$ rpki-client -vvf rpki-rsync.idnic.net/repo/c3d2f2f8-3512-43e5-be17-b11b58f96083/0/3230322e3136322e33322e302f32302d3234203d3e203137393936.roa File: 3230322e3136322e33322e302f32302d3234203d3e203137393936.roa (raw, json) Hash identifier: Fot8ZilmXoEXwJgknGrj6nqOxw2h+Q73N0sy/6pCylo= Subject key identifier: ED:19:97:59:B6:38:80:D1:C5:0D:E7:DC:7B:BB:0F:23:F2:4F:33:4A Certificate issuer: /CN=BBEB72278FFF2BE285B07868FEF5FEAA0354E872 Certificate serial: 49577DBF9833908647AC793B49FF5E84DD6AD8D2 Authority key identifier: BB:EB:72:27:8F:FF:2B:E2:85:B0:78:68:FE:F5:FE:AA:03:54:E8:72 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BBEB72278FFF2BE285B07868FEF5FEAA0354E872.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c3d2f2f8-3512-43e5-be17-b11b58f96083/0/3230322e3136322e33322e302f32302d3234203d3e203137393936.roa Signing time: Sun 03 May 2026 03:04:43 +0000 ROA not before: Sun 03 May 2026 02:59:43 +0000 ROA not after: Sun 02 May 2027 03:04:43 +0000 asID: 17996 IP address blocks: 202.162.32.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c3d2f2f8-3512-43e5-be17-b11b58f96083/0/BBEB72278FFF2BE285B07868FEF5FEAA0354E872.crl rsync://rpki-rsync.idnic.net/repo/c3d2f2f8-3512-43e5-be17-b11b58f96083/0/BBEB72278FFF2BE285B07868FEF5FEAA0354E872.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BBEB72278FFF2BE285B07868FEF5FEAA0354E872.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 20:56:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:57:7d:bf:98:33:90:86:47:ac:79:3b:49:ff:5e:84:dd:6a:d8:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BBEB72278FFF2BE285B07868FEF5FEAA0354E872 Validity Not Before: May 3 02:59:43 2026 GMT Not After : May 2 03:04:43 2027 GMT Subject: CN=ED199759B63880D1C50DE7DC7BBB0F23F24F334A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:3b:ed:e6:88:6d:8f:77:7a:5d:82:b5:11:9b: aa:a1:85:e5:c5:73:54:40:31:e3:1a:01:27:85:d2: 4d:df:df:49:a0:a4:d9:cc:64:d6:f3:44:9a:62:58: 63:20:8f:4c:bc:67:cf:93:b2:a5:4a:e2:36:8f:6d: 90:03:83:ab:b0:bc:ab:03:5a:49:25:d7:ff:3f:6e: a7:2a:f9:0d:d9:41:a9:f9:f7:42:47:ab:37:da:fb: 14:7c:8f:81:95:04:73:b1:59:1d:78:51:41:46:9a: 2e:61:45:f0:7e:bd:bb:9e:b5:6b:70:4f:7b:31:fe: 65:f8:1b:83:a8:d4:e6:1c:18:c0:a9:78:4e:54:85: c7:21:80:56:84:5e:7b:68:47:22:b9:8a:1c:7a:1c: 7f:0f:47:95:3d:f9:67:0a:63:c7:d4:b6:1c:a8:5b: 90:a4:33:08:94:fd:2c:af:04:02:8b:9b:7b:91:52: da:be:a1:81:cf:3b:b0:b2:cf:5d:5b:d6:be:a2:5a: f5:a4:ff:e2:ee:8e:20:06:32:9e:42:54:23:b8:9a: 64:80:75:20:d8:b6:b6:60:df:6c:ae:07:70:39:47: 42:3c:6e:ee:63:49:35:4f:ed:84:f0:3d:88:be:3b: 48:7c:7c:d8:68:27:59:d3:93:d5:c3:ba:00:48:7e: 8e:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:19:97:59:B6:38:80:D1:C5:0D:E7:DC:7B:BB:0F:23:F2:4F:33:4A X509v3 Authority Key Identifier: keyid:BB:EB:72:27:8F:FF:2B:E2:85:B0:78:68:FE:F5:FE:AA:03:54:E8:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c3d2f2f8-3512-43e5-be17-b11b58f96083/0/BBEB72278FFF2BE285B07868FEF5FEAA0354E872.