$ rpki-client -vvf rpki-rsync.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/3230332e38342e3133382e302f32342d3234203d3e20313338303737.roa File: 3230332e38342e3133382e302f32342d3234203d3e20313338303737.roa (raw, json) Hash identifier: Z+nNi7ze6kTiTVkT6NIRGLRwkZjNL704bTyzTsqTbiU= Subject key identifier: 5B:9C:08:01:3B:4E:52:49:74:C3:F2:4C:B6:6E:86:5E:CF:16:7A:8B Certificate issuer: /CN=E6B678AE8DC843399DF534610764D871D4D698D8 Certificate serial: 2360F40FB96314DC442FB29F80DE2F6EFC8470EA Authority key identifier: E6:B6:78:AE:8D:C8:43:39:9D:F5:34:61:07:64:D8:71:D4:D6:98:D8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6B678AE8DC843399DF534610764D871D4D698D8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/3230332e38342e3133382e302f32342d3234203d3e20313338303737.roa Signing time: Sun 03 May 2026 02:57:26 +0000 ROA not before: Sun 03 May 2026 02:52:26 +0000 ROA not after: Sun 02 May 2027 02:57:26 +0000 asID: 138077 IP address blocks: 203.84.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/E6B678AE8DC843399DF534610764D871D4D698D8.crl rsync://rpki-rsync.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/E6B678AE8DC843399DF534610764D871D4D698D8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6B678AE8DC843399DF534610764D871D4D698D8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 16:14:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:60:f4:0f:b9:63:14:dc:44:2f:b2:9f:80:de:2f:6e:fc:84:70:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E6B678AE8DC843399DF534610764D871D4D698D8 Validity Not Before: May 3 02:52:26 2026 GMT Not After : May 2 02:57:26 2027 GMT Subject: CN=5B9C08013B4E524974C3F24CB66E865ECF167A8B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ee:06:63:8a:be:35:0d:2a:86:c6:82:d9:80: 4d:e4:65:6f:d3:38:12:3a:ec:2d:bd:16:8e:db:a9: a0:de:22:37:cd:9c:be:f3:25:ae:4b:d1:2f:9d:f6: b1:eb:80:18:a7:91:e7:60:d4:0a:d6:ae:f5:e3:bf: e3:52:00:5f:a6:de:26:61:75:bf:9c:af:c4:31:28: 60:2c:4b:5c:3f:ca:b6:05:48:7d:0e:1f:2c:99:b5: b0:df:44:d3:1f:d7:8f:a9:2b:c1:e0:82:21:4e:b1: ef:9f:4c:9c:f3:d7:c8:ca:32:f9:00:b0:56:2e:d3: 2d:5c:a2:88:c3:0d:47:e5:08:1d:bc:be:55:76:77: e9:4a:fb:ae:33:34:1c:9d:e6:ca:bf:a7:ba:60:32: ec:1b:0a:79:d2:1c:6d:d6:e2:db:4a:78:86:25:86: 25:9a:f6:66:21:6a:f7:c3:5d:50:ac:53:4c:eb:e3: 43:cd:91:f8:13:4f:9f:d0:0a:a6:76:59:d8:7d:0b: 03:97:23:05:c3:9a:d5:00:ba:e0:c7:6f:97:de:4c: 60:42:9e:a0:4b:59:61:b6:b4:6f:d2:97:23:f9:6c: c9:4f:85:ff:be:9b:2c:b2:47:4a:99:49:b2:a1:50: b7:3b:f3:09:8e:f2:60:13:08:59:09:50:9c:34:97: b5:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:9C:08:01:3B:4E:52:49:74:C3:F2:4C:B6:6E:86:5E:CF:16:7A:8B X509v3 Authority Key Identifier: keyid:E6:B6:78:AE:8D:C8:43:39:9D:F5:34:61:07:64:D8:71:D4:D6:98:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/E6B678AE8DC843399DF534610764D871D4D698D8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6B678AE8DC843399DF534610764D871D4D698D8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/3230332e38342e3133382e302f32342d3234203d3e20313338303737.