$ rpki-client -vvf rpki-rsync.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/3230322e31302e35332e302f32342d3234203d3e20313430343639.roa File: 3230322e31302e35332e302f32342d3234203d3e20313430343639.roa (raw, json) Hash identifier: XZqZKEwcIT/tOmTDjZRtLyihPdxqZLum5E4RRGNWZX0= Subject key identifier: 2D:F7:A1:08:5E:72:95:3E:02:B7:E5:52:C9:D9:CE:F6:E3:50:98:1E Certificate issuer: /CN=A06CE5EEEFDB5B6643B18A83EBE39B3C52FFD305 Certificate serial: 761E1FF00D9ED6E9DB801FD63068DF10AE3895A3 Authority key identifier: A0:6C:E5:EE:EF:DB:5B:66:43:B1:8A:83:EB:E3:9B:3C:52:FF:D3:05 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A06CE5EEEFDB5B6643B18A83EBE39B3C52FFD305.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/3230322e31302e35332e302f32342d3234203d3e20313430343639.roa Signing time: Sun 03 May 2026 03:08:19 +0000 ROA not before: Sun 03 May 2026 03:03:19 +0000 ROA not after: Sun 02 May 2027 03:08:19 +0000 asID: 140469 IP address blocks: 202.10.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/A06CE5EEEFDB5B6643B18A83EBE39B3C52FFD305.crl rsync://rpki-rsync.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/A06CE5EEEFDB5B6643B18A83EBE39B3C52FFD305.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A06CE5EEEFDB5B6643B18A83EBE39B3C52FFD305.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 01:50:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:1e:1f:f0:0d:9e:d6:e9:db:80:1f:d6:30:68:df:10:ae:38:95:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A06CE5EEEFDB5B6643B18A83EBE39B3C52FFD305 Validity Not Before: May 3 03:03:19 2026 GMT Not After : May 2 03:08:19 2027 GMT Subject: CN=2DF7A1085E72953E02B7E552C9D9CEF6E350981E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:dc:87:c8:b4:39:a4:ab:fd:57:be:73:99:55: 7b:02:6a:0b:eb:af:6b:f3:45:bd:27:cf:76:b9:85: 1c:e2:74:45:92:46:2b:a0:11:14:82:15:ea:b9:4c: 00:40:c7:4f:71:cd:bb:fa:f1:7f:7f:6b:5b:ae:4f: 41:a5:80:79:de:a2:5a:fa:fb:0c:fd:dd:2d:97:2f: 12:d9:96:5f:d7:54:ed:5b:64:89:6f:73:a7:99:ad: a0:0b:56:18:e9:bb:9a:67:2e:f6:5a:10:4e:45:4a: ac:18:03:10:48:38:d1:24:15:3e:3d:3f:d3:c3:78: 63:5e:0c:3d:16:68:17:f5:90:e3:a1:c4:a4:d3:26: fb:6a:d8:0d:2b:53:07:a5:33:af:e4:4e:9d:de:46: 86:54:54:03:57:93:31:fa:95:c6:6a:93:9a:a7:33: ee:91:1e:f3:22:76:69:29:52:3a:f3:e6:65:2a:c5: f3:3c:99:e1:12:8b:2e:87:32:a8:18:dc:2b:c2:26: e1:fe:50:93:75:c0:48:d4:92:f2:25:a5:b5:19:87: 2a:7d:ad:a9:23:9c:ff:18:49:57:3f:24:84:22:60: 96:c2:6c:80:95:3d:07:4a:6e:1b:3b:26:f5:a7:77: 69:8a:71:b7:57:a8:05:f1:2e:bd:23:66:94:9f:9c: 36:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:F7:A1:08:5E:72:95:3E:02:B7:E5:52:C9:D9:CE:F6:E3:50:98:1E X509v3 Authority Key Identifier: keyid:A0:6C:E5:EE:EF:DB:5B:66:43:B1:8A:83:EB:E3:9B:3C:52:FF:D3:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/A06CE5EEEFDB5B6643B18A83EBE39B3C52FFD305.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A06CE5EEEFDB5B6643B18A83EBE39B3C52FFD305.