94:A5:3D:2F:56:7F:A2:3E:BD:00:CE:E6:BD:7F:63 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/19F593FB6094A53D2F567FA23EBD00CEE6BD7F63.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/3230322e35362e3136302e302f32322d3234203d3e203435323837.roa Signing time: Sun 03 May 2026 02:53:25 +0000 ROA not before: Sun 03 May 2026 02:48:25 +0000 ROA not after: Sun 02 May 2027 02:53:25 +0000 asID: 45287 IP address blocks: 202.56.160.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/19F593FB6094A53D2F567FA23EBD00CEE6BD7F63.crl rsync://rpki-rsync.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/19F593FB6094A53D2F567FA23EBD00CEE6BD7F63.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/19F593FB6094A53D2F567FA23EBD00CEE6BD7F63.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 20:38:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:1f:1a:4c:fb:0f:81:fb:b7:bd:99:28:38:22:95:ca:14:75:f1:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19F593FB6094A53D2F567FA23EBD00CEE6BD7F63 Validity Not Before: May 3 02:48:25 2026 GMT Not After : May 2 02:53:25 2027 GMT Subject: CN=BA9D4D535AF3F8C698EFC7EEC8B25335735142DD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:44:8b:c5:3e:45:88:7f:c9:36:a0:ac:41:40: 2c:0b:b7:a7:7a:22:49:a5:57:b0:49:9a:1c:8b:25: 43:19:0f:91:50:e5:a9:04:31:a0:39:95:72:92:07: 14:6f:d0:a2:9c:5e:a5:a7:bf:71:9f:70:25:b6:4d: 65:5c:bf:df:e1:84:5f:b4:58:98:d3:90:54:6f:44: bb:47:a7:1c:94:9b:d4:20:dd:17:9b:df:66:0e:45: 89:c3:f5:9e:32:bc:f2:dd:f2:92:de:d2:c5:d8:ce: ac:b0:bc:9f:bb:b5:53:13:cf:79:72:3b:05:46:7d: 6d:bf:2b:08:a1:9d:52:42:d7:ac:99:47:9d:5d:48: 30:b2:90:5b:97:5d:f0:31:37:27:de:92:4a:de:a7: b4:db:1f:a8:5c:78:12:96:70:a7:d2:49:2e:5d:37: 0b:ed:b7:1a:c5:24:c6:d5:e1:8e:71:93:00:94:fb: 08:5c:92:2f:03:37:6f:45:28:35:3f:fd:e2:29:ee: d7:e2:3d:42:49:c8:75:3f:82:50:e7:8f:6b:05:86: a3:72:81:0d:6a:f7:1f:75:73:5b:e0:ab:37:8f:71: ed:f6:57:6e:71:bd:2b:0b:8b:39:1f:ba:b5:6c:2f: c9:64:9b:62:9a:bf:51:1b:55:c8:19:31:7c:5e:02: f2:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:9D:4D:53:5A:F3:F8:C6:98:EF:C7:EE:C8:B2:53:35:73:51:42:DD X509v3 Authority Key Identifier: keyid:19:F5:93:FB:60:94:A5:3D:2F:56:7F:A2:3E:BD:00:CE:E6:BD:7F:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/19F593FB6094A53D2F567FA23EBD00CEE6BD7F63.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/19F593FB6094A53D2F567FA23EBD00CEE6BD7F63.