$ rpki-client -vvf rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230322e3134382e342e302f32342d3234203d3e2039373934.roa File: 3230322e3134382e342e302f32342d3234203d3e2039373934.roa (raw, json) Hash identifier: qG/Qo/jkIom6oC0OoW3mcBD7Z9RGFZVsduy2wvjQaok= Subject key identifier: 81:2A:A1:DB:91:F7:70:A4:4C:AE:14:69:5E:C9:44:A6:F1:86:5E:F8 Certificate issuer: /CN=2CB08023BB428AE4D02727C96B069C5F59CEE8A3 Certificate serial: 5DDFF1FB944AE4B18CC226AEADE47FF7E4AB9D2D Authority key identifier: 2C:B0:80:23:BB:42:8A:E4:D0:27:27:C9:6B:06:9C:5F:59:CE:E8:A3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230322e3134382e342e302f32342d3234203d3e2039373934.roa Signing time: Sun 03 May 2026 03:17:02 +0000 ROA not before: Sun 03 May 2026 03:12:02 +0000 ROA not after: Sun 02 May 2027 03:17:02 +0000 asID: 9794 IP address blocks: 202.148.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.crl rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:df:f1:fb:94:4a:e4:b1:8c:c2:26:ae:ad:e4:7f:f7:e4:ab:9d:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2CB08023BB428AE4D02727C96B069C5F59CEE8A3 Validity Not Before: May 3 03:12:02 2026 GMT Not After : May 2 03:17:02 2027 GMT Subject: CN=812AA1DB91F770A44CAE14695EC944A6F1865EF8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:22:57:10:11:19:d6:06:0a:d9:c5:61:79:10: a5:a8:8c:67:75:48:fa:35:2d:4a:a1:26:80:92:08: 35:4b:75:30:2e:20:58:6e:31:64:87:38:43:db:84: b6:03:85:db:7a:62:54:b5:74:a0:c2:ca:10:ff:47: f9:d6:ac:8b:53:d4:db:e2:7f:74:75:25:ef:5a:8b: 5b:c7:9f:12:42:3b:2d:b1:99:3b:7a:ff:83:d1:ff: be:8a:c4:91:d9:10:31:72:f5:62:0f:fc:54:2d:d7: 32:24:0e:3b:30:90:26:87:8e:3a:84:25:2a:4d:fc: 20:51:f4:f4:7d:ff:d7:e2:64:17:5d:65:f7:67:0c: 7b:c4:9f:96:bf:46:5e:5f:8a:4c:a3:4c:14:4a:8c: ad:c2:e3:d6:18:80:0c:fb:24:a1:24:10:d9:5e:4a: bb:68:3b:52:87:f6:6e:e7:7e:49:fe:62:2a:0c:2d: 59:e0:eb:38:b9:b5:29:dd:cb:1a:11:00:00:8e:44: 17:2d:34:e3:31:90:70:af:8b:20:c2:f0:3f:e2:fe: 4d:e5:68:26:b0:08:41:82:0b:6d:92:7a:ae:95:c5: f5:66:4b:b9:a7:0f:f8:92:ee:cd:8a:25:2a:48:1a: 26:59:2e:64:cb:3a:89:c3:9e:82:1e:7e:a7:07:89: 86:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:2A:A1:DB:91:F7:70:A4:4C:AE:14:69:5E:C9:44:A6:F1:86:5E:F8 X509v3 Authority Key Identifier: keyid:2C:B0:80:23:BB:42:8A:E4:D0:27:27:C9:6B:06:9C:5F:59:CE:E8:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230322e3134382e342e302f32342d3234203d3e2039373934.