$ rpki-client -vvf rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230332e3133342e3233392e302f32342d3234203d3e203138303539.roa File: 3230332e3133342e3233392e302f32342d3234203d3e203138303539.roa (raw, json) Hash identifier: F+FFN+DZhK2zXBiriBpx/IJQ6VI0YcpvHgxUO1rmhzU= Subject key identifier: C8:CE:A5:81:96:88:50:5E:0E:74:B8:7B:C9:C3:54:D2:DD:F4:9F:AF Certificate issuer: /CN=67239F5E47D123019D26807163E6542441401507 Certificate serial: 16C11E6318A1B7BA541361E90C395984254F1591 Authority key identifier: 67:23:9F:5E:47:D1:23:01:9D:26:80:71:63:E6:54:24:41:40:15:07 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67239F5E47D123019D26807163E6542441401507.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230332e3133342e3233392e302f32342d3234203d3e203138303539.roa Signing time: Sun 03 May 2026 03:03:43 +0000 ROA not before: Sun 03 May 2026 02:58:43 +0000 ROA not after: Sun 02 May 2027 03:03:43 +0000 asID: 18059 IP address blocks: 203.134.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/67239F5E47D123019D26807163E6542441401507.crl rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/67239F5E47D123019D26807163E6542441401507.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67239F5E47D123019D26807163E6542441401507.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 18:10:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:c1:1e:63:18:a1:b7:ba:54:13:61:e9:0c:39:59:84:25:4f:15:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67239F5E47D123019D26807163E6542441401507 Validity Not Before: May 3 02:58:43 2026 GMT Not After : May 2 03:03:43 2027 GMT Subject: CN=C8CEA5819688505E0E74B87BC9C354D2DDF49FAF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:86:19:f4:2f:4d:78:bf:a5:bc:af:0d:24:7d: 83:46:d2:36:39:b1:db:c9:20:39:2b:59:23:91:bf: 96:57:4c:da:07:33:ee:5a:30:73:fd:f6:62:1e:a3: 5b:97:34:66:64:87:7e:89:04:a0:a4:2a:36:a3:7d: 3c:c3:4a:da:a7:82:1a:1d:20:b5:44:eb:d8:a0:b9: 27:f9:f6:8d:4f:82:98:3b:fc:bd:d7:5c:73:1b:80: 21:ba:28:a9:bf:75:34:25:b9:4e:e2:ed:bc:7a:2f: 85:e0:6c:04:8e:cc:c5:63:d5:0e:78:a1:30:3f:53: 2b:0c:15:c9:3c:4c:51:4a:31:39:70:c1:2f:0c:e0: 8b:16:7c:16:26:75:2c:be:f1:88:63:9a:a3:c2:1d: 98:36:b5:f1:91:16:81:0d:a6:2a:80:f0:33:ee:90: f7:db:21:96:aa:36:9d:96:bb:2c:b7:51:0c:e4:a9: e1:cb:de:ef:94:4d:22:5d:73:0e:27:70:26:23:4b: 76:67:21:c3:7e:e8:da:80:7e:11:c6:8b:8d:c2:bc: d9:67:4d:c9:d0:2f:8d:f5:f3:f1:b5:52:a5:ba:50: 21:f1:e9:9c:07:8e:4f:8b:c8:57:78:af:03:10:a5: 48:ff:b0:a5:61:20:94:48:2d:f1:eb:af:99:7b:72: 5c:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:CE:A5:81:96:88:50:5E:0E:74:B8:7B:C9:C3:54:D2:DD:F4:9F:AF X509v3 Authority Key Identifier: keyid:67:23:9F:5E:47:D1:23:01:9D:26:80:71:63:E6:54:24:41:40:15:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/67239F5E47D123019D26807163E6542441401507.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67239F5E47D123019D26807163E6542441401507.