$ rpki-client -vvf rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230322e34332e3136372e302f32342d3234203d3e203138303539.roa File: 3230322e34332e3136372e302f32342d3234203d3e203138303539.roa (raw, json) Hash identifier: nPAvBov0HEPItLy1JnKHV2Vr5GW7G07cmRHPvqYnEoM= Subject key identifier: 56:5C:C5:AC:CA:22:E3:EA:25:FB:61:C2:D4:B8:28:DC:B8:1A:85:D7 Certificate issuer: /CN=67239F5E47D123019D26807163E6542441401507 Certificate serial: 58087482F09803D816734755E35D3FB5803595E0 Authority key identifier: 67:23:9F:5E:47:D1:23:01:9D:26:80:71:63:E6:54:24:41:40:15:07 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67239F5E47D123019D26807163E6542441401507.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230322e34332e3136372e302f32342d3234203d3e203138303539.roa Signing time: Sun 03 May 2026 03:03:49 +0000 ROA not before: Sun 03 May 2026 02:58:49 +0000 ROA not after: Sun 02 May 2027 03:03:49 +0000 asID: 18059 IP address blocks: 202.43.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/67239F5E47D123019D26807163E6542441401507.crl rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/67239F5E47D123019D26807163E6542441401507.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67239F5E47D123019D26807163E6542441401507.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 18:10:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:08:74:82:f0:98:03:d8:16:73:47:55:e3:5d:3f:b5:80:35:95:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67239F5E47D123019D26807163E6542441401507 Validity Not Before: May 3 02:58:49 2026 GMT Not After : May 2 03:03:49 2027 GMT Subject: CN=565CC5ACCA22E3EA25FB61C2D4B828DCB81A85D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:34:b9:d4:d1:2f:3e:54:ab:c7:57:b9:ca:26: d1:f0:cb:2c:c9:3e:f1:68:9a:72:64:29:9f:11:7b: 2a:ec:95:d2:d9:04:1e:c6:eb:a3:a2:a3:ba:4f:b6: 9f:6b:98:91:93:ab:7b:70:e0:23:a8:6e:51:01:b4: bf:e8:23:02:05:a1:21:b5:05:16:8b:e4:9d:87:1e: a5:56:ef:18:8c:34:b3:fa:1f:f8:5c:89:f9:62:8b: b7:d8:a6:44:45:a1:7f:1c:e3:a4:16:f6:27:67:6e: 22:0c:e0:15:a8:d9:90:9c:56:0b:0d:28:44:38:03: a2:a7:50:6a:00:6b:d8:6d:5a:97:7b:c4:a0:4a:b8: ec:27:fe:d5:84:59:60:9d:65:8b:c6:47:20:c0:70: 6e:72:a9:a9:d1:31:43:5b:e8:7a:e8:cc:a1:dc:17: 59:92:b1:24:ba:39:29:2b:b6:07:ce:2e:28:ff:c6: 03:d6:2f:f6:2a:97:e7:e4:a6:7a:1e:3c:79:56:6d: 7d:3f:43:68:9d:94:e4:b8:07:08:e8:f3:0f:01:fb: 6e:0a:0b:55:dc:d8:84:2b:41:bb:f4:6e:91:49:c9: 98:7e:50:46:90:a8:a0:60:f8:65:d3:4b:ab:b8:e7: 1b:f1:b5:7f:6f:f3:4a:59:19:0d:fd:d0:c2:dd:02: 29:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:5C:C5:AC:CA:22:E3:EA:25:FB:61:C2:D4:B8:28:DC:B8:1A:85:D7 X509v3 Authority Key Identifier: keyid:67:23:9F:5E:47:D1:23:01:9D:26:80:71:63:E6:54:24:41:40:15:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/67239F5E47D123019D26807163E6542441401507.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67239F5E47D123019D26807163E6542441401507.