$ rpki-client -vvf rpki-rsync.idnic.net/repo/deb8b889-3b3d-4ef5-ad70-5b1045eff393/0/3230322e382e32392e302f32342d3234203d3e203435373234.roa File: 3230322e382e32392e302f32342d3234203d3e203435373234.roa (raw, json) Hash identifier: Yc1lRGNv0/ivQZsDhjeb4Ll2thmzxFFCqYVkWRBmzS0= Subject key identifier: D3:E3:CC:D6:A5:8B:5F:BD:86:82:8B:B6:E0:53:4A:01:C4:8B:AC:EE Certificate issuer: /CN=DCDFEB9B3070531BD7F0166776A9BD790D8156F3 Certificate serial: 5D023FA44A3A3798AE94BCC1A091D637FBEF6F9B Authority key identifier: DC:DF:EB:9B:30:70:53:1B:D7:F0:16:67:76:A9:BD:79:0D:81:56:F3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DCDFEB9B3070531BD7F0166776A9BD790D8156F3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/deb8b889-3b3d-4ef5-ad70-5b1045eff393/0/3230322e382e32392e302f32342d3234203d3e203435373234.roa Signing time: Sun 03 May 2026 03:11:49 +0000 ROA not before: Sun 03 May 2026 03:06:49 +0000 ROA not after: Sun 02 May 2027 03:11:49 +0000 asID: 45724 IP address blocks: 202.8.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/deb8b889-3b3d-4ef5-ad70-5b1045eff393/0/DCDFEB9B3070531BD7F0166776A9BD790D8156F3.crl rsync://rpki-rsync.idnic.net/repo/deb8b889-3b3d-4ef5-ad70-5b1045eff393/0/DCDFEB9B3070531BD7F0166776A9BD790D8156F3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DCDFEB9B3070531BD7F0166776A9BD790D8156F3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 21:43:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:02:3f:a4:4a:3a:37:98:ae:94:bc:c1:a0:91:d6:37:fb:ef:6f:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DCDFEB9B3070531BD7F0166776A9BD790D8156F3 Validity Not Before: May 3 03:06:49 2026 GMT Not After : May 2 03:11:49 2027 GMT Subject: CN=D3E3CCD6A58B5FBD86828BB6E0534A01C48BACEE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:96:f0:14:ee:da:45:50:41:ae:d3:27:ca:db: 01:96:05:fe:99:2a:e8:8a:1e:69:ed:81:55:d9:45: eb:eb:50:84:6f:93:1a:29:2b:fa:a0:90:52:e1:8f: 5a:bd:a2:2b:e5:76:ff:73:5a:20:44:f6:b3:2d:08: 02:14:3b:52:92:ff:e2:16:93:20:0a:13:c8:77:c4: 74:38:3a:94:22:06:a8:a7:85:c5:24:12:7d:12:36: 41:fc:43:68:e0:1e:91:81:4c:21:15:11:9e:7e:5e: db:5c:ff:f2:91:c8:b4:b7:3b:85:1f:f3:b2:22:33: fd:d6:15:14:ad:0c:06:02:ff:ec:6a:04:14:02:18: 9f:a8:bc:8d:8b:bb:98:e7:f3:53:2b:34:ce:b6:1e: c5:fd:de:7a:6b:9b:b4:32:78:2d:ee:26:47:dd:80: ca:84:7a:95:3f:3f:54:20:90:af:e5:6f:15:cd:f7: 1c:54:9f:3c:a8:2b:73:59:47:21:af:b4:e6:b7:62: 1e:b9:e7:b7:04:e0:70:38:9e:89:af:f6:6b:b9:9b: 00:f5:3e:27:91:ef:87:71:d4:56:5b:29:1b:6a:74: c0:37:be:e6:9a:70:ae:17:86:5a:af:d1:06:65:fc: 65:6f:9e:0d:c6:86:f3:3a:49:3d:19:a7:7a:d2:56: 10:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:E3:CC:D6:A5:8B:5F:BD:86:82:8B:B6:E0:53:4A:01:C4:8B:AC:EE X509v3 Authority Key Identifier: keyid:DC:DF:EB:9B:30:70:53:1B:D7:F0:16:67:76:A9:BD:79:0D:81:56:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/deb8b889-3b3d-4ef5-ad70-5b1045eff393/0/DCDFEB9B3070531BD7F0166776A9BD790D8156F3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DCDFEB9B3070531BD7F0166776A9BD790D8156F3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/deb8b889-3b3d-4ef5-ad70-5b1045eff393/0/3230322e382e32392e302f32342d3234203d3e203435373234.