$ rpki-client -vvf rpki-rsync.idnic.net/repo/b2a0a771-62d2-4238-a406-7999f224849c/0/3230322e34372e39302e302f32332d3234203d3e203436303230.roa File: 3230322e34372e39302e302f32332d3234203d3e203436303230.roa (raw, json) Hash identifier: PApA+CwXWU/yi3bwKoQ4f3KXSY4CYtS/AwKKxJ6EK/4= Subject key identifier: 41:12:EC:12:F0:A2:F1:A8:CC:CB:0D:6E:83:F4:A6:71:D4:87:A4:C4 Certificate issuer: /CN=69EB8C4D4C8A1C4FF69E9E4C4AC1983FED78C01F Certificate serial: 2A012BD8EDF6048807F8D6E0518813440A56C613 Authority key identifier: 69:EB:8C:4D:4C:8A:1C:4F:F6:9E:9E:4C:4A:C1:98:3F:ED:78:C0:1F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/69EB8C4D4C8A1C4FF69E9E4C4AC1983FED78C01F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b2a0a771-62d2-4238-a406-7999f224849c/0/3230322e34372e39302e302f32332d3234203d3e203436303230.roa Signing time: Sun 03 May 2026 03:00:37 +0000 ROA not before: Sun 03 May 2026 02:55:37 +0000 ROA not after: Sun 02 May 2027 03:00:37 +0000 asID: 46020 IP address blocks: 202.47.90.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b2a0a771-62d2-4238-a406-7999f224849c/0/69EB8C4D4C8A1C4FF69E9E4C4AC1983FED78C01F.crl rsync://rpki-rsync.idnic.net/repo/b2a0a771-62d2-4238-a406-7999f224849c/0/69EB8C4D4C8A1C4FF69E9E4C4AC1983FED78C01F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/69EB8C4D4C8A1C4FF69E9E4C4AC1983FED78C01F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 01:58:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:01:2b:d8:ed:f6:04:88:07:f8:d6:e0:51:88:13:44:0a:56:c6:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69EB8C4D4C8A1C4FF69E9E4C4AC1983FED78C01F Validity Not Before: May 3 02:55:37 2026 GMT Not After : May 2 03:00:37 2027 GMT Subject: CN=4112EC12F0A2F1A8CCCB0D6E83F4A671D487A4C4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:8b:e6:66:00:69:ec:77:54:80:f6:41:1c:39: 39:31:a3:42:9f:e7:c5:22:5d:18:a4:e6:f5:b5:d5: de:d0:42:81:d4:53:80:2a:56:1d:14:1a:50:c2:e4: fb:97:7b:87:e2:b3:de:94:4f:fd:f4:80:9f:d6:51: c1:a7:b2:40:09:6e:49:7a:4d:b9:4a:23:1f:cd:ea: cf:f0:53:ac:29:e9:50:48:11:ee:46:0f:d4:74:09: 06:1f:2b:02:6d:d7:d0:6c:b9:7a:86:88:82:4a:9c: 90:55:dd:8c:b2:63:c0:ca:71:84:65:7e:22:ce:b5: b8:70:26:95:96:ff:3f:fb:0f:2f:2a:89:9b:f8:b8: 80:59:7d:ef:16:26:bc:dc:b4:3a:2f:75:2a:83:07: db:12:e3:84:36:b0:9c:71:b5:71:31:d3:51:7a:e3: f5:c0:ec:83:43:f0:ed:82:fe:1e:29:bf:23:14:7d: 97:9c:96:15:1d:5a:81:59:f0:b2:71:a3:19:01:98: aa:11:53:21:d0:32:50:91:df:f5:0f:31:6f:5f:58: 9d:e2:1f:cc:16:23:36:e6:de:f2:8b:f9:4a:d3:f5: 4c:cb:5b:58:51:7b:cd:01:61:40:9b:3c:ad:d9:f2: f9:11:8a:74:54:18:b6:9c:c2:6d:62:0a:22:ad:05: 36:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:12:EC:12:F0:A2:F1:A8:CC:CB:0D:6E:83:F4:A6:71:D4:87:A4:C4 X509v3 Authority Key Identifier: keyid:69:EB:8C:4D:4C:8A:1C:4F:F6:9E:9E:4C:4A:C1:98:3F:ED:78:C0:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b2a0a771-62d2-4238-a406-7999f224849c/0/69EB8C4D4C8A1C4FF69E9E4C4AC1983FED78C01F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/69EB8C4D4C8A1C4FF69E9E4C4AC1983FED78C01F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b2a0a771-62d2-4238-a406-7999f224849c/0/3230322e34372e39302e302f32332d3234203d3e203436303230.