$ rpki-client -vvf rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230322e34332e3136332e302f32342d3234203d3e203138303539.roa File: 3230322e34332e3136332e302f32342d3234203d3e203138303539.roa (raw, json) Hash identifier: PSESbAwrK0Mj/kY988KEfrSDC3eDLJIL/5S+i5m2ua8= Subject key identifier: D3:59:91:CB:8E:AD:7C:A0:8E:51:CF:88:08:88:1B:A4:5F:B4:EC:86 Certificate issuer: /CN=67239F5E47D123019D26807163E6542441401507 Certificate serial: 55EAA110C88A52404CF91F68AC136240B180D9AD Authority key identifier: 67:23:9F:5E:47:D1:23:01:9D:26:80:71:63:E6:54:24:41:40:15:07 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67239F5E47D123019D26807163E6542441401507.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230322e34332e3136332e302f32342d3234203d3e203138303539.roa Signing time: Sun 03 May 2026 03:03:44 +0000 ROA not before: Sun 03 May 2026 02:58:44 +0000 ROA not after: Sun 02 May 2027 03:03:44 +0000 asID: 18059 IP address blocks: 202.43.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/67239F5E47D123019D26807163E6542441401507.crl rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/67239F5E47D123019D26807163E6542441401507.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67239F5E47D123019D26807163E6542441401507.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 18:10:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:ea:a1:10:c8:8a:52:40:4c:f9:1f:68:ac:13:62:40:b1:80:d9:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67239F5E47D123019D26807163E6542441401507 Validity Not Before: May 3 02:58:44 2026 GMT Not After : May 2 03:03:44 2027 GMT Subject: CN=D35991CB8EAD7CA08E51CF8808881BA45FB4EC86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ff:01:86:c2:12:fa:12:1f:be:7e:8f:99:f0: ef:2b:af:10:01:c1:c3:ec:7f:26:35:97:75:5e:9c: 25:59:0f:0c:6f:46:10:9b:b2:51:4b:fd:75:ad:75: 05:e3:60:a8:68:6a:b8:03:12:23:0d:96:ff:be:45: fa:c7:f1:70:9e:81:fd:1d:82:4c:5c:95:b0:23:39: ec:bd:63:89:48:be:c1:81:71:86:26:e6:b5:92:d0: ad:89:ae:ec:10:15:19:a4:d1:13:20:c7:28:30:da: dd:4f:c2:b8:05:2e:f5:27:df:15:a1:eb:17:28:97: d9:3f:2d:63:72:a4:ff:bb:c6:8b:28:3b:75:9c:0d: 6b:6d:a1:b5:1c:be:9e:f2:f6:0e:6b:12:82:d8:b1: 49:82:38:67:a0:42:67:ce:1c:13:06:67:b1:f7:e7: 89:7f:a9:87:45:8e:9a:5f:26:a1:98:b5:54:5f:bf: 56:b2:30:a7:20:e6:75:46:19:8d:6f:24:84:6d:97: fd:11:8f:73:75:8c:86:72:ed:95:78:8f:41:13:32: 3f:8a:ef:07:f3:da:1f:30:3e:53:5e:85:62:7b:4c: 16:22:b0:72:ea:75:bd:f1:dc:87:ca:bb:7b:33:33: 89:cf:a6:1e:ea:73:85:d5:d5:93:f8:4f:e1:89:a8: 27:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:59:91:CB:8E:AD:7C:A0:8E:51:CF:88:08:88:1B:A4:5F:B4:EC:86 X509v3 Authority Key Identifier: keyid:67:23:9F:5E:47:D1:23:01:9D:26:80:71:63:E6:54:24:41:40:15:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/67239F5E47D123019D26807163E6542441401507.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67239F5E47D123019D26807163E6542441401507.