$ rpki-client -vvf rpki-rsync.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/35382e3134372e3138352e302f32342d3234203d3e203234353334.roa File: 35382e3134372e3138352e302f32342d3234203d3e203234353334.roa (raw, json) Hash identifier: fpQkdOaR92WpkBfxWr9OflPSFmWkPnjC1NbbvtYsxhc= Subject key identifier: A4:C8:A9:84:70:21:4C:CA:FA:27:78:B1:5E:53:BE:39:3D:63:C6:12 Certificate issuer: /CN=54A9AA4CF14C7CF2ED286484218857A15AE91E9A Certificate serial: 33B1963322AB81ABAE4835E6F91594922C47F5BE Authority key identifier: 54:A9:AA:4C:F1:4C:7C:F2:ED:28:64:84:21:88:57:A1:5A:E9:1E:9A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54A9AA4CF14C7CF2ED286484218857A15AE91E9A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/35382e3134372e3138352e302f32342d3234203d3e203234353334.roa Signing time: Sun 03 May 2026 02:11:34 +0000 ROA not before: Sun 03 May 2026 02:06:34 +0000 ROA not after: Sun 02 May 2027 02:11:34 +0000 asID: 24534 IP address blocks: 58.147.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/54A9AA4CF14C7CF2ED286484218857A15AE91E9A.crl rsync://rpki-rsync.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/54A9AA4CF14C7CF2ED286484218857A15AE91E9A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54A9AA4CF14C7CF2ED286484218857A15AE91E9A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 04:31:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:b1:96:33:22:ab:81:ab:ae:48:35:e6:f9:15:94:92:2c:47:f5:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54A9AA4CF14C7CF2ED286484218857A15AE91E9A Validity Not Before: May 3 02:06:34 2026 GMT Not After : May 2 02:11:34 2027 GMT Subject: CN=A4C8A98470214CCAFA2778B15E53BE393D63C612 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:9a:53:49:34:b7:89:02:76:79:58:86:bd:2d: dc:44:8b:29:39:22:2e:7a:ed:aa:70:87:89:93:6c: 91:a8:f1:85:28:b7:9a:0d:21:97:18:a1:8e:bb:71: 62:6d:a1:ea:1d:9a:fa:32:19:04:c3:b7:92:21:06: 72:50:6c:f5:94:c4:b9:bf:e1:2e:85:15:a8:24:b5: a7:ce:97:12:83:f7:8e:e6:49:ff:f3:a5:98:89:88: 4c:90:58:af:03:76:3c:d4:e1:19:9b:22:68:94:3c: 11:5d:06:90:cb:19:f5:45:8a:2c:a6:6b:f8:1e:ef: cb:2d:ca:76:85:73:da:aa:2c:8b:62:43:39:e2:31: 87:af:79:57:ea:82:e6:65:00:6c:22:fc:25:a0:13: 4c:48:9f:ac:7c:88:a3:bf:b5:aa:e8:4c:05:da:3b: b4:bc:0b:a8:a8:df:32:86:15:81:0b:41:f4:cf:a8: 61:3e:b7:d3:9c:77:44:83:e8:8a:59:f0:74:5a:34: f2:10:17:a6:d2:e6:db:20:b9:dc:b1:00:97:72:dd: 2b:3e:ed:81:41:84:17:b6:66:b1:15:6d:3b:38:53: ad:19:a8:a7:b6:7c:81:0e:35:f0:2f:2a:90:fd:2a: 60:ce:05:4c:5b:be:e6:78:94:04:49:6e:77:55:89: f8:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:C8:A9:84:70:21:4C:CA:FA:27:78:B1:5E:53:BE:39:3D:63:C6:12 X509v3 Authority Key Identifier: keyid:54:A9:AA:4C:F1:4C:7C:F2:ED:28:64:84:21:88:57:A1:5A:E9:1E:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/54A9AA4CF14C7CF2ED286484218857A15AE91E9A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54A9AA4CF14C7CF2ED286484218857A15AE91E9A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/35382e3134372e3138352e302f32342d3234203d3e203234353334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 