$ rpki-client -vvf rpki-rsync.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/34332e3232392e3235332e302f32342d3234203d3e203233363739.roa File: 34332e3232392e3235332e302f32342d3234203d3e203233363739.roa (raw, json) Hash identifier: CaaMLuwXrQgfDx97R5npFZaXU0iM2M88P+5JIHau+wY= Subject key identifier: 31:11:BA:22:05:57:A8:D2:62:0A:08:68:70:3E:42:81:77:C0:82:6A Certificate issuer: /CN=D09EA95FF10C0166C2954C997A8A4989BD890A87 Certificate serial: 34ECC768D2706FE41CDF7EFC4F6D36E896DB4A7E Authority key identifier: D0:9E:A9:5F:F1:0C:01:66:C2:95:4C:99:7A:8A:49:89:BD:89:0A:87 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D09EA95FF10C0166C2954C997A8A4989BD890A87.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/34332e3232392e3235332e302f32342d3234203d3e203233363739.roa Signing time: Sun 03 May 2026 02:18:53 +0000 ROA not before: Sun 03 May 2026 02:13:53 +0000 ROA not after: Sun 02 May 2027 02:18:53 +0000 asID: 23679 IP address blocks: 43.229.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/D09EA95FF10C0166C2954C997A8A4989BD890A87.crl rsync://rpki-rsync.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/D09EA95FF10C0166C2954C997A8A4989BD890A87.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D09EA95FF10C0166C2954C997A8A4989BD890A87.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 02:11:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:ec:c7:68:d2:70:6f:e4:1c:df:7e:fc:4f:6d:36:e8:96:db:4a:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D09EA95FF10C0166C2954C997A8A4989BD890A87 Validity Not Before: May 3 02:13:53 2026 GMT Not After : May 2 02:18:53 2027 GMT Subject: CN=3111BA220557A8D2620A0868703E428177C0826A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:be:52:73:d3:27:a3:9e:0c:6c:16:42:5b:c4: a6:c4:d5:d8:ba:97:48:1c:a9:ef:61:e3:bd:44:0f: f8:fc:17:5a:56:c0:01:e6:ad:4b:ed:e9:86:58:3e: d1:ea:ce:77:6c:4c:19:62:27:2f:41:a7:21:9d:af: ed:61:21:bc:6b:7e:12:b9:63:10:a4:ff:8c:73:79: 7e:5a:3f:a6:ab:e3:08:f5:15:ee:e7:94:7b:70:64: f4:2b:79:8a:87:38:dc:db:7d:a2:62:80:bd:5b:23: e2:18:1a:8b:cc:c6:91:09:bb:6b:62:a9:8d:ef:77: 29:26:18:a1:29:c7:c1:9a:62:d6:90:22:d7:7f:94: 86:e3:23:87:7c:f3:b0:06:3e:6e:1e:28:1c:fa:e3: 04:d2:29:6b:80:61:78:07:69:45:5e:09:57:93:66: 39:5b:fc:a6:72:0d:20:82:dc:8b:93:17:6a:e4:67: bb:87:48:89:62:f5:55:d3:d0:13:94:b8:c8:01:5b: ba:69:d3:84:a5:14:76:77:2a:f8:bc:30:1e:47:06: 8b:9d:7f:55:78:40:31:ab:7d:cf:5c:47:7a:d2:dc: 0f:75:eb:c4:7b:b8:0c:51:90:15:71:6b:2e:3b:d0: 2d:de:61:c6:8b:9e:69:f9:6a:04:22:3d:fd:2f:df: 04:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:11:BA:22:05:57:A8:D2:62:0A:08:68:70:3E:42:81:77:C0:82:6A X509v3 Authority Key Identifier: keyid:D0:9E:A9:5F:F1:0C:01:66:C2:95:4C:99:7A:8A:49:89:BD:89:0A:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/D09EA95FF10C0166C2954C997A8A4989BD890A87.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D09EA95FF10C0166C2954C997A8A4989BD890A87.