$ rpki-client -vvf rpki-rsync.idnic.net/repo/c8f6beb8-e4e8-4e39-8275-1c6d77c3eef8/0/3230322e3133382e3232342e302f31392d3234203d3e2039363537.roa File: 3230322e3133382e3232342e302f31392d3234203d3e2039363537.roa (raw, json) Hash identifier: rnnGREcPzTzqU+DHtFpFgNVjo93sVnYIgoX5i3YQ96Y= Subject key identifier: DC:7B:62:36:9B:D7:D5:57:EE:10:68:BA:35:72:B2:E1:20:39:33:9B Certificate issuer: /CN=5137BC6C642818ED44761CE24BD59136B86E9502 Certificate serial: 2248024941E590EFBC72FF2F29A5E3EA7F56E83B Authority key identifier: 51:37:BC:6C:64:28:18:ED:44:76:1C:E2:4B:D5:91:36:B8:6E:95:02 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5137BC6C642818ED44761CE24BD59136B86E9502.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c8f6beb8-e4e8-4e39-8275-1c6d77c3eef8/0/3230322e3133382e3232342e302f31392d3234203d3e2039363537.roa Signing time: Sun 03 May 2026 03:06:13 +0000 ROA not before: Sun 03 May 2026 03:01:13 +0000 ROA not after: Sun 02 May 2027 03:06:13 +0000 asID: 9657 IP address blocks: 202.138.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c8f6beb8-e4e8-4e39-8275-1c6d77c3eef8/0/5137BC6C642818ED44761CE24BD59136B86E9502.crl rsync://rpki-rsync.idnic.net/repo/c8f6beb8-e4e8-4e39-8275-1c6d77c3eef8/0/5137BC6C642818ED44761CE24BD59136B86E9502.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5137BC6C642818ED44761CE24BD59136B86E9502.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:48:02:49:41:e5:90:ef:bc:72:ff:2f:29:a5:e3:ea:7f:56:e8:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5137BC6C642818ED44761CE24BD59136B86E9502 Validity Not Before: May 3 03:01:13 2026 GMT Not After : May 2 03:06:13 2027 GMT Subject: CN=DC7B62369BD7D557EE1068BA3572B2E12039339B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:2a:fc:f4:83:8c:08:a4:50:80:a8:04:9d:29: 99:7a:2b:04:62:89:08:62:8f:20:55:92:d7:db:2b: 74:97:72:c2:e7:8a:53:80:ec:98:8d:b4:32:22:45: 27:da:40:41:7c:70:06:13:25:02:42:2e:c4:0d:d0: 68:e8:b2:bc:4b:3e:7b:e1:5f:88:85:5a:86:fe:7e: 51:9e:e7:cc:c2:09:07:f3:7f:db:ce:d7:91:e8:88: 31:22:8e:95:3d:0a:cb:d3:e9:85:93:43:4c:56:e2: 52:11:9d:be:51:20:7a:58:e5:8f:72:fe:c1:f2:fe: 20:2f:97:2e:e5:08:ba:fe:1f:08:79:50:a0:aa:d2: 1c:01:74:b2:81:85:da:64:d7:c2:dd:75:c2:3f:c7: 9c:57:8b:54:74:50:c2:ff:7c:3b:66:48:db:56:af: 89:4b:20:bc:9c:a6:58:83:c1:49:ff:cd:25:5a:98: bd:b8:6f:83:2a:af:bf:5b:cf:f9:d0:ad:ca:81:f9: 77:67:11:ec:f2:f3:86:95:6e:b0:50:d4:fc:ec:05: 00:3d:9e:8d:d5:63:8a:92:af:74:9a:fb:78:69:36: dc:c9:15:3a:b3:96:90:46:88:d4:c7:c9:dc:0c:69: 83:a6:c1:4c:9f:af:3e:79:c1:83:51:50:c4:fc:79: be:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:7B:62:36:9B:D7:D5:57:EE:10:68:BA:35:72:B2:E1:20:39:33:9B X509v3 Authority Key Identifier: keyid:51:37:BC:6C:64:28:18:ED:44:76:1C:E2:4B:D5:91:36:B8:6E:95:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c8f6beb8-e4e8-4e39-8275-1c6d77c3eef8/0/5137BC6C642818ED44761CE24BD59136B86E9502.