$ rpki-client -vvf rpki-rsync.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/3230322e34332e3131332e302f32342d3234203d3e203435333235.roa File: 3230322e34332e3131332e302f32342d3234203d3e203435333235.roa (raw, json) Hash identifier: 1WM6A0xkGbon1XjjFMKySJrVDJV2Gtw2xI0n8qXoIUg= Subject key identifier: 65:F2:14:81:AE:00:08:F0:3E:6D:68:27:AD:1E:B9:27:DB:85:AB:D5 Certificate issuer: /CN=D35962E8F839460DC5283C472D81ADB87BBD3992 Certificate serial: 572E737C9070731BAF06607239AD5D13FF3BB5A0 Authority key identifier: D3:59:62:E8:F8:39:46:0D:C5:28:3C:47:2D:81:AD:B8:7B:BD:39:92 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D35962E8F839460DC5283C472D81ADB87BBD3992.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/3230322e34332e3131332e302f32342d3234203d3e203435333235.roa Signing time: Sun 03 May 2026 03:12:02 +0000 ROA not before: Sun 03 May 2026 03:07:02 +0000 ROA not after: Sun 02 May 2027 03:12:02 +0000 asID: 45325 IP address blocks: 202.43.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/D35962E8F839460DC5283C472D81ADB87BBD3992.crl rsync://rpki-rsync.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/D35962E8F839460DC5283C472D81ADB87BBD3992.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D35962E8F839460DC5283C472D81ADB87BBD3992.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:2e:73:7c:90:70:73:1b:af:06:60:72:39:ad:5d:13:ff:3b:b5:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D35962E8F839460DC5283C472D81ADB87BBD3992 Validity Not Before: May 3 03:07:02 2026 GMT Not After : May 2 03:12:02 2027 GMT Subject: CN=65F21481AE0008F03E6D6827AD1EB927DB85ABD5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:d6:6c:a0:a6:90:9d:b4:09:df:e3:41:ed:3d: ae:d0:26:50:db:be:f9:64:9e:60:97:a5:85:62:03: e0:cb:f6:fe:55:06:f2:75:dc:c3:26:e3:b8:f5:2a: 9e:7a:50:d7:0f:bf:4b:7b:c5:a9:0c:63:2c:43:f2: 11:14:d4:24:64:91:ec:1a:c0:12:da:60:0e:ff:bc: 4d:5e:12:c5:a2:b0:46:62:85:a6:27:a2:bc:71:bf: 51:a4:dd:93:77:92:f5:82:7d:45:0a:75:2b:76:c3: 3c:c1:19:09:40:ea:0c:c1:58:be:1c:4d:69:e6:9e: 4f:1e:87:d6:30:b6:89:51:23:b5:7f:0d:d7:f6:ca: dd:d0:fa:1f:4b:8f:4a:a3:46:6b:86:36:6c:5e:6b: ee:24:55:d7:7a:70:cb:f1:c2:05:ee:1e:61:c8:83: 3e:53:ea:fa:24:17:13:13:c2:61:af:be:f7:53:d9: 2c:6b:bb:36:a7:97:9d:19:8f:5a:09:f5:e3:db:17: e6:02:38:b0:5b:04:99:90:c1:90:fa:91:ac:0c:cf: 79:09:72:68:b2:e9:70:4a:4d:40:4e:b3:70:d9:69: f0:5b:e4:15:a6:70:01:94:90:00:5a:77:37:df:58: 87:1e:f8:b2:00:19:c2:65:22:4e:78:a1:d7:c2:74: f4:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:F2:14:81:AE:00:08:F0:3E:6D:68:27:AD:1E:B9:27:DB:85:AB:D5 X509v3 Authority Key Identifier: keyid:D3:59:62:E8:F8:39:46:0D:C5:28:3C:47:2D:81:AD:B8:7B:BD:39:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/D35962E8F839460DC5283C472D81ADB87BBD3992.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D35962E8F839460DC5283C472D81ADB87BBD3992.