$ rpki-client -vvf rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230322e3134382e32382e302f32342d3234203d3e2039373934.roa File: 3230322e3134382e32382e302f32342d3234203d3e2039373934.roa (raw, json) Hash identifier: bSRoWNg6n/C5pLnp8tFP5jfBUaZaKk6duzKWDM5HDkI= Subject key identifier: 0A:8D:9F:3E:53:19:4B:32:E2:A9:4C:98:DF:D3:88:8A:E9:D9:19:92 Certificate issuer: /CN=2CB08023BB428AE4D02727C96B069C5F59CEE8A3 Certificate serial: 3722CE2C810DBD92B8DA423554636929F0807D66 Authority key identifier: 2C:B0:80:23:BB:42:8A:E4:D0:27:27:C9:6B:06:9C:5F:59:CE:E8:A3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230322e3134382e32382e302f32342d3234203d3e2039373934.roa Signing time: Sun 03 May 2026 03:17:13 +0000 ROA not before: Sun 03 May 2026 03:12:13 +0000 ROA not after: Sun 02 May 2027 03:17:13 +0000 asID: 9794 IP address blocks: 202.148.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.crl rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 00:40:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:22:ce:2c:81:0d:bd:92:b8:da:42:35:54:63:69:29:f0:80:7d:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2CB08023BB428AE4D02727C96B069C5F59CEE8A3 Validity Not Before: May 3 03:12:13 2026 GMT Not After : May 2 03:17:13 2027 GMT Subject: CN=0A8D9F3E53194B32E2A94C98DFD3888AE9D91992 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:af:7d:36:ca:33:a5:4c:b2:3e:24:fa:d8:83: 97:71:af:82:9f:6a:24:09:07:9e:ad:9c:f2:1b:33: 4e:30:83:90:25:83:33:44:60:ef:09:84:ff:5a:1d: 03:40:9c:b7:ba:0f:c7:29:40:29:0d:69:02:7c:3f: 5c:78:c4:4c:fa:e5:e4:c9:de:b8:ab:2a:5c:5a:09: 33:7d:97:35:a9:1f:35:ea:bb:42:12:c8:67:34:66: b8:ce:8f:aa:00:e2:ae:4e:54:4d:dc:21:52:ff:cd: 8f:6f:de:c3:b0:38:b8:01:61:ab:31:b9:0a:57:74: 0e:d0:36:23:d1:90:8c:b9:8d:af:94:cb:cb:33:cb: 1a:52:3a:2a:a1:95:c8:ae:82:4c:c4:0c:2e:d4:3d: 2b:3c:17:de:0c:dc:b2:27:6c:1f:b9:42:83:ea:9a: b8:94:78:ed:94:10:2e:44:40:b1:7f:ec:8f:4b:8b: fa:a4:36:16:66:83:e0:c1:16:7b:e7:8f:45:72:54: 26:ed:0d:d1:22:e0:73:cd:e0:d6:cd:0e:cb:6d:c9: 11:27:ba:da:9e:07:df:c3:60:73:5f:94:71:cc:d3: fa:ad:f6:3b:52:bc:6e:c9:18:09:a4:b4:5b:e8:ff: b7:86:a0:d4:39:b2:d1:36:e4:41:c4:76:68:12:5d: 2a:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:8D:9F:3E:53:19:4B:32:E2:A9:4C:98:DF:D3:88:8A:E9:D9:19:92 X509v3 Authority Key Identifier: keyid:2C:B0:80:23:BB:42:8A:E4:D0:27:27:C9:6B:06:9C:5F:59:CE:E8:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230322e3134382e32382e302f32342d3234203d3e2039373934.