$ rpki-client -vvf rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230322e3134382e31372e302f32342d3234203d3e2039373934.roa File: 3230322e3134382e31372e302f32342d3234203d3e2039373934.roa (raw, json) Hash identifier: JqM4s85r7Xlxp+xFrSNWadPDetLQHRwUclzG5cigZNM= Subject key identifier: 3E:43:A8:C8:3A:B7:76:52:90:86:19:B9:5F:BF:40:D8:55:61:CE:8E Certificate issuer: /CN=2CB08023BB428AE4D02727C96B069C5F59CEE8A3 Certificate serial: 01D05CD362B4201A2EE8BE3F35CF8CA7BAB65025 Authority key identifier: 2C:B0:80:23:BB:42:8A:E4:D0:27:27:C9:6B:06:9C:5F:59:CE:E8:A3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230322e3134382e31372e302f32342d3234203d3e2039373934.roa Signing time: Sun 03 May 2026 03:17:25 +0000 ROA not before: Sun 03 May 2026 03:12:25 +0000 ROA not after: Sun 02 May 2027 03:17:25 +0000 asID: 9794 IP address blocks: 202.148.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.crl rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 00:40:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:d0:5c:d3:62:b4:20:1a:2e:e8:be:3f:35:cf:8c:a7:ba:b6:50:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2CB08023BB428AE4D02727C96B069C5F59CEE8A3 Validity Not Before: May 3 03:12:25 2026 GMT Not After : May 2 03:17:25 2027 GMT Subject: CN=3E43A8C83AB77652908619B95FBF40D85561CE8E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:89:03:9a:6e:80:b1:3c:f9:5d:2e:d8:f4:e5: cf:3e:55:d0:05:4d:7a:b0:a6:9a:c7:93:ab:25:17: 28:7e:06:7f:f0:5a:c9:bf:dd:ec:de:f7:87:1f:55: e3:0f:01:51:a9:c2:83:f9:da:f1:e0:a1:4f:fc:3c: 65:00:f7:63:a0:66:b6:6a:85:7c:d3:e6:78:d4:d9: 05:5a:52:2b:32:42:10:13:eb:9d:a9:f5:53:6e:28: a7:3c:b6:36:25:06:ef:cc:20:fb:bf:2f:cd:24:0f: 6e:c2:38:8c:c3:e1:a8:06:3b:6a:19:3c:48:df:4e: 46:bd:36:58:fa:83:e5:f1:81:2d:bd:4a:1c:51:e3: 6f:41:90:e2:ed:9f:e9:d0:65:be:8b:29:01:20:40: b1:7d:0a:7c:15:8c:b0:17:bc:a4:b7:93:7e:71:72: a0:fc:05:2d:c3:72:1c:59:9e:c4:fd:bf:f7:28:eb: 88:90:cd:97:0e:9a:a3:9a:70:64:4b:bf:89:f8:6d: de:0e:be:6d:ec:5e:a3:8b:7e:7e:71:a4:39:2c:62: d5:95:38:49:69:9e:62:fc:56:9c:d1:1d:02:9b:92: 25:89:b8:8e:99:e9:30:f1:c8:85:a9:73:3e:17:5b: 22:81:44:49:8a:14:5c:8f:b5:e7:dc:fe:75:4f:65: 19:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:43:A8:C8:3A:B7:76:52:90:86:19:B9:5F:BF:40:D8:55:61:CE:8E X509v3 Authority Key Identifier: keyid:2C:B0:80:23:BB:42:8A:E4:D0:27:27:C9:6B:06:9C:5F:59:CE:E8:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230322e3134382e31372e302f32342d3234203d3e2039373934.