$ rpki-client -vvf rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230332e3230312e3137332e302f32342d3234203d3e203338373738.roa File: 3230332e3230312e3137332e302f32342d3234203d3e203338373738.roa (raw, json) Hash identifier: skkNpRpz3hBvvo3C2/uGO2hd8PFgvk1C4L3gHiA7Cbo= Subject key identifier: 61:B3:8E:95:06:C3:0C:18:2A:A8:DF:09:2E:CE:B4:88:28:C6:D8:C5 Certificate issuer: /CN=2CB08023BB428AE4D02727C96B069C5F59CEE8A3 Certificate serial: 39114C25AFEC3A7B2C590FB589F8486FF376A30E Authority key identifier: 2C:B0:80:23:BB:42:8A:E4:D0:27:27:C9:6B:06:9C:5F:59:CE:E8:A3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230332e3230312e3137332e302f32342d3234203d3e203338373738.roa Signing time: Sun 03 May 2026 03:17:10 +0000 ROA not before: Sun 03 May 2026 03:12:10 +0000 ROA not after: Sun 02 May 2027 03:17:10 +0000 asID: 38778 IP address blocks: 203.201.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.crl rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:11:4c:25:af:ec:3a:7b:2c:59:0f:b5:89:f8:48:6f:f3:76:a3:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2CB08023BB428AE4D02727C96B069C5F59CEE8A3 Validity Not Before: May 3 03:12:10 2026 GMT Not After : May 2 03:17:10 2027 GMT Subject: CN=61B38E9506C30C182AA8DF092ECEB48828C6D8C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:80:5c:df:d3:ef:54:6c:83:3f:96:08:56:46: 52:ae:77:6c:9d:6f:10:4f:94:6d:7a:07:28:9e:a4: 28:24:64:61:63:18:bf:ce:1a:1a:bf:90:89:4e:29: 0c:b2:05:05:2f:23:4d:6d:38:78:42:6f:5c:39:7a: 37:4b:81:4a:82:39:9f:29:bb:24:1b:a5:f5:fa:e1: af:03:72:de:39:45:53:70:49:32:ae:26:bc:42:98: cd:eb:76:51:b6:82:ff:8e:30:e0:8c:c1:f1:83:1a: db:93:33:2a:44:2f:11:01:a8:6e:c5:8f:36:b1:95: 34:8d:32:9d:c4:a5:f4:46:37:1e:dc:53:5f:29:9a: 06:70:2d:2c:29:53:cc:e6:fb:12:86:c0:77:8c:7b: ac:1b:52:e6:53:2b:f7:29:aa:eb:79:4e:d3:16:cd: 79:77:d2:31:0c:0a:29:b0:71:16:63:aa:cb:4b:96: a6:4e:d0:4a:5e:06:c3:ed:61:e1:08:b6:c7:cb:84: ab:f2:57:53:2e:b3:ee:6a:7a:83:37:e8:3f:82:e2: 17:7d:07:a0:ba:0f:20:b6:66:2a:7e:f3:59:4b:b9: 00:e9:a8:b3:b6:48:51:af:76:f1:e9:0b:f5:8c:cd: a3:b5:83:ef:39:aa:d9:11:06:77:09:a9:24:41:a6: c7:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:B3:8E:95:06:C3:0C:18:2A:A8:DF:09:2E:CE:B4:88:28:C6:D8:C5 X509v3 Authority Key Identifier: keyid:2C:B0:80:23:BB:42:8A:E4:D0:27:27:C9:6B:06:9C:5F:59:CE:E8:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230332e3230312e3137332e302f32342d3234203d3e203338373738.