$ rpki-client -vvf rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230322e37382e3230322e302f32342d3234203d3e203138303539.roa File: 3230322e37382e3230322e302f32342d3234203d3e203138303539.roa (raw, json) Hash identifier: gj1RkWjIIUxlkhcSe/3dVK9ecYhnfDpJpywYGFxVDfk= Subject key identifier: 21:95:A2:93:6C:A1:14:A9:72:D6:CD:1A:26:5E:17:D3:44:B9:A8:7F Certificate issuer: /CN=67239F5E47D123019D26807163E6542441401507 Certificate serial: 3C0F23C99CDD957D302DC68CB8FB66493BC5F0BA Authority key identifier: 67:23:9F:5E:47:D1:23:01:9D:26:80:71:63:E6:54:24:41:40:15:07 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67239F5E47D123019D26807163E6542441401507.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230322e37382e3230322e302f32342d3234203d3e203138303539.roa Signing time: Sun 03 May 2026 03:03:41 +0000 ROA not before: Sun 03 May 2026 02:58:41 +0000 ROA not after: Sun 02 May 2027 03:03:41 +0000 asID: 18059 IP address blocks: 202.78.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/67239F5E47D123019D26807163E6542441401507.crl rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/67239F5E47D123019D26807163E6542441401507.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67239F5E47D123019D26807163E6542441401507.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 18:10:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:0f:23:c9:9c:dd:95:7d:30:2d:c6:8c:b8:fb:66:49:3b:c5:f0:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67239F5E47D123019D26807163E6542441401507 Validity Not Before: May 3 02:58:41 2026 GMT Not After : May 2 03:03:41 2027 GMT Subject: CN=2195A2936CA114A972D6CD1A265E17D344B9A87F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:27:8c:41:c5:53:86:28:53:92:e3:67:b8:6d: 8a:56:71:f9:65:0d:7f:40:ea:d5:92:c3:9c:6d:6f: 56:c0:54:19:ec:91:c6:80:01:cc:77:26:58:0d:52: ef:23:d4:17:cb:85:77:12:a2:37:1e:27:8c:fa:29: 9f:cc:ff:48:f1:f9:59:73:3a:10:e9:c8:a4:7b:f9: 72:b6:dc:ab:1a:87:46:37:44:55:b9:13:fd:a6:7e: f0:57:35:18:88:87:11:16:58:5d:91:a9:8a:8c:e8: 4e:fe:49:99:cc:16:c8:58:31:64:ac:5c:cd:dd:ff: 0b:0b:f4:a6:ea:0d:e1:df:00:fe:91:04:bb:32:1d: d6:42:ec:f2:18:c0:a8:60:11:f7:6f:17:00:6a:21: 79:aa:85:0c:a1:3a:69:66:9d:db:46:36:ce:c3:91: 8f:90:ab:a3:51:a0:39:c4:b8:47:93:19:24:82:df: 76:ea:fd:0a:db:2e:77:22:73:05:a8:b9:75:01:e4: fa:41:bb:2e:aa:4d:b1:92:43:51:0f:ff:dd:9f:40: db:be:29:de:48:38:fd:8e:74:11:be:7a:c9:be:d1: 59:e3:b6:ce:9e:36:20:61:9b:ed:77:70:b6:6f:05: f3:e8:62:27:6d:d9:a8:a6:11:f1:2d:d8:71:5d:45: 8a:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:95:A2:93:6C:A1:14:A9:72:D6:CD:1A:26:5E:17:D3:44:B9:A8:7F X509v3 Authority Key Identifier: keyid:67:23:9F:5E:47:D1:23:01:9D:26:80:71:63:E6:54:24:41:40:15:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/67239F5E47D123019D26807163E6542441401507.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67239F5E47D123019D26807163E6542441401507.