$ rpki-client -vvf rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230322e3134382e31382e302f32342d3234203d3e2039373934.roa File: 3230322e3134382e31382e302f32342d3234203d3e2039373934.roa (raw, json) Hash identifier: At+t9zhrOFB9v+LAc96ILqJlnxAw+xXTNT0DFekPeXo= Subject key identifier: D3:FE:11:96:69:65:EA:A9:60:65:2A:BE:E0:5A:B4:75:B9:50:4B:82 Certificate issuer: /CN=2CB08023BB428AE4D02727C96B069C5F59CEE8A3 Certificate serial: 2E706BD3F23F76536A57BCA1DBCE611C463948FC Authority key identifier: 2C:B0:80:23:BB:42:8A:E4:D0:27:27:C9:6B:06:9C:5F:59:CE:E8:A3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230322e3134382e31382e302f32342d3234203d3e2039373934.roa Signing time: Sun 03 May 2026 03:17:20 +0000 ROA not before: Sun 03 May 2026 03:12:20 +0000 ROA not after: Sun 02 May 2027 03:17:20 +0000 asID: 9794 IP address blocks: 202.148.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.crl rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 00:40:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:70:6b:d3:f2:3f:76:53:6a:57:bc:a1:db:ce:61:1c:46:39:48:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2CB08023BB428AE4D02727C96B069C5F59CEE8A3 Validity Not Before: May 3 03:12:20 2026 GMT Not After : May 2 03:17:20 2027 GMT Subject: CN=D3FE11966965EAA960652ABEE05AB475B9504B82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:75:27:d7:84:8a:72:4b:df:a1:e7:e6:e3:1f: 91:df:aa:9e:b6:bc:50:15:aa:2a:e6:9c:53:25:d2: 9b:08:a5:00:1e:7d:56:15:ac:5c:10:d0:ea:42:ab: 5e:d7:80:24:b6:f5:df:46:0f:b6:67:9b:c0:3e:fc: 0f:c3:70:57:bc:b5:c4:61:01:82:a7:bc:1e:47:12: 22:91:e9:e8:8f:d5:71:91:12:54:e3:64:47:33:63: 61:8d:20:89:1c:9a:65:10:ad:85:5e:35:8a:64:dc: db:fe:64:e6:45:33:e4:40:53:98:91:5a:15:4e:74: f0:b2:88:d1:ed:df:1a:f4:cd:69:9b:93:a8:c3:24: dd:37:77:c6:e7:98:47:76:d3:fb:b8:a8:44:5e:11: 6e:f9:f1:6f:13:d2:b3:fe:b9:42:29:bf:d8:0a:6c: 7e:e9:b1:05:ff:65:d6:80:3b:4d:96:c0:52:78:22: 7b:ad:de:bd:d7:d2:c6:34:73:10:62:44:b1:eb:d1: 1f:d6:2d:93:69:65:4a:4b:75:34:b6:af:63:62:dc: 0f:82:09:af:84:41:aa:7d:49:7f:47:26:ad:24:1d: e6:33:76:4f:37:49:7c:0b:c7:0d:5e:f1:6e:05:0d: 23:5b:b9:76:d0:74:11:1c:3e:93:0d:a0:ec:cc:68: fa:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:FE:11:96:69:65:EA:A9:60:65:2A:BE:E0:5A:B4:75:B9:50:4B:82 X509v3 Authority Key Identifier: keyid:2C:B0:80:23:BB:42:8A:E4:D0:27:27:C9:6B:06:9C:5F:59:CE:E8:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230322e3134382e31382e302f32342d3234203d3e2039373934.