$ rpki-client -vvf rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230322e37382e3139362e302f32342d3234203d3e203138303539.roa File: 3230322e37382e3139362e302f32342d3234203d3e203138303539.roa (raw, json) Hash identifier: TYDn+a6PKNZl83M9Y1wWuJLD+7bdsY6lin+XdjzFmQE= Subject key identifier: D7:D8:11:5A:4A:28:2B:65:17:7D:1C:EA:B4:C7:FA:0B:4A:1B:C8:00 Certificate issuer: /CN=67239F5E47D123019D26807163E6542441401507 Certificate serial: 4FFC56EF8224C54B782F47D7E7F58C886304FCED Authority key identifier: 67:23:9F:5E:47:D1:23:01:9D:26:80:71:63:E6:54:24:41:40:15:07 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67239F5E47D123019D26807163E6542441401507.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230322e37382e3139362e302f32342d3234203d3e203138303539.roa Signing time: Sun 03 May 2026 03:03:44 +0000 ROA not before: Sun 03 May 2026 02:58:44 +0000 ROA not after: Sun 02 May 2027 03:03:44 +0000 asID: 18059 IP address blocks: 202.78.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/67239F5E47D123019D26807163E6542441401507.crl rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/67239F5E47D123019D26807163E6542441401507.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67239F5E47D123019D26807163E6542441401507.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 18:10:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:fc:56:ef:82:24:c5:4b:78:2f:47:d7:e7:f5:8c:88:63:04:fc:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67239F5E47D123019D26807163E6542441401507 Validity Not Before: May 3 02:58:44 2026 GMT Not After : May 2 03:03:44 2027 GMT Subject: CN=D7D8115A4A282B65177D1CEAB4C7FA0B4A1BC800 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:ef:1c:3f:85:6d:93:32:b2:fd:37:3a:bb:72: 85:dc:58:2d:11:3a:8b:66:dd:4c:7b:2a:b5:b3:29: e7:dd:ed:12:e0:a0:fd:4d:b4:48:61:98:46:43:b8: d4:31:ce:b2:73:a7:18:3b:ad:bb:17:bf:f3:12:45: 4a:48:fa:62:a9:d9:0e:50:77:f0:65:02:e6:1f:b9: d5:5b:f6:d2:89:3c:fb:5c:18:0c:50:f1:32:4b:c9: 6f:27:62:4b:4c:8c:05:2f:d2:ca:aa:98:1a:a7:0a: 81:5b:5c:be:47:5f:1f:b6:86:94:58:93:da:03:53: 20:c6:fa:7d:16:66:81:a4:c5:d2:df:76:1e:dd:ac: 2d:fd:37:c5:d7:1a:3d:e0:73:95:5b:d8:a8:d8:e7: e8:1c:eb:9a:2b:c7:76:8d:8f:bd:c5:c0:02:33:d1: 16:6e:94:ed:cc:94:bb:14:b6:11:25:73:1c:3f:19: a5:83:59:72:75:3c:0c:81:8c:50:cf:5f:94:82:2e: 0e:f4:ff:8a:c6:0c:90:53:63:06:0a:21:aa:bf:b4: d1:9d:6c:6e:67:2e:fa:6e:6b:66:f9:8c:61:d4:2e: 76:f8:cb:e3:ef:d4:1d:f4:43:8c:6f:bf:ae:a7:60: 71:36:eb:df:38:46:d9:fb:60:07:a5:92:01:3e:68: bf:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:D8:11:5A:4A:28:2B:65:17:7D:1C:EA:B4:C7:FA:0B:4A:1B:C8:00 X509v3 Authority Key Identifier: keyid:67:23:9F:5E:47:D1:23:01:9D:26:80:71:63:E6:54:24:41:40:15:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/67239F5E47D123019D26807163E6542441401507.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67239F5E47D123019D26807163E6542441401507.