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.148.4.0/24 Signature Algorithm: sha256WithRSAEncryption 16:d2:05:11:d1:69:b0:eb:f5:85:8e:b3:da:f0:30:1f:db:af: 0f:3f:a8:14:be:89:53:8f:06:40:c4:f4:ea:9b:7f:e7:22:d1: 24:32:6c:1b:71:fe:27:19:70:61:3e:6e:19:28:1e:d3:e8:5b: 20:af:d4:20:15:07:4d:46:58:a8:24:73:73:ce:1c:a7:f8:6f: f3:d4:56:a6:41:1f:57:7e:0f:09:a6:8f:37:61:28:98:8f:8f: 04:78:8a:63:9a:02:16:25:05:b7:28:8e:b7:83:5b:4d:4d:04: cf:7d:4f:68:da:39:e3:c0:5b:c9:2c:cf:7b:3c:69:5b:0f:79: 11:97:e1:11:74:b9:08:6a:88:9a:62:07:f4:e1:ed:d8:11:5e: 20:80:57:30:11:5f:52:63:97:42:72:45:7b:eb:03:85:98:9b: 02:9d:ec:cc:40:f7:f1:32:40:e6:17:ac:37:b8:da:bc:d9:2d: d7:b1:91:26:86:f6:4d:90:9b:3f:39:18:48:cc:a8:7a:86:bb: 2c:85:5c:cf:3a:43:a4:45:0c:a0:04:fe:8f:75:ba:a3:1e:b8: 1c:a5:4f:30:82:47:bf:dc:70:bc:18:b7:d0:4d:a7:ac:a6:c7: e8:a9:51:7b:25:97:dc:de:da:6e:2a:47:d7:0e:9d:51:17:6b: 7f:02:8f:d1 -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgIUXd/x+5RK5LGMwiaureR/9+SrnS0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkNCMDgwMjNCQjQyOEFFNEQwMjcyN0M5NkIwNjlDNUY1 OUNFRThBMzAeFw0yNjA1MDMwMzEyMDJaFw0yNzA1MDIwMzE3MDJaMDMxMTAvBgNV BAMTKDgxMkFBMURCOTFGNzcwQTQ0Q0FFMTQ2OTVFQzk0NEE2RjE4NjVFRjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzIlcQERnWBgrZxWF5EKWojGd1 SPo1LUqhJoCSCDVLdTAuIFhuMWSHOEPbhLYDhdt6YlS1dKDCyhD/R/nWrItT1Nvi f3R1Je9ai1vHnxJCOy2xmTt6/4PR/76KxJHZEDFy9WIP/FQt1zIkDjswkCaHjjqE JSpN/CBR9PR9/9fiZBddZfdnDHvEn5a/Rl5fikyjTBRKjK3C49YYgAz7JKEkENle SrtoO1KH9m7nfkn+YioMLVng6zi5tSndyxoRAACORBctNOMxkHCviyDC8D/i/k3l aCawCEGCC22Seq6VxfVmS7mnD/iS7s2KJSpIGiZZLmTLOonDnoIefqcHiYZZAgMB AAGjggItMIICKTAdBgNVHQ4EFgQUgSqh25H3cKRMrhRpXslEpvGGXvgwHwYDVR0j BBgwFoAULLCAI7tCiuTQJyfJawacX1nO6KMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjM0ZWNjNDAtNmI4NC00OWU4LWI2MGItNmU5OTA0MTI4Y2E4LzAvMkNCMDgwMjNC QjQyOEFFNEQwMjcyN0M5NkIwNjlDNUY1OUNFRThBMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yQ0IwODAyM0JCNDI4QUU0RDAyNzI3Qzk2QjA2OUM1RjU5Q0VF OEEzLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUFBzALhn9yc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjM0ZWNjNDAtNmI4NC00OWU4LWI2 MGItNmU5OTA0MTI4Y2E4LzAvMzIzMDMyMmUzMTM0MzgyZTM0MmUzMDJmMzIzNDJk MzIzNDIwM2QzZTIwMzkzNzM5MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADKlAQwDQYJKoZIhvcNAQEL BQADggEBABbSBRHRabDr9YWOs9rwMB/brw8/qBS+iVOPBkDE9Oqbf+ci0SQybBtx /icZcGE+bhkoHtPoWyCv1CAVB01GWKgkc3POHKf4b/PUVqZBH1d+DwmmjzdhKJiP jwR4imOaAhYlBbcojreDW01NBM99T2jaOePAW8ksz3s8aVsPeRGX4RF0uQhqiJpi B/Th7dgRXiCAVzARX1Jjl0JyRXvrA4WYmwKd7MxA9/EyQOYXrDe42rzZLdexkSaG 9k2Qmz85GEjMqHqGuyyFXM86Q6RFDKAE/o91uqMeuBylTzCCR7/ccLwYt9BNp6ym x+ipUXsll9ze2m4qR9cOnVEXa38Cj9E= -----END CERTIFICATE-----Generated at Wed May 13 02:50:09 2026 by rpki-client