$ rpki-client -vvf rpki-rsync.idnic.net/repo/c998195f-14bb-41fd-b6ed-7a967c8e43df/0/3230332e3137352e3130302e302f32332d3234203d3e20313532303132.roa File: 3230332e3137352e3130302e302f32332d3234203d3e20313532303132.roa (raw, json) Hash identifier: Yhy0kPLYMQCNyqChEExantmOWkrvJQT2nQi7dTwL98I= Subject key identifier: 04:DF:6A:53:61:F6:CF:B1:53:D9:0A:91:08:D5:BB:B6:CF:63:5D:44 Certificate issuer: /CN=1CF9F825FCE31C27D16E02FE5444730BA39FCFF9 Certificate serial: 052A090F636033BBE456864E188B6674AF159073 Authority key identifier: 1C:F9:F8:25:FC:E3:1C:27:D1:6E:02:FE:54:44:73:0B:A3:9F:CF:F9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1CF9F825FCE31C27D16E02FE5444730BA39FCFF9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c998195f-14bb-41fd-b6ed-7a967c8e43df/0/3230332e3137352e3130302e302f32332d3234203d3e20313532303132.roa Signing time: Sun 03 May 2026 03:06:27 +0000 ROA not before: Sun 03 May 2026 03:01:27 +0000 ROA not after: Sun 02 May 2027 03:06:27 +0000 asID: 152012 IP address blocks: 203.175.100.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c998195f-14bb-41fd-b6ed-7a967c8e43df/0/1CF9F825FCE31C27D16E02FE5444730BA39FCFF9.crl rsync://rpki-rsync.idnic.net/repo/c998195f-14bb-41fd-b6ed-7a967c8e43df/0/1CF9F825FCE31C27D16E02FE5444730BA39FCFF9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1CF9F825FCE31C27D16E02FE5444730BA39FCFF9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 15:25:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:2a:09:0f:63:60:33:bb:e4:56:86:4e:18:8b:66:74:af:15:90:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1CF9F825FCE31C27D16E02FE5444730BA39FCFF9 Validity Not Before: May 3 03:01:27 2026 GMT Not After : May 2 03:06:27 2027 GMT Subject: CN=04DF6A5361F6CFB153D90A9108D5BBB6CF635D44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ea:72:00:d5:f9:b4:43:1b:41:3c:94:30:b3: b3:8b:04:dd:6e:eb:51:6f:97:c9:5c:c7:5a:74:32: 74:57:3c:64:a5:4b:96:c9:4a:c9:49:f0:66:bb:fd: 68:10:4b:08:62:e7:d5:cb:5b:82:51:7e:8f:a6:08: 5e:b0:cb:fb:be:44:22:7e:4d:e6:64:94:b0:d4:4b: 3b:8b:c3:55:a9:9a:d9:81:7d:c0:17:67:58:dd:c0: 08:cf:a3:00:2a:bf:5a:2c:25:41:8a:85:57:3f:8d: 0b:e3:73:9d:9c:9b:b9:bc:39:92:f5:7e:53:e5:09: 7a:44:af:e7:ab:d8:39:54:3c:ac:34:a0:23:cc:4f: ed:85:da:5f:2d:ec:91:37:99:0c:76:a6:19:06:96: de:42:d4:01:ef:98:1b:9c:6d:f8:20:93:11:85:32: d4:5f:0d:04:25:cb:13:cd:a3:8d:fa:db:1e:10:4b: 69:9d:0f:75:2c:68:fa:5a:ff:d3:d6:ef:00:45:fd: cb:3a:b0:87:8a:06:41:38:77:1e:fe:ef:3a:a4:27: 35:c6:da:7c:24:ae:55:8c:9a:b4:9d:fc:35:b6:f6: 64:9e:87:b1:46:1a:be:e2:5d:39:52:24:fd:d2:45: 36:c7:65:d3:20:0b:b6:98:6d:dc:a0:7e:16:5c:e7: ab:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:DF:6A:53:61:F6:CF:B1:53:D9:0A:91:08:D5:BB:B6:CF:63:5D:44 X509v3 Authority Key Identifier: keyid:1C:F9:F8:25:FC:E3:1C:27:D1:6E:02:FE:54:44:73:0B:A3:9F:CF:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c998195f-14bb-41fd-b6ed-7a967c8e43df/0/1CF9F825FCE31C27D16E02FE5444730BA39FCFF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1CF9F825FCE31C27D16E02FE5444730BA39FCFF9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c998195f-14bb-41fd-b6ed-7a967c8e43df/0/3230332e3137352e3130302e302f32332d3234203d3e20313532303132.