$ rpki-client -vvf rpki-rsync.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3230322e35312e35382e302f32332d3233203d3e203330383630.roa File: 3230322e35312e35382e302f32332d3233203d3e203330383630.roa (raw, json) Hash identifier: 66aA75QUcB6PMDAVxPn0l4kedL6JSinUSrD/FjvLrOY= Subject key identifier: 21:09:6E:85:0C:89:27:30:2F:AD:73:7A:EC:D1:DA:20:1F:F3:9F:CD Certificate issuer: /CN=4D8CAFECBF12EF792F1EFD722767E5FE74282093 Certificate serial: 6A2144AE49C9896DAC615C20FD91E7E078DD1F2C Authority key identifier: 4D:8C:AF:EC:BF:12:EF:79:2F:1E:FD:72:27:67:E5:FE:74:28:20:93 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D8CAFECBF12EF792F1EFD722767E5FE74282093.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3230322e35312e35382e302f32332d3233203d3e203330383630.roa Signing time: Sun 03 May 2026 03:02:51 +0000 ROA not before: Sun 03 May 2026 02:57:51 +0000 ROA not after: Sun 02 May 2027 03:02:51 +0000 asID: 30860 IP address blocks: 202.51.58.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/4D8CAFECBF12EF792F1EFD722767E5FE74282093.crl rsync://rpki-rsync.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/4D8CAFECBF12EF792F1EFD722767E5FE74282093.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D8CAFECBF12EF792F1EFD722767E5FE74282093.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:21:44:ae:49:c9:89:6d:ac:61:5c:20:fd:91:e7:e0:78:dd:1f:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4D8CAFECBF12EF792F1EFD722767E5FE74282093 Validity Not Before: May 3 02:57:51 2026 GMT Not After : May 2 03:02:51 2027 GMT Subject: CN=21096E850C8927302FAD737AECD1DA201FF39FCD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ae:c3:f9:57:02:b7:a5:28:ce:59:a4:1a:0a: 2e:0d:7c:17:44:55:0f:d6:91:4e:dd:59:c5:aa:26: 39:8f:e5:1a:66:ec:04:4b:b0:37:ee:83:5e:b3:52: a9:de:cc:57:24:d9:db:0e:45:36:22:9c:ca:95:41: 2f:c7:97:30:18:bf:59:c5:52:7f:57:ed:e9:3f:42: 3b:3f:b0:64:2b:4c:42:ea:31:b8:d4:24:dc:a4:b7: 9a:f9:3e:42:01:1c:fb:29:e2:82:03:34:89:4b:c6: 53:20:89:cc:ca:3c:e2:96:35:de:83:19:a7:35:0b: 45:52:46:d9:5b:1b:43:8a:99:0f:cc:72:16:e9:09: e4:a0:49:45:93:43:df:37:d0:5e:99:7a:cd:75:5c: ae:67:e0:01:ed:18:4f:cb:fe:a0:ba:b3:73:3a:df: 4f:58:82:88:d6:a7:df:63:8c:5d:eb:8e:56:aa:de: 4f:2f:81:60:eb:37:a6:56:82:09:4f:ad:97:14:b1: 39:4f:65:c8:69:18:04:ed:28:99:e0:f9:f8:35:da: 94:8f:11:25:bd:b7:3f:03:ec:1a:c7:1b:c8:d3:8e: 6c:eb:41:69:03:31:54:3c:5d:fa:b2:1f:2c:7c:c6: 6e:e5:ef:37:3c:63:73:ec:c9:60:8d:5e:18:6d:7d: 56:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:09:6E:85:0C:89:27:30:2F:AD:73:7A:EC:D1:DA:20:1F:F3:9F:CD X509v3 Authority Key Identifier: keyid:4D:8C:AF:EC:BF:12:EF:79:2F:1E:FD:72:27:67:E5:FE:74:28:20:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/4D8CAFECBF12EF792F1EFD722767E5FE74282093.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D8CAFECBF12EF792F1EFD722767E5FE74282093.