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230322e37382e3139362e302f32342d3234203d3e203138303539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.78.196.0/24 Signature Algorithm: sha256WithRSAEncryption 89:b9:2f:74:03:47:cf:aa:be:f8:fc:d1:1b:24:02:fb:7f:b5: 90:2b:b7:5c:2b:ab:5a:c7:2e:e7:2f:83:08:d1:b3:80:13:d2: 77:e8:34:79:28:b0:de:84:93:80:3a:65:c1:52:45:90:5a:59: b3:84:20:88:3d:fe:da:15:f2:42:d6:28:8e:97:09:54:30:4f: 83:a6:b5:e6:e1:bf:53:ff:43:66:99:1d:54:43:54:b9:64:29: f2:29:f1:4f:16:d8:a4:0a:40:b0:88:6d:50:86:71:2c:65:f6: 54:c6:3b:94:fd:39:96:54:bc:8e:40:2f:4a:d2:c9:f8:9a:ea: f3:62:3b:e2:1c:2b:24:39:2a:b2:a7:86:e5:1c:db:af:fe:0d: 68:3b:76:23:d6:33:09:7e:d5:19:e6:aa:b8:42:70:8b:74:49: 52:fc:f0:a5:53:1c:b6:69:fa:bb:82:f1:4d:73:7a:97:89:4c: 77:f3:4c:f8:89:9c:71:fa:5d:b5:7b:1a:fc:c3:9e:ce:fd:22: 63:ee:a0:14:ff:2b:0f:d3:d4:8f:93:75:2e:8f:11:04:5c:21: 59:64:46:7b:4c:e8:0b:4c:fa:96:2c:dd:ad:36:f4:29:27:8e: 65:ab:37:87:ff:f7:49:f6:ce:fc:1e:c5:32:09:ad:b6:33:96: 19:76:97:56 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUT/xW74IkxUt4L0fX5/WMiGME/O0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjcyMzlGNUU0N0QxMjMwMTlEMjY4MDcxNjNFNjU0MjQ0 MTQwMTUwNzAeFw0yNjA1MDMwMjU4NDRaFw0yNzA1MDIwMzAzNDRaMDMxMTAvBgNV BAMTKEQ3RDgxMTVBNEEyODJCNjUxNzdEMUNFQUI0QzdGQTBCNEExQkM4MDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCP7xw/hW2TMrL9Nzq7coXcWC0R Ootm3Ux7KrWzKefd7RLgoP1NtEhhmEZDuNQxzrJzpxg7rbsXv/MSRUpI+mKp2Q5Q d/BlAuYfudVb9tKJPPtcGAxQ8TJLyW8nYktMjAUv0sqqmBqnCoFbXL5HXx+2hpRY k9oDUyDG+n0WZoGkxdLfdh7drC39N8XXGj3gc5Vb2KjY5+gc65orx3aNj73FwAIz 0RZulO3MlLsUthElcxw/GaWDWXJ1PAyBjFDPX5SCLg70/4rGDJBTYwYKIaq/tNGd bG5nLvpua2b5jGHULnb4y+Pv1B30Q4xvv66nYHE26984Rtn7YAelkgE+aL+pAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQU19gRWkooK2UXfRzqtMf6C0obyAAwHwYDVR0j BBgwFoAUZyOfXkfRIwGdJoBxY+ZUJEFAFQcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzI4MzY3NjMtMTJiNi00ZDhmLWFkMGItNGNkNWI2MTk1OWVmLzAvNjcyMzlGNUU0 N0QxMjMwMTlEMjY4MDcxNjNFNjU0MjQ0MTQwMTUwNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82NzIzOUY1RTQ3RDEyMzAxOUQyNjgwNzE2M0U2NTQyNDQxNDAx NTA3LmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2MyODM2NzYzLTEyYjYtNGQ4Zi1h ZDBiLTRjZDViNjE5NTllZi8wLzMyMzAzMjJlMzczODJlMzEzOTM2MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzODMwMzUzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMpOxDANBgkqhkiG 9w0BAQsFAAOCAQEAibkvdANHz6q++PzRGyQC+3+1kCu3XCurWscu5y+DCNGzgBPS d+g0eSiw3oSTgDplwVJFkFpZs4QgiD3+2hXyQtYojpcJVDBPg6a15uG/U/9DZpkd VENUuWQp8inxTxbYpApAsIhtUIZxLGX2VMY7lP05llS8jkAvStLJ+Jrq82I74hwr JDkqsqeG5Rzbr/4NaDt2I9YzCX7VGeaquEJwi3RJUvzwpVMctmn6u4LxTXN6l4lM d/NM+ImccfpdtXsa/MOezv0iY+6gFP8rD9PUj5N1Lo8RBFwhWWRGe0zoC0z6lizd rTb0KSeOZas3h//3SfbO/B7FMgmttjOWGXaXVg== -----END CERTIFICATE-----Generated at Wed May 13 11:35:06 2026 by rpki-client