$ rpki-client -vvf rpki-rsync.idnic.net/repo/a2e23dc4-4fd5-43e2-bb6a-4fdc387ebc58/0/3230322e35322e35382e302f32342d3234203d3e203436303538.roa File: 3230322e35322e35382e302f32342d3234203d3e203436303538.roa (raw, json) Hash identifier: bhgEzRyKQSZ7x2UAdJ2y1POX6pQ5rtoByHdLeBGdbwk= Subject key identifier: 58:79:D7:19:68:DD:B1:B6:5C:4C:F3:BB:68:9E:BB:95:26:58:9D:23 Certificate issuer: /CN=F03310D1D60B7C8D4880FEE5263129029C23044D Certificate serial: 5A95354759DA1408BF20651988509B006C357846 Authority key identifier: F0:33:10:D1:D6:0B:7C:8D:48:80:FE:E5:26:31:29:02:9C:23:04:4D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F03310D1D60B7C8D4880FEE5263129029C23044D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a2e23dc4-4fd5-43e2-bb6a-4fdc387ebc58/0/3230322e35322e35382e302f32342d3234203d3e203436303538.roa Signing time: Sun 03 May 2026 02:56:06 +0000 ROA not before: Sun 03 May 2026 02:51:06 +0000 ROA not after: Sun 02 May 2027 02:56:06 +0000 asID: 46058 IP address blocks: 202.52.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a2e23dc4-4fd5-43e2-bb6a-4fdc387ebc58/0/F03310D1D60B7C8D4880FEE5263129029C23044D.crl rsync://rpki-rsync.idnic.net/repo/a2e23dc4-4fd5-43e2-bb6a-4fdc387ebc58/0/F03310D1D60B7C8D4880FEE5263129029C23044D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F03310D1D60B7C8D4880FEE5263129029C23044D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:95:35:47:59:da:14:08:bf:20:65:19:88:50:9b:00:6c:35:78:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F03310D1D60B7C8D4880FEE5263129029C23044D Validity Not Before: May 3 02:51:06 2026 GMT Not After : May 2 02:56:06 2027 GMT Subject: CN=5879D71968DDB1B65C4CF3BB689EBB9526589D23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:14:f3:97:55:8c:9e:6f:a9:cd:fa:57:c4:67: 24:2f:de:fd:68:79:4b:5e:2e:d3:70:c5:d7:b0:ff: ab:fe:cd:ab:37:a8:bd:79:7b:cf:de:9d:13:a3:47: a3:1a:37:dc:28:33:e3:e2:d0:7b:59:a1:3a:11:a6: 1b:4d:e6:8c:d0:ec:57:46:0f:c2:89:f5:aa:99:50: 2a:88:58:96:41:81:ce:39:0d:fd:4a:5a:07:23:48: 31:9e:86:f2:86:ca:53:73:d2:c4:ad:ca:e9:bd:0e: 49:2c:de:6d:62:35:30:fc:9b:ab:28:88:0c:5f:84: 5a:d0:03:77:cc:1c:b8:e1:e5:24:5c:3e:01:0f:df: 19:6b:fb:b0:52:5f:ea:7a:4b:55:1a:1e:10:85:eb: d5:5b:a7:78:cf:fa:07:d2:92:d3:d9:59:ae:e4:d7: 9e:47:a5:96:c1:06:69:56:18:52:72:b1:65:11:7d: ed:82:0e:82:cc:cd:cf:96:5b:d6:cf:00:94:ea:7b: 9d:76:cc:d5:93:ef:41:e3:04:73:7b:bf:28:17:f6: e2:f8:c6:4e:93:6d:ad:6b:58:2e:20:34:05:31:77: 44:74:17:f0:31:f0:e4:b1:c7:ac:09:73:fa:3d:67: d0:97:7f:3b:a0:be:dd:f2:2f:a8:d5:a9:4f:51:1c: ff:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:79:D7:19:68:DD:B1:B6:5C:4C:F3:BB:68:9E:BB:95:26:58:9D:23 X509v3 Authority Key Identifier: keyid:F0:33:10:D1:D6:0B:7C:8D:48:80:FE:E5:26:31:29:02:9C:23:04:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a2e23dc4-4fd5-43e2-bb6a-4fdc387ebc58/0/F03310D1D60B7C8D4880FEE5263129029C23044D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F03310D1D60B7C8D4880FEE5263129029C23044D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a2e23dc4-4fd5-43e2-bb6a-4fdc387ebc58/0/3230322e35322e35382e302f32342d3234203d3e203436303538.