$ rpki-client -vvf rpki-rsync.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3230322e35312e35362e302f32342d3234203d3e203338353039.roa File: 3230322e35312e35362e302f32342d3234203d3e203338353039.roa (raw, json) Hash identifier: WalfT1mL5d9q2qz66c+NikOGnrlzK5PgkQomXo+2N10= Subject key identifier: B7:B9:5E:7E:A1:58:0F:29:E7:E1:17:DB:0F:25:06:73:79:A9:00:E7 Certificate issuer: /CN=4D8CAFECBF12EF792F1EFD722767E5FE74282093 Certificate serial: 29574CE322A957F365ECC3DCA752C74991EF4B4E Authority key identifier: 4D:8C:AF:EC:BF:12:EF:79:2F:1E:FD:72:27:67:E5:FE:74:28:20:93 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D8CAFECBF12EF792F1EFD722767E5FE74282093.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3230322e35312e35362e302f32342d3234203d3e203338353039.roa Signing time: Sun 03 May 2026 03:02:50 +0000 ROA not before: Sun 03 May 2026 02:57:50 +0000 ROA not after: Sun 02 May 2027 03:02:50 +0000 asID: 38509 IP address blocks: 202.51.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/4D8CAFECBF12EF792F1EFD722767E5FE74282093.crl rsync://rpki-rsync.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/4D8CAFECBF12EF792F1EFD722767E5FE74282093.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D8CAFECBF12EF792F1EFD722767E5FE74282093.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 18:37:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:57:4c:e3:22:a9:57:f3:65:ec:c3:dc:a7:52:c7:49:91:ef:4b:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4D8CAFECBF12EF792F1EFD722767E5FE74282093 Validity Not Before: May 3 02:57:50 2026 GMT Not After : May 2 03:02:50 2027 GMT Subject: CN=B7B95E7EA1580F29E7E117DB0F25067379A900E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:df:3a:d4:b1:9c:1e:62:19:fa:3d:ad:46:32: 05:bf:64:24:1b:cf:1c:52:30:00:39:6a:80:11:d9: 0a:f5:72:7e:69:35:4d:51:81:c2:8a:e7:f3:c1:d0: c4:75:3d:a0:22:d2:1c:33:c8:d6:30:3e:f4:0e:86: 40:91:53:25:63:61:3d:2a:9a:8c:11:83:d9:a6:73: 9f:aa:00:7d:f3:c4:17:7c:4d:a3:cb:c7:cd:58:17: 78:dd:80:f5:4d:a1:1c:ad:b6:30:fb:f3:38:6c:bd: 32:c9:de:a6:ed:15:96:a0:59:14:92:76:2c:99:77: be:ee:2d:12:9d:af:fe:c2:ed:0d:73:5b:e7:b4:3b: cd:6b:40:33:6a:a9:6d:ae:c6:be:11:91:47:09:eb: 24:05:f9:51:7b:36:61:29:44:b2:8d:55:0f:bf:74: 78:ac:09:9d:e4:38:88:ce:04:43:a6:c4:44:86:d8: c3:3e:fd:00:43:46:d2:91:d3:e9:12:a6:b4:f3:e5: a9:01:9b:c5:74:8f:22:69:a2:a5:86:66:54:7c:e9: 6e:28:0c:dd:15:be:01:40:a3:30:44:01:12:9e:54: a6:c8:65:a5:61:74:a7:f8:7e:c0:d2:90:d5:03:a2: aa:4d:71:89:3f:61:18:58:2a:70:cf:99:b7:01:81: 0e:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:B9:5E:7E:A1:58:0F:29:E7:E1:17:DB:0F:25:06:73:79:A9:00:E7 X509v3 Authority Key Identifier: keyid:4D:8C:AF:EC:BF:12:EF:79:2F:1E:FD:72:27:67:E5:FE:74:28:20:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/4D8CAFECBF12EF792F1EFD722767E5FE74282093.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D8CAFECBF12EF792F1EFD722767E5FE74282093.