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.201.173.0/24 Signature Algorithm: sha256WithRSAEncryption 51:ec:7b:66:56:10:6b:57:c4:11:be:cd:9d:7d:51:13:45:24: 7f:6b:ca:72:35:d6:53:bc:3c:94:d7:7c:41:b0:c0:e0:2f:8b: 2a:a8:05:8d:17:1e:e3:48:6c:f3:f3:fe:f3:58:08:0f:79:11: ac:1a:a4:f2:88:73:0b:aa:68:c0:60:27:ed:8d:68:28:34:de: 5f:1c:a9:0f:6b:ff:80:4c:fb:54:e7:a1:75:13:da:db:74:1f: a3:8a:76:13:43:e3:71:05:62:3e:4d:bb:71:af:2f:84:7d:d3: 4a:81:67:a9:3e:ce:a8:63:46:93:c7:83:68:79:cb:51:6c:df: d1:38:a1:ba:fd:c5:af:77:8c:a6:f7:36:db:aa:49:c3:85:7a: c9:f0:c6:96:d4:fb:bb:09:8d:ae:30:48:3c:b3:5f:56:0e:b7: 17:f1:2d:57:1c:94:a1:f3:c2:cd:f8:f8:b6:3b:8a:4e:81:51: 3e:d6:d0:c9:d2:81:b4:cf:95:f2:2b:c7:54:1e:78:2b:29:f0: f2:4f:b2:5c:f6:cf:0d:e8:25:a2:a6:4a:99:15:a9:55:eb:71: 31:17:4a:bc:5e:db:e2:d3:00:56:3e:a3:f6:06:15:55:26:92: ac:bd:3a:11:c0:55:76:ab:83:d3:1e:d3:b7:07:40:a1:6c:ec: bc:c4:75:67 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUORFMJa/sOnssWQ+1ifhIb/N2ow4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkNCMDgwMjNCQjQyOEFFNEQwMjcyN0M5NkIwNjlDNUY1 OUNFRThBMzAeFw0yNjA1MDMwMzEyMTBaFw0yNzA1MDIwMzE3MTBaMDMxMTAvBgNV BAMTKDYxQjM4RTk1MDZDMzBDMTgyQUE4REYwOTJFQ0VCNDg4MjhDNkQ4QzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbgFzf0+9UbIM/lghWRlKud2yd bxBPlG16ByiepCgkZGFjGL/OGhq/kIlOKQyyBQUvI01tOHhCb1w5ejdLgUqCOZ8p uyQbpfX64a8Dct45RVNwSTKuJrxCmM3rdlG2gv+OMOCMwfGDGtuTMypELxEBqG7F jzaxlTSNMp3EpfRGNx7cU18pmgZwLSwpU8zm+xKGwHeMe6wbUuZTK/cpqut5TtMW zXl30jEMCimwcRZjqstLlqZO0EpeBsPtYeEItsfLhKvyV1Mus+5qeoM36D+C4hd9 B6C6DyC2Zip+81lLuQDpqLO2SFGvdvHpC/WMzaO1g+85qtkRBncJqSRBpscdAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUYbOOlQbDDBgqqN8JLs60iCjG2MUwHwYDVR0j BBgwFoAULLCAI7tCiuTQJyfJawacX1nO6KMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjM0ZWNjNDAtNmI4NC00OWU4LWI2MGItNmU5OTA0MTI4Y2E4LzAvMkNCMDgwMjNC QjQyOEFFNEQwMjcyN0M5NkIwNjlDNUY1OUNFRThBMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yQ0IwODAyM0JCNDI4QUU0RDAyNzI3Qzk2QjA2OUM1RjU5Q0VF OEEzLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2YzNGVjYzQwLTZiODQtNDllOC1i NjBiLTZlOTkwNDEyOGNhOC8wLzMyMzAzMzJlMzIzMDMxMmUzMTM3MzMyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMzM4MzczNzM4LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAy8mtMA0GCSqG SIb3DQEBCwUAA4IBAQBR7HtmVhBrV8QRvs2dfVETRSR/a8pyNdZTvDyU13xBsMDg L4sqqAWNFx7jSGzz8/7zWAgPeRGsGqTyiHMLqmjAYCftjWgoNN5fHKkPa/+ATPtU 56F1E9rbdB+jinYTQ+NxBWI+Tbtxry+EfdNKgWepPs6oY0aTx4NoectRbN/ROKG6 /cWvd4ym9zbbqknDhXrJ8MaW1Pu7CY2uMEg8s19WDrcX8S1XHJSh88LN+Pi2O4pO gVE+1tDJ0oG0z5XyK8dUHngrKfDyT7Jc9s8N6CWipkqZFalV63ExF0q8Xtvi0wBW PqP2BhVVJpKsvToRwFV2q4PTHtO3B0ChbOy8xHVn -----END CERTIFICATE-----Generated at Wed May 13 03:26:36 2026 by rpki-client