$ rpki-client -vvf rpki-rsync.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/3230322e39352e3132382e302f31392d3234203d3e2039383735.roa File: 3230322e39352e3132382e302f31392d3234203d3e2039383735.roa (raw, json) Hash identifier: 8HTV0U7VPfbofWQktj6RT5pn5RIkHHJ7XlxCG7/lIR4= Subject key identifier: 2E:26:D9:29:C1:FC:70:C0:FB:3B:ED:22:2C:E5:56:AD:06:02:DF:77 Certificate issuer: /CN=4242BEFAB7FD9E772FB16847C540331384EE1024 Certificate serial: 48381F19A279A905D4769A428188FD1AF89C6BAA Authority key identifier: 42:42:BE:FA:B7:FD:9E:77:2F:B1:68:47:C5:40:33:13:84:EE:10:24 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4242BEFAB7FD9E772FB16847C540331384EE1024.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/3230322e39352e3132382e302f31392d3234203d3e2039383735.roa Signing time: Sun 03 May 2026 03:15:29 +0000 ROA not before: Sun 03 May 2026 03:10:29 +0000 ROA not after: Sun 02 May 2027 03:15:29 +0000 asID: 9875 IP address blocks: 202.95.128.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/4242BEFAB7FD9E772FB16847C540331384EE1024.crl rsync://rpki-rsync.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/4242BEFAB7FD9E772FB16847C540331384EE1024.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4242BEFAB7FD9E772FB16847C540331384EE1024.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:38:1f:19:a2:79:a9:05:d4:76:9a:42:81:88:fd:1a:f8:9c:6b:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4242BEFAB7FD9E772FB16847C540331384EE1024 Validity Not Before: May 3 03:10:29 2026 GMT Not After : May 2 03:15:29 2027 GMT Subject: CN=2E26D929C1FC70C0FB3BED222CE556AD0602DF77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:c4:9a:77:dc:0a:83:51:79:9c:ef:f6:7e:bc: f3:fc:f2:e4:50:cc:dc:19:97:12:f4:97:58:fb:19: ac:78:39:0f:31:38:7f:24:99:82:9e:68:bc:9d:0a: 4b:05:ae:3d:35:8c:18:38:8e:e0:d6:7b:23:dd:58: 92:33:f4:c9:b6:6b:41:45:30:a2:e6:74:1d:51:19: 76:ab:11:f7:1b:ed:5a:6d:ab:94:92:69:22:94:ff: 3b:b6:73:75:3a:cf:d0:42:81:ef:c5:60:35:21:08: 36:5a:65:be:f9:9a:4a:d7:a2:66:0a:ef:df:82:79: 2b:f4:06:b7:c9:35:f3:c4:ff:8a:79:70:32:1e:34: 26:90:e0:9a:96:b6:6f:31:0c:b0:5c:39:43:f8:23: 5e:9e:83:65:2e:f4:a7:42:51:e9:9b:db:82:fc:be: 97:02:37:4f:3b:20:49:ea:73:ac:d0:c9:7b:83:15: 64:5f:b7:cc:a9:dd:76:14:a7:69:59:00:7b:42:c8: a8:24:9e:50:fe:30:d9:57:71:84:e2:7f:1a:f0:b9: e5:8c:d8:ff:90:dc:d0:6c:9c:5b:64:36:80:61:c0: ec:a3:b5:80:0f:16:5e:26:57:d4:57:cb:8b:d8:46: 4c:0b:40:57:97:06:2d:ba:19:26:ae:42:7b:8e:89: 81:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:26:D9:29:C1:FC:70:C0:FB:3B:ED:22:2C:E5:56:AD:06:02:DF:77 X509v3 Authority Key Identifier: keyid:42:42:BE:FA:B7:FD:9E:77:2F:B1:68:47:C5:40:33:13:84:EE:10:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/4242BEFAB7FD9E772FB16847C540331384EE1024.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4242BEFAB7FD9E772FB16847C540331384EE1024.