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.175.100.0/23 Signature Algorithm: sha256WithRSAEncryption 82:3b:5e:d7:53:96:44:f0:68:49:52:3a:62:d2:11:39:9b:c6: cf:c7:05:39:00:b4:7b:76:dd:40:89:30:c7:95:d9:55:b1:fb: 76:a8:1c:d9:b8:ea:70:ac:56:00:fb:11:66:02:c9:c8:15:e2: 8b:36:e2:f8:10:bb:0f:17:1b:38:ba:47:dc:9e:85:eb:96:9b: fb:f6:ed:36:fb:48:dd:2c:6d:a4:4e:a1:19:38:85:c0:17:55: cf:6c:9f:b2:6d:a1:10:23:6a:38:e5:dc:57:7e:62:04:7c:d1: 76:cc:ca:3b:a8:fa:ee:f8:16:15:24:ba:b5:37:3a:7d:0b:af: e6:6e:34:da:96:27:a0:bd:af:60:c2:b8:75:37:42:58:cc:75: 4f:64:a9:9a:b9:e0:7b:59:9e:ac:d3:06:21:2a:08:68:e3:d8: 77:9b:66:64:8b:e3:30:7b:e0:19:76:76:9a:5a:91:e6:bb:3f: a2:71:db:b8:f2:9b:64:5e:4c:a1:24:32:92:9f:83:d9:80:46: 62:09:96:1b:be:1a:68:50:b3:07:88:90:c5:35:25:97:59:ba: 88:1c:2f:fd:98:ab:83:5f:e6:eb:da:e8:ae:79:dd:ac:81:12: a9:e9:de:37:87:f9:a4:4e:a3:f0:24:10:06:64:30:0e:a3:d8: ee:51:89:52 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUBSoJD2NgM7vkVoZOGItmdK8VkHMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUNGOUY4MjVGQ0UzMUMyN0QxNkUwMkZFNTQ0NDczMEJB MzlGQ0ZGOTAeFw0yNjA1MDMwMzAxMjdaFw0yNzA1MDIwMzA2MjdaMDMxMTAvBgNV BAMTKDA0REY2QTUzNjFGNkNGQjE1M0Q5MEE5MTA4RDVCQkI2Q0Y2MzVENDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx6nIA1fm0QxtBPJQws7OLBN1u 61Fvl8lcx1p0MnRXPGSlS5bJSslJ8Ga7/WgQSwhi59XLW4JRfo+mCF6wy/u+RCJ+ TeZklLDUSzuLw1WpmtmBfcAXZ1jdwAjPowAqv1osJUGKhVc/jQvjc52cm7m8OZL1 flPlCXpEr+er2DlUPKw0oCPMT+2F2l8t7JE3mQx2phkGlt5C1AHvmBucbfggkxGF MtRfDQQlyxPNo4362x4QS2mdD3UsaPpa/9PW7wBF/cs6sIeKBkE4dx7+7zqkJzXG 2nwkrlWMmrSd/DW29mSeh7FGGr7iXTlSJP3SRTbHZdMgC7aYbdygfhZc56vrAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUBN9qU2H2z7FT2QqRCNW7ts9jXUQwHwYDVR0j BBgwFoAUHPn4JfzjHCfRbgL+VERzC6Ofz/kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Yzk5ODE5NWYtMTRiYi00MWZkLWI2ZWQtN2E5NjdjOGU0M2RmLzAvMUNGOUY4MjVG Q0UzMUMyN0QxNkUwMkZFNTQ0NDczMEJBMzlGQ0ZGOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xQ0Y5RjgyNUZDRTMxQzI3RDE2RTAyRkU1NDQ0NzMwQkEzOUZD RkY5LmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2M5OTgxOTVmLTE0YmItNDFmZC1i NmVkLTdhOTY3YzhlNDNkZi8wLzMyMzAzMzJlMzEzNzM1MmUzMTMwMzAyZTMwMmYz MjMzMmQzMjM0MjAzZDNlMjAzMTM1MzIzMDMxMzIucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAHLr2QwDQYJ KoZIhvcNAQELBQADggEBAII7XtdTlkTwaElSOmLSETmbxs/HBTkAtHt23UCJMMeV 2VWx+3aoHNm46nCsVgD7EWYCycgV4os24vgQuw8XGzi6R9yeheuWm/v27Tb7SN0s baROoRk4hcAXVc9sn7JtoRAjajjl3Fd+YgR80XbMyjuo+u74FhUkurU3On0Lr+Zu NNqWJ6C9r2DCuHU3QljMdU9kqZq54HtZnqzTBiEqCGjj2HebZmSL4zB74Bl2dppa kea7P6Jx27jym2ReTKEkMpKfg9mARmIJlhu+GmhQsweIkMU1JZdZuogcL/2Yq4Nf 5uva6K553ayBEqnp3jeH+aROo/AkEAZkMA6j2O5RiVI= -----END CERTIFICATE-----Generated at Wed May 13 03:51:42 2026 by rpki-client