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230322e37382e3230322e302f32342d3234203d3e203138303539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.78.202.0/24 Signature Algorithm: sha256WithRSAEncryption 6d:21:be:e6:a5:50:e8:3a:0b:eb:bb:89:01:0e:d9:11:b0:85: f6:d4:5a:bb:e6:ca:e6:99:e3:2a:86:ce:e6:68:b5:d6:1a:80: f1:a2:c8:80:69:31:83:39:36:c0:d3:10:a0:0e:5c:d4:8b:d7: 64:14:e0:3d:ff:e7:16:27:7a:08:8e:9d:81:1a:ae:84:16:f9: a4:c6:86:70:9e:94:27:f1:dc:e0:3d:5b:df:40:65:25:05:81: 56:24:95:b7:81:bb:fe:7e:64:ec:69:15:60:61:f5:81:53:90: 68:7e:08:d9:63:70:76:9e:53:6d:3b:f6:7c:e2:03:03:9c:3f: d2:4f:f2:ba:c6:77:e9:ba:e4:d1:d9:97:97:b9:58:d1:66:ee: 48:cb:6b:ea:f3:b4:8f:5b:cb:d5:21:84:65:78:2e:c7:40:6f: d3:dc:6e:e2:c5:96:5c:02:a1:59:98:04:b4:dd:84:9b:e6:53: cd:8a:7c:44:05:15:8c:07:89:25:ec:51:94:c7:dc:c5:f6:8f: 66:5e:6f:43:1d:9f:06:eb:32:b1:0d:c1:b8:5c:c1:54:55:ee: 72:87:0c:62:b2:d3:1d:48:db:4b:4c:57:49:7f:1f:35:be:f6: f1:f0:d7:c3:33:e7:1f:0f:99:c7:aa:9d:6d:e6:4d:07:00:10: e4:e6:c2:14 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUPA8jyZzdlX0wLcaMuPtmSTvF8LowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjcyMzlGNUU0N0QxMjMwMTlEMjY4MDcxNjNFNjU0MjQ0 MTQwMTUwNzAeFw0yNjA1MDMwMjU4NDFaFw0yNzA1MDIwMzAzNDFaMDMxMTAvBgNV BAMTKDIxOTVBMjkzNkNBMTE0QTk3MkQ2Q0QxQTI2NUUxN0QzNDRCOUE4N0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlJ4xBxVOGKFOS42e4bYpWcfll DX9A6tWSw5xtb1bAVBnskcaAAcx3JlgNUu8j1BfLhXcSojceJ4z6KZ/M/0jx+Vlz OhDpyKR7+XK23Ksah0Y3RFW5E/2mfvBXNRiIhxEWWF2RqYqM6E7+SZnMFshYMWSs XM3d/wsL9KbqDeHfAP6RBLsyHdZC7PIYwKhgEfdvFwBqIXmqhQyhOmlmndtGNs7D kY+Qq6NRoDnEuEeTGSSC33bq/QrbLncicwWouXUB5PpBuy6qTbGSQ1EP/92fQNu+ Kd5IOP2OdBG+esm+0Vnjts6eNiBhm+13cLZvBfPoYidt2aimEfEt2HFdRYoVAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUIZWik2yhFKly1s0aJl4X00S5qH8wHwYDVR0j BBgwFoAUZyOfXkfRIwGdJoBxY+ZUJEFAFQcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzI4MzY3NjMtMTJiNi00ZDhmLWFkMGItNGNkNWI2MTk1OWVmLzAvNjcyMzlGNUU0 N0QxMjMwMTlEMjY4MDcxNjNFNjU0MjQ0MTQwMTUwNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82NzIzOUY1RTQ3RDEyMzAxOUQyNjgwNzE2M0U2NTQyNDQxNDAx NTA3LmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2MyODM2NzYzLTEyYjYtNGQ4Zi1h ZDBiLTRjZDViNjE5NTllZi8wLzMyMzAzMjJlMzczODJlMzIzMDMyMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzODMwMzUzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMpOyjANBgkqhkiG 9w0BAQsFAAOCAQEAbSG+5qVQ6DoL67uJAQ7ZEbCF9tRau+bK5pnjKobO5mi11hqA 8aLIgGkxgzk2wNMQoA5c1IvXZBTgPf/nFid6CI6dgRquhBb5pMaGcJ6UJ/Hc4D1b 30BlJQWBViSVt4G7/n5k7GkVYGH1gVOQaH4I2WNwdp5TbTv2fOIDA5w/0k/yusZ3 6brk0dmXl7lY0WbuSMtr6vO0j1vL1SGEZXgux0Bv09xu4sWWXAKhWZgEtN2Em+ZT zYp8RAUVjAeJJexRlMfcxfaPZl5vQx2fBusysQ3BuFzBVFXucocMYrLTHUjbS0xX SX8fNb728fDXwzPnHw+Zx6qdbeZNBwAQ5ObCFA== -----END CERTIFICATE-----Generated at Wed May 13 11:35:10 2026 by rpki-client