$ rpki-client -vvf rpki-rsync.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/3230332e38342e3134322e302f32342d3234203d3e20313338383433.roa File: 3230332e38342e3134322e302f32342d3234203d3e20313338383433.roa (raw, json) Hash identifier: gDMW2YhmbSmpH/joH4guJ0u/x2YZTaH6K5yf8b7OKLc= Subject key identifier: CF:00:4B:3A:92:86:45:72:55:4A:0E:70:91:1C:E8:B3:70:35:E3:1C Certificate issuer: /CN=E6B678AE8DC843399DF534610764D871D4D698D8 Certificate serial: 0ED57660F97E2CCF2E107667385FD19901A5B63E Authority key identifier: E6:B6:78:AE:8D:C8:43:39:9D:F5:34:61:07:64:D8:71:D4:D6:98:D8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6B678AE8DC843399DF534610764D871D4D698D8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/3230332e38342e3134322e302f32342d3234203d3e20313338383433.roa Signing time: Sun 03 May 2026 02:57:27 +0000 ROA not before: Sun 03 May 2026 02:52:27 +0000 ROA not after: Sun 02 May 2027 02:57:27 +0000 asID: 138843 IP address blocks: 203.84.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/E6B678AE8DC843399DF534610764D871D4D698D8.crl rsync://rpki-rsync.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/E6B678AE8DC843399DF534610764D871D4D698D8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6B678AE8DC843399DF534610764D871D4D698D8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 16:14:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:d5:76:60:f9:7e:2c:cf:2e:10:76:67:38:5f:d1:99:01:a5:b6:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E6B678AE8DC843399DF534610764D871D4D698D8 Validity Not Before: May 3 02:52:27 2026 GMT Not After : May 2 02:57:27 2027 GMT Subject: CN=CF004B3A92864572554A0E70911CE8B37035E31C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:8a:ae:03:db:83:8e:84:27:6c:b3:c1:29:6f: a3:0c:fa:b4:9a:b7:06:65:cc:22:d0:fa:2c:c4:7b: f7:8d:f4:90:d9:21:bf:6e:03:b2:3a:0e:b2:eb:e4: 54:73:3c:0e:67:26:e7:4a:8f:2c:98:fd:b9:b8:aa: 26:0b:64:0b:0f:0d:06:3b:5b:14:cd:66:40:1a:90: 17:37:50:21:cd:3c:26:11:30:d3:42:0a:64:a6:fd: 8e:c4:af:68:b7:fa:8b:55:9a:a8:84:f2:7b:73:92: 5c:7e:ba:33:5d:bb:7c:a9:8d:fd:32:69:41:5e:55: 91:6c:85:fe:08:f2:ae:9d:7b:de:d3:15:b9:10:4a: ed:2a:8a:97:1e:83:71:fc:9a:1e:d7:35:3a:77:58: 44:a0:0f:06:78:51:01:8c:d9:50:0e:ab:03:6b:41: 30:65:9c:d7:84:a0:1b:ec:f4:ca:a1:8e:a3:d2:93: 1b:92:a8:6b:fc:42:cd:31:9b:c4:1f:7d:a3:1f:83: d5:bd:61:6f:ef:68:f0:9d:51:7a:04:04:4a:fb:1e: 96:1e:64:a1:67:32:78:04:78:7b:c4:d4:c8:e0:2b: 6c:c2:c6:24:ed:2f:09:7f:63:e1:db:e4:e8:d1:e4: c7:9f:12:96:e6:6a:af:69:fd:a4:4f:f1:d9:81:cd: f5:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:00:4B:3A:92:86:45:72:55:4A:0E:70:91:1C:E8:B3:70:35:E3:1C X509v3 Authority Key Identifier: keyid:E6:B6:78:AE:8D:C8:43:39:9D:F5:34:61:07:64:D8:71:D4:D6:98:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/E6B678AE8DC843399DF534610764D871D4D698D8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6B678AE8DC843399DF534610764D871D4D698D8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/3230332e38342e3134322e302f32342d3234203d3e20313338383433.