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/3230322e34332e3131332e302f32342d3234203d3e203435333235.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.43.113.0/24 Signature Algorithm: sha256WithRSAEncryption 4b:3d:c2:e3:28:91:e7:67:cd:e1:4a:0b:ee:3c:e0:a7:e9:b4: 86:c3:7e:d9:d4:d5:27:0a:f0:d2:b1:99:b4:24:ba:2f:59:42: d3:6c:41:fd:ef:91:72:e7:fe:74:80:12:ac:72:26:33:cc:f6: 88:65:c3:9a:a8:e3:ac:69:33:41:67:8d:c0:a6:9f:29:37:a9: 77:70:5f:90:8d:9e:d1:62:e5:f4:c0:ba:9c:c8:21:c8:6e:d0: 2e:c5:b7:a1:31:29:ac:6f:e0:e1:50:25:5f:01:2e:cc:84:a6: f2:88:f7:77:3a:71:4a:fa:9c:17:7e:42:13:89:05:0b:29:0f: e2:e7:b5:f5:40:2c:b5:79:a1:0a:13:3d:7f:51:df:30:ee:90: 9d:33:b3:27:fc:cf:6f:ac:2d:1c:5a:c3:58:4e:ad:54:73:5d: a9:74:b8:fc:3a:e5:5d:8b:6c:16:7b:64:25:27:e6:1c:e2:62: 01:e8:5b:80:c6:ea:e8:72:0d:27:bb:47:7f:d2:91:b4:bf:8a: 8b:44:20:28:34:f5:e2:74:9d:88:16:6d:ee:83:42:14:0d:38: 58:ea:3f:2e:b0:53:84:63:c1:26:ba:2c:dc:a5:45:8d:2e:6c: 23:97:bb:b2:49:61:f9:3d:42:4b:4f:cd:51:d2:6f:51:06:4f: e9:e1:ff:32 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUVy5zfJBwcxuvBmByOa1dE/87taAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM1OTYyRThGODM5NDYwREM1MjgzQzQ3MkQ4MUFEQjg3 QkJEMzk5MjAeFw0yNjA1MDMwMzA3MDJaFw0yNzA1MDIwMzEyMDJaMDMxMTAvBgNV BAMTKDY1RjIxNDgxQUUwMDA4RjAzRTZENjgyN0FEMUVCOTI3REI4NUFCRDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCh1mygppCdtAnf40HtPa7QJlDb vvlknmCXpYViA+DL9v5VBvJ13MMm47j1Kp56UNcPv0t7xakMYyxD8hEU1CRkkewa wBLaYA7/vE1eEsWisEZihaYnorxxv1Gk3ZN3kvWCfUUKdSt2wzzBGQlA6gzBWL4c TWnmnk8eh9YwtolRI7V/Ddf2yt3Q+h9Lj0qjRmuGNmxea+4kVdd6cMvxwgXuHmHI gz5T6vokFxMTwmGvvvdT2Sxruzanl50Zj1oJ9ePbF+YCOLBbBJmQwZD6kawMz3kJ cmiy6XBKTUBOs3DZafBb5BWmcAGUkABadzffWIce+LIAGcJlIk54odfCdPRXAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUZfIUga4ACPA+bWgnrR65J9uFq9UwHwYDVR0j BBgwFoAU01li6Pg5Rg3FKDxHLYGtuHu9OZIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGYyZTdmZDYtZWI1ZS00ODBhLThlOTctYzU1ZjY4ZTA1ODlhLzAvRDM1OTYyRThG ODM5NDYwREM1MjgzQzQ3MkQ4MUFEQjg3QkJEMzk5Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EMzU5NjJFOEY4Mzk0NjBEQzUyODNDNDcyRDgxQURCODdCQkQz OTkyLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2RmMmU3ZmQ2LWViNWUtNDgwYS04 ZTk3LWM1NWY2OGUwNTg5YS8wLzMyMzAzMjJlMzQzMzJlMzEzMTMzMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzQzNTMzMzIzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMorcTANBgkqhkiG 9w0BAQsFAAOCAQEASz3C4yiR52fN4UoL7jzgp+m0hsN+2dTVJwrw0rGZtCS6L1lC 02xB/e+Rcuf+dIASrHImM8z2iGXDmqjjrGkzQWeNwKafKTepd3BfkI2e0WLl9MC6 nMghyG7QLsW3oTEprG/g4VAlXwEuzISm8oj3dzpxSvqcF35CE4kFCykP4ue19UAs tXmhChM9f1HfMO6QnTOzJ/zPb6wtHFrDWE6tVHNdqXS4/DrlXYtsFntkJSfmHOJi AehbgMbq6HINJ7tHf9KRtL+Ki0QgKDT14nSdiBZt7oNCFA04WOo/LrBThGPBJros 3KVFjS5sI5e7sklh+T1CS0/NUdJvUQZP6eH/Mg== -----END CERTIFICATE-----Generated at Wed May 13 02:18:58 2026 by rpki-client