$ rpki-client -vvf rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230322e3134382e332e302f32342d3234203d3e2039373934.roa File: 3230322e3134382e332e302f32342d3234203d3e2039373934.roa (raw, json) Hash identifier: mlD5XBeedv9bZ0Uzko3UiijUFYbxT/a7uPkRYE6amXg= Subject key identifier: B1:66:89:2A:BA:89:66:B5:EE:10:9C:07:C6:5E:53:50:E1:FF:6E:6A Certificate issuer: /CN=2CB08023BB428AE4D02727C96B069C5F59CEE8A3 Certificate serial: 32D6BFB07B7B0E60FE5DB04CCB2E3B409AEFA725 Authority key identifier: 2C:B0:80:23:BB:42:8A:E4:D0:27:27:C9:6B:06:9C:5F:59:CE:E8:A3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230322e3134382e332e302f32342d3234203d3e2039373934.roa Signing time: Sun 03 May 2026 03:17:08 +0000 ROA not before: Sun 03 May 2026 03:12:08 +0000 ROA not after: Sun 02 May 2027 03:17:08 +0000 asID: 9794 IP address blocks: 202.148.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.crl rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:d6:bf:b0:7b:7b:0e:60:fe:5d:b0:4c:cb:2e:3b:40:9a:ef:a7:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2CB08023BB428AE4D02727C96B069C5F59CEE8A3 Validity Not Before: May 3 03:12:08 2026 GMT Not After : May 2 03:17:08 2027 GMT Subject: CN=B166892ABA8966B5EE109C07C65E5350E1FF6E6A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:17:c9:40:81:e3:cb:ff:d0:df:c0:4b:7e:0c: 9a:dc:6a:5e:5b:8a:4d:bc:8b:46:87:ba:4e:cc:64: a9:78:12:ae:8e:ca:4d:cc:8e:4c:09:4b:b2:f9:59: 6f:8a:49:23:b4:58:d0:8d:33:73:aa:19:6f:e1:89: b7:96:3a:29:52:e4:ad:24:5c:94:b0:95:d7:c7:94: b8:eb:a0:d8:bf:f2:f9:7c:14:51:e9:d6:f1:17:75: 2b:8a:b3:c4:73:2e:da:c7:37:83:69:c8:cb:38:28: 29:5f:3a:71:98:9c:19:40:bf:7f:dd:98:1b:56:e3: 2c:fa:af:e5:bf:ba:7b:7b:d7:d9:c4:30:c4:b4:66: 26:61:38:b7:e1:97:6f:b5:e4:36:c3:1b:63:a9:16: a1:59:22:44:93:85:84:a6:43:55:03:9d:0a:58:79: 5d:d3:82:eb:95:7e:cd:9d:75:73:8f:5f:9f:44:44: 36:e6:5d:4d:98:1c:04:a2:2a:63:9b:c2:e8:15:8e: cc:a5:cb:83:0d:b1:82:ab:50:f0:da:3c:a4:5c:80: 5d:92:03:f6:12:3b:19:c5:2d:d0:c4:e2:89:1f:86: 93:68:13:53:91:b9:fe:c3:b1:1d:10:f2:8e:71:e1: f2:50:8e:85:72:26:12:0f:4d:03:d5:8a:48:41:2c: dc:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:66:89:2A:BA:89:66:B5:EE:10:9C:07:C6:5E:53:50:E1:FF:6E:6A X509v3 Authority Key Identifier: keyid:2C:B0:80:23:BB:42:8A:E4:D0:27:27:C9:6B:06:9C:5F:59:CE:E8:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230322e3134382e332e302f32342d3234203d3e2039373934.