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.47.90.0/23 Signature Algorithm: sha256WithRSAEncryption 2b:da:ec:b8:8b:d2:0f:27:f7:1b:e5:5c:9f:aa:16:e0:50:e4: 67:78:15:b3:b2:c1:d8:8a:80:71:83:47:b4:7b:28:49:7b:9e: 8c:27:7a:ee:95:d6:80:c5:05:1a:00:a8:ab:85:46:b0:2d:96: 79:16:47:32:48:de:6c:6c:73:06:2b:de:23:79:f3:28:ae:8f: e0:09:5d:48:54:5c:69:7e:44:e8:db:51:58:41:8a:86:28:33: f2:0c:ec:d6:7c:9b:dd:46:4c:63:18:23:9d:39:cd:ae:a2:53: 40:1e:49:0a:bd:ba:7d:e5:8e:55:48:b7:bc:91:7a:1b:23:41: ef:1a:bc:e6:26:64:92:c0:c8:fb:1c:7e:ff:85:3f:e3:2b:3f: 0d:85:80:80:99:79:af:25:90:84:94:82:75:2a:6d:15:4f:c0: d1:57:e2:42:44:6f:3c:03:cd:58:a1:e0:20:4a:7d:a1:2f:e3: 28:3c:19:2d:ad:48:2b:64:5a:b5:af:6a:34:bb:84:df:da:ab: 72:52:44:f6:79:f4:0a:f5:91:4d:c5:69:e2:7b:81:2f:14:be: 0b:9a:09:d2:4d:fa:38:2b:f4:ec:37:19:f8:4d:4b:57:1f:99: 13:10:5f:70:d8:2e:34:c7:a1:69:da:b7:d5:41:79:33:6d:2d: a9:20:31:18 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUKgEr2O32BIgH+NbgUYgTRApWxhMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjlFQjhDNEQ0QzhBMUM0RkY2OUU5RTRDNEFDMTk4M0ZF RDc4QzAxRjAeFw0yNjA1MDMwMjU1MzdaFw0yNzA1MDIwMzAwMzdaMDMxMTAvBgNV BAMTKDQxMTJFQzEyRjBBMkYxQThDQ0NCMEQ2RTgzRjRBNjcxRDQ4N0E0QzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCNi+ZmAGnsd1SA9kEcOTkxo0Kf 58UiXRik5vW11d7QQoHUU4AqVh0UGlDC5PuXe4fis96UT/30gJ/WUcGnskAJbkl6 TblKIx/N6s/wU6wp6VBIEe5GD9R0CQYfKwJt19BsuXqGiIJKnJBV3YyyY8DKcYRl fiLOtbhwJpWW/z/7Dy8qiZv4uIBZfe8WJrzctDovdSqDB9sS44Q2sJxxtXEx01F6 4/XA7IND8O2C/h4pvyMUfZeclhUdWoFZ8LJxoxkBmKoRUyHQMlCR3/UPMW9fWJ3i H8wWIzbm3vKL+UrT9UzLW1hRe80BYUCbPK3Z8vkRinRUGLacwm1iCiKtBTbdAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUQRLsEvCi8ajMyw1ug/SmcdSHpMQwHwYDVR0j BBgwFoAUaeuMTUyKHE/2np5MSsGYP+14wB8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjJhMGE3NzEtNjJkMi00MjM4LWE0MDYtNzk5OWYyMjQ4NDljLzAvNjlFQjhDNEQ0 QzhBMUM0RkY2OUU5RTRDNEFDMTk4M0ZFRDc4QzAxRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82OUVCOEM0RDRDOEExQzRGRjY5RTlFNEM0QUMxOTgzRkVENzhD MDFGLmNlcjCBoQYIKwYBBQUHAQsEgZQwgZEwgY4GCCsGAQUFBzALhoGBcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2IyYTBhNzcxLTYyZDItNDIzOC1h NDA2LTc5OTlmMjI0ODQ5Yy8wLzMyMzAzMjJlMzQzNzJlMzkzMDJlMzAyZjMyMzMy ZDMyMzQyMDNkM2UyMDM0MzYzMDMyMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAHKL1owDQYJKoZIhvcN AQELBQADggEBACva7LiL0g8n9xvlXJ+qFuBQ5Gd4FbOywdiKgHGDR7R7KEl7nown eu6V1oDFBRoAqKuFRrAtlnkWRzJI3mxscwYr3iN58yiuj+AJXUhUXGl+ROjbUVhB ioYoM/IM7NZ8m91GTGMYI505za6iU0AeSQq9un3ljlVIt7yRehsjQe8avOYmZJLA yPscfv+FP+MrPw2FgICZea8lkISUgnUqbRVPwNFX4kJEbzwDzVih4CBKfaEv4yg8 GS2tSCtkWrWvajS7hN/aq3JSRPZ59Ar1kU3FaeJ7gS8UvguaCdJN+jgr9Ow3GfhN S1cfmRMQX3DYLjTHoWnat9VBeTNtLakgMRg= -----END CERTIFICATE-----Generated at Wed May 13 05:14:54 2026 by rpki-client