$ rpki-client -vvf rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230322e3134382e312e302f32342d3234203d3e2039373934.roa File: 3230322e3134382e312e302f32342d3234203d3e2039373934.roa (raw, json) Hash identifier: mo/bWOEP4lc81abTGBy/xQEf7gXiDCtW6+07/LVWo+U= Subject key identifier: FF:BE:76:74:C8:29:E1:F4:CA:3F:BE:8F:34:42:89:0E:26:E8:33:B6 Certificate issuer: /CN=2CB08023BB428AE4D02727C96B069C5F59CEE8A3 Certificate serial: 0FAFE554F9AAC7A985D09DF6812EF9FD280CAFA6 Authority key identifier: 2C:B0:80:23:BB:42:8A:E4:D0:27:27:C9:6B:06:9C:5F:59:CE:E8:A3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230322e3134382e312e302f32342d3234203d3e2039373934.roa Signing time: Sun 03 May 2026 03:17:22 +0000 ROA not before: Sun 03 May 2026 03:12:22 +0000 ROA not after: Sun 02 May 2027 03:17:22 +0000 asID: 9794 IP address blocks: 202.148.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.crl rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:af:e5:54:f9:aa:c7:a9:85:d0:9d:f6:81:2e:f9:fd:28:0c:af:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2CB08023BB428AE4D02727C96B069C5F59CEE8A3 Validity Not Before: May 3 03:12:22 2026 GMT Not After : May 2 03:17:22 2027 GMT Subject: CN=FFBE7674C829E1F4CA3FBE8F3442890E26E833B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:54:9f:7c:ef:4c:e7:0f:14:60:6f:1c:08:f0: b2:84:b6:fa:6a:d5:7f:64:ce:ea:fa:52:44:c9:95: 72:01:63:59:f7:69:72:61:6d:2f:c5:07:44:cf:3f: 87:a2:f3:6a:1b:98:2a:71:6d:fb:db:67:cf:49:88: 3d:a5:b3:8c:31:8c:dc:7e:1c:39:38:8d:d8:e4:af: d8:31:19:0f:02:85:9a:40:ae:85:8b:ef:fc:66:0f: ac:d2:0d:7f:5e:23:ef:e4:b3:79:a8:89:c5:b1:5d: 05:0a:ce:57:4f:2b:0f:98:0d:a3:50:3c:3d:5e:17: cb:98:b8:dd:9f:9a:ef:ad:88:82:41:41:9c:bf:08: a7:53:86:61:b5:c4:00:d3:42:4c:c4:44:60:65:16: f2:a7:84:07:97:c6:59:7f:cb:ed:e1:33:24:68:b8: a3:ec:49:5c:83:ff:f1:75:7a:9e:52:6f:08:af:d6: b0:a2:51:5c:ab:0d:da:52:cb:95:bc:7c:29:c2:44: 7e:32:04:47:a3:9a:56:f9:b0:ec:9d:d1:87:b4:c2: b6:48:b1:8b:98:30:6d:b1:ea:9e:fa:99:07:27:f8: 92:69:6d:2f:d8:46:42:51:29:89:45:17:40:22:80: d2:a7:13:af:c4:04:b2:f0:d2:2d:c8:8a:ba:f5:aa: 25:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:BE:76:74:C8:29:E1:F4:CA:3F:BE:8F:34:42:89:0E:26:E8:33:B6 X509v3 Authority Key Identifier: keyid:2C:B0:80:23:BB:42:8A:E4:D0:27:27:C9:6B:06:9C:5F:59:CE:E8:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230322e3134382e312e302f32342d3234203d3e2039373934.