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.8.29.0/24 Signature Algorithm: sha256WithRSAEncryption 2e:2a:25:af:4b:fb:d9:7b:3b:7c:4e:48:c1:92:e0:ff:5f:8f: e7:7a:e8:8b:e8:5c:8b:df:fb:0b:54:af:9d:e7:a5:6a:3f:57: a9:27:ea:4e:42:36:83:8f:fc:96:3c:57:39:b5:74:e7:16:5b: f3:c7:f5:15:8d:b8:c1:c4:70:86:c2:87:c8:dc:25:1c:25:7d: fc:08:69:59:ab:4c:98:02:9e:fa:ea:b1:ee:25:d1:69:89:ed: 2f:10:98:12:21:34:15:61:0c:1c:d4:b0:86:64:d1:bd:12:cf: 69:80:61:86:3c:e9:b5:9d:f2:74:e3:00:a6:bd:eb:b1:2b:f8: f8:28:06:92:17:fe:5b:b6:d1:f2:58:2b:14:68:64:25:2c:e7: 30:88:d1:6e:0b:c5:75:7c:dd:6c:a0:55:ea:0d:f9:49:0e:93: 6b:6d:35:dc:aa:b0:37:5d:85:37:de:03:77:04:8d:fa:66:0a: 9b:7b:9b:e8:4e:a2:2a:59:8a:d3:e2:ca:55:7f:cf:d8:8d:74: 6f:b4:cb:46:8a:a4:c7:2b:12:11:3e:58:4c:80:14:73:dc:f2: 45:7c:74:e4:fe:60:95:a8:6c:3b:8d:8e:24:0a:f6:a9:c5:35: 1b:9b:64:6d:d0:95:28:9a:74:e1:15:69:30:fc:c0:13:bc:23: 3e:e3:ef:27 -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgIUXQI/pEo6N5iulLzBoJHWN/vvb5swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRENERkVCOUIzMDcwNTMxQkQ3RjAxNjY3NzZBOUJENzkw RDgxNTZGMzAeFw0yNjA1MDMwMzA2NDlaFw0yNzA1MDIwMzExNDlaMDMxMTAvBgNV BAMTKEQzRTNDQ0Q2QTU4QjVGQkQ4NjgyOEJCNkUwNTM0QTAxQzQ4QkFDRUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrlvAU7tpFUEGu0yfK2wGWBf6Z KuiKHmntgVXZRevrUIRvkxopK/qgkFLhj1q9oivldv9zWiBE9rMtCAIUO1KS/+IW kyAKE8h3xHQ4OpQiBqinhcUkEn0SNkH8Q2jgHpGBTCEVEZ5+Xttc//KRyLS3O4Uf 87IiM/3WFRStDAYC/+xqBBQCGJ+ovI2Lu5jn81MrNM62HsX93nprm7QyeC3uJkfd gMqEepU/P1QgkK/lbxXN9xxUnzyoK3NZRyGvtOa3Yh6557cE4HA4nomv9mu5mwD1 PieR74dx1FZbKRtqdMA3vuaacK4Xhlqv0QZl/GVvng3GhvM6ST0Zp3rSVhD7AgMB AAGjggItMIICKTAdBgNVHQ4EFgQU0+PM1qWLX72Ggou24FNKAcSLrO4wHwYDVR0j BBgwFoAU3N/rmzBwUxvX8BZndqm9eQ2BVvMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGViOGI4ODktM2IzZC00ZWY1LWFkNzAtNWIxMDQ1ZWZmMzkzLzAvRENERkVCOUIz MDcwNTMxQkQ3RjAxNjY3NzZBOUJENzkwRDgxNTZGMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EQ0RGRUI5QjMwNzA1MzFCRDdGMDE2Njc3NkE5QkQ3OTBEODE1 NkYzLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUFBzALhn9yc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGViOGI4ODktM2IzZC00ZWY1LWFk NzAtNWIxMDQ1ZWZmMzkzLzAvMzIzMDMyMmUzODJlMzIzOTJlMzAyZjMyMzQyZDMy MzQyMDNkM2UyMDM0MzUzNzMyMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADKCB0wDQYJKoZIhvcNAQEL BQADggEBAC4qJa9L+9l7O3xOSMGS4P9fj+d66IvoXIvf+wtUr53npWo/V6kn6k5C NoOP/JY8Vzm1dOcWW/PH9RWNuMHEcIbCh8jcJRwlffwIaVmrTJgCnvrqse4l0WmJ 7S8QmBIhNBVhDBzUsIZk0b0Sz2mAYYY86bWd8nTjAKa967Er+PgoBpIX/lu20fJY KxRoZCUs5zCI0W4LxXV83WygVeoN+UkOk2ttNdyqsDddhTfeA3cEjfpmCpt7m+hO oipZitPiylV/z9iNdG+0y0aKpMcrEhE+WEyAFHPc8kV8dOT+YJWobDuNjiQK9qnF NRubZG3QlSiadOEVaTD8wBO8Iz7j7yc= -----END CERTIFICATE-----Generated at Wed May 13 04:25:58 2026 by rpki-client