$ rpki-client -vvf rpki-rsync.idnic.net/repo/d0d2d3e3-4c20-4a90-833e-ead43c33991e/0/3230322e35322e3134362e302f32332d3234203d3e203435333234.roa File: 3230322e35322e3134362e302f32332d3234203d3e203435333234.roa (raw, json) Hash identifier: 15DFdluo9UaifGQn5fMYNCJmiCD2xxrlbDWmIvigFwY= Subject key identifier: C3:50:5E:06:83:67:D4:A7:C8:05:04:A8:B5:3B:4C:78:8D:D7:DA:55 Certificate issuer: /CN=40064999DEC3F3BD85C4F883982B58D76246EE84 Certificate serial: 38BC995FFA186FA5FDE3BD91D17848621F19693D Authority key identifier: 40:06:49:99:DE:C3:F3:BD:85:C4:F8:83:98:2B:58:D7:62:46:EE:84 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/40064999DEC3F3BD85C4F883982B58D76246EE84.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d0d2d3e3-4c20-4a90-833e-ead43c33991e/0/3230322e35322e3134362e302f32332d3234203d3e203435333234.roa Signing time: Sun 03 May 2026 03:08:16 +0000 ROA not before: Sun 03 May 2026 03:03:16 +0000 ROA not after: Sun 02 May 2027 03:08:16 +0000 asID: 45324 IP address blocks: 202.52.146.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d0d2d3e3-4c20-4a90-833e-ead43c33991e/0/40064999DEC3F3BD85C4F883982B58D76246EE84.crl rsync://rpki-rsync.idnic.net/repo/d0d2d3e3-4c20-4a90-833e-ead43c33991e/0/40064999DEC3F3BD85C4F883982B58D76246EE84.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/40064999DEC3F3BD85C4F883982B58D76246EE84.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 21:48:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:bc:99:5f:fa:18:6f:a5:fd:e3:bd:91:d1:78:48:62:1f:19:69:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40064999DEC3F3BD85C4F883982B58D76246EE84 Validity Not Before: May 3 03:03:16 2026 GMT Not After : May 2 03:08:16 2027 GMT Subject: CN=C3505E068367D4A7C80504A8B53B4C788DD7DA55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:4e:54:a1:5d:a1:3d:40:2d:64:bc:84:6b:77: fd:2e:90:39:99:b3:14:64:81:38:6d:36:a0:24:d1: 71:4b:28:23:24:f2:08:2b:4a:4e:c3:03:c8:2d:68: af:e0:17:6c:57:66:ff:51:40:b2:16:91:48:8a:fc: 2a:a6:cc:0b:b4:a9:fb:f8:30:96:73:61:d4:f7:d8: 2e:82:e6:f7:64:c5:e9:e4:fb:3c:b0:ab:82:87:4e: a7:d0:3f:d9:08:53:ae:48:3f:70:7d:55:12:66:80: 49:a9:89:ae:c5:af:66:8f:fc:0c:8b:fc:12:44:f0: 2a:2b:08:7f:c2:9b:d3:05:f2:ab:43:05:4f:a4:81: a9:90:ca:7d:fc:4c:5c:fb:45:27:cf:77:d8:a8:58: a4:be:3d:a5:4c:81:e5:56:3f:c3:71:a0:2d:e0:08: a1:c1:9b:3e:cf:cf:8c:82:31:9e:58:f0:a1:83:40: cc:13:e8:47:eb:67:9d:72:ee:20:e0:52:d9:4e:b1: 74:1a:72:de:7c:95:32:a5:48:27:6b:1d:0e:f7:90: 17:0f:ca:7e:d9:17:a0:2e:1d:23:e9:70:62:79:f5: fd:12:a3:55:ba:0b:59:aa:60:cc:f9:fe:1d:90:f6: 5b:49:80:44:2f:74:79:67:17:40:73:48:72:4d:d1: 4d:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:50:5E:06:83:67:D4:A7:C8:05:04:A8:B5:3B:4C:78:8D:D7:DA:55 X509v3 Authority Key Identifier: keyid:40:06:49:99:DE:C3:F3:BD:85:C4:F8:83:98:2B:58:D7:62:46:EE:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d0d2d3e3-4c20-4a90-833e-ead43c33991e/0/40064999DEC3F3BD85C4F883982B58D76246EE84.