$ rpki-client -vvf rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230322e34332e3136352e302f32342d3234203d3e203138303539.roa File: 3230322e34332e3136352e302f32342d3234203d3e203138303539.roa (raw, json) Hash identifier: synqqmUfBA1aTbAbo4+Si5x0Q4jSDTt15BeVkzzoM1Y= Subject key identifier: EF:F5:4B:70:45:69:8E:A8:75:63:A9:04:56:26:AE:39:8D:21:06:31 Certificate issuer: /CN=67239F5E47D123019D26807163E6542441401507 Certificate serial: 20FE1151BC58D2373E0DE5664FDAB5552E075B40 Authority key identifier: 67:23:9F:5E:47:D1:23:01:9D:26:80:71:63:E6:54:24:41:40:15:07 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67239F5E47D123019D26807163E6542441401507.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230322e34332e3136352e302f32342d3234203d3e203138303539.roa Signing time: Sun 03 May 2026 03:03:56 +0000 ROA not before: Sun 03 May 2026 02:58:56 +0000 ROA not after: Sun 02 May 2027 03:03:56 +0000 asID: 18059 IP address blocks: 202.43.165.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/67239F5E47D123019D26807163E6542441401507.crl rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/67239F5E47D123019D26807163E6542441401507.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67239F5E47D123019D26807163E6542441401507.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 18:10:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:fe:11:51:bc:58:d2:37:3e:0d:e5:66:4f:da:b5:55:2e:07:5b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67239F5E47D123019D26807163E6542441401507 Validity Not Before: May 3 02:58:56 2026 GMT Not After : May 2 03:03:56 2027 GMT Subject: CN=EFF54B7045698EA87563A9045626AE398D210631 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:2b:83:4b:86:ff:b3:83:e6:ee:b6:ab:c4:8e: 39:1e:c0:fd:b6:b0:ac:0c:22:ba:c9:cd:d8:f3:36: c7:1b:0a:ea:d7:77:3d:d3:ca:42:eb:56:0e:0b:6f: f4:63:af:62:e1:d6:3b:1e:80:8c:1a:60:2b:60:a2: b7:92:98:10:94:a5:6d:0a:d1:51:5a:2f:47:74:da: 1a:a7:3c:df:a4:58:e1:f3:ad:84:d8:45:fc:d3:2d: 43:77:40:26:fe:51:42:4d:87:24:6d:08:9c:a1:b8: 3e:51:c3:f6:7e:39:9b:a5:38:10:be:4c:47:12:cc: 73:fb:88:b8:87:ff:c8:af:2a:b8:ef:7b:ca:1e:b4: 7b:fa:49:d4:48:87:6c:56:83:a9:35:6a:3e:55:17: 8e:ad:bb:e2:8d:ed:01:62:91:49:94:16:f6:a6:44: 5f:e6:b6:2f:db:89:f3:89:14:b2:6a:66:52:5f:e5: f3:0f:be:f8:d7:6c:a9:27:a8:7f:38:74:b4:4b:44: 54:0e:b9:5e:d7:1d:ac:84:43:4a:b0:81:8d:a5:cd: da:5f:e6:5d:82:20:23:02:79:77:f3:85:b9:3d:c2: e4:76:59:ca:b6:83:29:8a:c7:59:38:93:5f:ed:2c: e3:d9:20:e1:e6:47:26:44:ad:2c:ef:6d:99:28:de: 29:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:F5:4B:70:45:69:8E:A8:75:63:A9:04:56:26:AE:39:8D:21:06:31 X509v3 Authority Key Identifier: keyid:67:23:9F:5E:47:D1:23:01:9D:26:80:71:63:E6:54:24:41:40:15:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/67239F5E47D123019D26807163E6542441401507.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67239F5E47D123019D26807163E6542441401507.