$ rpki-client -vvf rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230322e3134382e32312e302f32342d3234203d3e2039373934.roa File: 3230322e3134382e32312e302f32342d3234203d3e2039373934.roa (raw, json) Hash identifier: U9I2lXgxEtYWjS5Z8MiQ8E/SPbqRQn+q7n5MBV7ks84= Subject key identifier: C3:83:91:AA:FB:7C:0C:43:2C:69:95:45:EF:EB:32:58:FF:63:5A:75 Certificate issuer: /CN=2CB08023BB428AE4D02727C96B069C5F59CEE8A3 Certificate serial: 139EEDCB642A560EF8EB2837CE66E165E5F28E12 Authority key identifier: 2C:B0:80:23:BB:42:8A:E4:D0:27:27:C9:6B:06:9C:5F:59:CE:E8:A3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230322e3134382e32312e302f32342d3234203d3e2039373934.roa Signing time: Sun 03 May 2026 03:17:13 +0000 ROA not before: Sun 03 May 2026 03:12:13 +0000 ROA not after: Sun 02 May 2027 03:17:13 +0000 asID: 9794 IP address blocks: 202.148.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.crl rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 00:40:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:9e:ed:cb:64:2a:56:0e:f8:eb:28:37:ce:66:e1:65:e5:f2:8e:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2CB08023BB428AE4D02727C96B069C5F59CEE8A3 Validity Not Before: May 3 03:12:13 2026 GMT Not After : May 2 03:17:13 2027 GMT Subject: CN=C38391AAFB7C0C432C699545EFEB3258FF635A75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:ab:be:26:c2:9c:5d:be:9b:d6:10:62:06:f4: 71:84:b1:a3:54:4e:5d:7f:6f:f2:3a:46:4c:b3:a4: 8d:80:a0:e7:ad:ee:d5:e6:f0:48:a5:53:cf:4b:01: c3:a0:a7:94:84:a2:1a:0a:8c:d4:1e:29:c6:61:2d: 78:a2:2a:aa:dc:a3:02:5b:17:c3:17:7e:20:73:b3: 0a:45:f8:7c:1f:ef:52:c6:b3:47:79:41:4c:7a:ff: b0:46:39:ad:d8:ca:5b:00:a3:1d:58:9f:8b:1b:c1: 32:e9:2c:fb:ef:de:c8:f6:d8:db:7f:c9:44:d3:ca: ce:f5:ec:61:41:fb:a4:4b:53:16:c4:9b:e0:52:79: af:65:aa:4c:a0:9c:17:1b:d9:72:2c:16:4b:1d:a9: 5e:b1:e2:1f:95:76:bb:f0:3a:a1:59:55:86:6d:45: e8:79:1a:f2:c6:cc:dc:a9:83:af:ad:72:a1:26:87: 2a:cb:cf:43:6e:b4:53:bc:c5:0e:d1:81:8e:22:cf: 6c:ea:7f:9f:65:77:a4:d9:39:e2:3a:a0:b6:c9:bb: 06:2d:d0:bd:fb:36:5d:ad:aa:68:13:79:16:d6:d3: 2e:4a:9b:55:99:01:f9:10:e1:bd:bd:4f:ab:b7:73: 34:3c:66:5b:59:c3:1f:d5:34:ed:c0:3f:60:7b:e0: 70:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:83:91:AA:FB:7C:0C:43:2C:69:95:45:EF:EB:32:58:FF:63:5A:75 X509v3 Authority Key Identifier: keyid:2C:B0:80:23:BB:42:8A:E4:D0:27:27:C9:6B:06:9C:5F:59:CE:E8:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230322e3134382e32312e302f32342d3234203d3e2039373934.