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.148.17.0/24 Signature Algorithm: sha256WithRSAEncryption 40:62:63:20:b6:6a:c0:11:d2:d6:20:12:57:3a:e6:ae:33:54: 6c:b4:e3:6f:12:0b:b7:ce:d8:9a:4a:89:94:87:4e:d5:2d:ac: 1c:fa:c4:93:6e:c2:7f:10:d6:9a:ff:0d:2f:3f:21:34:e7:f1: 73:76:9a:89:bc:2a:91:95:33:42:89:f6:06:b1:df:7e:f2:a4: 45:94:61:9b:c5:fe:5d:10:be:8c:14:50:5b:4b:a1:94:1e:cd: a8:33:ab:64:8c:60:bc:4f:c3:67:88:5e:e2:77:0e:d6:05:be: 51:e1:de:d7:03:ce:fb:fa:78:04:64:17:16:f9:e7:ba:0e:18: f1:bf:87:42:2c:2c:70:00:e4:87:5f:c7:01:1c:09:02:4d:67: bd:50:30:3f:a7:b6:4a:a9:f8:63:84:c2:e8:ee:76:05:42:d4: f6:0f:58:62:c1:d9:b0:ac:71:36:8a:d7:db:49:ab:f2:50:0d: 3b:2f:e5:58:34:c1:f7:88:99:14:fd:4d:9f:61:82:d7:60:58: bb:5e:70:98:0c:1b:8d:28:5f:c5:06:b2:64:1c:aa:30:33:ec: 50:02:85:26:90:7f:db:2e:56:d5:8d:c1:e8:ba:30:3e:b1:40: 82:1b:c8:ff:74:58:6c:0d:37:b6:7f:34:5f:bb:ac:03:fb:71: 03:fc:36:4f -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUAdBc02K0IBou6L4/Nc+Mp7q2UCUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkNCMDgwMjNCQjQyOEFFNEQwMjcyN0M5NkIwNjlDNUY1 OUNFRThBMzAeFw0yNjA1MDMwMzEyMjVaFw0yNzA1MDIwMzE3MjVaMDMxMTAvBgNV BAMTKDNFNDNBOEM4M0FCNzc2NTI5MDg2MTlCOTVGQkY0MEQ4NTU2MUNFOEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1iQOaboCxPPldLtj05c8+VdAF TXqwpprHk6slFyh+Bn/wWsm/3eze94cfVeMPAVGpwoP52vHgoU/8PGUA92OgZrZq hXzT5njU2QVaUisyQhAT652p9VNuKKc8tjYlBu/MIPu/L80kD27COIzD4agGO2oZ PEjfTka9Nlj6g+XxgS29ShxR429BkOLtn+nQZb6LKQEgQLF9CnwVjLAXvKS3k35x cqD8BS3DchxZnsT9v/co64iQzZcOmqOacGRLv4n4bd4Ovm3sXqOLfn5xpDksYtWV OElpnmL8VpzRHQKbkiWJuI6Z6TDxyIWpcz4XWyKBREmKFFyPtefc/nVPZRnrAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUPkOoyDq3dlKQhhm5X79A2FVhzo4wHwYDVR0j BBgwFoAULLCAI7tCiuTQJyfJawacX1nO6KMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjM0ZWNjNDAtNmI4NC00OWU4LWI2MGItNmU5OTA0MTI4Y2E4LzAvMkNCMDgwMjNC QjQyOEFFNEQwMjcyN0M5NkIwNjlDNUY1OUNFRThBMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yQ0IwODAyM0JCNDI4QUU0RDAyNzI3Qzk2QjA2OUM1RjU5Q0VF OEEzLmNlcjCBoQYIKwYBBQUHAQsEgZQwgZEwgY4GCCsGAQUFBzALhoGBcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2YzNGVjYzQwLTZiODQtNDllOC1i NjBiLTZlOTkwNDEyOGNhOC8wLzMyMzAzMjJlMzEzNDM4MmUzMTM3MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzkzNzM5MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADKlBEwDQYJKoZIhvcN AQELBQADggEBAEBiYyC2asAR0tYgElc65q4zVGy0428SC7fO2JpKiZSHTtUtrBz6 xJNuwn8Q1pr/DS8/ITTn8XN2mom8KpGVM0KJ9gax337ypEWUYZvF/l0QvowUUFtL oZQezagzq2SMYLxPw2eIXuJ3DtYFvlHh3tcDzvv6eARkFxb557oOGPG/h0IsLHAA 5IdfxwEcCQJNZ71QMD+ntkqp+GOEwujudgVC1PYPWGLB2bCscTaK19tJq/JQDTsv 5Vg0wfeImRT9TZ9hgtdgWLtecJgMG40oX8UGsmQcqjAz7FAChSaQf9suVtWNwei6 MD6xQIIbyP90WGwNN7Z/NF+7rAP7cQP8Nk8= -----END CERTIFICATE-----Generated at Wed May 13 04:20:10 2026 by rpki-client