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230322e34332e3136352e302f32342d3234203d3e203138303539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.43.165.0/24 Signature Algorithm: sha256WithRSAEncryption 2b:a1:44:84:1c:e3:b5:46:f2:48:a9:a1:e5:c0:99:de:ea:f1: dc:37:f6:9f:d6:f0:dd:94:29:95:20:d7:79:fe:a1:81:7d:c8: 36:f4:f0:a4:78:4f:68:fc:42:15:87:bc:0e:d0:7f:55:b4:a1: 1a:af:1e:8a:6b:fd:ce:cb:b9:b8:15:ca:f9:b9:ff:df:da:f0: 30:87:4d:0f:0f:bc:b2:f9:d4:5c:dd:a9:44:1a:b6:72:7b:24: 90:b1:5d:6b:00:40:bc:ec:a5:ca:e8:a7:8e:6b:bf:7d:1b:d9: 6b:ab:1e:c5:d5:78:5c:72:01:c9:ac:88:4e:b7:56:43:1e:01: f8:2f:cc:2b:30:0d:91:6c:63:9f:2a:84:53:04:5a:6e:fd:a7: 0b:2f:fd:96:5e:ff:77:42:21:0e:06:75:de:4e:1d:69:ff:4f: fc:34:e4:08:20:71:89:f3:0d:ef:36:6b:11:2d:2c:a2:01:99: a4:19:4b:99:bf:35:92:ff:f3:fa:6a:26:4d:7b:56:9f:43:16: 43:2f:ea:21:99:b6:94:f3:0c:19:ec:3e:bb:f8:3b:26:de:e5: 08:9f:c2:50:f6:eb:f1:52:9c:1e:74:44:cf:7a:fd:e2:c7:07: 62:ec:c4:99:95:00:55:39:5e:64:ad:b5:51:39:cd:ab:20:4b: 95:5a:51:12 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUIP4RUbxY0jc+DeVmT9q1VS4HW0AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjcyMzlGNUU0N0QxMjMwMTlEMjY4MDcxNjNFNjU0MjQ0 MTQwMTUwNzAeFw0yNjA1MDMwMjU4NTZaFw0yNzA1MDIwMzAzNTZaMDMxMTAvBgNV BAMTKEVGRjU0QjcwNDU2OThFQTg3NTYzQTkwNDU2MjZBRTM5OEQyMTA2MzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEK4NLhv+zg+butqvEjjkewP22 sKwMIrrJzdjzNscbCurXdz3TykLrVg4Lb/Rjr2Lh1jsegIwaYCtgoreSmBCUpW0K 0VFaL0d02hqnPN+kWOHzrYTYRfzTLUN3QCb+UUJNhyRtCJyhuD5Rw/Z+OZulOBC+ TEcSzHP7iLiH/8ivKrjve8oetHv6SdRIh2xWg6k1aj5VF46tu+KN7QFikUmUFvam RF/mti/bifOJFLJqZlJf5fMPvvjXbKknqH84dLRLRFQOuV7XHayEQ0qwgY2lzdpf 5l2CICMCeXfzhbk9wuR2Wcq2gymKx1k4k1/tLOPZIOHmRyZErSzvbZko3ilhAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQU7/VLcEVpjqh1Y6kEViauOY0hBjEwHwYDVR0j BBgwFoAUZyOfXkfRIwGdJoBxY+ZUJEFAFQcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzI4MzY3NjMtMTJiNi00ZDhmLWFkMGItNGNkNWI2MTk1OWVmLzAvNjcyMzlGNUU0 N0QxMjMwMTlEMjY4MDcxNjNFNjU0MjQ0MTQwMTUwNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82NzIzOUY1RTQ3RDEyMzAxOUQyNjgwNzE2M0U2NTQyNDQxNDAx NTA3LmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2MyODM2NzYzLTEyYjYtNGQ4Zi1h ZDBiLTRjZDViNjE5NTllZi8wLzMyMzAzMjJlMzQzMzJlMzEzNjM1MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzODMwMzUzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMorpTANBgkqhkiG 9w0BAQsFAAOCAQEAK6FEhBzjtUbySKmh5cCZ3urx3Df2n9bw3ZQplSDXef6hgX3I NvTwpHhPaPxCFYe8DtB/VbShGq8eimv9zsu5uBXK+bn/39rwMIdNDw+8svnUXN2p RBq2cnskkLFdawBAvOylyuinjmu/fRvZa6sexdV4XHIByayITrdWQx4B+C/MKzAN kWxjnyqEUwRabv2nCy/9ll7/d0IhDgZ13k4daf9P/DTkCCBxifMN7zZrES0sogGZ pBlLmb81kv/z+momTXtWn0MWQy/qIZm2lPMMGew+u/g7Jt7lCJ/CUPbr8VKcHnRE z3r94scHYuzEmZUAVTleZK21UTnNqyBLlVpREg== -----END CERTIFICATE-----Generated at Wed May 13 10:00:50 2026 by rpki-client