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.148.28.0/24 Signature Algorithm: sha256WithRSAEncryption 84:c8:49:df:11:ae:b9:e4:cd:3e:89:84:c4:d0:ce:95:fb:ae: 80:fe:5c:f7:4f:d4:40:7e:1e:c1:35:4c:cc:f4:8b:27:19:96: 6b:71:28:7b:79:47:9e:a8:97:00:83:28:35:e6:30:60:1e:2b: 3c:9c:98:1b:53:37:8c:c9:82:ea:da:5a:29:51:8b:71:75:93: 7a:af:50:d3:06:39:49:cd:91:b4:42:a9:78:fe:e5:da:1d:f9: 41:07:ac:1c:c5:8c:67:3d:fc:98:77:b7:20:94:8c:a1:bd:b6: c2:36:21:2b:21:1f:fe:ef:06:b2:fc:ab:c6:11:27:3b:34:fd: 12:a5:01:3f:d8:6f:52:f3:c0:34:31:27:fc:bb:4c:9b:47:50: c5:af:f6:ec:a7:da:cc:0b:6d:86:7d:b8:f7:b3:12:5d:6f:9c: 5e:3d:89:57:42:f0:ce:b6:fb:0b:47:1a:42:29:b8:47:07:5e: e0:5e:f7:e4:9e:92:d6:45:1e:61:f8:60:31:98:5b:c7:5e:db: fd:bf:6c:ea:a6:b7:c4:8c:97:4f:b1:41:91:67:df:5e:c9:df: 47:e3:e2:ef:ff:ee:1b:2d:01:5c:c9:74:b1:5a:c5:4f:47:ba: 63:ce:2d:b6:88:d0:80:b7:20:bc:23:56:1c:53:10:f0:38:8a: d2:46:8b:13 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUNyLOLIENvZK42kI1VGNpKfCAfWYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkNCMDgwMjNCQjQyOEFFNEQwMjcyN0M5NkIwNjlDNUY1 OUNFRThBMzAeFw0yNjA1MDMwMzEyMTNaFw0yNzA1MDIwMzE3MTNaMDMxMTAvBgNV BAMTKDBBOEQ5RjNFNTMxOTRCMzJFMkE5NEM5OERGRDM4ODhBRTlEOTE5OTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCur302yjOlTLI+JPrYg5dxr4Kf aiQJB56tnPIbM04wg5AlgzNEYO8JhP9aHQNAnLe6D8cpQCkNaQJ8P1x4xEz65eTJ 3rirKlxaCTN9lzWpHzXqu0ISyGc0ZrjOj6oA4q5OVE3cIVL/zY9v3sOwOLgBYasx uQpXdA7QNiPRkIy5ja+Uy8szyxpSOiqhlciugkzEDC7UPSs8F94M3LInbB+5QoPq mriUeO2UEC5EQLF/7I9Li/qkNhZmg+DBFnvnj0VyVCbtDdEi4HPN4NbNDsttyREn utqeB9/DYHNflHHM0/qt9jtSvG7JGAmktFvo/7eGoNQ5stE25EHEdmgSXSorAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUCo2fPlMZSzLiqUyY39OIiunZGZIwHwYDVR0j BBgwFoAULLCAI7tCiuTQJyfJawacX1nO6KMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjM0ZWNjNDAtNmI4NC00OWU4LWI2MGItNmU5OTA0MTI4Y2E4LzAvMkNCMDgwMjNC QjQyOEFFNEQwMjcyN0M5NkIwNjlDNUY1OUNFRThBMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yQ0IwODAyM0JCNDI4QUU0RDAyNzI3Qzk2QjA2OUM1RjU5Q0VF OEEzLmNlcjCBoQYIKwYBBQUHAQsEgZQwgZEwgY4GCCsGAQUFBzALhoGBcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2YzNGVjYzQwLTZiODQtNDllOC1i NjBiLTZlOTkwNDEyOGNhOC8wLzMyMzAzMjJlMzEzNDM4MmUzMjM4MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzkzNzM5MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADKlBwwDQYJKoZIhvcN AQELBQADggEBAITISd8RrrnkzT6JhMTQzpX7roD+XPdP1EB+HsE1TMz0iycZlmtx KHt5R56olwCDKDXmMGAeKzycmBtTN4zJguraWilRi3F1k3qvUNMGOUnNkbRCqXj+ 5dod+UEHrBzFjGc9/Jh3tyCUjKG9tsI2ISshH/7vBrL8q8YRJzs0/RKlAT/Yb1Lz wDQxJ/y7TJtHUMWv9uyn2swLbYZ9uPezEl1vnF49iVdC8M62+wtHGkIpuEcHXuBe 9+SektZFHmH4YDGYW8de2/2/bOqmt8SMl0+xQZFn317J30fj4u//7hstAVzJdLFa xU9HumPOLbaI0IC3ILwjVhxTEPA4itJGixM= -----END CERTIFICATE-----Generated at Wed May 13 03:56:07 2026 by rpki-client