$ rpki-client -vvf rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230322e37382e3139382e302f32342d3234203d3e203138303539.roa File: 3230322e37382e3139382e302f32342d3234203d3e203138303539.roa (raw, json) Hash identifier: DzvcTW7owd4Optkqyqk16V7wEL2ykgc8rLVVeghE0GY= Subject key identifier: 49:92:FC:10:4B:59:F4:75:81:95:15:B0:29:30:8D:7C:12:11:12:8A Certificate issuer: /CN=67239F5E47D123019D26807163E6542441401507 Certificate serial: 67A066B5BE255262F41AFA3CCFFFAD2C078163F6 Authority key identifier: 67:23:9F:5E:47:D1:23:01:9D:26:80:71:63:E6:54:24:41:40:15:07 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67239F5E47D123019D26807163E6542441401507.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230322e37382e3139382e302f32342d3234203d3e203138303539.roa Signing time: Sun 03 May 2026 03:03:54 +0000 ROA not before: Sun 03 May 2026 02:58:54 +0000 ROA not after: Sun 02 May 2027 03:03:54 +0000 asID: 18059 IP address blocks: 202.78.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/67239F5E47D123019D26807163E6542441401507.crl rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/67239F5E47D123019D26807163E6542441401507.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67239F5E47D123019D26807163E6542441401507.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 18:10:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:a0:66:b5:be:25:52:62:f4:1a:fa:3c:cf:ff:ad:2c:07:81:63:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67239F5E47D123019D26807163E6542441401507 Validity Not Before: May 3 02:58:54 2026 GMT Not After : May 2 03:03:54 2027 GMT Subject: CN=4992FC104B59F475819515B029308D7C1211128A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:54:6c:1f:84:32:95:d3:51:64:5f:84:b0:16: 3a:0e:0a:b7:43:ce:42:a0:83:0d:c7:03:b6:0e:e8: 4c:8d:be:05:06:5d:b2:08:8c:45:7c:35:05:69:2a: ac:b3:6a:b4:39:32:10:d8:97:81:b8:d6:40:c6:ba: 18:0e:a9:0c:06:3f:de:53:39:78:68:f8:a3:9d:7d: 43:0a:67:6c:87:cf:1e:c0:24:b8:32:eb:3b:37:82: 11:6e:7e:91:35:21:81:f7:d9:71:3c:ba:a7:ec:2b: 40:67:79:52:62:81:3c:c8:31:57:7a:67:b1:7f:de: 17:45:94:f4:d7:ef:3b:1d:cc:5b:ca:04:d7:de:dc: d4:4a:b1:41:df:70:0d:12:75:a2:da:e6:d9:9d:3f: a7:a9:8e:70:df:57:d0:ac:61:74:93:fb:24:6d:7c: df:66:0e:1a:8b:ad:6e:d0:cc:b3:35:de:8b:c5:89: 22:e0:7d:61:c3:dc:df:1c:14:69:80:62:f6:02:f1: 05:1c:3c:1d:39:dc:9a:68:6b:03:ca:21:13:dd:5b: d1:62:0b:e3:bd:a7:c2:bf:2d:2a:32:7f:c9:7b:60: f6:fc:74:f4:0d:92:4a:6c:f6:04:82:a2:ec:8d:b1: 02:2f:21:b8:59:74:c0:62:61:2b:c7:9d:2a:0d:71: f9:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:92:FC:10:4B:59:F4:75:81:95:15:B0:29:30:8D:7C:12:11:12:8A X509v3 Authority Key Identifier: keyid:67:23:9F:5E:47:D1:23:01:9D:26:80:71:63:E6:54:24:41:40:15:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/67239F5E47D123019D26807163E6542441401507.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67239F5E47D123019D26807163E6542441401507.