$ rpki-client -vvf rpki-rsync.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/3230332e39392e3133302e302f32332d3234203d3e203435323837.roa File: 3230332e39392e3133302e302f32332d3234203d3e203435323837.roa (raw, json) Hash identifier: 6osBaVpCEcyr4sPNLrXGO9OphhAYx5PHHXLqmm632lw= Subject key identifier: C0:1D:66:4E:15:20:1D:21:97:A6:E2:C2:71:89:94:CB:71:10:5F:92 Certificate issuer: /CN=19F593FB6094A53D2F567FA23EBD00CEE6BD7F63 Certificate serial: 193BEA3469C11B26A172F5BD3037719E3D7C5A1F Authority key identifier: 19:F5:93:FB:60:94:A5:3D:2F:56:7F:A2:3E:BD:00:CE:E6:BD:7F:63 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/19F593FB6094A53D2F567FA23EBD00CEE6BD7F63.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/3230332e39392e3133302e302f32332d3234203d3e203435323837.roa Signing time: Sun 03 May 2026 02:53:28 +0000 ROA not before: Sun 03 May 2026 02:48:28 +0000 ROA not after: Sun 02 May 2027 02:53:28 +0000 asID: 45287 IP address blocks: 203.99.130.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/19F593FB6094A53D2F567FA23EBD00CEE6BD7F63.crl rsync://rpki-rsync.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/19F593FB6094A53D2F567FA23EBD00CEE6BD7F63.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/19F593FB6094A53D2F567FA23EBD00CEE6BD7F63.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 20:38:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:3b:ea:34:69:c1:1b:26:a1:72:f5:bd:30:37:71:9e:3d:7c:5a:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19F593FB6094A53D2F567FA23EBD00CEE6BD7F63 Validity Not Before: May 3 02:48:28 2026 GMT Not After : May 2 02:53:28 2027 GMT Subject: CN=C01D664E15201D2197A6E2C2718994CB71105F92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:84:ee:22:71:08:a4:83:74:cd:04:7a:30:65: 30:03:c4:5b:de:d2:8c:49:5b:9b:5d:c4:60:72:20: 04:09:11:43:27:87:e4:49:81:ce:36:4f:c3:58:0f: 23:74:7d:25:af:93:bc:eb:f4:2b:a0:98:c6:75:83: 37:27:da:ae:7b:57:3e:bf:44:4f:79:20:d0:47:bb: e3:c2:d9:2e:64:1e:6e:a5:39:01:85:6e:b7:ff:1c: 74:58:a4:95:93:d5:5c:88:d0:f7:73:1c:83:0b:16: c3:e6:bb:dd:32:f7:0b:2a:eb:5a:53:85:db:74:f2: 04:10:3d:d8:3f:99:ed:55:ef:fe:9a:51:1e:e1:f1: 73:63:ea:0a:ad:d1:6a:d7:ec:0d:6f:ca:65:f9:15: 36:e7:b8:43:3a:d1:95:36:69:89:13:86:91:19:16: b3:b5:44:ca:27:e5:d2:ad:27:d9:ea:3f:d3:7e:83: 73:ff:80:fd:2c:54:fc:9b:e4:2e:1a:35:f2:76:ba: b7:4e:b3:3c:bf:dd:00:fd:29:0d:09:a9:b2:86:b1: f5:3d:24:12:2e:f5:18:fd:af:e5:8b:b0:5a:be:87: 29:30:fa:a0:ff:ba:d1:13:64:ec:a1:3a:16:79:a4: 49:39:8c:0c:e9:9e:a6:e4:f6:a4:63:f0:86:ef:98: b3:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:1D:66:4E:15:20:1D:21:97:A6:E2:C2:71:89:94:CB:71:10:5F:92 X509v3 Authority Key Identifier: keyid:19:F5:93:FB:60:94:A5:3D:2F:56:7F:A2:3E:BD:00:CE:E6:BD:7F:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/19F593FB6094A53D2F567FA23EBD00CEE6BD7F63.