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.148.3.0/24 Signature Algorithm: sha256WithRSAEncryption 70:f2:d2:a6:76:49:da:96:69:a9:60:31:cf:8a:8a:c3:a4:3d: 73:da:fd:0e:09:c6:55:3a:a0:89:a6:a9:5e:c9:ae:08:b9:89: f0:4c:22:6b:fb:05:2c:b4:ca:c2:bf:25:b4:5e:58:42:cb:c4: ca:e0:17:bb:5b:58:1c:51:23:79:5d:bf:43:ec:49:8f:ad:fb: dc:73:97:f1:d2:69:a7:34:c1:f8:12:7d:bf:3f:db:53:db:e8: d9:66:3d:2f:f9:ac:9d:59:09:fb:d3:f9:e7:c3:de:e8:ea:46: 65:43:c8:f5:07:74:4a:cd:1a:1d:06:5b:2f:d1:cc:e2:20:b9: bb:10:cd:51:bc:b8:c7:16:8a:14:ca:6e:8a:eb:42:ff:46:f7: ae:f0:1b:32:82:17:f6:ca:db:56:88:82:9e:ec:3a:93:d8:39: ee:3b:1c:38:36:cd:c1:9f:d2:96:d5:69:e5:12:31:d1:7d:d6: 32:31:a8:2f:9d:b7:4d:ba:a9:dd:ec:82:50:72:ce:26:84:dd: fd:54:30:b7:39:e4:76:be:ea:c1:44:69:df:0b:cb:40:2c:81: e5:16:e4:f8:1c:ac:f5:54:1a:08:5c:70:fc:48:78:13:6e:a3: 15:b1:c7:c9:d9:c9:66:ee:3e:05:a7:2e:4e:b7:07:47:09:98: 9f:1d:f3:0b -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgIUMta/sHt7DmD+XbBMyy47QJrvpyUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkNCMDgwMjNCQjQyOEFFNEQwMjcyN0M5NkIwNjlDNUY1 OUNFRThBMzAeFw0yNjA1MDMwMzEyMDhaFw0yNzA1MDIwMzE3MDhaMDMxMTAvBgNV BAMTKEIxNjY4OTJBQkE4OTY2QjVFRTEwOUMwN0M2NUU1MzUwRTFGRjZFNkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfF8lAgePL/9DfwEt+DJrcal5b ik28i0aHuk7MZKl4Eq6Oyk3MjkwJS7L5WW+KSSO0WNCNM3OqGW/hibeWOilS5K0k XJSwldfHlLjroNi/8vl8FFHp1vEXdSuKs8RzLtrHN4NpyMs4KClfOnGYnBlAv3/d mBtW4yz6r+W/unt719nEMMS0ZiZhOLfhl2+15DbDG2OpFqFZIkSThYSmQ1UDnQpY eV3TguuVfs2ddXOPX59ERDbmXU2YHASiKmObwugVjsyly4MNsYKrUPDaPKRcgF2S A/YSOxnFLdDE4okfhpNoE1ORuf7DsR0Q8o5x4fJQjoVyJhIPTQPVikhBLNy3AgMB AAGjggItMIICKTAdBgNVHQ4EFgQUsWaJKrqJZrXuEJwHxl5TUOH/bmowHwYDVR0j BBgwFoAULLCAI7tCiuTQJyfJawacX1nO6KMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjM0ZWNjNDAtNmI4NC00OWU4LWI2MGItNmU5OTA0MTI4Y2E4LzAvMkNCMDgwMjNC QjQyOEFFNEQwMjcyN0M5NkIwNjlDNUY1OUNFRThBMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yQ0IwODAyM0JCNDI4QUU0RDAyNzI3Qzk2QjA2OUM1RjU5Q0VF OEEzLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUFBzALhn9yc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjM0ZWNjNDAtNmI4NC00OWU4LWI2 MGItNmU5OTA0MTI4Y2E4LzAvMzIzMDMyMmUzMTM0MzgyZTMzMmUzMDJmMzIzNDJk MzIzNDIwM2QzZTIwMzkzNzM5MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADKlAMwDQYJKoZIhvcNAQEL BQADggEBAHDy0qZ2SdqWaalgMc+KisOkPXPa/Q4JxlU6oImmqV7Jrgi5ifBMImv7 BSy0ysK/JbReWELLxMrgF7tbWBxRI3ldv0PsSY+t+9xzl/HSaac0wfgSfb8/21Pb 6NlmPS/5rJ1ZCfvT+efD3ujqRmVDyPUHdErNGh0GWy/RzOIgubsQzVG8uMcWihTK borrQv9G967wGzKCF/bK21aIgp7sOpPYOe47HDg2zcGf0pbVaeUSMdF91jIxqC+d t026qd3sglByziaE3f1UMLc55Ha+6sFEad8Ly0AsgeUW5PgcrPVUGghccPxIeBNu oxWxx8nZyWbuPgWnLk63B0cJmJ8d8ws= -----END CERTIFICATE-----Generated at Wed May 13 02:26:32 2026 by rpki-client