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3230322e35312e35362e302f32342d3234203d3e203338353039.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.51.56.0/24 Signature Algorithm: sha256WithRSAEncryption 32:c2:eb:96:15:37:18:a6:a2:2e:cb:c0:59:dc:73:38:4c:94: 0a:b5:85:75:20:98:59:17:13:7e:ac:a4:35:19:dc:b9:6d:a1: 24:f9:0e:cf:34:68:5a:cf:7c:50:53:fc:d3:bb:88:f7:30:30: 91:ab:17:c7:61:d4:08:ba:37:18:6e:a0:91:4f:21:dd:01:c8: 6e:6d:df:77:86:56:83:69:a3:b0:09:2a:77:e5:7a:ec:6f:32: 94:16:8a:47:88:a4:55:c3:ce:6a:21:25:f7:ae:45:d0:d8:62: a4:f3:e9:79:93:1d:a9:24:93:d6:7e:46:1b:84:0a:94:c1:cb: 6a:17:3b:7f:a9:f6:f8:07:a5:2f:d5:56:17:d2:36:87:9f:2f: ec:41:2c:fe:06:f3:85:9a:27:6a:1d:0f:23:dd:56:28:a3:2c: 7e:fa:26:2a:31:e8:91:bf:2b:30:f2:b2:4a:34:0e:22:b0:a5: 7c:95:18:4a:47:fc:d4:30:39:d3:08:ed:b8:7b:e3:ee:b3:19: 81:1d:ac:8f:85:9c:91:ec:0b:61:2e:35:79:bb:26:3a:4c:e2: e1:0c:76:39:a3:75:22:24:f2:ec:fc:97:8c:64:4b:9f:c7:2d: 8b:66:06:44:88:80:71:e4:66:9c:d1:80:d5:94:de:a9:9d:db: 7f:dd:e8:57 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUKVdM4yKpV/Nl7MPcp1LHSZHvS04wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEQ4Q0FGRUNCRjEyRUY3OTJGMUVGRDcyMjc2N0U1RkU3 NDI4MjA5MzAeFw0yNjA1MDMwMjU3NTBaFw0yNzA1MDIwMzAyNTBaMDMxMTAvBgNV BAMTKEI3Qjk1RTdFQTE1ODBGMjlFN0UxMTdEQjBGMjUwNjczNzlBOTAwRTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC53zrUsZweYhn6Pa1GMgW/ZCQb zxxSMAA5aoAR2Qr1cn5pNU1RgcKK5/PB0MR1PaAi0hwzyNYwPvQOhkCRUyVjYT0q mowRg9mmc5+qAH3zxBd8TaPLx81YF3jdgPVNoRyttjD78zhsvTLJ3qbtFZagWRSS diyZd77uLRKdr/7C7Q1zW+e0O81rQDNqqW2uxr4RkUcJ6yQF+VF7NmEpRLKNVQ+/ dHisCZ3kOIjOBEOmxESG2MM+/QBDRtKR0+kSprTz5akBm8V0jyJpoqWGZlR86W4o DN0VvgFAozBEARKeVKbIZaVhdKf4fsDSkNUDoqpNcYk/YRhYKnDPmbcBgQ4BAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUt7lefqFYDynn4RfbDyUGc3mpAOcwHwYDVR0j BBgwFoAUTYyv7L8S73kvHv1yJ2fl/nQoIJMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmU1NDAxNjQtM2Q0Ni00Nzk0LWJmNTUtYjZiMTM0ZDlhYjEzLzAvNEQ4Q0FGRUNC RjEyRUY3OTJGMUVGRDcyMjc2N0U1RkU3NDI4MjA5My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80RDhDQUZFQ0JGMTJFRjc5MkYxRUZENzIyNzY3RTVGRTc0Mjgy MDkzLmNlcjCBoQYIKwYBBQUHAQsEgZQwgZEwgY4GCCsGAQUFBzALhoGBcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2JlNTQwMTY0LTNkNDYtNDc5NC1i ZjU1LWI2YjEzNGQ5YWIxMy8wLzMyMzAzMjJlMzUzMTJlMzUzNjJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMzMzgzNTMwMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADKMzgwDQYJKoZIhvcN AQELBQADggEBADLC65YVNximoi7LwFncczhMlAq1hXUgmFkXE36spDUZ3LltoST5 Ds80aFrPfFBT/NO7iPcwMJGrF8dh1Ai6NxhuoJFPId0ByG5t33eGVoNpo7AJKnfl euxvMpQWikeIpFXDzmohJfeuRdDYYqTz6XmTHakkk9Z+RhuECpTBy2oXO3+p9vgH pS/VVhfSNoefL+xBLP4G84WaJ2odDyPdViijLH76Jiox6JG/KzDysko0DiKwpXyV GEpH/NQwOdMI7bh74+6zGYEdrI+FnJHsC2EuNXm7JjpM4uEMdjmjdSIk8uz8l4xk S5/HLYtmBkSIgHHkZpzRgNWU3qmd23/d6Fc= -----END CERTIFICATE-----Generated at Wed May 13 04:19:37 2026 by rpki-client