$ rpki-client -vvf rpki-rsync.idnic.net/repo/bdd1eacd-a067-4924-9284-bc6f10d8d5a8/0/3230322e3134392e36342e302f31392d3234203d3e203137383236.roa File: 3230322e3134392e36342e302f31392d3234203d3e203137383236.roa (raw, json) Hash identifier: XvoXxYyRseZ9WRVoAocJ9gpnu/or6v87QzxE4f486Ao= Subject key identifier: 28:AA:5D:E4:7A:BC:E6:13:41:32:FD:8C:A1:6B:53:E6:7F:86:01:37 Certificate issuer: /CN=3CBDDFEA4BE6B6845F8CE89763AB393A61D55AE9 Certificate serial: 60B3DC80A852B9F4EDCB1A4850B936C0CE1ABC79 Authority key identifier: 3C:BD:DF:EA:4B:E6:B6:84:5F:8C:E8:97:63:AB:39:3A:61:D5:5A:E9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3CBDDFEA4BE6B6845F8CE89763AB393A61D55AE9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bdd1eacd-a067-4924-9284-bc6f10d8d5a8/0/3230322e3134392e36342e302f31392d3234203d3e203137383236.roa Signing time: Sun 03 May 2026 03:02:46 +0000 ROA not before: Sun 03 May 2026 02:57:46 +0000 ROA not after: Sun 02 May 2027 03:02:46 +0000 asID: 17826 IP address blocks: 202.149.64.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bdd1eacd-a067-4924-9284-bc6f10d8d5a8/0/3CBDDFEA4BE6B6845F8CE89763AB393A61D55AE9.crl rsync://rpki-rsync.idnic.net/repo/bdd1eacd-a067-4924-9284-bc6f10d8d5a8/0/3CBDDFEA4BE6B6845F8CE89763AB393A61D55AE9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3CBDDFEA4BE6B6845F8CE89763AB393A61D55AE9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 01:58:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:b3:dc:80:a8:52:b9:f4:ed:cb:1a:48:50:b9:36:c0:ce:1a:bc:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3CBDDFEA4BE6B6845F8CE89763AB393A61D55AE9 Validity Not Before: May 3 02:57:46 2026 GMT Not After : May 2 03:02:46 2027 GMT Subject: CN=28AA5DE47ABCE6134132FD8CA16B53E67F860137 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:25:08:5a:9c:2a:bc:da:89:74:76:18:76:31: 9e:9e:4a:fd:1a:d9:eb:f8:6b:66:5e:3d:5f:f4:2b: 2b:6e:65:9a:24:57:00:3b:80:d3:3b:e2:be:d4:d6: bf:a9:03:0c:bd:e2:f0:d5:ee:f9:72:6a:b2:6f:7b: ce:de:15:03:4c:68:39:6e:0a:56:8b:51:89:9c:43: 18:da:8c:06:68:fa:b5:f8:9e:eb:ad:60:f4:d1:be: c9:22:56:89:07:2c:fb:94:83:f7:40:de:02:9c:50: c3:0d:a3:3d:4c:57:d0:57:52:63:47:35:dd:3e:26: 2a:4c:af:5b:bb:b3:72:85:a4:1c:1e:5c:1e:d3:54: 07:8d:3a:70:d5:19:e2:0a:1c:d9:d8:7f:b9:dc:41: dc:ca:55:d1:2b:14:a5:99:07:94:bc:40:b1:ef:0e: 8c:d4:e3:08:73:e1:67:4c:b3:50:9a:44:f3:c2:3f: a2:8b:0e:43:37:ef:39:df:4d:27:4c:0b:ee:c2:12: f4:62:b5:c3:af:7a:43:71:0c:27:11:e6:94:e7:68: e0:65:d4:25:b9:6a:d4:e3:55:8d:7a:0a:64:68:df: 5a:6d:84:04:71:33:74:d1:c2:d5:33:68:d5:21:c6: 1d:d0:16:d3:f1:49:3b:92:58:10:47:8c:8b:02:c4: 67:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:AA:5D:E4:7A:BC:E6:13:41:32:FD:8C:A1:6B:53:E6:7F:86:01:37 X509v3 Authority Key Identifier: keyid:3C:BD:DF:EA:4B:E6:B6:84:5F:8C:E8:97:63:AB:39:3A:61:D5:5A:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bdd1eacd-a067-4924-9284-bc6f10d8d5a8/0/3CBDDFEA4BE6B6845F8CE89763AB393A61D55AE9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3CBDDFEA4BE6B6845F8CE89763AB393A61D55AE9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bdd1eacd-a067-4924-9284-bc6f10d8d5a8/0/3230322e3134392e36342e302f31392d3234203d3e203137383236.