$ rpki-client -vvf rpki-rsync.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/34352e3132322e35322e302f32322d3234203d3e20313335343438.roa File: 34352e3132322e35322e302f32322d3234203d3e20313335343438.roa (raw, json) Hash identifier: 8N1IzAB8pkX4/FYSEzrTQt1a1/sgsTYFhzCROR3Q7kU= Subject key identifier: 17:7A:22:E3:FD:98:E1:3A:F1:A0:7A:C4:CA:3B:DB:A6:E3:67:34:8F Certificate issuer: /CN=71645BDB97FEBD6E0D4F53A08CBF24077C24E403 Certificate serial: 0A84AF0318DEB6341C55817CB82EE708642C8DF6 Authority key identifier: 71:64:5B:DB:97:FE:BD:6E:0D:4F:53:A0:8C:BF:24:07:7C:24:E4:03 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71645BDB97FEBD6E0D4F53A08CBF24077C24E403.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/34352e3132322e35322e302f32322d3234203d3e20313335343438.roa Signing time: Sun 03 May 2026 02:11:17 +0000 ROA not before: Sun 03 May 2026 02:06:17 +0000 ROA not after: Sun 02 May 2027 02:11:17 +0000 asID: 135448 IP address blocks: 45.122.52.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/71645BDB97FEBD6E0D4F53A08CBF24077C24E403.crl rsync://rpki-rsync.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/71645BDB97FEBD6E0D4F53A08CBF24077C24E403.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71645BDB97FEBD6E0D4F53A08CBF24077C24E403.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:84:af:03:18:de:b6:34:1c:55:81:7c:b8:2e:e7:08:64:2c:8d:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71645BDB97FEBD6E0D4F53A08CBF24077C24E403 Validity Not Before: May 3 02:06:17 2026 GMT Not After : May 2 02:11:17 2027 GMT Subject: CN=177A22E3FD98E13AF1A07AC4CA3BDBA6E367348F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:7b:02:dd:d6:04:fe:eb:79:70:b7:87:93:da: 06:87:d0:46:26:0c:71:ac:2b:5d:13:b7:a4:51:f6: 75:3e:1f:44:58:52:d7:f9:61:14:6b:e2:a6:53:39: af:cd:8a:11:ba:ba:2f:0a:78:b0:fd:d3:bb:9a:17: 9d:f8:77:6c:be:ba:91:90:5e:b5:14:74:70:14:60: f0:d5:ec:22:a6:28:e1:51:75:21:f6:ad:e0:3f:23: 7d:84:55:5d:e9:ea:01:e3:2d:13:1e:fc:67:ac:cb: c4:f7:72:e1:72:ee:f4:cc:23:4e:c4:21:0e:9c:81: 6e:40:3c:38:9d:a5:69:ae:49:28:6a:88:09:32:9d: fe:39:7b:75:c7:77:36:4f:cc:3a:a0:e1:3a:48:70: 59:dd:78:e6:62:d1:fb:7f:d0:c8:86:91:0d:b6:c5: 9a:0e:ed:09:d6:b1:46:b6:b8:4a:75:0c:cf:bc:3d: ae:5e:65:63:f0:14:ee:1d:c3:08:e3:64:c9:58:58: 65:39:82:d0:91:72:1a:69:2c:51:3a:0a:e6:77:35: 46:1f:c8:f8:2c:2d:46:72:28:88:e1:32:ac:54:8f: 45:67:a4:20:5d:e8:0b:ca:43:6b:ee:fb:0c:bd:6c: 2f:49:4d:68:81:d8:77:69:4e:83:7d:e6:63:f9:dc: 12:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:7A:22:E3:FD:98:E1:3A:F1:A0:7A:C4:CA:3B:DB:A6:E3:67:34:8F X509v3 Authority Key Identifier: keyid:71:64:5B:DB:97:FE:BD:6E:0D:4F:53:A0:8C:BF:24:07:7C:24:E4:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/71645BDB97FEBD6E0D4F53A08CBF24077C24E403.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71645BDB97FEBD6E0D4F53A08CBF24077C24E403.