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230322e34332e3136372e302f32342d3234203d3e203138303539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.43.167.0/24 Signature Algorithm: sha256WithRSAEncryption 23:cc:70:8d:4a:4b:e3:16:f1:4f:b9:58:3a:35:aa:67:34:f5: bd:a2:84:c6:74:78:79:db:1f:11:a2:37:86:e7:65:94:c3:23: 7b:e0:0f:34:e1:48:da:29:8e:f1:97:e7:f5:ce:34:01:09:7b: d1:ca:29:80:92:1e:f5:26:e7:e7:20:95:3b:5f:6c:38:36:0e: 79:e9:cf:c0:20:7d:8e:b5:4f:bc:b3:fb:f5:9d:b6:10:ba:29: 74:87:7a:55:33:1c:13:51:12:4f:bc:8c:ec:7f:00:df:f9:6a: 3a:15:2a:3c:99:7a:8e:65:1f:a4:b3:a3:a3:57:1b:9c:f7:0c: 4b:b3:b9:16:7b:4e:ad:37:80:65:c3:1e:a9:6e:41:2c:09:6f: 10:a9:7c:54:95:82:c7:0a:da:7c:f5:57:56:74:70:83:4d:61: d1:33:41:a2:d8:df:d1:e3:19:08:d8:b6:11:29:aa:08:8d:7c: a6:db:8c:0d:5b:a8:ac:83:64:34:4b:4c:79:7a:97:e3:30:43: c0:99:24:81:3b:39:3b:f4:14:f3:55:fb:29:24:05:c6:da:c0: 0e:47:a3:92:0e:81:33:6a:28:39:03:e4:ca:6a:28:e2:e1:f9: c8:a9:b5:a1:6d:9f:ce:59:a3:e5:2f:db:b8:24:da:05:31:0b: 0b:8a:df:1f -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUWAh0gvCYA9gWc0dV410/tYA1leAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjcyMzlGNUU0N0QxMjMwMTlEMjY4MDcxNjNFNjU0MjQ0 MTQwMTUwNzAeFw0yNjA1MDMwMjU4NDlaFw0yNzA1MDIwMzAzNDlaMDMxMTAvBgNV BAMTKDU2NUNDNUFDQ0EyMkUzRUEyNUZCNjFDMkQ0QjgyOERDQjgxQTg1RDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuNLnU0S8+VKvHV7nKJtHwyyzJ PvFomnJkKZ8ReyrsldLZBB7G66Oio7pPtp9rmJGTq3tw4COoblEBtL/oIwIFoSG1 BRaL5J2HHqVW7xiMNLP6H/hciflii7fYpkRFoX8c46QW9idnbiIM4BWo2ZCcVgsN KEQ4A6KnUGoAa9htWpd7xKBKuOwn/tWEWWCdZYvGRyDAcG5yqanRMUNb6HrozKHc F1mSsSS6OSkrtgfOLij/xgPWL/Yql+fkpnoePHlWbX0/Q2idlOS4Bwjo8w8B+24K C1Xc2IQrQbv0bpFJyZh+UEaQqKBg+GXTS6u45xvxtX9v80pZGQ390MLdAimvAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUVlzFrMoi4+ol+2HC1Lgo3LgahdcwHwYDVR0j BBgwFoAUZyOfXkfRIwGdJoBxY+ZUJEFAFQcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzI4MzY3NjMtMTJiNi00ZDhmLWFkMGItNGNkNWI2MTk1OWVmLzAvNjcyMzlGNUU0 N0QxMjMwMTlEMjY4MDcxNjNFNjU0MjQ0MTQwMTUwNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82NzIzOUY1RTQ3RDEyMzAxOUQyNjgwNzE2M0U2NTQyNDQxNDAx NTA3LmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2MyODM2NzYzLTEyYjYtNGQ4Zi1h ZDBiLTRjZDViNjE5NTllZi8wLzMyMzAzMjJlMzQzMzJlMzEzNjM3MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzODMwMzUzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMorpzANBgkqhkiG 9w0BAQsFAAOCAQEAI8xwjUpL4xbxT7lYOjWqZzT1vaKExnR4edsfEaI3hudllMMj e+APNOFI2imO8Zfn9c40AQl70copgJIe9Sbn5yCVO19sODYOeenPwCB9jrVPvLP7 9Z22ELopdId6VTMcE1EST7yM7H8A3/lqOhUqPJl6jmUfpLOjo1cbnPcMS7O5FntO rTeAZcMeqW5BLAlvEKl8VJWCxwrafPVXVnRwg01h0TNBotjf0eMZCNi2ESmqCI18 ptuMDVuorINkNEtMeXqX4zBDwJkkgTs5O/QU81X7KSQFxtrADkejkg6BM2ooOQPk ymoo4uH5yKm1oW2fzlmj5S/buCTaBTELC4rfHw== -----END CERTIFICATE-----Generated at Wed May 13 10:30:05 2026 by rpki-client