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/34332e3232392e3235332e302f32342d3234203d3e203233363739.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.229.253.0/24 Signature Algorithm: sha256WithRSAEncryption 0e:6a:ad:d6:a9:df:07:03:b3:11:2f:9a:ea:3f:5b:bc:f8:30: 6b:13:3a:a6:ba:47:e1:49:40:9d:1b:be:24:80:84:85:8e:c9: 70:3b:25:37:46:e4:92:52:b6:f5:f8:71:41:3f:4f:fb:0b:7b: 8d:11:80:76:71:bb:01:fd:9c:a1:f3:c1:79:12:c5:0e:08:0b: ae:87:95:0b:d8:84:2d:2a:6c:4a:5d:c7:6c:63:b9:a6:08:7b: 61:68:8d:73:a5:ec:97:ff:74:dc:09:24:2d:1a:78:e5:c0:d7: f3:00:9c:2b:91:c3:b2:48:9b:96:24:9c:f3:54:41:e2:e6:24: 76:3d:3c:82:89:f8:aa:ad:8d:d6:db:bc:eb:51:c7:1a:67:07: b3:ce:d3:42:3e:b2:8d:d9:88:dd:44:93:35:53:32:3e:39:e7: d1:c2:0e:db:53:f1:15:bd:f5:86:8c:99:de:ed:2c:b5:09:92: d1:71:ab:4b:5d:f7:ce:6b:11:5a:40:2e:a6:1c:92:bd:f0:d7: 08:91:aa:e1:ea:1a:74:dc:ee:fd:bb:4d:d8:9e:9f:35:31:68: 01:fd:79:56:f9:55:11:3e:ef:49:b1:90:0f:4d:a4:9b:13:51: 9f:3d:b6:4c:5e:d0:e4:05:40:6b:73:2d:39:75:9b:c9:6c:3a: 06:f2:49:09 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUNOzHaNJwb+Qc3378T2026JbbSn4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDA5RUE5NUZGMTBDMDE2NkMyOTU0Qzk5N0E4QTQ5ODlC RDg5MEE4NzAeFw0yNjA1MDMwMjEzNTNaFw0yNzA1MDIwMjE4NTNaMDMxMTAvBgNV BAMTKDMxMTFCQTIyMDU1N0E4RDI2MjBBMDg2ODcwM0U0MjgxNzdDMDgyNkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuvlJz0yejngxsFkJbxKbE1di6 l0gcqe9h471ED/j8F1pWwAHmrUvt6YZYPtHqzndsTBliJy9BpyGdr+1hIbxrfhK5 YxCk/4xzeX5aP6ar4wj1Fe7nlHtwZPQreYqHONzbfaJigL1bI+IYGovMxpEJu2ti qY3vdykmGKEpx8GaYtaQItd/lIbjI4d887AGPm4eKBz64wTSKWuAYXgHaUVeCVeT Zjlb/KZyDSCC3IuTF2rkZ7uHSIli9VXT0BOUuMgBW7pp04SlFHZ3Kvi8MB5HBoud f1V4QDGrfc9cR3rS3A9168R7uAxRkBVxay470C3eYcaLnmn5agQiPf0v3wQBAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUMRG6IgVXqNJiCghocD5CgXfAgmowHwYDVR0j BBgwFoAU0J6pX/EMAWbClUyZeopJib2JCocwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjAxNDMyY2MtM2JjOS00ODU4LWI1MDYtMjE4YWFiMGIwODljLzAvRDA5RUE5NUZG MTBDMDE2NkMyOTU0Qzk5N0E4QTQ5ODlCRDg5MEE4Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EMDlFQTk1RkYxMEMwMTY2QzI5NTRDOTk3QThBNDk4OUJEODkw QTg3LmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzIwMTQzMmNjLTNiYzktNDg1OC1i NTA2LTIxOGFhYjBiMDg5Yy8wLzM0MzMyZTMyMzIzOTJlMzIzNTMzMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzIzMzM2MzczOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEACvl/TANBgkqhkiG 9w0BAQsFAAOCAQEADmqt1qnfBwOzES+a6j9bvPgwaxM6prpH4UlAnRu+JICEhY7J cDslN0bkklK29fhxQT9P+wt7jRGAdnG7Af2cofPBeRLFDggLroeVC9iELSpsSl3H bGO5pgh7YWiNc6Xsl/903AkkLRp45cDX8wCcK5HDskibliSc81RB4uYkdj08gon4 qq2N1tu861HHGmcHs87TQj6yjdmI3USTNVMyPjnn0cIO21PxFb31hoyZ3u0stQmS 0XGrS133zmsRWkAuphySvfDXCJGq4eoadNzu/btN2J6fNTFoAf15VvlVET7vSbGQ D02kmxNRnz22TF7Q5AVAa3MtOXWbyWw6BvJJCQ== -----END CERTIFICATE-----Generated at Wed May 13 07:52:52 2026 by rpki-client