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/19F593FB6094A53D2F567FA23EBD00CEE6BD7F63.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/3230332e39392e3133302e302f32332d3234203d3e203435323837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.99.130.0/23 Signature Algorithm: sha256WithRSAEncryption 86:aa:9e:7a:88:4b:42:fe:8e:2e:87:d9:0c:4c:87:a5:9e:8b: f8:75:7d:f8:8b:59:79:69:6b:f6:59:99:13:00:b5:bb:ed:f0: a7:a3:5e:25:ef:50:54:b9:ff:de:52:8c:22:1f:9c:18:13:4a: b9:34:91:b8:a5:42:5c:ab:57:79:61:cf:7c:af:d0:13:f5:6b: 8d:eb:21:fa:aa:fc:7f:cd:20:d7:e6:6b:53:de:21:c0:ff:45: 76:f3:93:da:a5:66:22:2d:67:a3:e1:78:6e:79:e5:c1:6b:56: c8:5c:40:5f:67:7b:7a:0a:43:b9:53:9c:b3:61:23:8c:d0:bf: ca:9c:1d:9c:04:b1:64:56:6f:de:d4:fe:c6:fc:94:2f:8f:24: 49:a2:e2:79:49:bd:5d:9f:c4:ab:d9:b5:76:d0:4e:39:2c:9a: ae:9d:13:1e:62:ad:29:cd:37:00:b9:12:9b:2c:01:37:bb:0f: bb:70:dc:c7:48:7b:a8:b1:06:d7:55:00:51:ff:1f:c2:c2:4a: d5:e1:a8:0d:19:42:0e:bc:c5:5b:6a:45:8c:75:d4:c5:8d:ba: 34:9d:7f:b6:5d:4d:e3:c7:f1:89:47:a9:2b:53:75:f4:4d:5f: 8d:10:52:b9:d2:e1:a0:f9:6a:b0:f6:c1:6c:40:ba:16:2d:80: 4c:7a:c9:12 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUGTvqNGnBGyahcvW9MDdxnj18Wh8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTlGNTkzRkI2MDk0QTUzRDJGNTY3RkEyM0VCRDAwQ0VF NkJEN0Y2MzAeFw0yNjA1MDMwMjQ4MjhaFw0yNzA1MDIwMjUzMjhaMDMxMTAvBgNV BAMTKEMwMUQ2NjRFMTUyMDFEMjE5N0E2RTJDMjcxODk5NENCNzExMDVGOTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4hO4icQikg3TNBHowZTADxFve 0oxJW5tdxGByIAQJEUMnh+RJgc42T8NYDyN0fSWvk7zr9CugmMZ1gzcn2q57Vz6/ RE95INBHu+PC2S5kHm6lOQGFbrf/HHRYpJWT1VyI0PdzHIMLFsPmu90y9wsq61pT hdt08gQQPdg/me1V7/6aUR7h8XNj6gqt0WrX7A1vymX5FTbnuEM60ZU2aYkThpEZ FrO1RMon5dKtJ9nqP9N+g3P/gP0sVPyb5C4aNfJ2urdOszy/3QD9KQ0JqbKGsfU9 JBIu9Rj9r+WLsFq+hykw+qD/utETZOyhOhZ5pEk5jAzpnqbk9qRj8IbvmLPTAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUwB1mThUgHSGXpuLCcYmUy3EQX5IwHwYDVR0j BBgwFoAUGfWT+2CUpT0vVn+iPr0Azua9f2MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTgyNDlmYzMtNmM4NC00ZTkxLWIwNjctYTBjNmE4NDBhM2E5LzAvMTlGNTkzRkI2 MDk0QTUzRDJGNTY3RkEyM0VCRDAwQ0VFNkJEN0Y2My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xOUY1OTNGQjYwOTRBNTNEMkY1NjdGQTIzRUJEMDBDRUU2QkQ3 RjYzLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzk4MjQ5ZmMzLTZjODQtNGU5MS1i MDY3LWEwYzZhODQwYTNhOS8wLzMyMzAzMzJlMzkzOTJlMzEzMzMwMmUzMDJmMzIz MzJkMzIzNDIwM2QzZTIwMzQzNTMyMzgzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEActjgjANBgkqhkiG 9w0BAQsFAAOCAQEAhqqeeohLQv6OLofZDEyHpZ6L+HV9+ItZeWlr9lmZEwC1u+3w p6NeJe9QVLn/3lKMIh+cGBNKuTSRuKVCXKtXeWHPfK/QE/Vrjesh+qr8f80g1+Zr U94hwP9FdvOT2qVmIi1no+F4bnnlwWtWyFxAX2d7egpDuVOcs2EjjNC/ypwdnASx ZFZv3tT+xvyUL48kSaLieUm9XZ/Eq9m1dtBOOSyarp0THmKtKc03ALkSmywBN7sP u3Dcx0h7qLEG11UAUf8fwsJK1eGoDRlCDrzFW2pFjHXUxY26NJ1/tl1N48fxiUep K1N19E1fjRBSudLhoPlqsPbBbEC6Fi2ATHrJEg== -----END CERTIFICATE-----Generated at Wed May 13 03:48:26 2026 by rpki-client