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/40064999DEC3F3BD85C4F883982B58D76246EE84.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d0d2d3e3-4c20-4a90-833e-ead43c33991e/0/3230322e35322e3134362e302f32332d3234203d3e203435333234.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.52.146.0/23 Signature Algorithm: sha256WithRSAEncryption 3c:a3:2b:6f:1f:9b:e0:d8:1b:c4:bd:74:9e:3d:b4:b8:59:a1: a1:55:43:66:7b:43:4e:32:c7:d4:b4:6b:2c:f3:1e:dc:7a:11: 95:5e:92:d8:32:da:9d:2e:0b:6a:6e:79:7f:3e:c8:40:65:c9: 5b:df:8a:ec:47:78:a3:ba:5c:cd:ed:40:e3:40:0a:fa:c2:4c: a0:2b:67:97:90:a8:3a:39:94:e9:9f:75:0b:73:ec:81:b4:40: 24:6d:75:52:46:d9:4f:2c:8b:42:92:be:19:df:8a:6a:a4:82: cf:ac:fa:c8:95:ef:b2:0e:bc:b9:72:32:b0:5a:23:f6:20:1f: 33:d0:ff:df:b6:2b:b3:8b:58:f5:67:13:f5:83:62:4f:44:26: 66:c9:9c:d1:bd:e6:83:50:2d:9b:7f:dc:01:05:00:fc:43:3c: 51:2c:52:f4:79:ea:07:b7:72:44:dd:98:6e:0c:42:fc:c6:91: ce:ac:55:f9:2f:13:ab:bf:c8:a8:2d:70:94:39:fe:99:b1:6c: ff:09:de:c9:24:b9:80:fa:5f:91:4f:8b:b7:84:e5:e2:e0:68: a9:e7:39:59:44:bb:80:46:f7:c1:e6:d0:53:39:a5:2c:aa:32: fa:cf:9e:ea:74:76:05:ca:5a:34:ba:d5:db:cf:a0:64:3d:59: c1:e3:72:e4 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUOLyZX/oYb6X9472R0XhIYh8ZaT0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDAwNjQ5OTlERUMzRjNCRDg1QzRGODgzOTgyQjU4RDc2 MjQ2RUU4NDAeFw0yNjA1MDMwMzAzMTZaFw0yNzA1MDIwMzA4MTZaMDMxMTAvBgNV BAMTKEMzNTA1RTA2ODM2N0Q0QTdDODA1MDRBOEI1M0I0Qzc4OEREN0RBNTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXTlShXaE9QC1kvIRrd/0ukDmZ sxRkgThtNqAk0XFLKCMk8ggrSk7DA8gtaK/gF2xXZv9RQLIWkUiK/CqmzAu0qfv4 MJZzYdT32C6C5vdkxenk+zywq4KHTqfQP9kIU65IP3B9VRJmgEmpia7Fr2aP/AyL /BJE8CorCH/Cm9MF8qtDBU+kgamQyn38TFz7RSfPd9ioWKS+PaVMgeVWP8NxoC3g CKHBmz7Pz4yCMZ5Y8KGDQMwT6EfrZ51y7iDgUtlOsXQact58lTKlSCdrHQ73kBcP yn7ZF6AuHSPpcGJ59f0So1W6C1mqYMz5/h2Q9ltJgEQvdHlnF0BzSHJN0U2lAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUw1BeBoNn1KfIBQSotTtMeI3X2lUwHwYDVR0j BBgwFoAUQAZJmd7D872FxPiDmCtY12JG7oQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDBkMmQzZTMtNGMyMC00YTkwLTgzM2UtZWFkNDNjMzM5OTFlLzAvNDAwNjQ5OTlE RUMzRjNCRDg1QzRGODgzOTgyQjU4RDc2MjQ2RUU4NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80MDA2NDk5OURFQzNGM0JEODVDNEY4ODM5ODJCNThENzYyNDZF RTg0LmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2QwZDJkM2UzLTRjMjAtNGE5MC04 MzNlLWVhZDQzYzMzOTkxZS8wLzMyMzAzMjJlMzUzMjJlMzEzNDM2MmUzMDJmMzIz MzJkMzIzNDIwM2QzZTIwMzQzNTMzMzIzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAco0kjANBgkqhkiG 9w0BAQsFAAOCAQEAPKMrbx+b4NgbxL10nj20uFmhoVVDZntDTjLH1LRrLPMe3HoR lV6S2DLanS4Lam55fz7IQGXJW9+K7Ed4o7pcze1A40AK+sJMoCtnl5CoOjmU6Z91 C3PsgbRAJG11UkbZTyyLQpK+Gd+KaqSCz6z6yJXvsg68uXIysFoj9iAfM9D/37Yr s4tY9WcT9YNiT0QmZsmc0b3mg1Atm3/cAQUA/EM8USxS9HnqB7dyRN2YbgxC/MaR zqxV+S8Tq7/IqC1wlDn+mbFs/wneySS5gPpfkU+Lt4Tl4uBoqec5WUS7gEb3webQ UzmlLKoy+s+e6nR2BcpaNLrV28+gZD1ZweNy5A== -----END CERTIFICATE-----Generated at Wed May 13 12:18:43 2026 by rpki-client