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230322e34332e3136332e302f32342d3234203d3e203138303539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.43.163.0/24 Signature Algorithm: sha256WithRSAEncryption a3:b4:e7:a3:50:2f:13:72:8a:c8:72:18:9c:c8:60:97:f9:7d: 06:9a:06:13:81:c0:1d:76:3b:a2:fa:82:0a:5a:89:be:d4:f9: a9:31:06:ce:fd:c9:5f:f5:d0:fb:c1:ad:79:de:ab:73:8b:50: f2:62:3f:70:0a:c7:6b:40:8f:a6:65:66:fe:21:64:18:bc:f2: db:7d:94:d5:fa:f0:ea:e6:5b:37:22:ac:a1:3f:9c:92:82:91: c3:9c:cf:e5:6c:f4:51:fc:4d:de:75:c6:60:38:a0:3e:22:0f: 9c:e0:1e:46:a7:d9:64:ef:63:b4:04:fd:d8:24:92:52:71:b7: c0:3f:f7:2a:ba:30:3d:78:09:b2:38:c2:51:ed:78:d2:72:ba: fe:d3:f7:ab:4d:01:c1:40:05:b0:59:23:b0:64:75:a8:0c:0c: a9:7b:3a:4f:4e:9d:a2:b4:97:81:62:5a:6e:aa:8b:c0:f1:c3: 24:0b:f8:2c:7a:cb:eb:bd:53:28:51:9a:dd:33:60:a1:ee:20: a5:0d:88:93:c0:35:ae:4c:f6:d6:00:4b:21:af:da:bd:30:54: 7f:69:e5:6a:4c:9e:58:96:94:03:94:93:9c:c2:61:4a:2d:4b: c5:a1:86:e5:f6:39:dd:ea:70:95:c9:3e:e7:a5:c3:53:f2:3b: 2e:5c:ed:1c -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUVeqhEMiKUkBM+R9orBNiQLGA2a0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjcyMzlGNUU0N0QxMjMwMTlEMjY4MDcxNjNFNjU0MjQ0 MTQwMTUwNzAeFw0yNjA1MDMwMjU4NDRaFw0yNzA1MDIwMzAzNDRaMDMxMTAvBgNV BAMTKEQzNTk5MUNCOEVBRDdDQTA4RTUxQ0Y4ODA4ODgxQkE0NUZCNEVDODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA/wGGwhL6Eh++fo+Z8O8rrxAB wcPsfyY1l3VenCVZDwxvRhCbslFL/XWtdQXjYKhoargDEiMNlv++RfrH8XCegf0d gkxclbAjOey9Y4lIvsGBcYYm5rWS0K2JruwQFRmk0RMgxygw2t1PwrgFLvUn3xWh 6xcol9k/LWNypP+7xosoO3WcDWttobUcvp7y9g5rEoLYsUmCOGegQmfOHBMGZ7H3 54l/qYdFjppfJqGYtVRfv1ayMKcg5nVGGY1vJIRtl/0Rj3N1jIZy7ZV4j0ETMj+K 7wfz2h8wPlNehWJ7TBYisHLqdb3x3IfKu3szM4nPph7qc4XV1ZP4T+GJqCd/AgMB AAGjggIyMIICLjAdBgNVHQ4EFgQU01mRy46tfKCOUc+ICIgbpF+07IYwHwYDVR0j BBgwFoAUZyOfXkfRIwGdJoBxY+ZUJEFAFQcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzI4MzY3NjMtMTJiNi00ZDhmLWFkMGItNGNkNWI2MTk1OWVmLzAvNjcyMzlGNUU0 N0QxMjMwMTlEMjY4MDcxNjNFNjU0MjQ0MTQwMTUwNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82NzIzOUY1RTQ3RDEyMzAxOUQyNjgwNzE2M0U2NTQyNDQxNDAx NTA3LmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2MyODM2NzYzLTEyYjYtNGQ4Zi1h ZDBiLTRjZDViNjE5NTllZi8wLzMyMzAzMjJlMzQzMzJlMzEzNjMzMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzODMwMzUzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMorozANBgkqhkiG 9w0BAQsFAAOCAQEAo7Tno1AvE3KKyHIYnMhgl/l9BpoGE4HAHXY7ovqCClqJvtT5 qTEGzv3JX/XQ+8Gted6rc4tQ8mI/cArHa0CPpmVm/iFkGLzy232U1frw6uZbNyKs oT+ckoKRw5zP5Wz0UfxN3nXGYDigPiIPnOAeRqfZZO9jtAT92CSSUnG3wD/3Krow PXgJsjjCUe140nK6/tP3q00BwUAFsFkjsGR1qAwMqXs6T06dorSXgWJabqqLwPHD JAv4LHrL671TKFGa3TNgoe4gpQ2Ik8A1rkz21gBLIa/avTBUf2nlakyeWJaUA5ST nMJhSi1LxaGG5fY53epwlck+56XDU/I7LlztHA== -----END CERTIFICATE-----Generated at Wed May 13 10:04:04 2026 by rpki-client