$ rpki-client -vvf rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230322e3134382e352e302f32342d3234203d3e2039373934.roa File: 3230322e3134382e352e302f32342d3234203d3e2039373934.roa (raw, json) Hash identifier: gf7NanFrrdIKl4KSww4nbKQloD9Wlx2rfGOPWQTBSjs= Subject key identifier: 27:5B:4B:71:18:0A:73:EA:EA:E6:D3:DF:25:CC:F5:E9:C1:BF:86:19 Certificate issuer: /CN=2CB08023BB428AE4D02727C96B069C5F59CEE8A3 Certificate serial: 7CABC1CE12BF24E6F5AC209F4CA4A241453DD755 Authority key identifier: 2C:B0:80:23:BB:42:8A:E4:D0:27:27:C9:6B:06:9C:5F:59:CE:E8:A3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230322e3134382e352e302f32342d3234203d3e2039373934.roa Signing time: Sun 03 May 2026 03:17:06 +0000 ROA not before: Sun 03 May 2026 03:12:06 +0000 ROA not after: Sun 02 May 2027 03:17:06 +0000 asID: 9794 IP address blocks: 202.148.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.crl rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:ab:c1:ce:12:bf:24:e6:f5:ac:20:9f:4c:a4:a2:41:45:3d:d7:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2CB08023BB428AE4D02727C96B069C5F59CEE8A3 Validity Not Before: May 3 03:12:06 2026 GMT Not After : May 2 03:17:06 2027 GMT Subject: CN=275B4B71180A73EAEAE6D3DF25CCF5E9C1BF8619 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:78:af:2a:c0:8b:60:11:eb:e9:78:48:8e:5f: f0:cd:78:40:62:19:85:3a:5f:3c:bd:1e:ed:84:50: 19:21:d4:66:05:1a:df:fb:34:06:33:3c:a2:da:d2: f7:45:8b:c4:b1:64:00:0b:83:1d:8f:1f:e8:cd:dd: f5:16:3b:90:ae:33:09:70:7d:f0:57:63:8f:46:3b: bd:86:75:78:a7:3e:0a:cb:aa:16:74:3f:59:5c:05: 6b:88:9c:a5:d3:81:99:5d:4e:2d:66:ee:1a:f8:ef: 58:34:d1:2a:e0:36:4f:2a:8f:42:38:31:9b:07:94: c0:cb:c1:df:8f:9d:8a:2b:f5:17:66:59:53:d1:c7: f4:64:91:53:3c:6a:28:02:b2:fd:46:ba:06:e4:cc: 11:c2:26:b4:db:51:42:78:28:11:b4:0a:76:bb:df: 93:29:11:18:c7:93:0a:81:bd:02:9f:31:07:4f:57: da:99:83:a2:95:66:6f:6f:d8:66:f9:8a:69:d0:75: 57:0d:07:52:a4:66:34:af:2a:25:6a:8c:9b:41:e0: 20:b5:79:37:75:5b:fb:3f:ee:87:50:d6:da:af:40: 2c:12:55:64:86:1c:09:ee:2d:e9:cc:0a:26:30:3e: e3:b9:af:8b:93:4a:bf:36:0f:0e:d6:0f:9d:9e:52: aa:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:5B:4B:71:18:0A:73:EA:EA:E6:D3:DF:25:CC:F5:E9:C1:BF:86:19 X509v3 Authority Key Identifier: keyid:2C:B0:80:23:BB:42:8A:E4:D0:27:27:C9:6B:06:9C:5F:59:CE:E8:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230322e3134382e352e302f32342d3234203d3e2039373934.