$ rpki-client -vvf rpki-rsync.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/34352e3132352e37322e302f32322d3234203d3e20313335343438.roa File: 34352e3132352e37322e302f32322d3234203d3e20313335343438.roa (raw, json) Hash identifier: 715qMLL3zWMsWmsxBXBWi9NPtVddaj245ppj1A5IigM= Subject key identifier: 75:F6:C8:6D:F5:36:50:E4:C9:84:30:F4:39:4F:80:04:71:FA:41:BF Certificate issuer: /CN=71645BDB97FEBD6E0D4F53A08CBF24077C24E403 Certificate serial: 5DD69818C2871927CFD818E5B288552462FF7C0A Authority key identifier: 71:64:5B:DB:97:FE:BD:6E:0D:4F:53:A0:8C:BF:24:07:7C:24:E4:03 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71645BDB97FEBD6E0D4F53A08CBF24077C24E403.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/34352e3132352e37322e302f32322d3234203d3e20313335343438.roa Signing time: Sun 03 May 2026 02:11:18 +0000 ROA not before: Sun 03 May 2026 02:06:18 +0000 ROA not after: Sun 02 May 2027 02:11:18 +0000 asID: 135448 IP address blocks: 45.125.72.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/71645BDB97FEBD6E0D4F53A08CBF24077C24E403.crl rsync://rpki-rsync.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/71645BDB97FEBD6E0D4F53A08CBF24077C24E403.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71645BDB97FEBD6E0D4F53A08CBF24077C24E403.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 01:58:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:d6:98:18:c2:87:19:27:cf:d8:18:e5:b2:88:55:24:62:ff:7c:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71645BDB97FEBD6E0D4F53A08CBF24077C24E403 Validity Not Before: May 3 02:06:18 2026 GMT Not After : May 2 02:11:18 2027 GMT Subject: CN=75F6C86DF53650E4C98430F4394F800471FA41BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:3f:dd:b8:6b:f7:f9:f3:b9:ac:12:e6:29:00: e6:20:9f:63:22:fd:fe:2f:46:cb:1f:3c:e7:f1:7b: ca:2c:44:f0:c1:0a:48:67:de:52:38:c0:88:62:eb: fb:8e:85:a4:41:c8:2c:91:db:57:1b:91:cb:eb:2b: 6d:91:f6:c0:41:3d:f9:8c:c9:8d:cc:bc:72:44:8f: 92:9a:fa:2a:0c:e9:6d:98:e2:a0:d3:a7:eb:a8:71: b1:08:b4:f5:f2:86:dd:58:31:94:e7:c8:50:91:0c: 21:b7:2e:29:9f:55:4e:f5:4d:8b:17:9a:f0:96:a5: 26:9e:89:b3:fb:cc:d5:66:8d:b1:9f:23:44:0e:bb: 21:cb:11:ed:28:37:1d:55:77:ae:e3:07:5a:10:5d: 8f:4a:61:78:03:1d:e8:6c:c3:d0:f2:86:02:c2:09: fd:0e:7c:bd:d3:be:13:b4:b9:25:7c:bb:b7:32:39: c2:5f:f4:72:5a:d1:8d:4e:b3:f9:a1:f4:0d:bc:f1: f4:12:02:e4:dc:de:b8:ed:7c:d0:a9:9f:0f:f2:81: 5b:c5:50:99:82:96:bd:c4:64:3b:42:e0:ba:c9:45: 91:8d:fd:38:32:44:40:b0:fd:3b:13:a9:f6:b0:dc: 32:19:09:4d:a9:16:f4:87:ab:ad:95:78:e1:52:d3: db:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:F6:C8:6D:F5:36:50:E4:C9:84:30:F4:39:4F:80:04:71:FA:41:BF X509v3 Authority Key Identifier: keyid:71:64:5B:DB:97:FE:BD:6E:0D:4F:53:A0:8C:BF:24:07:7C:24:E4:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/71645BDB97FEBD6E0D4F53A08CBF24077C24E403.