$ rpki-client -vvf rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230322e34332e3137302e302f32342d3234203d3e203138303539.roa File: 3230322e34332e3137302e302f32342d3234203d3e203138303539.roa (raw, json) Hash identifier: TfLQgD8D8S06GolNO1QuMkwvLgw7DDVn/bQqvA7gjNs= Subject key identifier: 3A:DF:30:13:12:BE:2A:8F:15:14:89:00:C6:62:F8:E6:CB:0A:2C:E9 Certificate issuer: /CN=67239F5E47D123019D26807163E6542441401507 Certificate serial: 4D98BE74F6D692F9A2F794648B3D0EA5A63394CE Authority key identifier: 67:23:9F:5E:47:D1:23:01:9D:26:80:71:63:E6:54:24:41:40:15:07 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67239F5E47D123019D26807163E6542441401507.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230322e34332e3137302e302f32342d3234203d3e203138303539.roa Signing time: Sun 03 May 2026 03:03:50 +0000 ROA not before: Sun 03 May 2026 02:58:50 +0000 ROA not after: Sun 02 May 2027 03:03:50 +0000 asID: 18059 IP address blocks: 202.43.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/67239F5E47D123019D26807163E6542441401507.crl rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/67239F5E47D123019D26807163E6542441401507.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67239F5E47D123019D26807163E6542441401507.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 18:10:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:98:be:74:f6:d6:92:f9:a2:f7:94:64:8b:3d:0e:a5:a6:33:94:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67239F5E47D123019D26807163E6542441401507 Validity Not Before: May 3 02:58:50 2026 GMT Not After : May 2 03:03:50 2027 GMT Subject: CN=3ADF301312BE2A8F15148900C662F8E6CB0A2CE9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:12:d5:a7:13:a3:44:5d:8c:f0:da:1a:fb:e2: d3:51:25:03:79:56:1f:2a:63:e1:02:50:fe:cb:e2: db:d1:49:48:a4:2c:ea:f1:08:6e:81:88:2e:17:85: 9c:8c:3c:e9:0c:93:f0:20:b5:d8:ac:5a:1b:08:c2: b0:a4:d6:9c:70:38:fe:51:33:d8:00:8b:d1:f5:1f: fd:1c:82:bc:6b:dc:3b:6f:a2:fc:21:aa:cb:53:ab: ce:8d:e9:c4:0d:bc:9c:04:96:b0:f6:3c:57:27:c0: 65:4d:5f:4f:19:5a:f8:8c:4d:3f:d9:27:83:35:0a: 1f:f4:72:74:82:c4:a6:01:dc:2d:38:33:c4:64:91: 79:fc:73:fc:22:5d:3a:c0:8a:1d:dd:53:de:01:54: 41:b5:90:79:e7:c3:4a:dd:9f:d7:b8:a1:0d:98:c7: 17:d5:9c:8f:85:4a:aa:84:98:ee:d8:67:fb:f2:13: 6e:c9:ca:29:06:8e:43:9d:30:ad:45:9f:7e:b8:a3: fb:67:c6:22:95:64:cc:97:3c:52:ca:22:e5:17:8a: 3e:40:62:9c:ff:9d:ae:23:bc:ae:d0:c3:49:47:54: c7:7e:ad:dc:14:56:0c:54:f2:bc:53:3c:36:31:71: 4a:5a:47:96:58:f8:c6:66:4b:c4:16:d8:8c:1d:cf: 18:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:DF:30:13:12:BE:2A:8F:15:14:89:00:C6:62:F8:E6:CB:0A:2C:E9 X509v3 Authority Key Identifier: keyid:67:23:9F:5E:47:D1:23:01:9D:26:80:71:63:E6:54:24:41:40:15:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/67239F5E47D123019D26807163E6542441401507.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67239F5E47D123019D26807163E6542441401507.