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.84.142.0/24 Signature Algorithm: sha256WithRSAEncryption 2f:72:70:f7:9b:5d:df:c8:e3:df:ce:14:b5:43:b7:24:46:29: f6:0b:11:5f:ec:0d:9a:c5:86:45:01:f6:89:2a:79:77:92:72: a6:8f:b0:02:ee:a5:26:e0:1e:90:ac:d9:85:5d:72:e2:db:55: 7d:c8:c8:d0:5e:ac:4f:b3:37:7b:e1:d3:31:86:9e:02:8e:b7: 40:a8:42:25:1b:5c:d5:1b:1a:6e:f2:e9:d9:70:8d:c2:6d:db: 90:b2:96:06:67:bc:5b:7f:0f:9c:60:90:8d:10:6a:d5:02:8d: e4:bf:93:d8:2d:f7:6b:6b:30:d7:bf:ee:db:fe:1c:7b:ee:e6: 2a:a1:89:5e:84:70:a9:35:0e:53:d0:1d:36:82:97:bb:fe:79: a3:3c:50:f0:2a:54:b4:d6:fe:bf:53:ba:e8:97:cc:96:92:31: bd:93:ae:90:76:fe:81:90:9d:c4:2d:9a:44:1f:96:2a:27:78: f4:b4:db:d5:eb:d8:b3:cc:f7:a1:19:6e:de:a2:9e:b4:54:05: cd:be:18:f7:d7:c4:ae:fd:1c:df:24:17:8f:90:e3:5a:f3:cc: 87:b2:de:50:0f:c0:71:50:43:a9:a6:cc:b6:de:06:69:43:dd: 2f:18:42:a7:05:6c:ef:8a:37:0d:5d:72:1a:5b:9a:2b:77:d3: f3:ce:5e:40 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUDtV2YPl+LM8uEHZnOF/RmQGltj4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTZCNjc4QUU4REM4NDMzOTlERjUzNDYxMDc2NEQ4NzFE NEQ2OThEODAeFw0yNjA1MDMwMjUyMjdaFw0yNzA1MDIwMjU3MjdaMDMxMTAvBgNV BAMTKENGMDA0QjNBOTI4NjQ1NzI1NTRBMEU3MDkxMUNFOEIzNzAzNUUzMUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxiq4D24OOhCdss8Epb6MM+rSa twZlzCLQ+izEe/eN9JDZIb9uA7I6DrLr5FRzPA5nJudKjyyY/bm4qiYLZAsPDQY7 WxTNZkAakBc3UCHNPCYRMNNCCmSm/Y7Er2i3+otVmqiE8ntzklx+ujNdu3ypjf0y aUFeVZFshf4I8q6de97TFbkQSu0qipceg3H8mh7XNTp3WESgDwZ4UQGM2VAOqwNr QTBlnNeEoBvs9MqhjqPSkxuSqGv8Qs0xm8QffaMfg9W9YW/vaPCdUXoEBEr7HpYe ZKFnMngEeHvE1MjgK2zCxiTtLwl/Y+Hb5OjR5MefEpbmaq9p/aRP8dmBzfXjAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUzwBLOpKGRXJVSg5wkRzos3A14xwwHwYDVR0j BBgwFoAU5rZ4ro3IQzmd9TRhB2TYcdTWmNgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTc5MjJmODktM2U5Yi00YjIxLTkxODYtYTY0OGMyZGEzZjdiLzAvRTZCNjc4QUU4 REM4NDMzOTlERjUzNDYxMDc2NEQ4NzFENEQ2OThEOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FNkI2NzhBRThEQzg0MzM5OURGNTM0NjEwNzY0RDg3MUQ0RDY5 OEQ4LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2E3OTIyZjg5LTNlOWItNGIyMS05 MTg2LWE2NDhjMmRhM2Y3Yi8wLzMyMzAzMzJlMzgzNDJlMzEzNDMyMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzM4MzgzNDMzLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAy1SOMA0GCSqG SIb3DQEBCwUAA4IBAQAvcnD3m13fyOPfzhS1Q7ckRin2CxFf7A2axYZFAfaJKnl3 knKmj7AC7qUm4B6QrNmFXXLi21V9yMjQXqxPszd74dMxhp4CjrdAqEIlG1zVGxpu 8unZcI3CbduQspYGZ7xbfw+cYJCNEGrVAo3kv5PYLfdrazDXv+7b/hx77uYqoYle hHCpNQ5T0B02gpe7/nmjPFDwKlS01v6/U7rol8yWkjG9k66Qdv6BkJ3ELZpEH5Yq J3j0tNvV69izzPehGW7eop60VAXNvhj318Su/RzfJBePkONa88yHst5QD8BxUEOp psy23gZpQ90vGEKnBWzvijcNXXIaW5ord9Pzzl5A -----END CERTIFICATE-----Generated at Wed May 13 04:19:36 2026 by rpki-client