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71645BDB97FEBD6E0D4F53A08CBF24077C24E403.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/34352e3132352e37322e302f32322d3234203d3e20313335343438.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.125.72.0/22 Signature Algorithm: sha256WithRSAEncryption 1e:42:78:92:b2:6d:7c:bf:c0:76:f1:b7:23:a1:9b:74:ab:3d: d4:57:6a:8c:8e:da:37:4a:6f:99:73:0f:95:1a:88:93:1e:fc: fb:0f:ac:ff:2a:31:59:f6:fc:a1:92:ab:ed:3e:0c:bf:07:76: 37:90:eb:8d:d9:59:e5:f7:49:e4:e7:bd:2f:f5:f1:9a:e4:db: 63:96:e1:5d:20:c0:9f:57:28:de:f5:73:f8:fe:c3:1f:03:88: ae:72:fc:cb:a2:d8:3b:32:0b:25:e5:21:d9:89:7a:60:0f:8d: 52:ac:dc:21:7d:44:b4:7b:2a:a2:7e:04:c3:0b:22:f5:91:89: ab:65:88:26:f4:2a:93:0e:84:70:25:eb:cd:03:b2:eb:76:e9: 12:42:50:36:ed:0b:2f:b7:90:3e:e2:e2:c1:a3:d3:c9:c1:86: 62:43:b3:16:ff:06:46:71:6d:b9:35:f6:91:ea:6b:de:90:fd: 79:1e:f8:2c:c9:e6:73:a0:34:63:da:ef:20:f4:45:a2:85:b2: f2:59:f5:48:96:95:96:10:20:a8:24:2a:5d:9e:a4:5e:12:21: fa:ad:7c:48:b4:c9:30:f4:38:38:26:99:23:4f:38:18:37:c5: 9d:bd:ba:85:5e:1c:54:9e:03:52:84:1a:d5:40:5f:39:26:22: 4e:73:80:8d -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUXdaYGMKHGSfP2BjlsohVJGL/fAowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzE2NDVCREI5N0ZFQkQ2RTBENEY1M0EwOENCRjI0MDc3 QzI0RTQwMzAeFw0yNjA1MDMwMjA2MThaFw0yNzA1MDIwMjExMThaMDMxMTAvBgNV BAMTKDc1RjZDODZERjUzNjUwRTRDOTg0MzBGNDM5NEY4MDA0NzFGQTQxQkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBP924a/f587msEuYpAOYgn2Mi /f4vRssfPOfxe8osRPDBCkhn3lI4wIhi6/uOhaRByCyR21cbkcvrK22R9sBBPfmM yY3MvHJEj5Ka+ioM6W2Y4qDTp+uocbEItPXyht1YMZTnyFCRDCG3LimfVU71TYsX mvCWpSaeibP7zNVmjbGfI0QOuyHLEe0oNx1Vd67jB1oQXY9KYXgDHehsw9DyhgLC Cf0OfL3TvhO0uSV8u7cyOcJf9HJa0Y1Os/mh9A288fQSAuTc3rjtfNCpnw/ygVvF UJmClr3EZDtC4LrJRZGN/TgyRECw/TsTqfaw3DIZCU2pFvSHq62VeOFS09vhAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUdfbIbfU2UOTJhDD0OU+ABHH6Qb8wHwYDVR0j BBgwFoAUcWRb25f+vW4NT1OgjL8kB3wk5AMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDU5YWNiOTctNmU4Ny00ZTMxLWE1NjktYTI2NjBkZjRmMmI4LzAvNzE2NDVCREI5 N0ZFQkQ2RTBENEY1M0EwOENCRjI0MDc3QzI0RTQwMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83MTY0NUJEQjk3RkVCRDZFMEQ0RjUzQTA4Q0JGMjQwNzdDMjRF NDAzLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzA1OWFjYjk3LTZlODctNGUzMS1h NTY5LWEyNjYwZGY0ZjJiOC8wLzM0MzUyZTMxMzIzNTJlMzczMjJlMzAyZjMyMzIy ZDMyMzQyMDNkM2UyMDMxMzMzNTM0MzQzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi19SDANBgkqhkiG 9w0BAQsFAAOCAQEAHkJ4krJtfL/AdvG3I6GbdKs91FdqjI7aN0pvmXMPlRqIkx78 +w+s/yoxWfb8oZKr7T4Mvwd2N5DrjdlZ5fdJ5Oe9L/XxmuTbY5bhXSDAn1co3vVz +P7DHwOIrnL8y6LYOzILJeUh2Yl6YA+NUqzcIX1EtHsqon4Ewwsi9ZGJq2WIJvQq kw6EcCXrzQOy63bpEkJQNu0LL7eQPuLiwaPTycGGYkOzFv8GRnFtuTX2kepr3pD9 eR74LMnmc6A0Y9rvIPRFooWy8ln1SJaVlhAgqCQqXZ6kXhIh+q18SLTJMPQ4OCaZ I084GDfFnb26hV4cVJ4DUoQa1UBfOSYiTnOAjQ== -----END CERTIFICATE-----Generated at Wed May 13 03:47:46 2026 by rpki-client