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.52.58.0/24 Signature Algorithm: sha256WithRSAEncryption 23:73:e5:c1:30:7f:0b:ad:f5:bb:cd:94:da:ba:11:03:b7:40: 22:71:9b:0c:c2:28:c2:bb:fe:51:68:35:ca:a5:59:45:5d:23: 61:ba:f0:07:97:f5:55:72:4a:30:92:a2:c8:1e:27:db:2b:b6: 44:a8:c2:63:a0:25:a1:4d:80:e8:89:c5:4e:32:65:b0:d0:0a: 94:d6:3d:c3:bf:45:38:8c:b0:3a:32:c9:66:76:55:59:87:c0: bb:17:b5:12:c2:7c:17:b4:e2:5a:de:a3:bf:7c:83:8e:99:cb: 77:13:6b:7a:c7:5f:96:c3:b7:d4:98:01:e2:fb:d6:fd:dd:92: d2:3d:b0:40:8f:6c:9c:82:e6:c4:32:b8:24:51:e0:5c:f1:74: f8:9c:be:16:d4:a5:ee:51:c0:d5:c5:48:57:8e:a7:8a:e6:5d: eb:30:0a:09:8d:6b:72:f2:08:b8:b1:95:1e:e1:43:0c:e5:67: 72:4e:84:c0:5a:11:fb:61:e9:d6:a8:97:e6:31:cd:98:08:e7: 7a:3d:35:7a:85:b0:a3:86:af:0f:55:33:33:fa:4b:40:76:0e: 0f:7e:7d:09:53:a3:9e:f2:73:df:39:af:1c:1f:f1:8d:62:4d: 50:6e:64:50:77:84:53:1b:71:f5:9a:f7:25:c1:5f:9e:c3:67: 85:a6:74:f0 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUWpU1R1naFAi/IGUZiFCbAGw1eEYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjAzMzEwRDFENjBCN0M4RDQ4ODBGRUU1MjYzMTI5MDI5 QzIzMDQ0RDAeFw0yNjA1MDMwMjUxMDZaFw0yNzA1MDIwMjU2MDZaMDMxMTAvBgNV BAMTKDU4NzlENzE5NjhEREIxQjY1QzRDRjNCQjY4OUVCQjk1MjY1ODlEMjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPFPOXVYyeb6nN+lfEZyQv3v1o eUteLtNwxdew/6v+zas3qL15e8/enROjR6MaN9woM+Pi0HtZoToRphtN5ozQ7FdG D8KJ9aqZUCqIWJZBgc45Df1KWgcjSDGehvKGylNz0sStyum9Dkks3m1iNTD8m6so iAxfhFrQA3fMHLjh5SRcPgEP3xlr+7BSX+p6S1UaHhCF69Vbp3jP+gfSktPZWa7k 155HpZbBBmlWGFJysWURfe2CDoLMzc+WW9bPAJTqe512zNWT70HjBHN7vygX9uL4 xk6Tba1rWC4gNAUxd0R0F/Ax8OSxx6wJc/o9Z9CXfzugvt3yL6jVqU9RHP95AgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUWHnXGWjdsbZcTPO7aJ67lSZYnSMwHwYDVR0j BBgwFoAU8DMQ0dYLfI1IgP7lJjEpApwjBE0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTJlMjNkYzQtNGZkNS00M2UyLWJiNmEtNGZkYzM4N2ViYzU4LzAvRjAzMzEwRDFE NjBCN0M4RDQ4ODBGRUU1MjYzMTI5MDI5QzIzMDQ0RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GMDMzMTBEMUQ2MEI3QzhENDg4MEZFRTUyNjMxMjkwMjlDMjMw NDRELmNlcjCBoQYIKwYBBQUHAQsEgZQwgZEwgY4GCCsGAQUFBzALhoGBcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2EyZTIzZGM0LTRmZDUtNDNlMi1i YjZhLTRmZGMzODdlYmM1OC8wLzMyMzAzMjJlMzUzMjJlMzUzODJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDM0MzYzMDM1Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADKNDowDQYJKoZIhvcN AQELBQADggEBACNz5cEwfwut9bvNlNq6EQO3QCJxmwzCKMK7/lFoNcqlWUVdI2G6 8AeX9VVySjCSosgeJ9srtkSowmOgJaFNgOiJxU4yZbDQCpTWPcO/RTiMsDoyyWZ2 VVmHwLsXtRLCfBe04lreo798g46Zy3cTa3rHX5bDt9SYAeL71v3dktI9sECPbJyC 5sQyuCRR4FzxdPicvhbUpe5RwNXFSFeOp4rmXeswCgmNa3LyCLixlR7hQwzlZ3JO hMBaEfth6daol+YxzZgI53o9NXqFsKOGrw9VMzP6S0B2Dg9+fQlTo57yc985rxwf 8Y1iTVBuZFB3hFMbcfWa9yXBX57DZ4WmdPA= -----END CERTIFICATE-----Generated at Wed May 13 02:12:45 2026 by rpki-client