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230332e3133342e3233392e302f32342d3234203d3e203138303539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.134.239.0/24 Signature Algorithm: sha256WithRSAEncryption 67:fb:e8:8d:39:1a:2e:94:2a:e0:20:58:2f:71:93:ee:7d:b5: f3:11:56:cf:0e:0d:8e:6b:1f:a8:67:14:9d:7f:b5:48:18:64: 75:e2:ce:e8:0e:e4:1e:0a:d5:cb:e2:b9:0c:ca:85:fa:b4:45: e0:01:06:1b:18:ad:e3:75:bc:b6:f5:23:19:7d:16:82:a9:31: 1b:39:76:d4:ac:98:4c:4f:1f:7e:bc:b7:cf:a6:15:06:29:30: 23:55:a2:fe:6d:85:0b:a3:e5:6c:42:f8:8b:fb:5f:b0:d1:f3: 7e:e3:fa:df:e7:25:e5:55:18:45:81:4c:67:b7:2e:8b:f7:30: 23:be:6a:d9:1d:36:94:25:dd:6f:2f:e8:e0:c2:3c:6d:9f:8e: 53:d5:22:b5:bb:04:97:00:8a:be:79:8a:52:d3:e4:f3:d6:a1: 09:71:7b:cc:62:59:b4:6d:36:4b:ce:fa:e5:bc:89:87:40:32: a6:77:f8:ec:96:25:41:a9:21:5f:dd:2f:fe:e4:1b:ff:8d:d2: 50:e8:96:77:67:58:35:6d:b2:4e:01:6f:b8:7e:f8:c7:16:a8: b1:e8:67:8c:08:f9:bc:86:6b:fc:40:76:93:ab:51:59:82:1e: 8b:5f:68:76:d2:28:ef:69:22:27:ab:c4:e9:3f:96:ca:0a:d9: 04:f5:cd:d4 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUFsEeYxiht7pUE2HpDDlZhCVPFZEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjcyMzlGNUU0N0QxMjMwMTlEMjY4MDcxNjNFNjU0MjQ0 MTQwMTUwNzAeFw0yNjA1MDMwMjU4NDNaFw0yNzA1MDIwMzAzNDNaMDMxMTAvBgNV BAMTKEM4Q0VBNTgxOTY4ODUwNUUwRTc0Qjg3QkM5QzM1NEQyRERGNDlGQUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0hhn0L014v6W8rw0kfYNG0jY5 sdvJIDkrWSORv5ZXTNoHM+5aMHP99mIeo1uXNGZkh36JBKCkKjajfTzDStqnghod ILVE69iguSf59o1Pgpg7/L3XXHMbgCG6KKm/dTQluU7i7bx6L4XgbASOzMVj1Q54 oTA/UysMFck8TFFKMTlwwS8M4IsWfBYmdSy+8YhjmqPCHZg2tfGRFoENpiqA8DPu kPfbIZaqNp2Wuyy3UQzkqeHL3u+UTSJdcw4ncCYjS3ZnIcN+6NqAfhHGi43CvNln TcnQL4318/G1UqW6UCHx6ZwHjk+LyFd4rwMQpUj/sKVhIJRILfHrr5l7clwlAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUyM6lgZaIUF4OdLh7ycNU0t30n68wHwYDVR0j BBgwFoAUZyOfXkfRIwGdJoBxY+ZUJEFAFQcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzI4MzY3NjMtMTJiNi00ZDhmLWFkMGItNGNkNWI2MTk1OWVmLzAvNjcyMzlGNUU0 N0QxMjMwMTlEMjY4MDcxNjNFNjU0MjQ0MTQwMTUwNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82NzIzOUY1RTQ3RDEyMzAxOUQyNjgwNzE2M0U2NTQyNDQxNDAx NTA3LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2MyODM2NzYzLTEyYjYtNGQ4Zi1h ZDBiLTRjZDViNjE5NTllZi8wLzMyMzAzMzJlMzEzMzM0MmUzMjMzMzkyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM4MzAzNTM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAy4bvMA0GCSqG SIb3DQEBCwUAA4IBAQBn++iNORoulCrgIFgvcZPufbXzEVbPDg2Oax+oZxSdf7VI GGR14s7oDuQeCtXL4rkMyoX6tEXgAQYbGK3jdby29SMZfRaCqTEbOXbUrJhMTx9+ vLfPphUGKTAjVaL+bYULo+VsQviL+1+w0fN+4/rf5yXlVRhFgUxnty6L9zAjvmrZ HTaUJd1vL+jgwjxtn45T1SK1uwSXAIq+eYpS0+Tz1qEJcXvMYlm0bTZLzvrlvImH QDKmd/jsliVBqSFf3S/+5Bv/jdJQ6JZ3Z1g1bbJOAW+4fvjHFqix6GeMCPm8hmv8 QHaTq1FZgh6LX2h20ijvaSInq8TpP5bKCtkE9c3U -----END CERTIFICATE-----Generated at Wed May 13 03:51:22 2026 by rpki-client