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.149.64.0/19 Signature Algorithm: sha256WithRSAEncryption 4a:a1:f9:ae:1b:a3:23:a7:57:56:d4:95:a6:fa:a7:2b:f4:48: 49:1d:ec:68:ba:68:03:1e:60:00:0f:45:68:42:ed:7d:0e:b2: 2c:ff:be:86:af:43:4a:74:8b:5c:47:db:52:12:7f:00:54:e8: 0c:d5:60:49:a1:26:d6:3d:a1:d9:97:5b:65:9d:a0:8c:39:82: c5:6f:d8:b1:79:17:b1:7b:1a:a7:98:66:6d:1d:05:82:33:0b: e6:14:50:74:fe:51:a1:2f:6c:c7:e8:fe:d5:af:e5:64:20:43: 28:3e:c7:43:6a:48:34:ea:89:1f:96:7c:20:23:34:43:1f:58: 59:59:11:bd:d1:bb:34:ba:c8:ad:c8:22:68:b4:49:32:07:1f: d4:5e:15:26:92:b1:15:76:1d:45:73:03:b4:2e:2f:72:fe:8b: a6:c6:f4:6f:eb:83:37:29:c7:75:35:06:07:a1:05:83:8d:19: e5:6b:dd:06:2f:2c:f4:cf:df:2b:31:cb:fe:e0:53:0b:c7:57: 07:f6:4d:16:f2:f4:d3:3c:9a:c8:03:35:81:9c:2f:ee:6d:9a: 6d:fb:b1:a2:7a:00:60:6b:89:33:fb:25:07:9b:91:3f:83:33: 9f:1e:15:be:b5:e2:51:00:f5:26:1f:20:fe:bc:a5:5d:51:e4: 8e:dd:8d:b6 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUYLPcgKhSufTtyxpIULk2wM4avHkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0NCRERGRUE0QkU2QjY4NDVGOENFODk3NjNBQjM5M0E2 MUQ1NUFFOTAeFw0yNjA1MDMwMjU3NDZaFw0yNzA1MDIwMzAyNDZaMDMxMTAvBgNV BAMTKDI4QUE1REU0N0FCQ0U2MTM0MTMyRkQ4Q0ExNkI1M0U2N0Y4NjAxMzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcJQhanCq82ol0dhh2MZ6eSv0a 2ev4a2ZePV/0KytuZZokVwA7gNM74r7U1r+pAwy94vDV7vlyarJve87eFQNMaDlu ClaLUYmcQxjajAZo+rX4nuutYPTRvskiVokHLPuUg/dA3gKcUMMNoz1MV9BXUmNH Nd0+JipMr1u7s3KFpBweXB7TVAeNOnDVGeIKHNnYf7ncQdzKVdErFKWZB5S8QLHv DozU4whz4WdMs1CaRPPCP6KLDkM37znfTSdMC+7CEvRitcOvekNxDCcR5pTnaOBl 1CW5atTjVY16CmRo31pthARxM3TRwtUzaNUhxh3QFtPxSTuSWBBHjIsCxGeNAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUKKpd5Hq85hNBMv2MoWtT5n+GATcwHwYDVR0j BBgwFoAUPL3f6kvmtoRfjOiXY6s5OmHVWukwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmRkMWVhY2QtYTA2Ny00OTI0LTkyODQtYmM2ZjEwZDhkNWE4LzAvM0NCRERGRUE0 QkU2QjY4NDVGOENFODk3NjNBQjM5M0E2MUQ1NUFFOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zQ0JEREZFQTRCRTZCNjg0NUY4Q0U4OTc2M0FCMzkzQTYxRDU1 QUU5LmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2JkZDFlYWNkLWEwNjctNDkyNC05 Mjg0LWJjNmYxMGQ4ZDVhOC8wLzMyMzAzMjJlMzEzNDM5MmUzNjM0MmUzMDJmMzEz OTJkMzIzNDIwM2QzZTIwMzEzNzM4MzIzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBcqVQDANBgkqhkiG 9w0BAQsFAAOCAQEASqH5rhujI6dXVtSVpvqnK/RISR3saLpoAx5gAA9FaELtfQ6y LP++hq9DSnSLXEfbUhJ/AFToDNVgSaEm1j2h2ZdbZZ2gjDmCxW/YsXkXsXsap5hm bR0FgjML5hRQdP5RoS9sx+j+1a/lZCBDKD7HQ2pINOqJH5Z8ICM0Qx9YWVkRvdG7 NLrIrcgiaLRJMgcf1F4VJpKxFXYdRXMDtC4vcv6Lpsb0b+uDNynHdTUGB6EFg40Z 5WvdBi8s9M/fKzHL/uBTC8dXB/ZNFvL00zyayAM1gZwv7m2abfuxonoAYGuJM/sl B5uRP4Mznx4VvrXiUQD1Jh8g/rylXVHkjt2Ntg== -----END CERTIFICATE-----Generated at Wed May 13 04:53:51 2026 by rpki-client