$ rpki-client -vvf rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230322e34332e3137352e302f32342d3234203d3e203138303539.roa File: 3230322e34332e3137352e302f32342d3234203d3e203138303539.roa (raw, json) Hash identifier: 63ULpXKi94kIiiBXUAmeYFacbOwKJBA7vE9yN4PhNqg= Subject key identifier: 92:9F:1C:AD:CA:D0:3B:54:5D:7D:0E:17:97:1C:D8:0C:3F:B1:3E:48 Certificate issuer: /CN=67239F5E47D123019D26807163E6542441401507 Certificate serial: 43EC957A97127A7C253E99CCCB3A48D79E930C0A Authority key identifier: 67:23:9F:5E:47:D1:23:01:9D:26:80:71:63:E6:54:24:41:40:15:07 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67239F5E47D123019D26807163E6542441401507.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230322e34332e3137352e302f32342d3234203d3e203138303539.roa Signing time: Sun 03 May 2026 03:03:56 +0000 ROA not before: Sun 03 May 2026 02:58:56 +0000 ROA not after: Sun 02 May 2027 03:03:56 +0000 asID: 18059 IP address blocks: 202.43.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/67239F5E47D123019D26807163E6542441401507.crl rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/67239F5E47D123019D26807163E6542441401507.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67239F5E47D123019D26807163E6542441401507.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 18:10:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:ec:95:7a:97:12:7a:7c:25:3e:99:cc:cb:3a:48:d7:9e:93:0c:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67239F5E47D123019D26807163E6542441401507 Validity Not Before: May 3 02:58:56 2026 GMT Not After : May 2 03:03:56 2027 GMT Subject: CN=929F1CADCAD03B545D7D0E17971CD80C3FB13E48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:1d:81:b6:ae:0a:55:f7:eb:ca:2f:43:a2:82: 9c:45:84:74:81:af:b1:c9:ed:d0:eb:cd:c9:8d:8a: 8f:8e:20:15:4e:24:d7:b9:a4:b4:e7:c5:e8:c9:69: 5f:da:9f:47:39:27:45:98:3b:fc:b7:6f:8d:50:95: 57:50:0e:e4:82:2e:71:28:65:e0:90:89:a7:c8:d1: db:24:2a:7f:11:53:03:ae:9c:e4:08:89:71:b7:20: 82:1c:62:e0:4c:f0:ff:1d:16:e0:c8:e4:75:64:aa: 05:37:62:87:78:dd:da:fa:f0:c2:4f:e9:d1:e9:b6: 3f:8d:9b:a1:b0:fe:7e:fb:4f:6c:bc:6c:37:6e:79: 86:c8:51:2e:fa:97:e2:1b:1b:ce:2b:1f:e0:13:e5: 64:6b:25:4a:be:c6:d8:e0:af:44:b4:35:57:81:e1: 5a:9b:c5:53:0a:00:71:c2:4f:96:1f:f2:ea:f7:93: e9:78:b7:45:34:c6:99:04:2d:58:76:6e:37:55:0c: 23:d7:e9:4d:13:fa:22:56:dd:b1:a2:f9:80:be:42: 74:25:60:03:13:5e:c2:6a:e0:cb:4f:8a:42:f1:fc: 3d:2f:a3:af:7d:30:fd:ed:ab:89:5f:63:49:98:8f: 9f:c3:e1:ce:80:7e:ef:21:ec:a5:4d:2c:a5:d5:03: b7:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:9F:1C:AD:CA:D0:3B:54:5D:7D:0E:17:97:1C:D8:0C:3F:B1:3E:48 X509v3 Authority Key Identifier: keyid:67:23:9F:5E:47:D1:23:01:9D:26:80:71:63:E6:54:24:41:40:15:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/67239F5E47D123019D26807163E6542441401507.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67239F5E47D123019D26807163E6542441401507.