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/3230322e31302e35332e302f32342d3234203d3e20313430343639.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.10.53.0/24 Signature Algorithm: sha256WithRSAEncryption 7d:89:8e:16:dd:a3:b5:51:ec:62:23:dc:25:6e:d6:cb:22:72: db:38:ae:3b:b9:df:22:38:cf:d7:5c:f4:6f:5b:6e:15:aa:6f: 3a:c5:81:cb:17:af:cd:e7:43:ff:53:ed:23:21:59:cf:eb:d4: 8f:3f:af:79:86:54:bc:d2:12:c8:80:f9:15:08:21:d2:b7:ad: f3:45:23:76:73:47:12:e7:22:5b:b8:4d:40:13:fd:01:d9:5a: f3:ba:99:d9:2b:f1:ab:47:a9:af:f4:de:f2:8a:c5:ff:e2:2d: b2:96:5c:5c:27:df:e9:80:34:4b:eb:4c:14:9c:a1:a1:c0:17: b7:f2:a9:3d:af:56:d4:a4:5a:a3:13:ac:58:dd:fb:e1:8c:25: a8:27:12:4f:31:59:ed:44:28:59:52:7c:d7:0c:e7:e6:55:ae: 95:85:e8:ef:3b:a3:7c:88:0d:8e:7e:f0:c9:54:24:02:17:6d: 33:38:da:5a:ab:35:3e:c0:ae:c4:4b:c3:e1:13:6d:e9:3d:ff: b1:39:92:a8:19:de:b3:e5:3d:3b:0b:9b:3d:a9:04:3b:ad:cc: 9f:7a:8b:0e:17:c7:fd:02:50:48:77:47:1b:1f:ab:9a:52:ff: 9a:c3:4d:94:b5:5a:5f:75:83:5b:64:59:c4:7f:74:a4:4e:2e: f3:3a:4a:f6 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUdh4f8A2e1unbgB/WMGjfEK44laMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTA2Q0U1RUVFRkRCNUI2NjQzQjE4QTgzRUJFMzlCM0M1 MkZGRDMwNTAeFw0yNjA1MDMwMzAzMTlaFw0yNzA1MDIwMzA4MTlaMDMxMTAvBgNV BAMTKDJERjdBMTA4NUU3Mjk1M0UwMkI3RTU1MkM5RDlDRUY2RTM1MDk4MUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCj3IfItDmkq/1XvnOZVXsCagvr r2vzRb0nz3a5hRzidEWSRiugERSCFeq5TABAx09xzbv68X9/a1uuT0GlgHneolr6 +wz93S2XLxLZll/XVO1bZIlvc6eZraALVhjpu5pnLvZaEE5FSqwYAxBIONEkFT49 P9PDeGNeDD0WaBf1kOOhxKTTJvtq2A0rUwelM6/kTp3eRoZUVANXkzH6lcZqk5qn M+6RHvMidmkpUjrz5mUqxfM8meESiy6HMqgY3CvCJuH+UJN1wEjUkvIlpbUZhyp9 rakjnP8YSVc/JIQiYJbCbICVPQdKbhs7JvWnd2mKcbdXqAXxLr0jZpSfnDaBAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQULfehCF5ylT4Ct+VSydnO9uNQmB4wHwYDVR0j BBgwFoAUoGzl7u/bW2ZDsYqD6+ObPFL/0wUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDEwODViNGEtZjU3My00MmYzLTgyNWMtMWNmMGM4NzJiMTUyLzAvQTA2Q0U1RUVF RkRCNUI2NjQzQjE4QTgzRUJFMzlCM0M1MkZGRDMwNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BMDZDRTVFRUVGREI1QjY2NDNCMThBODNFQkUzOUIzQzUyRkZE MzA1LmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2QxMDg1YjRhLWY1NzMtNDJmMy04 MjVjLTFjZjBjODcyYjE1Mi8wLzMyMzAzMjJlMzEzMDJlMzUzMzJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMxMzQzMDM0MzYzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMoKNTANBgkqhkiG 9w0BAQsFAAOCAQEAfYmOFt2jtVHsYiPcJW7WyyJy2ziuO7nfIjjP11z0b1tuFapv OsWByxevzedD/1PtIyFZz+vUjz+veYZUvNISyID5FQgh0ret80UjdnNHEuciW7hN QBP9Adla87qZ2Svxq0epr/Te8orF/+ItspZcXCff6YA0S+tMFJyhocAXt/KpPa9W 1KRaoxOsWN374YwlqCcSTzFZ7UQoWVJ81wzn5lWulYXo7zujfIgNjn7wyVQkAhdt MzjaWqs1PsCuxEvD4RNt6T3/sTmSqBnes+U9OwubPakEO63Mn3qLDhfH/QJQSHdH Gx+rmlL/msNNlLVaX3WDW2RZxH90pE4u8zpK9g== -----END CERTIFICATE-----Generated at Wed May 13 12:28:27 2026 by rpki-client