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3230322e35312e35382e302f32332d3233203d3e203330383630.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.51.58.0/23 Signature Algorithm: sha256WithRSAEncryption 68:36:ec:98:57:b3:59:e6:01:c7:82:59:2e:f0:16:a1:7e:c0: 30:1a:0c:e6:04:fa:1e:90:27:1f:67:1d:98:3c:49:38:8b:06: 25:45:71:0c:10:1e:ab:93:e7:00:24:13:a1:81:28:26:2c:38: 82:68:13:65:ec:74:67:d6:fd:5c:f0:95:56:33:d0:f0:bf:ad: 28:5b:7b:b5:0a:84:a4:87:20:66:2d:61:10:10:c5:c2:0c:87: e4:6a:61:c3:c9:37:6c:35:dd:e9:da:cb:86:fe:d0:95:dd:5e: 60:e3:ad:6b:7b:96:92:17:b6:1b:27:67:0f:7c:5b:4a:da:5e: 58:23:79:53:0f:a5:24:96:10:76:ed:51:41:f3:f2:a9:9e:5f: eb:00:00:9c:45:5e:5b:4f:f0:52:dc:72:5d:25:d4:f0:8a:fa: 95:f9:f0:75:00:df:84:56:58:26:20:48:b8:25:51:16:8e:d0: 32:01:10:f7:e4:b5:2c:07:ad:23:70:f5:ba:bb:05:d4:11:06: 40:c3:fb:f4:20:f9:3b:14:3d:fc:0d:39:9e:53:6c:78:77:a9: 90:d0:92:fb:a4:91:f4:5e:e0:06:24:3a:24:6f:a5:a4:89:2b: 79:57:fc:6e:21:b7:b3:81:50:15:aa:27:55:69:67:18:b1:ee: a8:34:aa:8c -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUaiFErknJiW2sYVwg/ZHn4HjdHywwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEQ4Q0FGRUNCRjEyRUY3OTJGMUVGRDcyMjc2N0U1RkU3 NDI4MjA5MzAeFw0yNjA1MDMwMjU3NTFaFw0yNzA1MDIwMzAyNTFaMDMxMTAvBgNV BAMTKDIxMDk2RTg1MEM4OTI3MzAyRkFENzM3QUVDRDFEQTIwMUZGMzlGQ0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyrsP5VwK3pSjOWaQaCi4NfBdE VQ/WkU7dWcWqJjmP5Rpm7ARLsDfug16zUqnezFck2dsORTYinMqVQS/HlzAYv1nF Un9X7ek/Qjs/sGQrTELqMbjUJNykt5r5PkIBHPsp4oIDNIlLxlMgiczKPOKWNd6D Gac1C0VSRtlbG0OKmQ/MchbpCeSgSUWTQ9830F6Zes11XK5n4AHtGE/L/qC6s3M6 309YgojWp99jjF3rjlaq3k8vgWDrN6ZWgglPrZcUsTlPZchpGATtKJng+fg12pSP ESW9tz8D7BrHG8jTjmzrQWkDMVQ8XfqyHyx8xm7l7zc8Y3PsyWCNXhhtfVbfAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUIQluhQyJJzAvrXN67NHaIB/zn80wHwYDVR0j BBgwFoAUTYyv7L8S73kvHv1yJ2fl/nQoIJMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmU1NDAxNjQtM2Q0Ni00Nzk0LWJmNTUtYjZiMTM0ZDlhYjEzLzAvNEQ4Q0FGRUNC RjEyRUY3OTJGMUVGRDcyMjc2N0U1RkU3NDI4MjA5My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80RDhDQUZFQ0JGMTJFRjc5MkYxRUZENzIyNzY3RTVGRTc0Mjgy MDkzLmNlcjCBoQYIKwYBBQUHAQsEgZQwgZEwgY4GCCsGAQUFBzALhoGBcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2JlNTQwMTY0LTNkNDYtNDc5NC1i ZjU1LWI2YjEzNGQ5YWIxMy8wLzMyMzAzMjJlMzUzMTJlMzUzODJlMzAyZjMyMzMy ZDMyMzMyMDNkM2UyMDMzMzAzODM2MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAHKMzowDQYJKoZIhvcN AQELBQADggEBAGg27JhXs1nmAceCWS7wFqF+wDAaDOYE+h6QJx9nHZg8STiLBiVF cQwQHquT5wAkE6GBKCYsOIJoE2XsdGfW/VzwlVYz0PC/rShbe7UKhKSHIGYtYRAQ xcIMh+RqYcPJN2w13enay4b+0JXdXmDjrWt7lpIXthsnZw98W0raXlgjeVMPpSSW EHbtUUHz8qmeX+sAAJxFXltP8FLccl0l1PCK+pX58HUA34RWWCYgSLglURaO0DIB EPfktSwHrSNw9bq7BdQRBkDD+/Qg+TsUPfwNOZ5TbHh3qZDQkvukkfRe4AYkOiRv paSJK3lX/G4ht7OBUBWqJ1VpZxix7qg0qow= -----END CERTIFICATE-----Generated at Wed May 13 03:16:47 2026 by rpki-client