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.148.21.0/24 Signature Algorithm: sha256WithRSAEncryption 6c:31:7b:e4:87:f7:47:ef:84:1e:74:8a:db:ee:0f:85:76:7d: a9:6a:30:44:a5:d2:f9:a8:2f:89:96:06:9f:6d:2a:8e:ff:47: f5:4f:8d:51:cd:cd:3f:2c:38:b6:ec:44:4e:4b:24:54:8c:25: 94:c6:54:8f:9b:04:ab:c5:d5:b0:5d:25:af:23:1d:39:51:5c: 12:1b:3a:9e:82:90:23:e6:b0:41:76:dc:d4:b2:d2:6d:fc:bb: 00:9f:3f:6a:52:a4:27:ae:cb:9d:bd:a6:ea:93:90:fe:fa:88: 40:f7:3a:c6:93:03:48:c2:d8:96:15:a3:1c:95:22:21:97:56: 12:69:70:2f:d1:78:69:f4:3a:26:11:92:ef:ef:49:45:ab:fc: f3:64:ab:bb:eb:53:19:68:70:51:1d:c6:52:13:e6:11:bc:66: 06:ac:0d:5a:be:6b:a3:04:5c:07:51:91:63:3c:68:02:8b:82: 45:c9:d2:7a:dd:31:1f:5a:7c:e5:6d:a5:eb:46:04:3f:2e:eb: 22:b8:b6:cc:ac:85:ce:20:1b:0e:b1:05:b9:7d:c6:30:f9:0d: 3b:ff:3f:87:99:de:49:e5:4d:b8:31:da:83:98:a0:69:88:20: 1d:b1:19:89:3a:5a:e0:b1:10:c4:02:69:d5:11:cb:a4:73:13: 8e:fd:92:27 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUE57ty2QqVg746yg3zmbhZeXyjhIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkNCMDgwMjNCQjQyOEFFNEQwMjcyN0M5NkIwNjlDNUY1 OUNFRThBMzAeFw0yNjA1MDMwMzEyMTNaFw0yNzA1MDIwMzE3MTNaMDMxMTAvBgNV BAMTKEMzODM5MUFBRkI3QzBDNDMyQzY5OTU0NUVGRUIzMjU4RkY2MzVBNzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYq74mwpxdvpvWEGIG9HGEsaNU Tl1/b/I6RkyzpI2AoOet7tXm8EilU89LAcOgp5SEohoKjNQeKcZhLXiiKqrcowJb F8MXfiBzswpF+Hwf71LGs0d5QUx6/7BGOa3YylsAox1Yn4sbwTLpLPvv3sj22Nt/ yUTTys717GFB+6RLUxbEm+BSea9lqkygnBcb2XIsFksdqV6x4h+VdrvwOqFZVYZt Reh5GvLGzNypg6+tcqEmhyrLz0NutFO8xQ7RgY4iz2zqf59ld6TZOeI6oLbJuwYt 0L37Nl2tqmgTeRbW0y5Km1WZAfkQ4b29T6u3czQ8ZltZwx/VNO3AP2B74HBPAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUw4ORqvt8DEMsaZVF7+syWP9jWnUwHwYDVR0j BBgwFoAULLCAI7tCiuTQJyfJawacX1nO6KMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjM0ZWNjNDAtNmI4NC00OWU4LWI2MGItNmU5OTA0MTI4Y2E4LzAvMkNCMDgwMjNC QjQyOEFFNEQwMjcyN0M5NkIwNjlDNUY1OUNFRThBMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yQ0IwODAyM0JCNDI4QUU0RDAyNzI3Qzk2QjA2OUM1RjU5Q0VF OEEzLmNlcjCBoQYIKwYBBQUHAQsEgZQwgZEwgY4GCCsGAQUFBzALhoGBcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2YzNGVjYzQwLTZiODQtNDllOC1i NjBiLTZlOTkwNDEyOGNhOC8wLzMyMzAzMjJlMzEzNDM4MmUzMjMxMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzkzNzM5MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADKlBUwDQYJKoZIhvcN AQELBQADggEBAGwxe+SH90fvhB50itvuD4V2falqMESl0vmoL4mWBp9tKo7/R/VP jVHNzT8sOLbsRE5LJFSMJZTGVI+bBKvF1bBdJa8jHTlRXBIbOp6CkCPmsEF23NSy 0m38uwCfP2pSpCeuy529puqTkP76iED3OsaTA0jC2JYVoxyVIiGXVhJpcC/ReGn0 OiYRku/vSUWr/PNkq7vrUxlocFEdxlIT5hG8ZgasDVq+a6MEXAdRkWM8aAKLgkXJ 0nrdMR9afOVtpetGBD8u6yK4tsyshc4gGw6xBbl9xjD5DTv/P4eZ3knlTbgx2oOY oGmIIB2xGYk6WuCxEMQCadURy6RzE479kic= -----END CERTIFICATE-----Generated at Wed May 13 03:51:32 2026 by rpki-client