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/3230322e35362e3136302e302f32322d3234203d3e203435323837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.56.160.0/22 Signature Algorithm: sha256WithRSAEncryption 81:95:08:fd:cc:33:e8:04:c5:6f:c6:38:f6:4f:82:ac:23:44: b5:ab:5b:53:c3:72:09:b9:71:5a:89:81:4c:31:66:b9:a2:a1: 94:fe:8f:d2:cf:5f:a8:c7:1f:5b:38:69:8c:f7:cc:88:f7:84: b4:cb:39:b3:5c:d0:40:ca:e2:4a:fa:50:1b:01:32:45:18:1c: d4:9e:53:d8:11:2c:85:74:ec:06:a5:c1:f9:f2:01:a1:9f:c0: 56:cd:04:94:01:4b:b2:c2:72:85:af:34:c1:00:2d:dd:5e:29: 0c:16:91:1a:d8:ef:df:4d:ae:90:99:44:ef:ee:89:27:10:0f: 93:29:cc:50:ad:39:67:fc:b1:c6:d6:27:45:c3:1b:47:8f:15: 2a:a4:5a:b2:21:be:8f:41:63:ca:44:64:6a:7f:95:9a:d8:fd: 3b:76:05:59:b9:0d:71:c9:9c:cc:7d:cd:d8:c3:f9:09:b5:1a: d0:ad:9f:e1:e0:96:72:81:be:9f:b0:73:bc:71:12:f4:ad:2d: e8:b2:90:d4:71:db:6b:08:a4:b6:a9:24:37:2a:0c:dd:31:81: a9:da:b3:3f:29:12:f1:41:3a:fb:cb:69:86:48:56:3c:4b:cd: cf:52:4e:b0:84:8a:04:14:5d:eb:51:76:36:74:66:c0:41:fd: 8a:a0:01:7b -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUcB8aTPsPgfu3vZkoOCKVyhR18QQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTlGNTkzRkI2MDk0QTUzRDJGNTY3RkEyM0VCRDAwQ0VF NkJEN0Y2MzAeFw0yNjA1MDMwMjQ4MjVaFw0yNzA1MDIwMjUzMjVaMDMxMTAvBgNV BAMTKEJBOUQ0RDUzNUFGM0Y4QzY5OEVGQzdFRUM4QjI1MzM1NzM1MTQyREQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9RIvFPkWIf8k2oKxBQCwLt6d6 IkmlV7BJmhyLJUMZD5FQ5akEMaA5lXKSBxRv0KKcXqWnv3GfcCW2TWVcv9/hhF+0 WJjTkFRvRLtHpxyUm9Qg3Reb32YORYnD9Z4yvPLd8pLe0sXYzqywvJ+7tVMTz3ly OwVGfW2/KwihnVJC16yZR51dSDCykFuXXfAxNyfekkrep7TbH6hceBKWcKfSSS5d NwvttxrFJMbV4Y5xkwCU+whcki8DN29FKDU//eIp7tfiPUJJyHU/glDnj2sFhqNy gQ1q9x91c1vgqzePce32V25xvSsLizkfurVsL8lkm2Kav1EbVcgZMXxeAvIRAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUup1NU1rz+MaY78fuyLJTNXNRQt0wHwYDVR0j BBgwFoAUGfWT+2CUpT0vVn+iPr0Azua9f2MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTgyNDlmYzMtNmM4NC00ZTkxLWIwNjctYTBjNmE4NDBhM2E5LzAvMTlGNTkzRkI2 MDk0QTUzRDJGNTY3RkEyM0VCRDAwQ0VFNkJEN0Y2My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xOUY1OTNGQjYwOTRBNTNEMkY1NjdGQTIzRUJEMDBDRUU2QkQ3 RjYzLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzk4MjQ5ZmMzLTZjODQtNGU5MS1i MDY3LWEwYzZhODQwYTNhOS8wLzMyMzAzMjJlMzUzNjJlMzEzNjMwMmUzMDJmMzIz MjJkMzIzNDIwM2QzZTIwMzQzNTMyMzgzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAso4oDANBgkqhkiG 9w0BAQsFAAOCAQEAgZUI/cwz6ATFb8Y49k+CrCNEtatbU8NyCblxWomBTDFmuaKh lP6P0s9fqMcfWzhpjPfMiPeEtMs5s1zQQMriSvpQGwEyRRgc1J5T2BEshXTsBqXB +fIBoZ/AVs0ElAFLssJyha80wQAt3V4pDBaRGtjv302ukJlE7+6JJxAPkynMUK05 Z/yxxtYnRcMbR48VKqRasiG+j0FjykRkan+Vmtj9O3YFWbkNccmczH3N2MP5CbUa 0K2f4eCWcoG+n7BzvHES9K0t6LKQ1HHbawiktqkkNyoM3TGBqdqzPykS8UE6+8tp hkhWPEvNz1JOsISKBBRd61F2NnRmwEH9iqABew== -----END CERTIFICATE-----Generated at Wed May 13 04:16:38 2026 by rpki-client