$ rpki-client -vvf rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230332e3230312e3136372e302f32342d3234203d3e2039373934.roa File: 3230332e3230312e3136372e302f32342d3234203d3e2039373934.roa (raw, json) Hash identifier: Mu3S8fNh1+MoFIdcIsEH1Q315zymiyt/5R1EceqIHeU= Subject key identifier: A6:00:FF:3B:41:F6:EA:DF:0E:E1:EC:AC:6F:88:85:F8:BD:8A:4F:08 Certificate issuer: /CN=2CB08023BB428AE4D02727C96B069C5F59CEE8A3 Certificate serial: 68BA2CE1CA5FA8DBA768648CC38D418172A39DD3 Authority key identifier: 2C:B0:80:23:BB:42:8A:E4:D0:27:27:C9:6B:06:9C:5F:59:CE:E8:A3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230332e3230312e3136372e302f32342d3234203d3e2039373934.roa Signing time: Sun 03 May 2026 03:17:06 +0000 ROA not before: Sun 03 May 2026 03:12:06 +0000 ROA not after: Sun 02 May 2027 03:17:06 +0000 asID: 9794 IP address blocks: 203.201.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.crl rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:ba:2c:e1:ca:5f:a8:db:a7:68:64:8c:c3:8d:41:81:72:a3:9d:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2CB08023BB428AE4D02727C96B069C5F59CEE8A3 Validity Not Before: May 3 03:12:06 2026 GMT Not After : May 2 03:17:06 2027 GMT Subject: CN=A600FF3B41F6EADF0EE1ECAC6F8885F8BD8A4F08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:57:7e:77:19:51:39:31:ea:fb:81:41:6d:7c: fb:72:19:b7:7e:1d:89:d9:b4:26:69:00:db:78:32: 6b:07:6b:13:95:1e:ad:03:0b:b6:29:b6:45:ce:43: 40:82:09:52:32:0b:38:bc:43:46:f9:e0:36:4e:1f: 0e:08:00:fe:9c:f0:f3:1b:4c:eb:e1:48:24:86:16: 48:1a:7a:be:9e:77:a2:0b:04:96:29:16:67:07:05: d4:e5:c4:48:60:46:f0:06:68:a2:98:e3:a3:8d:10: bc:e4:e8:e6:c6:7d:90:15:c2:c4:89:61:45:72:50: ed:26:20:51:5e:77:56:78:a6:83:72:df:26:5a:a2: 9e:08:d6:b4:94:56:e9:98:cd:93:22:c2:41:ed:d9: 77:e1:1b:11:0e:17:0d:24:71:68:55:e8:81:7d:34: f5:92:97:09:7e:70:46:b1:6c:0f:31:50:dd:ff:31: 05:46:ef:03:af:b4:0c:81:04:b5:28:44:96:d8:73: ee:28:8b:87:0a:60:17:67:89:50:88:d8:3e:56:4e: 58:ce:cb:7b:64:dc:0e:81:8b:d3:4b:e2:8c:aa:43: cb:36:7a:2c:4c:0f:43:75:74:20:cd:65:b4:be:29: 94:1e:e8:b6:e2:d2:0f:e9:1b:85:a6:e0:9c:7d:00: f8:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:00:FF:3B:41:F6:EA:DF:0E:E1:EC:AC:6F:88:85:F8:BD:8A:4F:08 X509v3 Authority Key Identifier: keyid:2C:B0:80:23:BB:42:8A:E4:D0:27:27:C9:6B:06:9C:5F:59:CE:E8:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230332e3230312e3136372e302f32342d3234203d3e2039373934.