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230322e34332e3137352e302f32342d3234203d3e203138303539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.43.175.0/24 Signature Algorithm: sha256WithRSAEncryption a4:31:7c:99:99:b6:1c:a7:19:03:34:7e:9a:0d:0e:a6:c2:01: e7:04:62:18:77:cd:b2:4d:47:ec:35:be:58:eb:4d:b6:6e:61: 01:93:04:e7:bc:43:00:7a:fb:60:2e:90:5c:1a:91:94:52:a1: fd:4e:c7:6f:13:cd:3d:79:26:70:ac:5d:24:4f:78:04:8d:69: 2a:f7:15:24:50:24:f4:8b:79:8a:1f:86:7d:aa:c2:fd:e2:69: 1d:8f:90:2e:d6:f7:d8:f1:c0:c1:bc:9e:3b:d7:b0:d0:10:8e: 78:03:00:22:81:1c:6b:83:b4:25:f2:fe:6d:8d:df:6b:5a:68: ec:9e:1f:e1:e5:f2:20:79:e4:a3:2d:1e:01:bf:4f:09:46:85: ca:aa:28:31:5a:21:52:23:5d:9e:50:03:6e:bf:5a:44:c4:c6: 58:55:7a:07:c4:ba:7c:7a:fc:ba:83:84:43:f7:5f:fa:d0:bf: 0a:a1:5a:3e:55:f6:d0:13:46:e4:89:ea:11:cd:e0:5f:21:a7: e5:69:29:75:a9:35:6d:d0:b2:15:fd:07:55:ce:ea:e6:ed:36: 9d:b9:5c:6d:59:46:9f:d4:d0:df:82:4d:64:cf:cd:6b:ac:f5: 44:75:71:f6:d1:af:3f:17:bd:92:5d:20:7e:ad:33:3d:e7:14: ae:b2:59:b0 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUQ+yVepcSenwlPpnMyzpI156TDAowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjcyMzlGNUU0N0QxMjMwMTlEMjY4MDcxNjNFNjU0MjQ0 MTQwMTUwNzAeFw0yNjA1MDMwMjU4NTZaFw0yNzA1MDIwMzAzNTZaMDMxMTAvBgNV BAMTKDkyOUYxQ0FEQ0FEMDNCNTQ1RDdEMEUxNzk3MUNEODBDM0ZCMTNFNDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEHYG2rgpV9+vKL0OigpxFhHSB r7HJ7dDrzcmNio+OIBVOJNe5pLTnxejJaV/an0c5J0WYO/y3b41QlVdQDuSCLnEo ZeCQiafI0dskKn8RUwOunOQIiXG3IIIcYuBM8P8dFuDI5HVkqgU3Yod43dr68MJP 6dHptj+Nm6Gw/n77T2y8bDdueYbIUS76l+IbG84rH+AT5WRrJUq+xtjgr0S0NVeB 4VqbxVMKAHHCT5Yf8ur3k+l4t0U0xpkELVh2bjdVDCPX6U0T+iJW3bGi+YC+QnQl YAMTXsJq4MtPikLx/D0vo699MP3tq4lfY0mYj5/D4c6Afu8h7KVNLKXVA7dZAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUkp8crcrQO1RdfQ4XlxzYDD+xPkgwHwYDVR0j BBgwFoAUZyOfXkfRIwGdJoBxY+ZUJEFAFQcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzI4MzY3NjMtMTJiNi00ZDhmLWFkMGItNGNkNWI2MTk1OWVmLzAvNjcyMzlGNUU0 N0QxMjMwMTlEMjY4MDcxNjNFNjU0MjQ0MTQwMTUwNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82NzIzOUY1RTQ3RDEyMzAxOUQyNjgwNzE2M0U2NTQyNDQxNDAx NTA3LmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2MyODM2NzYzLTEyYjYtNGQ4Zi1h ZDBiLTRjZDViNjE5NTllZi8wLzMyMzAzMjJlMzQzMzJlMzEzNzM1MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzODMwMzUzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMorrzANBgkqhkiG 9w0BAQsFAAOCAQEApDF8mZm2HKcZAzR+mg0OpsIB5wRiGHfNsk1H7DW+WOtNtm5h AZME57xDAHr7YC6QXBqRlFKh/U7HbxPNPXkmcKxdJE94BI1pKvcVJFAk9It5ih+G farC/eJpHY+QLtb32PHAwbyeO9ew0BCOeAMAIoEca4O0JfL+bY3fa1po7J4f4eXy IHnkoy0eAb9PCUaFyqooMVohUiNdnlADbr9aRMTGWFV6B8S6fHr8uoOEQ/df+tC/ CqFaPlX20BNG5InqEc3gXyGn5Wkpdak1bdCyFf0HVc7q5u02nblcbVlGn9TQ34JN ZM/Na6z1RHVx9tGvPxe9kl0gfq0zPecUrrJZsA== -----END CERTIFICATE-----Generated at Wed May 13 12:25:09 2026 by rpki-client