$ rpki-client -vvf rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230332e3230312e3137342e302f32342d3234203d3e203338373738.roa File: 3230332e3230312e3137342e302f32342d3234203d3e203338373738.roa (raw, json) Hash identifier: 8a0pwbNdQ/loL7ePeTpK08h+1zJAazJUxpwKxHE04K8= Subject key identifier: DD:8B:94:B7:EC:33:12:67:4A:5E:37:99:28:97:8F:AD:CF:FE:3E:77 Certificate issuer: /CN=2CB08023BB428AE4D02727C96B069C5F59CEE8A3 Certificate serial: 393897FDF719B0496AF900E19354FFFDF65A2F31 Authority key identifier: 2C:B0:80:23:BB:42:8A:E4:D0:27:27:C9:6B:06:9C:5F:59:CE:E8:A3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230332e3230312e3137342e302f32342d3234203d3e203338373738.roa Signing time: Sun 03 May 2026 03:17:18 +0000 ROA not before: Sun 03 May 2026 03:12:18 +0000 ROA not after: Sun 02 May 2027 03:17:18 +0000 asID: 38778 IP address blocks: 203.201.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.crl rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 00:40:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:38:97:fd:f7:19:b0:49:6a:f9:00:e1:93:54:ff:fd:f6:5a:2f:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2CB08023BB428AE4D02727C96B069C5F59CEE8A3 Validity Not Before: May 3 03:12:18 2026 GMT Not After : May 2 03:17:18 2027 GMT Subject: CN=DD8B94B7EC3312674A5E379928978FADCFFE3E77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:a2:db:09:3f:8c:2a:8d:a3:ac:82:21:20:8f: 59:1d:65:d3:5f:1a:4f:4f:7b:6a:0f:ee:4b:e3:a2: 48:26:33:bf:df:45:d8:15:b5:7e:ab:34:58:23:3c: 59:e4:3b:30:c4:89:2b:13:7b:13:f8:9d:65:f7:d9: 3f:ed:67:9f:af:d6:f4:ff:59:5e:29:dd:b3:db:cb: 5b:be:e1:93:5c:74:e9:30:d8:ed:b3:9d:a4:1e:23: 77:90:24:84:75:72:af:8a:5c:fa:0d:08:c7:54:0a: 4a:e9:c8:62:fe:08:cc:0e:bd:64:47:14:46:e4:79: 70:33:4a:16:69:9b:c5:ea:ff:ec:14:f8:2a:df:47: f2:80:54:25:58:6a:b1:e8:1f:6f:74:30:26:b3:0e: f9:7d:f1:bf:a1:0e:44:95:13:03:eb:7d:4f:8e:56: f0:6b:5e:f9:79:45:f3:b1:56:c2:2e:90:10:97:43: b9:ff:7a:4f:36:cd:39:31:36:7c:39:9c:86:22:8f: 02:18:10:a0:e0:d9:8c:15:e1:ae:b7:f8:6c:e0:2a: 91:c2:1f:46:45:91:18:d7:db:bb:6d:ce:ba:04:d2: 46:59:81:4e:7e:ec:48:1a:f0:bb:82:09:d1:75:e7: 06:94:b9:12:6d:33:e7:eb:fd:0a:1b:d2:2e:c7:5c: a9:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:8B:94:B7:EC:33:12:67:4A:5E:37:99:28:97:8F:AD:CF:FE:3E:77 X509v3 Authority Key Identifier: keyid:2C:B0:80:23:BB:42:8A:E4:D0:27:27:C9:6B:06:9C:5F:59:CE:E8:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230332e3230312e3137342e302f32342d3234203d3e203338373738.