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BBEB72278FFF2BE285B07868FEF5FEAA0354E872.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c3d2f2f8-3512-43e5-be17-b11b58f96083/0/3230322e3136322e33322e302f32302d3234203d3e203137393936.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.162.32.0/20 Signature Algorithm: sha256WithRSAEncryption 59:54:f4:25:10:68:15:46:3f:61:8c:c2:7f:39:fe:e3:f1:87: 29:cc:d8:d5:46:f3:e3:28:b1:7d:1e:9f:56:c5:4e:6f:c1:76: e5:a1:5d:50:2e:0f:62:44:14:29:14:3a:40:b2:9e:33:3c:67: 34:26:2a:ba:86:41:05:e4:d5:de:70:0a:a0:4d:18:4f:3f:9c: 43:2f:c5:c4:f5:5b:79:36:fa:ba:73:87:f3:b7:d6:3d:8e:9f: e3:63:3f:0a:10:4c:65:a9:05:a7:43:f9:dc:4d:01:22:e2:ca: 17:c9:80:be:a0:f5:83:e8:bc:c3:14:f8:81:c7:d8:29:4d:5b: bf:06:44:a2:dd:83:15:ae:e8:d9:bd:d7:d1:fb:ee:45:3c:c3: ab:50:9d:f1:f9:ec:28:e4:36:b3:0a:4e:8b:a2:a0:ef:9b:f7: d6:39:e4:d0:81:f1:ad:f3:30:2c:b7:9a:42:ba:3e:43:69:34: c8:09:a0:c5:3d:ad:3b:2f:66:73:f3:42:76:16:56:dd:45:61: 88:28:3e:11:8b:ab:f4:f0:52:b5:13:b2:a6:53:0c:b2:e3:0a: a5:85:92:a3:82:13:86:2a:ad:5a:a8:4f:9f:2b:15:84:2b:27: 09:e0:a8:c2:f2:f1:bd:22:6e:4f:6e:f9:2e:1e:e4:92:76:a4: c1:32:5c:62 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUSVd9v5gzkIZHrHk7Sf9ehN1q2NIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkJFQjcyMjc4RkZGMkJFMjg1QjA3ODY4RkVGNUZFQUEw MzU0RTg3MjAeFw0yNjA1MDMwMjU5NDNaFw0yNzA1MDIwMzA0NDNaMDMxMTAvBgNV BAMTKEVEMTk5NzU5QjYzODgwRDFDNTBERTdEQzdCQkIwRjIzRjI0RjMzNEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCOO+3miG2Pd3pdgrURm6qhheXF c1RAMeMaASeF0k3f30mgpNnMZNbzRJpiWGMgj0y8Z8+TsqVK4jaPbZADg6uwvKsD Wkkl1/8/bqcq+Q3ZQan590JHqzfa+xR8j4GVBHOxWR14UUFGmi5hRfB+vbuetWtw T3sx/mX4G4Oo1OYcGMCpeE5UhcchgFaEXntoRyK5ihx6HH8PR5U9+WcKY8fUthyo W5CkMwiU/SyvBAKLm3uRUtq+oYHPO7Cyz11b1r6iWvWk/+LujiAGMp5CVCO4mmSA dSDYtrZg32yuB3A5R0I8bu5jSTVP7YTwPYi+O0h8fNhoJ1nTk9XDugBIfo4LAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQU7RmXWbY4gNHFDefce7sPI/JPM0owHwYDVR0j BBgwFoAUu+tyJ4//K+KFsHho/vX+qgNU6HIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzNkMmYyZjgtMzUxMi00M2U1LWJlMTctYjExYjU4Zjk2MDgzLzAvQkJFQjcyMjc4 RkZGMkJFMjg1QjA3ODY4RkVGNUZFQUEwMzU0RTg3Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQkVCNzIyNzhGRkYyQkUyODVCMDc4NjhGRUY1RkVBQTAzNTRF ODcyLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2MzZDJmMmY4LTM1MTItNDNlNS1i ZTE3LWIxMWI1OGY5NjA4My8wLzMyMzAzMjJlMzEzNjMyMmUzMzMyMmUzMDJmMzIz MDJkMzIzNDIwM2QzZTIwMzEzNzM5MzkzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBMqiIDANBgkqhkiG 9w0BAQsFAAOCAQEAWVT0JRBoFUY/YYzCfzn+4/GHKczY1Ubz4yixfR6fVsVOb8F2 5aFdUC4PYkQUKRQ6QLKeMzxnNCYquoZBBeTV3nAKoE0YTz+cQy/FxPVbeTb6unOH 87fWPY6f42M/ChBMZakFp0P53E0BIuLKF8mAvqD1g+i8wxT4gcfYKU1bvwZEot2D Fa7o2b3X0fvuRTzDq1Cd8fnsKOQ2swpOi6Kg75v31jnk0IHxrfMwLLeaQro+Q2k0 yAmgxT2tOy9mc/NCdhZW3UVhiCg+EYur9PBStROyplMMsuMKpYWSo4IThiqtWqhP nysVhCsnCeCowvLxvSJuT275Lh7kknakwTJcYg== -----END CERTIFICATE-----Generated at Wed May 13 05:14:39 2026 by rpki-client