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.201.167.0/24 Signature Algorithm: sha256WithRSAEncryption 9d:8c:e0:c8:d9:88:df:90:51:43:12:73:4f:b7:20:9f:54:b3: 36:eb:a8:d5:4a:72:e8:4d:d8:66:0f:ae:71:05:44:7f:81:ed: f1:93:b3:5c:e8:77:98:e5:4a:f6:68:e5:f2:95:89:9d:0d:0f: fb:b7:af:c1:6a:a3:64:a2:9a:8e:11:f9:7b:40:50:29:93:0d: e5:c4:5b:dc:7f:bc:2c:1a:f8:dc:81:37:99:f0:d4:31:d6:2c: d7:00:2d:10:84:fa:a9:45:fd:72:ed:78:3e:44:28:13:96:dc: ed:62:9e:bb:ce:ba:14:6d:3c:46:af:03:a6:7b:2c:1e:73:42: c6:05:a7:83:7e:a4:d9:b8:54:ee:52:c3:aa:a1:f5:f9:15:4c: 6e:a6:6d:3f:ff:ee:ac:28:cf:c8:73:86:5e:29:7d:8d:90:df: c1:c2:b5:8c:21:68:8d:c2:c2:c3:e4:b7:d5:59:23:cb:9f:8a: cb:94:5c:6b:39:96:f2:ee:d4:ad:45:74:5d:2a:89:33:ab:69: f9:48:8b:07:72:07:55:e8:79:b1:9e:e5:83:f0:3e:cc:0f:93: bb:9b:e6:10:d9:8e:d3:e3:9c:c2:89:46:86:51:42:3c:e8:98: 0f:d5:55:68:ce:96:b2:57:00:46:63:3c:22:e2:31:92:12:ba: 2a:fa:ae:b2 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUaLos4cpfqNunaGSMw41BgXKjndMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkNCMDgwMjNCQjQyOEFFNEQwMjcyN0M5NkIwNjlDNUY1 OUNFRThBMzAeFw0yNjA1MDMwMzEyMDZaFw0yNzA1MDIwMzE3MDZaMDMxMTAvBgNV BAMTKEE2MDBGRjNCNDFGNkVBREYwRUUxRUNBQzZGODg4NUY4QkQ4QTRGMDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLV353GVE5Mer7gUFtfPtyGbd+ HYnZtCZpANt4MmsHaxOVHq0DC7YptkXOQ0CCCVIyCzi8Q0b54DZOHw4IAP6c8PMb TOvhSCSGFkgaer6ed6ILBJYpFmcHBdTlxEhgRvAGaKKY46ONELzk6ObGfZAVwsSJ YUVyUO0mIFFed1Z4poNy3yZaop4I1rSUVumYzZMiwkHt2XfhGxEOFw0kcWhV6IF9 NPWSlwl+cEaxbA8xUN3/MQVG7wOvtAyBBLUoRJbYc+4oi4cKYBdniVCI2D5WTljO y3tk3A6Bi9NL4oyqQ8s2eixMD0N1dCDNZbS+KZQe6Lbi0g/pG4Wm4Jx9APiRAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUpgD/O0H26t8O4eysb4iF+L2KTwgwHwYDVR0j BBgwFoAULLCAI7tCiuTQJyfJawacX1nO6KMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjM0ZWNjNDAtNmI4NC00OWU4LWI2MGItNmU5OTA0MTI4Y2E4LzAvMkNCMDgwMjNC QjQyOEFFNEQwMjcyN0M5NkIwNjlDNUY1OUNFRThBMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yQ0IwODAyM0JCNDI4QUU0RDAyNzI3Qzk2QjA2OUM1RjU5Q0VF OEEzLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2YzNGVjYzQwLTZiODQtNDllOC1i NjBiLTZlOTkwNDEyOGNhOC8wLzMyMzAzMzJlMzIzMDMxMmUzMTM2MzcyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzOTM3MzkzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMvJpzANBgkqhkiG 9w0BAQsFAAOCAQEAnYzgyNmI35BRQxJzT7cgn1SzNuuo1Upy6E3YZg+ucQVEf4Ht 8ZOzXOh3mOVK9mjl8pWJnQ0P+7evwWqjZKKajhH5e0BQKZMN5cRb3H+8LBr43IE3 mfDUMdYs1wAtEIT6qUX9cu14PkQoE5bc7WKeu866FG08Rq8DpnssHnNCxgWng36k 2bhU7lLDqqH1+RVMbqZtP//urCjPyHOGXil9jZDfwcK1jCFojcLCw+S31Vkjy5+K y5RcazmW8u7UrUV0XSqJM6tp+UiLB3IHVeh5sZ7lg/A+zA+Tu5vmENmO0+OcwolG hlFCPOiYD9VVaM6WslcARmM8IuIxkhK6Kvqusg== -----END CERTIFICATE-----Generated at Wed May 13 02:27:12 2026 by rpki-client