$ rpki-client -vvf rpki-rsync.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/3230322e3135322e3139342e302f32342d3234203d3e203633383539.roa File: 3230322e3135322e3139342e302f32342d3234203d3e203633383539.roa (raw, json) Hash identifier: poZZqr8m1p0SwLGi1vxWI2MfuVBlouoArnZ43zLWj7A= Subject key identifier: 9D:53:BA:55:53:75:40:CE:F5:2A:95:8A:70:1A:C2:24:19:C5:D1:73 Certificate issuer: /CN=9BE1F1BA8091631A409BE939BDB0733274F4AAC4 Certificate serial: 24CB9409BD01A931771B23E947C1D77CF0C5F241 Authority key identifier: 9B:E1:F1:BA:80:91:63:1A:40:9B:E9:39:BD:B0:73:32:74:F4:AA:C4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9BE1F1BA8091631A409BE939BDB0733274F4AAC4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/3230322e3135322e3139342e302f32342d3234203d3e203633383539.roa Signing time: Sun 03 May 2026 03:10:33 +0000 ROA not before: Sun 03 May 2026 03:05:33 +0000 ROA not after: Sun 02 May 2027 03:10:33 +0000 asID: 63859 IP address blocks: 202.152.194.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/9BE1F1BA8091631A409BE939BDB0733274F4AAC4.crl rsync://rpki-rsync.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/9BE1F1BA8091631A409BE939BDB0733274F4AAC4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9BE1F1BA8091631A409BE939BDB0733274F4AAC4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 03:12:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:cb:94:09:bd:01:a9:31:77:1b:23:e9:47:c1:d7:7c:f0:c5:f2:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9BE1F1BA8091631A409BE939BDB0733274F4AAC4 Validity Not Before: May 3 03:05:33 2026 GMT Not After : May 2 03:10:33 2027 GMT Subject: CN=9D53BA55537540CEF52A958A701AC22419C5D173 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:2b:ac:50:99:fd:61:3e:2c:d9:cc:93:d7:3f: 27:24:63:07:a6:c2:da:7a:97:98:2c:5e:d8:f1:9c: 1f:55:de:48:9e:3f:39:78:eb:c8:88:f1:b2:d2:86: b3:20:44:8c:1a:e4:6d:8d:42:3c:a5:a2:cd:23:5e: 37:01:76:11:f3:ff:f4:cb:b3:1f:ed:1e:b2:ef:79: a2:15:50:e0:e6:23:95:8d:ba:87:6d:0e:36:cf:40: d9:80:d1:d6:57:64:20:c3:14:75:a4:e6:0b:70:b3: 9d:19:30:98:fb:23:f1:cd:fa:1c:b1:6d:6e:cd:7b: 69:8c:ab:1c:59:6c:88:95:9a:64:71:f6:f0:72:86: 12:32:f6:e8:c5:30:40:bb:95:7a:be:4d:d8:86:3a: 87:bf:2a:6f:b7:81:d2:25:32:69:88:e7:e7:c0:f7: 66:7c:60:26:56:d4:a0:aa:fa:36:cc:3f:38:0c:60: 63:3e:3a:16:8d:76:9d:10:1b:8a:a1:4f:0b:bd:f9: 3d:0e:38:97:31:47:e2:2e:c4:50:d1:20:5e:ba:ab: ed:2e:cd:2e:1b:fd:37:d1:31:7a:bd:4d:cf:f3:83: 10:d9:22:81:83:bc:7c:31:06:00:ce:34:53:09:e4: e1:c1:a6:09:bc:14:4f:e8:65:e5:f6:ba:5f:ba:a1: b0:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:53:BA:55:53:75:40:CE:F5:2A:95:8A:70:1A:C2:24:19:C5:D1:73 X509v3 Authority Key Identifier: keyid:9B:E1:F1:BA:80:91:63:1A:40:9B:E9:39:BD:B0:73:32:74:F4:AA:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/9BE1F1BA8091631A409BE939BDB0733274F4AAC4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9BE1F1BA8091631A409BE939BDB0733274F4AAC4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/3230322e3135322e3139342e302f32342d3234203d3e203633383539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.152.194.0/24 Signature Algorithm: sha256WithRSAEncryption 76:1a:e0:d0:a2:b1:f8:bd:25:3f:1a:57:18:ff:10:96:80:69: 15:e9:53:41:a9:6a:c7:23:52:11:96:a4:8c:64:26:fb:ab:41: b6:c9:20:be:f6:5b:98:9b:95:e4:b8:d8:2f:61:e2:c7:f2:63: fc:2a:39:48:c7:50:a0:a1:1d:08:0b:8a:09:ed:f3:8b:f5:13: c0:7e:6b:fc:bf:69:3d:72:64:33:88:d2:f9:aa:b4:ae:de:0f: bc:30:e5:6a:fd:da:9f:eb:0b:e5:77:d7:1b:f9:b6:0c:83:85: 33:09:1d:ca:5c:a2:f2:0e:8e:05:92:5b:f6:59:b6:5e:cf:22: c2:92:a6:d5:d8:0b:2e:08:12:04:4c:94:b7:d2:14:11:b1:ca: 43:66:ac:f9:bf:1f:66:da:82:11:cc:a0:f9:76:b9:fd:49:39: 19:60:da:f1:d8:4a:a3:3a:46:03:27:c9:9c:61:83:50:21:ee: 24:ec:19:f1:79:ed:2b:9e:5c:6a:cd:74:78:b6:c5:2e:48:dd: 82:20:10:26:7f:a3:8f:f9:38:48:ef:51:e4:a2:8f:79:57:eb: dc:28:e3:dc:a0:a6:02:0e:e9:76:ca:82:ec:3e:c9:c3:22:9b: a9:f0:39:f6:0a:5f:81:47:5d:7d:36:4f:39:80:f6:6c:df:0b: 55:da:ae:ea -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUJMuUCb0BqTF3GyPpR8HXfPDF8kEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUJFMUYxQkE4MDkxNjMxQTQwOUJFOTM5QkRCMDczMzI3 NEY0QUFDNDAeFw0yNjA1MDMwMzA1MzNaFw0yNzA1MDIwMzEwMzNaMDMxMTAvBgNV BAMTKDlENTNCQTU1NTM3NTQwQ0VGNTJBOTU4QTcwMUFDMjI0MTlDNUQxNzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuK6xQmf1hPizZzJPXPyckYwem wtp6l5gsXtjxnB9V3kiePzl468iI8bLShrMgRIwa5G2NQjylos0jXjcBdhHz//TL sx/tHrLveaIVUODmI5WNuodtDjbPQNmA0dZXZCDDFHWk5gtws50ZMJj7I/HN+hyx bW7Ne2mMqxxZbIiVmmRx9vByhhIy9ujFMEC7lXq+TdiGOoe/Km+3gdIlMmmI5+fA 92Z8YCZW1KCq+jbMPzgMYGM+OhaNdp0QG4qhTwu9+T0OOJcxR+IuxFDRIF66q+0u zS4b/TfRMXq9Tc/zgxDZIoGDvHwxBgDONFMJ5OHBpgm8FE/oZeX2ul+6obC1AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUnVO6VVN1QM71KpWKcBrCJBnF0XMwHwYDVR0j BBgwFoAUm+HxuoCRYxpAm+k5vbBzMnT0qsQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDhlM2IzOWMtZGExMS00NWVlLWFhYjMtNWNiMTRlYzQ0NzBjLzAvOUJFMUYxQkE4 MDkxNjMxQTQwOUJFOTM5QkRCMDczMzI3NEY0QUFDNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85QkUxRjFCQTgwOTE2MzFBNDA5QkU5MzlCREIwNzMzMjc0RjRB QUM0LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2Q4ZTNiMzljLWRhMTEtNDVlZS1h YWIzLTVjYjE0ZWM0NDcwYy8wLzMyMzAzMjJlMzEzNTMyMmUzMTM5MzQyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzNjMzMzgzNTM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAypjCMA0GCSqG SIb3DQEBCwUAA4IBAQB2GuDQorH4vSU/GlcY/xCWgGkV6VNBqWrHI1IRlqSMZCb7 q0G2ySC+9luYm5XkuNgvYeLH8mP8KjlIx1CgoR0IC4oJ7fOL9RPAfmv8v2k9cmQz iNL5qrSu3g+8MOVq/dqf6wvld9cb+bYMg4UzCR3KXKLyDo4Fklv2WbZezyLCkqbV 2AsuCBIETJS30hQRscpDZqz5vx9m2oIRzKD5drn9STkZYNrx2EqjOkYDJ8mcYYNQ Ie4k7Bnxee0rnlxqzXR4tsUuSN2CIBAmf6OP+ThI71Hkoo95V+vcKOPcoKYCDul2 yoLsPsnDIpup8Dn2Cl+BR119Nk85gPZs3wtV2q7q -----END CERTIFICATE-----Generated at Wed May 13 06:56:11 2026 by rpki-client