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.201.174.0/24 Signature Algorithm: sha256WithRSAEncryption 61:e0:99:10:ea:69:36:45:5a:81:5b:a4:52:60:13:d8:73:6b: 71:35:6f:b7:85:32:76:64:57:ae:7f:5a:b6:89:33:0e:39:f9: e0:99:c6:43:6c:bc:5f:df:93:d3:25:fa:9f:ba:63:cd:b3:8b: c7:ed:e2:29:f0:73:e5:f4:e7:46:68:90:39:b3:a2:7d:60:d8: 73:d5:1f:bf:9a:db:74:be:36:7e:11:a9:d7:69:f8:e5:04:8f: f8:f5:85:72:87:b8:57:d5:7b:5d:47:d1:a9:07:78:c2:4b:8a: 0b:41:66:2a:d4:ea:a2:5b:47:54:ef:fd:20:f3:67:ea:e0:4a: 92:79:28:5f:43:db:b0:99:2b:db:33:16:2f:0e:49:aa:88:cc: 44:d6:8c:60:c1:01:ca:3e:80:1f:89:06:0f:7b:b2:4b:60:3e: d3:70:b6:3a:97:a2:4c:af:2a:05:d7:5e:f6:9f:69:16:2b:3b: 19:26:ea:72:a6:9e:ad:a0:4b:63:eb:64:a6:0a:8b:1f:2a:45: e3:e4:be:22:9d:22:15:52:9a:42:37:b5:12:a7:d9:f9:2d:7c: 9c:a9:79:f5:70:0a:c6:4a:24:88:f4:b4:d1:45:8a:bd:79:d4: 15:41:bc:03:1f:8d:0c:49:e4:f2:87:88:37:3e:43:29:90:9e: 2a:12:e3:b0 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUOTiX/fcZsElq+QDhk1T//fZaLzEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkNCMDgwMjNCQjQyOEFFNEQwMjcyN0M5NkIwNjlDNUY1 OUNFRThBMzAeFw0yNjA1MDMwMzEyMThaFw0yNzA1MDIwMzE3MThaMDMxMTAvBgNV BAMTKEREOEI5NEI3RUMzMzEyNjc0QTVFMzc5OTI4OTc4RkFEQ0ZGRTNFNzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwotsJP4wqjaOsgiEgj1kdZdNf Gk9Pe2oP7kvjokgmM7/fRdgVtX6rNFgjPFnkOzDEiSsTexP4nWX32T/tZ5+v1vT/ WV4p3bPby1u+4ZNcdOkw2O2znaQeI3eQJIR1cq+KXPoNCMdUCkrpyGL+CMwOvWRH FEbkeXAzShZpm8Xq/+wU+CrfR/KAVCVYarHoH290MCazDvl98b+hDkSVEwPrfU+O VvBrXvl5RfOxVsIukBCXQ7n/ek82zTkxNnw5nIYijwIYEKDg2YwV4a63+GzgKpHC H0ZFkRjX27ttzroE0kZZgU5+7Ega8LuCCdF15waUuRJtM+fr/Qob0i7HXKkBAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU3YuUt+wzEmdKXjeZKJePrc/+PncwHwYDVR0j BBgwFoAULLCAI7tCiuTQJyfJawacX1nO6KMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjM0ZWNjNDAtNmI4NC00OWU4LWI2MGItNmU5OTA0MTI4Y2E4LzAvMkNCMDgwMjNC QjQyOEFFNEQwMjcyN0M5NkIwNjlDNUY1OUNFRThBMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yQ0IwODAyM0JCNDI4QUU0RDAyNzI3Qzk2QjA2OUM1RjU5Q0VF OEEzLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2YzNGVjYzQwLTZiODQtNDllOC1i NjBiLTZlOTkwNDEyOGNhOC8wLzMyMzAzMzJlMzIzMDMxMmUzMTM3MzQyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMzM4MzczNzM4LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAy8muMA0GCSqG SIb3DQEBCwUAA4IBAQBh4JkQ6mk2RVqBW6RSYBPYc2txNW+3hTJ2ZFeuf1q2iTMO OfngmcZDbLxf35PTJfqfumPNs4vH7eIp8HPl9OdGaJA5s6J9YNhz1R+/mtt0vjZ+ EanXafjlBI/49YVyh7hX1XtdR9GpB3jCS4oLQWYq1OqiW0dU7/0g82fq4EqSeShf Q9uwmSvbMxYvDkmqiMxE1oxgwQHKPoAfiQYPe7JLYD7TcLY6l6JMryoF1172n2kW KzsZJupypp6toEtj62SmCosfKkXj5L4inSIVUppCN7USp9n5LXycqXn1cArGSiSI 9LTRRYq9edQVQbwDH40MSeTyh4g3PkMpkJ4qEuOw -----END CERTIFICATE-----Generated at Wed May 13 03:51:08 2026 by rpki-client