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.84.138.0/24 Signature Algorithm: sha256WithRSAEncryption a2:58:ca:58:b7:7e:b5:a2:5d:e0:08:4c:eb:7b:98:48:05:02: 19:5a:66:89:48:3e:6a:58:30:a2:78:7b:69:9c:84:ab:15:a3: 7d:36:23:55:d3:dd:ad:03:f9:30:e4:6a:2c:ef:8c:01:c8:e8: 64:e1:1e:6a:6a:4b:30:05:78:cb:23:96:ef:52:03:77:12:87: c8:b5:e3:88:fa:f7:fb:04:ae:80:ed:3d:46:79:a6:45:ff:54: 93:2c:79:1c:11:33:4d:ea:53:af:2d:07:3f:83:2a:cf:5b:e1: 38:92:f1:8f:f2:b4:f3:89:51:01:a1:8e:1c:31:b5:2c:a0:f6: 00:78:ea:59:90:38:2c:13:cf:e1:a9:0f:35:56:0b:97:59:ea: 5a:71:fe:7e:8f:18:84:ba:c6:e7:1a:54:64:31:9d:a8:cd:39: d4:db:f3:20:dd:d6:17:1c:8c:80:c2:f5:0a:3a:2c:80:74:68: a9:fd:72:05:01:0f:cc:dd:8a:2e:ec:cd:40:70:f1:bb:07:d6: ee:e6:c1:10:bb:72:a3:67:93:1f:36:bf:a2:23:bc:7a:a4:6d: 57:75:f9:f8:67:31:8d:0f:fa:ca:d0:0f:21:dc:9d:e2:ae:b9: 88:cc:b0:f1:b0:b8:37:c9:fc:8c:a2:f2:ef:1f:f5:cd:f0:d8: 7f:c0:e7:0c -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUI2D0D7ljFNxEL7KfgN4vbvyEcOowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTZCNjc4QUU4REM4NDMzOTlERjUzNDYxMDc2NEQ4NzFE NEQ2OThEODAeFw0yNjA1MDMwMjUyMjZaFw0yNzA1MDIwMjU3MjZaMDMxMTAvBgNV BAMTKDVCOUMwODAxM0I0RTUyNDk3NEMzRjI0Q0I2NkU4NjVFQ0YxNjdBOEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp7gZjir41DSqGxoLZgE3kZW/T OBI67C29Fo7bqaDeIjfNnL7zJa5L0S+d9rHrgBinkedg1ArWrvXjv+NSAF+m3iZh db+cr8QxKGAsS1w/yrYFSH0OHyyZtbDfRNMf14+pK8HggiFOse+fTJzz18jKMvkA sFYu0y1coojDDUflCB28vlV2d+lK+64zNByd5sq/p7pgMuwbCnnSHG3W4ttKeIYl hiWa9mYhavfDXVCsU0zr40PNkfgTT5/QCqZ2Wdh9CwOXIwXDmtUAuuDHb5feTGBC nqBLWWG2tG/SlyP5bMlPhf++myyyR0qZSbKhULc78wmO8mATCFkJUJw0l7UJAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUW5wIATtOUkl0w/JMtm6GXs8WeoswHwYDVR0j BBgwFoAU5rZ4ro3IQzmd9TRhB2TYcdTWmNgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTc5MjJmODktM2U5Yi00YjIxLTkxODYtYTY0OGMyZGEzZjdiLzAvRTZCNjc4QUU4 REM4NDMzOTlERjUzNDYxMDc2NEQ4NzFENEQ2OThEOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FNkI2NzhBRThEQzg0MzM5OURGNTM0NjEwNzY0RDg3MUQ0RDY5 OEQ4LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2E3OTIyZjg5LTNlOWItNGIyMS05 MTg2LWE2NDhjMmRhM2Y3Yi8wLzMyMzAzMzJlMzgzNDJlMzEzMzM4MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzM4MzAzNzM3LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAy1SKMA0GCSqG SIb3DQEBCwUAA4IBAQCiWMpYt361ol3gCEzre5hIBQIZWmaJSD5qWDCieHtpnISr FaN9NiNV092tA/kw5Gos74wByOhk4R5qakswBXjLI5bvUgN3EofIteOI+vf7BK6A 7T1GeaZF/1STLHkcETNN6lOvLQc/gyrPW+E4kvGP8rTziVEBoY4cMbUsoPYAeOpZ kDgsE8/hqQ81VguXWepacf5+jxiEusbnGlRkMZ2ozTnU2/Mg3dYXHIyAwvUKOiyA dGip/XIFAQ/M3You7M1AcPG7B9bu5sEQu3KjZ5MfNr+iI7x6pG1Xdfn4ZzGND/rK 0A8h3J3irrmIzLDxsLg3yfyMovLvH/XN8Nh/wOcM -----END CERTIFICATE-----Generated at Wed May 13 04:09:55 2026 by rpki-client