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5137BC6C642818ED44761CE24BD59136B86E9502.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c8f6beb8-e4e8-4e39-8275-1c6d77c3eef8/0/3230322e3133382e3232342e302f31392d3234203d3e2039363537.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.138.224.0/19 Signature Algorithm: sha256WithRSAEncryption 71:a5:4b:a2:65:04:12:31:1d:2a:34:45:db:9d:72:18:43:fb: bc:c2:cb:41:4c:9e:80:ca:d3:a4:fa:9f:d1:0c:38:37:51:fd: 39:6e:ad:93:1e:a9:c4:18:08:93:e3:23:a6:a9:34:01:40:af: 41:19:2c:7c:67:41:47:02:5f:86:d2:12:26:92:c4:31:48:48: ce:8e:91:a3:ba:7f:0f:ed:d4:19:74:45:93:16:18:75:95:4b: b1:bd:17:fd:59:06:8f:02:a5:44:53:14:9b:5b:78:f8:c6:9b: 33:bf:1e:8d:b5:56:4c:26:87:ac:c8:7d:a9:18:26:53:c9:79: 28:24:cc:05:54:d3:63:7b:8a:9f:97:6c:98:ba:d0:22:a1:61: 10:74:02:22:a0:e8:cf:71:a1:7c:82:82:52:04:f9:31:4c:00: c8:db:be:c7:cc:49:bd:b5:be:82:0e:6f:ed:04:2f:83:ba:6d: 09:96:09:fd:12:84:6a:11:81:84:e2:02:cc:0c:ba:ed:63:1f: d9:05:e2:13:57:ce:05:27:e7:85:de:c3:c6:4f:8a:1c:5e:f9: 10:d8:ca:93:a8:69:59:3c:cd:3c:4d:9f:6a:89:98:cf:ba:5d: 2e:2e:4b:08:d8:9f:b5:a4:97:c1:d1:cd:ec:cd:ac:5a:2e:10: 8f:aa:cd:b1 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUIkgCSUHlkO+8cv8vKaXj6n9W6DswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTEzN0JDNkM2NDI4MThFRDQ0NzYxQ0UyNEJENTkxMzZC ODZFOTUwMjAeFw0yNjA1MDMwMzAxMTNaFw0yNzA1MDIwMzA2MTNaMDMxMTAvBgNV BAMTKERDN0I2MjM2OUJEN0Q1NTdFRTEwNjhCQTM1NzJCMkUxMjAzOTMzOUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+Kvz0g4wIpFCAqASdKZl6KwRi iQhijyBVktfbK3SXcsLnilOA7JiNtDIiRSfaQEF8cAYTJQJCLsQN0GjosrxLPnvh X4iFWob+flGe58zCCQfzf9vO15HoiDEijpU9CsvT6YWTQ0xW4lIRnb5RIHpY5Y9y /sHy/iAvly7lCLr+Hwh5UKCq0hwBdLKBhdpk18LddcI/x5xXi1R0UML/fDtmSNtW r4lLILycpliDwUn/zSVamL24b4Mqr79bz/nQrcqB+XdnEezy84aVbrBQ1PzsBQA9 no3VY4qSr3Sa+3hpNtzJFTqzlpBGiNTHydwMaYOmwUyfrz55wYNRUMT8eb7BAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQU3HtiNpvX1VfuEGi6NXKy4SA5M5swHwYDVR0j BBgwFoAUUTe8bGQoGO1EdhziS9WRNrhulQIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzhmNmJlYjgtZTRlOC00ZTM5LTgyNzUtMWM2ZDc3YzNlZWY4LzAvNTEzN0JDNkM2 NDI4MThFRDQ0NzYxQ0UyNEJENTkxMzZCODZFOTUwMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81MTM3QkM2QzY0MjgxOEVENDQ3NjFDRTI0QkQ1OTEzNkI4NkU5 NTAyLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2M4ZjZiZWI4LWU0ZTgtNGUzOS04 Mjc1LTFjNmQ3N2MzZWVmOC8wLzMyMzAzMjJlMzEzMzM4MmUzMjMyMzQyZTMwMmYz MTM5MmQzMjM0MjAzZDNlMjAzOTM2MzUzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBcqK4DANBgkqhkiG 9w0BAQsFAAOCAQEAcaVLomUEEjEdKjRF251yGEP7vMLLQUyegMrTpPqf0Qw4N1H9 OW6tkx6pxBgIk+Mjpqk0AUCvQRksfGdBRwJfhtISJpLEMUhIzo6Ro7p/D+3UGXRF kxYYdZVLsb0X/VkGjwKlRFMUm1t4+MabM78ejbVWTCaHrMh9qRgmU8l5KCTMBVTT Y3uKn5dsmLrQIqFhEHQCIqDoz3GhfIKCUgT5MUwAyNu+x8xJvbW+gg5v7QQvg7pt CZYJ/RKEahGBhOICzAy67WMf2QXiE1fOBSfnhd7Dxk+KHF75ENjKk6hpWTzNPE2f aomYz7pdLi5LCNiftaSXwdHN7M2sWi4Qj6rNsQ== -----END CERTIFICATE-----Generated at Tue May 12 23:55:44 2026 by rpki-client