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/34352e3132322e35322e302f32322d3234203d3e20313335343438.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.122.52.0/22 Signature Algorithm: sha256WithRSAEncryption 3b:f3:5e:15:1f:b7:a6:80:4f:3b:36:8d:c3:63:78:dd:e7:ad: 10:ae:8c:8f:c1:71:56:4f:3a:ad:52:2a:c1:01:f9:4c:f4:40: c7:ed:66:03:ab:17:46:79:80:ed:2c:85:9d:15:e1:44:e3:f3: b5:41:f0:6b:26:de:13:13:ad:85:10:88:b9:6f:32:9e:4f:a8: ff:11:bd:d7:44:34:48:94:3c:a5:5a:6a:3a:83:4d:09:86:6a: 04:a2:2a:19:2f:b0:9e:96:74:a6:be:f3:30:fc:06:0f:cc:b6: ac:58:8c:ba:55:c0:79:ab:e5:6c:52:83:ef:7a:23:86:bf:67: 20:80:2c:da:58:9f:b4:d1:11:98:76:9d:1d:80:19:0b:a8:0b: 9d:6f:06:ed:f5:c4:88:10:6c:d2:f5:b7:5d:c0:95:59:17:87: fe:de:98:c6:c0:f1:54:39:93:23:79:42:b5:65:1d:0c:06:96: fc:9e:c7:f6:80:fb:7c:e9:2a:68:90:19:0b:50:88:0b:dc:7a: 1c:dc:22:f5:4a:82:9a:b3:64:f7:e7:09:76:8b:29:7d:e8:af: 81:b6:43:1e:1a:50:13:29:4f:fe:e5:d9:d3:2f:19:8e:9e:6c: b9:de:de:b6:54:bf:db:86:a1:db:df:63:96:a7:7a:67:b2:03: a8:f1:cb:29 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUCoSvAxjetjQcVYF8uC7nCGQsjfYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzE2NDVCREI5N0ZFQkQ2RTBENEY1M0EwOENCRjI0MDc3 QzI0RTQwMzAeFw0yNjA1MDMwMjA2MTdaFw0yNzA1MDIwMjExMTdaMDMxMTAvBgNV BAMTKDE3N0EyMkUzRkQ5OEUxM0FGMUEwN0FDNENBM0JEQkE2RTM2NzM0OEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPewLd1gT+63lwt4eT2gaH0EYm DHGsK10Tt6RR9nU+H0RYUtf5YRRr4qZTOa/NihG6ui8KeLD907uaF534d2y+upGQ XrUUdHAUYPDV7CKmKOFRdSH2reA/I32EVV3p6gHjLRMe/Gesy8T3cuFy7vTMI07E IQ6cgW5APDidpWmuSShqiAkynf45e3XHdzZPzDqg4TpIcFndeOZi0ft/0MiGkQ22 xZoO7QnWsUa2uEp1DM+8Pa5eZWPwFO4dwwjjZMlYWGU5gtCRchppLFE6CuZ3NUYf yPgsLUZyKIjhMqxUj0VnpCBd6AvKQ2vu+wy9bC9JTWiB2HdpToN95mP53BK3AgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUF3oi4/2Y4TrxoHrEyjvbpuNnNI8wHwYDVR0j BBgwFoAUcWRb25f+vW4NT1OgjL8kB3wk5AMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDU5YWNiOTctNmU4Ny00ZTMxLWE1NjktYTI2NjBkZjRmMmI4LzAvNzE2NDVCREI5 N0ZFQkQ2RTBENEY1M0EwOENCRjI0MDc3QzI0RTQwMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83MTY0NUJEQjk3RkVCRDZFMEQ0RjUzQTA4Q0JGMjQwNzdDMjRF NDAzLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzA1OWFjYjk3LTZlODctNGUzMS1h NTY5LWEyNjYwZGY0ZjJiOC8wLzM0MzUyZTMxMzIzMjJlMzUzMjJlMzAyZjMyMzIy ZDMyMzQyMDNkM2UyMDMxMzMzNTM0MzQzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi16NDANBgkqhkiG 9w0BAQsFAAOCAQEAO/NeFR+3poBPOzaNw2N43eetEK6Mj8FxVk86rVIqwQH5TPRA x+1mA6sXRnmA7SyFnRXhROPztUHwaybeExOthRCIuW8ynk+o/xG910Q0SJQ8pVpq OoNNCYZqBKIqGS+wnpZ0pr7zMPwGD8y2rFiMulXAeavlbFKD73ojhr9nIIAs2lif tNERmHadHYAZC6gLnW8G7fXEiBBs0vW3XcCVWReH/t6YxsDxVDmTI3lCtWUdDAaW /J7H9oD7fOkqaJAZC1CIC9x6HNwi9UqCmrNk9+cJdospfeivgbZDHhpQEylP/uXZ 0y8Zjp5sud7etlS/24ah299jlqd6Z7IDqPHLKQ== -----END CERTIFICATE-----Generated at Wed May 13 02:59:02 2026 by rpki-client