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230322e34332e3137302e302f32342d3234203d3e203138303539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.43.170.0/24 Signature Algorithm: sha256WithRSAEncryption 18:ef:13:23:59:27:93:06:35:c0:de:67:1b:79:e5:9b:07:8c: 59:29:0b:f7:13:1c:39:ef:45:db:69:36:88:b3:20:65:49:20: 36:47:06:cd:56:cc:56:8b:56:a3:4b:d7:f3:d2:14:5f:fa:f7: 13:b4:84:71:a5:84:1d:e5:9b:a6:93:3d:c7:9d:99:69:f2:d6: 9d:cc:e5:0d:c8:a5:af:58:2e:95:40:6e:09:d2:d8:d7:e6:2c: 34:94:e5:dc:bd:61:3d:95:c8:00:de:29:3b:0f:33:2b:21:a6: 22:c0:60:e9:43:54:f1:d3:0d:95:11:68:c4:03:aa:18:67:2b: 82:f0:00:d8:d8:c4:7a:51:2f:c6:2c:75:24:97:ea:6b:38:60: b1:28:3c:df:37:f2:65:5d:e1:1e:e1:4d:ce:8f:41:2c:54:76: e8:5a:b5:99:23:60:35:26:e6:dc:4f:f1:f3:a4:96:14:00:54: 5a:1f:53:98:c0:e3:e5:4f:65:a8:6d:36:e7:75:6c:7d:13:67: 33:07:38:7c:05:a5:cb:47:32:cf:49:56:27:0c:dc:c4:27:8b: 02:de:94:f3:36:8e:71:8e:27:26:24:10:c1:bd:4d:03:92:af: 96:0c:d7:30:68:14:ac:d2:f7:4c:75:1c:88:3f:41:cb:af:b9: a8:f4:8f:28 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUTZi+dPbWkvmi95Rkiz0OpaYzlM4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjcyMzlGNUU0N0QxMjMwMTlEMjY4MDcxNjNFNjU0MjQ0 MTQwMTUwNzAeFw0yNjA1MDMwMjU4NTBaFw0yNzA1MDIwMzAzNTBaMDMxMTAvBgNV BAMTKDNBREYzMDEzMTJCRTJBOEYxNTE0ODkwMEM2NjJGOEU2Q0IwQTJDRTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvEtWnE6NEXYzw2hr74tNRJQN5 Vh8qY+ECUP7L4tvRSUikLOrxCG6BiC4XhZyMPOkMk/AgtdisWhsIwrCk1pxwOP5R M9gAi9H1H/0cgrxr3DtvovwhqstTq86N6cQNvJwElrD2PFcnwGVNX08ZWviMTT/Z J4M1Ch/0cnSCxKYB3C04M8RkkXn8c/wiXTrAih3dU94BVEG1kHnnw0rdn9e4oQ2Y xxfVnI+FSqqEmO7YZ/vyE27JyikGjkOdMK1Fn364o/tnxiKVZMyXPFLKIuUXij5A Ypz/na4jvK7Qw0lHVMd+rdwUVgxU8rxTPDYxcUpaR5ZY+MZmS8QW2IwdzxhpAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUOt8wExK+Ko8VFIkAxmL45ssKLOkwHwYDVR0j BBgwFoAUZyOfXkfRIwGdJoBxY+ZUJEFAFQcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzI4MzY3NjMtMTJiNi00ZDhmLWFkMGItNGNkNWI2MTk1OWVmLzAvNjcyMzlGNUU0 N0QxMjMwMTlEMjY4MDcxNjNFNjU0MjQ0MTQwMTUwNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82NzIzOUY1RTQ3RDEyMzAxOUQyNjgwNzE2M0U2NTQyNDQxNDAx NTA3LmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2MyODM2NzYzLTEyYjYtNGQ4Zi1h ZDBiLTRjZDViNjE5NTllZi8wLzMyMzAzMjJlMzQzMzJlMzEzNzMwMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzODMwMzUzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMorqjANBgkqhkiG 9w0BAQsFAAOCAQEAGO8TI1knkwY1wN5nG3nlmweMWSkL9xMcOe9F22k2iLMgZUkg NkcGzVbMVotWo0vX89IUX/r3E7SEcaWEHeWbppM9x52ZafLWnczlDcilr1gulUBu CdLY1+YsNJTl3L1hPZXIAN4pOw8zKyGmIsBg6UNU8dMNlRFoxAOqGGcrgvAA2NjE elEvxix1JJfqazhgsSg83zfyZV3hHuFNzo9BLFR26Fq1mSNgNSbm3E/x86SWFABU Wh9TmMDj5U9lqG0253VsfRNnMwc4fAWly0cyz0lWJwzcxCeLAt6U8zaOcY4nJiQQ wb1NA5KvlgzXMGgUrNL3THUciD9By6+5qPSPKA== -----END CERTIFICATE-----Generated at Wed May 13 10:36:27 2026 by rpki-client