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.148.5.0/24 Signature Algorithm: sha256WithRSAEncryption 0d:7f:72:ad:6a:1c:10:7c:9e:ce:40:e3:99:e4:46:b9:dd:16: 61:23:19:13:db:24:3a:3e:79:d7:e8:68:2d:fd:3c:cb:48:f3: 29:fc:78:0d:d5:74:0c:ce:ec:4b:fa:7e:d3:02:09:59:c4:07: 40:59:1f:45:a9:c7:f9:9d:66:3b:9e:0b:11:1d:e9:bb:60:05: 31:aa:37:47:3c:b2:c0:3d:db:4d:e3:a5:c3:5a:9a:b5:cc:31: 55:7d:6c:58:89:b4:6a:bb:71:8a:1f:0f:92:6c:b1:bb:1e:eb: 40:83:e1:b9:6f:5c:1a:f8:99:10:8e:f3:ba:26:dd:c3:fd:b0: a2:fa:50:38:08:74:97:1d:ea:e9:c1:f0:7b:a4:e5:cc:fc:a2: 17:56:be:8e:a2:1e:93:c2:51:11:4d:8b:46:d3:55:d3:2f:d0: 4e:d2:b0:1e:da:40:73:2b:ca:94:2f:aa:aa:63:02:31:66:70: 2b:c4:7d:37:da:fe:db:ff:7e:92:12:7f:b2:05:ea:46:8c:10: 58:a6:7c:7f:76:7d:6c:f6:fa:3b:14:60:24:a4:dc:58:3a:25: b8:d0:85:9f:5e:cb:ba:2e:9b:0e:da:a6:c4:e4:cc:d4:f0:78: b5:d1:2e:0f:6f:eb:a2:a8:d7:b8:2a:bb:3a:73:44:3b:a0:3e: 5d:35:d0:30 -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgIUfKvBzhK/JOb1rCCfTKSiQUU911UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkNCMDgwMjNCQjQyOEFFNEQwMjcyN0M5NkIwNjlDNUY1 OUNFRThBMzAeFw0yNjA1MDMwMzEyMDZaFw0yNzA1MDIwMzE3MDZaMDMxMTAvBgNV BAMTKDI3NUI0QjcxMTgwQTczRUFFQUU2RDNERjI1Q0NGNUU5QzFCRjg2MTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8eK8qwItgEevpeEiOX/DNeEBi GYU6Xzy9Hu2EUBkh1GYFGt/7NAYzPKLa0vdFi8SxZAALgx2PH+jN3fUWO5CuMwlw ffBXY49GO72GdXinPgrLqhZ0P1lcBWuInKXTgZldTi1m7hr471g00SrgNk8qj0I4 MZsHlMDLwd+PnYor9RdmWVPRx/RkkVM8aigCsv1GugbkzBHCJrTbUUJ4KBG0Cna7 35MpERjHkwqBvQKfMQdPV9qZg6KVZm9v2Gb5imnQdVcNB1KkZjSvKiVqjJtB4CC1 eTd1W/s/7odQ1tqvQCwSVWSGHAnuLenMCiYwPuO5r4uTSr82Dw7WD52eUqqxAgMB AAGjggItMIICKTAdBgNVHQ4EFgQUJ1tLcRgKc+rq5tPfJcz16cG/hhkwHwYDVR0j BBgwFoAULLCAI7tCiuTQJyfJawacX1nO6KMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjM0ZWNjNDAtNmI4NC00OWU4LWI2MGItNmU5OTA0MTI4Y2E4LzAvMkNCMDgwMjNC QjQyOEFFNEQwMjcyN0M5NkIwNjlDNUY1OUNFRThBMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yQ0IwODAyM0JCNDI4QUU0RDAyNzI3Qzk2QjA2OUM1RjU5Q0VF OEEzLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUFBzALhn9yc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjM0ZWNjNDAtNmI4NC00OWU4LWI2 MGItNmU5OTA0MTI4Y2E4LzAvMzIzMDMyMmUzMTM0MzgyZTM1MmUzMDJmMzIzNDJk MzIzNDIwM2QzZTIwMzkzNzM5MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADKlAUwDQYJKoZIhvcNAQEL BQADggEBAA1/cq1qHBB8ns5A45nkRrndFmEjGRPbJDo+edfoaC39PMtI8yn8eA3V dAzO7Ev6ftMCCVnEB0BZH0Wpx/mdZjueCxEd6btgBTGqN0c8ssA9203jpcNamrXM MVV9bFiJtGq7cYofD5Jssbse60CD4blvXBr4mRCO87om3cP9sKL6UDgIdJcd6unB 8Huk5cz8ohdWvo6iHpPCURFNi0bTVdMv0E7SsB7aQHMrypQvqqpjAjFmcCvEfTfa /tv/fpISf7IF6kaMEFimfH92fWz2+jsUYCSk3Fg6JbjQhZ9ey7oumw7apsTkzNTw eLXRLg9v66Ko17gquzpzRDugPl010DA= -----END CERTIFICATE-----Generated at Wed May 13 02:50:42 2026 by rpki-client