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/3230322e39352e3132382e302f31392d3234203d3e2039383735.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.95.128.0/19 Signature Algorithm: sha256WithRSAEncryption 6d:5a:f2:60:bc:3d:56:e4:97:2f:35:19:a9:17:2f:85:da:0e: 60:b2:69:34:3d:1b:9e:36:32:50:26:0e:a2:74:ee:80:71:de: 7b:bb:3a:a3:64:80:66:6c:fa:33:06:fe:d9:86:c6:23:28:8a: 8d:5f:a0:bd:b4:b3:a7:4a:36:e3:21:83:76:ab:fb:05:f6:4d: 8b:ea:34:05:7b:81:13:26:4c:3e:9a:1c:63:dc:08:ac:27:bc: cc:24:a2:ca:bc:a9:b4:3a:f1:fa:26:ad:9b:79:9e:93:c3:17: e8:96:c4:d4:41:fe:50:04:40:94:df:10:03:b1:3f:fd:73:84: b3:90:9e:02:42:21:32:04:e9:8c:37:40:40:5e:1c:fc:0b:95: 67:dd:bf:ca:c5:5d:7c:a7:bd:2b:e0:58:05:83:2a:f4:22:46: 6e:f2:f5:ab:1d:bc:95:e6:3f:2c:af:59:f0:18:db:f7:28:ac: cd:3d:fa:93:27:27:e0:0b:9a:74:0b:3e:44:4e:39:d7:08:38: 7a:1a:b9:4b:c0:16:fb:2a:55:a6:7a:f9:1d:b4:f8:0b:8b:9a: 90:29:33:3c:66:a6:83:e2:58:19:63:88:c6:ae:e5:bb:9f:39: 2e:38:ea:37:ba:42:11:ff:4e:32:66:4b:c7:e6:21:fb:a8:9d: 0f:50:ce:50 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUSDgfGaJ5qQXUdppCgYj9Gvica6owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDI0MkJFRkFCN0ZEOUU3NzJGQjE2ODQ3QzU0MDMzMTM4 NEVFMTAyNDAeFw0yNjA1MDMwMzEwMjlaFw0yNzA1MDIwMzE1MjlaMDMxMTAvBgNV BAMTKDJFMjZEOTI5QzFGQzcwQzBGQjNCRUQyMjJDRTU1NkFEMDYwMkRGNzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzxJp33AqDUXmc7/Z+vPP88uRQ zNwZlxL0l1j7Gax4OQ8xOH8kmYKeaLydCksFrj01jBg4juDWeyPdWJIz9Mm2a0FF MKLmdB1RGXarEfcb7Vptq5SSaSKU/zu2c3U6z9BCge/FYDUhCDZaZb75mkrXomYK 79+CeSv0BrfJNfPE/4p5cDIeNCaQ4JqWtm8xDLBcOUP4I16eg2Uu9KdCUemb24L8 vpcCN087IEnqc6zQyXuDFWRft8yp3XYUp2lZAHtCyKgknlD+MNlXcYTifxrwueWM 2P+Q3NBsnFtkNoBhwOyjtYAPFl4mV9RXy4vYRkwLQFeXBi26GSauQnuOiYE/AgMB AAGjggIwMIICLDAdBgNVHQ4EFgQULibZKcH8cMD7O+0iLOVWrQYC33cwHwYDVR0j BBgwFoAUQkK++rf9nncvsWhHxUAzE4TuECQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWJiZmU3NzYtMDBhMy00Nzc2LWJmM2YtNTIxMTk0NjEwMWMzLzAvNDI0MkJFRkFC N0ZEOUU3NzJGQjE2ODQ3QzU0MDMzMTM4NEVFMTAyNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80MjQyQkVGQUI3RkQ5RTc3MkZCMTY4NDdDNTQwMzMxMzg0RUUx MDI0LmNlcjCBoQYIKwYBBQUHAQsEgZQwgZEwgY4GCCsGAQUFBzALhoGBcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2ViYmZlNzc2LTAwYTMtNDc3Ni1i ZjNmLTUyMTE5NDYxMDFjMy8wLzMyMzAzMjJlMzkzNTJlMzEzMjM4MmUzMDJmMzEz OTJkMzIzNDIwM2QzZTIwMzkzODM3MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAXKX4AwDQYJKoZIhvcN AQELBQADggEBAG1a8mC8PVbkly81GakXL4XaDmCyaTQ9G542MlAmDqJ07oBx3nu7 OqNkgGZs+jMG/tmGxiMoio1foL20s6dKNuMhg3ar+wX2TYvqNAV7gRMmTD6aHGPc CKwnvMwkosq8qbQ68fomrZt5npPDF+iWxNRB/lAEQJTfEAOxP/1zhLOQngJCITIE 6Yw3QEBeHPwLlWfdv8rFXXynvSvgWAWDKvQiRm7y9asdvJXmPyyvWfAY2/corM09 +pMnJ+ALmnQLPkROOdcIOHoauUvAFvsqVaZ6+R20+AuLmpApMzxmpoPiWBljiMau 5bufOS446je6QhH/TjJmS8fmIfuonQ9QzlA= -----END CERTIFICATE-----Generated at Wed May 13 00:14:04 2026 by rpki-client