58.147.185.0/24 Signature Algorithm: sha256WithRSAEncryption 16:84:e3:6f:90:f7:13:67:81:79:aa:37:3a:ac:84:2c:94:c7: c6:9e:aa:e2:87:d9:89:3a:db:4d:00:d6:4d:3c:cd:aa:1b:06: e9:d5:ae:56:e6:7b:e4:a7:a8:c6:15:85:7f:f6:c9:37:63:ea: 19:0f:cc:c3:7c:7f:fe:b1:92:9b:f5:89:c7:d7:ae:44:a3:a0: a2:bb:65:f0:43:d6:dd:a3:43:c2:cb:f4:ec:5a:6d:bf:49:8c: 83:1a:14:8d:b6:ce:7d:88:8e:4c:e8:e8:16:55:9e:59:80:bb: 1d:ea:25:6e:7a:49:dc:c8:f2:b4:98:14:6d:54:43:cc:cd:48: 79:ec:d4:b0:6c:8b:38:71:1d:1b:2d:6b:9f:24:7d:ab:3d:15: 58:fd:39:c6:75:c2:93:13:95:cc:f1:c8:53:5a:12:27:a4:71: c3:fc:f7:7d:86:ce:87:d9:4a:f8:1e:19:a3:73:f2:fc:d7:b8: 31:25:16:3a:b2:90:4f:10:f3:95:62:fd:5b:36:08:31:26:96: 66:50:b1:7e:b4:77:75:12:65:e7:c1:b4:3d:f3:ea:f5:d2:4b: b7:32:f5:4d:a8:e5:ae:99:de:6c:e6:14:9f:ed:45:5f:99:77: f8:f8:45:68:3a:50:e7:45:22:fd:44:d0:6d:09:38:14:1d:7a: 7f:1a:75:a8 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUM7GWMyKrgauuSDXm+RWUkixH9b4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTRBOUFBNENGMTRDN0NGMkVEMjg2NDg0MjE4ODU3QTE1 QUU5MUU5QTAeFw0yNjA1MDMwMjA2MzRaFw0yNzA1MDIwMjExMzRaMDMxMTAvBgNV BAMTKEE0QzhBOTg0NzAyMTRDQ0FGQTI3NzhCMTVFNTNCRTM5M0Q2M0M2MTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHmlNJNLeJAnZ5WIa9LdxEiyk5 Ii567apwh4mTbJGo8YUot5oNIZcYoY67cWJtoeodmvoyGQTDt5IhBnJQbPWUxLm/ 4S6FFagktafOlxKD947mSf/zpZiJiEyQWK8DdjzU4RmbImiUPBFdBpDLGfVFiiym a/ge78stynaFc9qqLItiQzniMYeveVfqguZlAGwi/CWgE0xIn6x8iKO/taroTAXa O7S8C6io3zKGFYELQfTPqGE+t9Ocd0SD6IpZ8HRaNPIQF6bS5tsgudyxAJdy3Ss+ 7YFBhBe2ZrEVbTs4U60ZqKe2fIEONfAvKpD9KmDOBUxbvuZ4lARJbndVifhdAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUpMiphHAhTMr6J3ixXlO+OT1jxhIwHwYDVR0j BBgwFoAUVKmqTPFMfPLtKGSEIYhXoVrpHpowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDYyNDA1MmUtMjIwNS00OGYzLWEzY2ItY2U4YjMyNmI4ZjcxLzAvNTRBOUFBNENG MTRDN0NGMkVEMjg2NDg0MjE4ODU3QTE1QUU5MUU5QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81NEE5QUE0Q0YxNEM3Q0YyRUQyODY0ODQyMTg4NTdBMTVBRTkx RTlBLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzA2MjQwNTJlLTIyMDUtNDhmMy1h M2NiLWNlOGIzMjZiOGY3MS8wLzM1MzgyZTMxMzQzNzJlMzEzODM1MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzIzNDM1MzMzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEADqTuTANBgkqhkiG 9w0BAQsFAAOCAQEAFoTjb5D3E2eBeao3OqyELJTHxp6q4ofZiTrbTQDWTTzNqhsG 6dWuVuZ75KeoxhWFf/bJN2PqGQ/Mw3x//rGSm/WJx9euRKOgortl8EPW3aNDwsv0 7Fptv0mMgxoUjbbOfYiOTOjoFlWeWYC7HeolbnpJ3MjytJgUbVRDzM1IeezUsGyL OHEdGy1rnyR9qz0VWP05xnXCkxOVzPHIU1oSJ6Rxw/z3fYbOh9lK+B4Zo3Py/Ne4 MSUWOrKQTxDzlWL9WzYIMSaWZlCxfrR3dRJl58G0PfPq9dJLtzL1TajlrpnebOYU n+1FX5l3+PhFaDpQ50Ui/UTQbQk4FB16fxp1qA== -----END CERTIFICATE-----Generated at Wed May 13 09:08:53 2026 by rpki-client