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.148.1.0/24 Signature Algorithm: sha256WithRSAEncryption 09:ba:64:a8:be:32:7d:69:07:ee:d0:89:03:0b:88:4f:24:0e: 97:31:bd:0a:f5:5c:12:ed:79:cb:72:45:69:a1:08:a5:50:26: 48:e5:94:09:e0:19:5e:e2:f9:e8:7d:db:2b:83:a9:5c:a2:57: 2d:e2:f4:cd:74:31:64:1f:79:90:ce:a7:a1:f5:38:13:a2:be: 56:fe:0a:e7:14:77:3c:1b:30:92:bc:9d:9f:ac:7b:f9:09:59: a5:36:35:1f:0e:3b:f9:b4:cd:d4:07:63:d9:86:78:67:59:b1: af:f9:12:ec:46:49:69:98:41:85:36:72:ef:05:c3:3e:58:69: 37:70:ec:bb:3d:25:ef:39:c4:5f:06:db:42:06:fc:4c:33:c0: 61:14:af:75:27:33:92:64:31:1f:8f:da:ac:a6:3d:61:2b:37: f3:54:a7:17:a3:57:ba:37:cd:49:51:84:00:93:df:b6:cb:e3: 60:02:6e:70:6d:66:60:3f:a0:91:6a:bd:6e:6a:33:77:44:49: 70:23:58:80:1c:7c:9b:34:b1:0a:74:7a:40:d5:91:e1:ba:b9: 68:d8:e9:b0:30:53:8b:43:d3:b8:e2:5c:d0:37:c0:cd:70:e5: f5:6f:00:a1:b5:60:a8:12:3a:49:38:fa:73:ed:f2:68:1c:a2: 33:c8:2b:e2 -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgIUD6/lVPmqx6mF0J32gS75/SgMr6YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkNCMDgwMjNCQjQyOEFFNEQwMjcyN0M5NkIwNjlDNUY1 OUNFRThBMzAeFw0yNjA1MDMwMzEyMjJaFw0yNzA1MDIwMzE3MjJaMDMxMTAvBgNV BAMTKEZGQkU3Njc0QzgyOUUxRjRDQTNGQkU4RjM0NDI4OTBFMjZFODMzQjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+VJ9870znDxRgbxwI8LKEtvpq 1X9kzur6UkTJlXIBY1n3aXJhbS/FB0TPP4ei82obmCpxbfvbZ89JiD2ls4wxjNx+ HDk4jdjkr9gxGQ8ChZpAroWL7/xmD6zSDX9eI+/ks3moicWxXQUKzldPKw+YDaNQ PD1eF8uYuN2fmu+tiIJBQZy/CKdThmG1xADTQkzERGBlFvKnhAeXxll/y+3hMyRo uKPsSVyD//F1ep5Sbwiv1rCiUVyrDdpSy5W8fCnCRH4yBEejmlb5sOyd0Ye0wrZI sYuYMG2x6p76mQcn+JJpbS/YRkJRKYlFF0AigNKnE6/EBLLw0i3Iirr1qiXFAgMB AAGjggItMIICKTAdBgNVHQ4EFgQU/752dMgp4fTKP76PNEKJDiboM7YwHwYDVR0j BBgwFoAULLCAI7tCiuTQJyfJawacX1nO6KMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjM0ZWNjNDAtNmI4NC00OWU4LWI2MGItNmU5OTA0MTI4Y2E4LzAvMkNCMDgwMjNC QjQyOEFFNEQwMjcyN0M5NkIwNjlDNUY1OUNFRThBMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yQ0IwODAyM0JCNDI4QUU0RDAyNzI3Qzk2QjA2OUM1RjU5Q0VF OEEzLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUFBzALhn9yc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjM0ZWNjNDAtNmI4NC00OWU4LWI2 MGItNmU5OTA0MTI4Y2E4LzAvMzIzMDMyMmUzMTM0MzgyZTMxMmUzMDJmMzIzNDJk MzIzNDIwM2QzZTIwMzkzNzM5MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADKlAEwDQYJKoZIhvcNAQEL BQADggEBAAm6ZKi+Mn1pB+7QiQMLiE8kDpcxvQr1XBLtectyRWmhCKVQJkjllAng GV7i+eh92yuDqVyiVy3i9M10MWQfeZDOp6H1OBOivlb+CucUdzwbMJK8nZ+se/kJ WaU2NR8OO/m0zdQHY9mGeGdZsa/5EuxGSWmYQYU2cu8Fwz5YaTdw7Ls9Je85xF8G 20IG/EwzwGEUr3UnM5JkMR+P2qymPWErN/NUpxejV7o3zUlRhACT37bL42ACbnBt ZmA/oJFqvW5qM3dESXAjWIAcfJs0sQp0ekDVkeG6uWjY6bAwU4tD07jiXNA3wM1w 5fVvAKG1YKgSOkk4+nPt8mgcojPIK+I= -----END CERTIFICATE-----Generated at Wed May 13 02:50:00 2026 by rpki-client