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.148.18.0/24 Signature Algorithm: sha256WithRSAEncryption 9f:58:79:2e:d0:d1:83:fa:f5:1a:d0:90:07:ff:d8:07:2a:8b: 54:2e:59:b0:ae:7e:1c:4e:e1:af:4a:3b:10:87:60:85:a2:80: f0:5e:03:27:b4:6d:2c:8a:c5:b3:90:71:ec:65:59:22:38:cf: 56:8f:0c:eb:80:8f:01:a4:98:30:99:5e:37:85:11:d1:5d:95: 22:76:b5:14:dd:91:d0:57:72:20:71:02:1c:40:2b:7c:98:ae: c8:f9:6c:4c:b2:82:0b:50:3f:4d:41:72:5d:33:60:f8:e1:dc: 22:cb:4a:a8:ad:21:f8:77:59:8f:b4:bd:0b:9e:5c:eb:fa:8b: 71:dd:4a:56:db:f5:36:bc:1e:b9:23:7d:c7:a3:52:41:11:f9: a9:36:d6:c7:8d:0e:53:23:84:b8:bf:90:80:01:20:1e:4b:a2: 1a:c3:85:e5:57:9c:1a:81:09:28:e5:d6:70:48:1a:46:a0:35: b3:43:a1:06:29:75:d5:a4:26:04:15:1f:1e:36:3f:54:3b:26: e1:0f:c2:28:d6:23:53:72:5a:bd:a9:68:37:48:ad:10:82:96: a3:c0:21:6e:51:4c:63:11:f9:8b:97:5c:68:96:d3:d0:c0:3e: fb:66:b6:8b:90:5f:b4:54:86:0d:09:d1:2c:23:29:73:07:aa: cb:9c:8e:ca -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIULnBr0/I/dlNqV7yh285hHEY5SPwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkNCMDgwMjNCQjQyOEFFNEQwMjcyN0M5NkIwNjlDNUY1 OUNFRThBMzAeFw0yNjA1MDMwMzEyMjBaFw0yNzA1MDIwMzE3MjBaMDMxMTAvBgNV BAMTKEQzRkUxMTk2Njk2NUVBQTk2MDY1MkFCRUUwNUFCNDc1Qjk1MDRCODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPdSfXhIpyS9+h5+bjH5Hfqp62 vFAVqirmnFMl0psIpQAefVYVrFwQ0OpCq17XgCS29d9GD7Znm8A+/A/DcFe8tcRh AYKnvB5HEiKR6eiP1XGRElTjZEczY2GNIIkcmmUQrYVeNYpk3Nv+ZOZFM+RAU5iR WhVOdPCyiNHt3xr0zWmbk6jDJN03d8bnmEd20/u4qEReEW758W8T0rP+uUIpv9gK bH7psQX/ZdaAO02WwFJ4Inut3r3X0sY0cxBiRLHr0R/WLZNpZUpLdTS2r2Ni3A+C Ca+EQap9SX9HJq0kHeYzdk83SXwLxw1e8W4FDSNbuXbQdBEcPpMNoOzMaPqVAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQU0/4Rlmll6qlgZSq+4Fq0dblQS4IwHwYDVR0j BBgwFoAULLCAI7tCiuTQJyfJawacX1nO6KMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjM0ZWNjNDAtNmI4NC00OWU4LWI2MGItNmU5OTA0MTI4Y2E4LzAvMkNCMDgwMjNC QjQyOEFFNEQwMjcyN0M5NkIwNjlDNUY1OUNFRThBMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yQ0IwODAyM0JCNDI4QUU0RDAyNzI3Qzk2QjA2OUM1RjU5Q0VF OEEzLmNlcjCBoQYIKwYBBQUHAQsEgZQwgZEwgY4GCCsGAQUFBzALhoGBcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2YzNGVjYzQwLTZiODQtNDllOC1i NjBiLTZlOTkwNDEyOGNhOC8wLzMyMzAzMjJlMzEzNDM4MmUzMTM4MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzkzNzM5MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADKlBIwDQYJKoZIhvcN AQELBQADggEBAJ9YeS7Q0YP69RrQkAf/2Acqi1QuWbCufhxO4a9KOxCHYIWigPBe Aye0bSyKxbOQcexlWSI4z1aPDOuAjwGkmDCZXjeFEdFdlSJ2tRTdkdBXciBxAhxA K3yYrsj5bEyyggtQP01Bcl0zYPjh3CLLSqitIfh3WY+0vQueXOv6i3HdSlbb9Ta8 HrkjfcejUkER+ak21seNDlMjhLi/kIABIB5LohrDheVXnBqBCSjl1nBIGkagNbND oQYpddWkJgQVHx42P1Q7JuEPwijWI1NyWr2paDdIrRCClqPAIW5RTGMR+YuXXGiW 09DAPvtmtouQX7RUhg0J0SwjKXMHqsucjso= -----END CERTIFICATE-----Generated at Wed May 13 04:20:16 2026 by rpki-client