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230322e37382e3139382e302f32342d3234203d3e203138303539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.78.198.0/24 Signature Algorithm: sha256WithRSAEncryption 65:ab:1f:9e:4b:d5:b5:7b:d7:95:2c:80:b3:52:06:a3:4a:7b: 0d:ba:78:d5:61:5d:e2:29:dc:ac:66:f2:ff:9a:c3:0b:67:9a: 24:af:83:30:c4:45:bc:cb:b9:c3:d7:79:96:c8:0d:83:c6:9e: e0:6e:80:ca:ef:83:20:5c:3e:16:73:02:5f:b6:fe:12:73:87: a9:85:70:66:6e:6d:a4:50:25:fc:4e:d6:98:be:b0:7f:09:6b: 6a:fe:ce:a9:42:41:fa:45:71:34:3b:bc:0a:e4:9f:79:3b:7e: 94:83:6d:ae:5a:cd:91:29:97:97:d2:40:d2:e3:2b:5d:22:00: fa:a6:11:cf:4f:d2:80:41:22:0c:aa:27:94:58:32:2c:8e:d5: 44:45:a5:cf:52:ae:f5:3c:d4:1e:1e:16:0f:51:68:fb:d5:8a: a6:a5:4d:f1:9d:ca:6c:ea:95:a3:1c:7d:52:fa:c1:b0:d4:f6: 4c:b8:61:a6:9d:dc:8e:b7:1c:35:bb:1d:6d:1f:b3:74:b9:8f: 67:33:75:7d:93:01:42:05:d7:59:7a:ef:69:f3:68:2b:b3:28: e7:9d:fa:8a:c6:93:2d:c1:ac:74:df:76:9d:7b:24:28:3b:42: 83:ab:7c:af:bb:3d:a0:e1:55:95:12:14:d5:64:42:c1:b1:eb: 98:dc:ff:dc -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUZ6Bmtb4lUmL0Gvo8z/+tLAeBY/YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjcyMzlGNUU0N0QxMjMwMTlEMjY4MDcxNjNFNjU0MjQ0 MTQwMTUwNzAeFw0yNjA1MDMwMjU4NTRaFw0yNzA1MDIwMzAzNTRaMDMxMTAvBgNV BAMTKDQ5OTJGQzEwNEI1OUY0NzU4MTk1MTVCMDI5MzA4RDdDMTIxMTEyOEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaVGwfhDKV01FkX4SwFjoOCrdD zkKggw3HA7YO6EyNvgUGXbIIjEV8NQVpKqyzarQ5MhDYl4G41kDGuhgOqQwGP95T OXho+KOdfUMKZ2yHzx7AJLgy6zs3ghFufpE1IYH32XE8uqfsK0BneVJigTzIMVd6 Z7F/3hdFlPTX7zsdzFvKBNfe3NRKsUHfcA0SdaLa5tmdP6epjnDfV9CsYXST+yRt fN9mDhqLrW7QzLM13ovFiSLgfWHD3N8cFGmAYvYC8QUcPB053JpoawPKIRPdW9Fi C+O9p8K/LSoyf8l7YPb8dPQNkkps9gSCouyNsQIvIbhZdMBiYSvHnSoNcfkvAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUSZL8EEtZ9HWBlRWwKTCNfBIREoowHwYDVR0j BBgwFoAUZyOfXkfRIwGdJoBxY+ZUJEFAFQcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzI4MzY3NjMtMTJiNi00ZDhmLWFkMGItNGNkNWI2MTk1OWVmLzAvNjcyMzlGNUU0 N0QxMjMwMTlEMjY4MDcxNjNFNjU0MjQ0MTQwMTUwNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82NzIzOUY1RTQ3RDEyMzAxOUQyNjgwNzE2M0U2NTQyNDQxNDAx NTA3LmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2MyODM2NzYzLTEyYjYtNGQ4Zi1h ZDBiLTRjZDViNjE5NTllZi8wLzMyMzAzMjJlMzczODJlMzEzOTM4MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzODMwMzUzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMpOxjANBgkqhkiG 9w0BAQsFAAOCAQEAZasfnkvVtXvXlSyAs1IGo0p7Dbp41WFd4incrGby/5rDC2ea JK+DMMRFvMu5w9d5lsgNg8ae4G6Ayu+DIFw+FnMCX7b+EnOHqYVwZm5tpFAl/E7W mL6wfwlrav7OqUJB+kVxNDu8CuSfeTt+lINtrlrNkSmXl9JA0uMrXSIA+qYRz0/S gEEiDKonlFgyLI7VREWlz1Ku9TzUHh4WD1Fo+9WKpqVN8Z3KbOqVoxx9UvrBsNT2 TLhhpp3cjrccNbsdbR+zdLmPZzN1fZMBQgXXWXrvafNoK7Mo5536isaTLcGsdN92 nXskKDtCg6t8r7s9oOFVlRIU1WRCwbHrmNz/3A== -----END CERTIFICATE-----Generated at Wed May 13 12:05:47 2026 by rpki-client