$ rpki-client -vvf rpki-rsync.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/34332e3232392e3235342e302f32332d3234203d3e203233363739.roa File: 34332e3232392e3235342e302f32332d3234203d3e203233363739.roa (raw, json) Hash identifier: qByJQpdqjs7EY3o/d/L/4lr5IlFKMglXu0kzz8LC8bg= Subject key identifier: EC:FF:AC:32:65:E0:0C:93:FB:05:3E:4F:4C:28:B8:1B:3B:31:54:B2 Certificate issuer: /CN=D09EA95FF10C0166C2954C997A8A4989BD890A87 Certificate serial: 0236C4251FEA5DCFC1A3E1840733D025E0CBBF4E Authority key identifier: D0:9E:A9:5F:F1:0C:01:66:C2:95:4C:99:7A:8A:49:89:BD:89:0A:87 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D09EA95FF10C0166C2954C997A8A4989BD890A87.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/34332e3232392e3235342e302f32332d3234203d3e203233363739.roa Signing time: Sun 03 May 2026 02:18:54 +0000 ROA not before: Sun 03 May 2026 02:13:54 +0000 ROA not after: Sun 02 May 2027 02:18:54 +0000 asID: 23679 IP address blocks: 43.229.254.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/D09EA95FF10C0166C2954C997A8A4989BD890A87.crl rsync://rpki-rsync.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/D09EA95FF10C0166C2954C997A8A4989BD890A87.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D09EA95FF10C0166C2954C997A8A4989BD890A87.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 02:11:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:36:c4:25:1f:ea:5d:cf:c1:a3:e1:84:07:33:d0:25:e0:cb:bf:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D09EA95FF10C0166C2954C997A8A4989BD890A87 Validity Not Before: May 3 02:13:54 2026 GMT Not After : May 2 02:18:54 2027 GMT Subject: CN=ECFFAC3265E00C93FB053E4F4C28B81B3B3154B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:dc:40:fe:a3:0a:11:74:d1:62:67:d8:a6:05: 58:83:9d:5e:bc:48:35:45:79:59:ed:58:b8:d1:84: 37:4f:0a:e9:bd:cf:8d:0f:aa:8c:39:a0:b5:6b:58: 35:0d:cb:ea:a8:89:7b:ef:36:d4:44:a7:1c:44:c0: 9e:dc:30:e3:ab:d6:1e:67:bd:28:2c:53:bb:cf:dd: df:0c:c9:2d:4f:36:3c:06:ed:12:c6:3e:16:df:ee: a3:ee:9d:01:92:f2:03:1c:a9:44:c8:56:13:72:77: 94:2c:fb:9d:00:b9:d0:90:a4:29:77:17:0e:50:54: f3:07:ab:56:98:13:5d:a0:88:8c:49:7e:46:db:5a: aa:36:7d:92:d9:21:1e:d7:00:1b:04:24:4e:cc:99: 39:05:a4:67:a5:77:b2:42:e6:48:19:d9:8c:2f:20: 7f:31:b9:9c:6f:dc:e0:59:f5:2a:10:6f:6a:0e:a2: 23:ea:4b:a5:af:11:4e:2c:22:76:6f:c4:4b:cd:90: 4f:86:ac:83:c6:47:c3:6b:f3:4d:d5:30:b8:31:44: da:4f:7a:78:0e:d7:8c:d8:4b:8e:cf:71:c8:cb:d1: fd:12:f0:02:33:bb:12:8a:98:83:c0:d5:01:b8:8f: 04:ec:ae:d7:41:e3:e1:e7:b6:2a:ca:e5:d0:52:d3: dd:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:FF:AC:32:65:E0:0C:93:FB:05:3E:4F:4C:28:B8:1B:3B:31:54:B2 X509v3 Authority Key Identifier: keyid:D0:9E:A9:5F:F1:0C:01:66:C2:95:4C:99:7A:8A:49:89:BD:89:0A:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/D09EA95FF10C0166C2954C997A8A4989BD890A87.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D09EA95FF10C0166C2954C997A8A4989BD890A87.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/34332e3232392e3235342e302f32332d3234203d3e203233363739.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.229.254.0/23 Signature Algorithm: sha256WithRSAEncryption 0c:34:1f:b7:b1:14:f1:e3:49:37:f8:3b:40:c6:c9:e9:4e:7d: d7:f6:e3:f6:29:56:61:8f:5c:ac:1a:bf:a4:8a:ba:b5:bb:9f: 31:12:6e:2f:63:c6:12:04:54:9c:33:22:68:81:86:a7:99:2b: 5b:2d:75:c6:e0:c2:c1:19:2d:0b:ad:ad:84:55:cc:8a:c9:22: 5b:a2:c8:e2:1b:bf:2c:a1:15:20:2b:52:73:bb:b9:93:51:b2: 4e:d3:72:cb:4a:ec:36:55:ac:49:d5:38:90:88:71:a6:93:56: f2:e2:a2:22:b1:ae:82:46:4a:89:61:2e:07:04:70:46:ad:dc: e1:12:7b:75:97:5d:ed:44:83:a5:73:42:f6:28:bc:1c:32:51: 7b:bc:24:16:c8:2b:ef:0b:f3:6d:18:e9:20:b6:9e:32:3c:8e: a0:fd:20:50:03:1c:f0:88:c7:64:f6:60:ac:a4:7e:74:fd:b1: 20:e2:40:19:4c:e9:44:99:db:74:e2:23:d9:31:98:11:6c:e4: a6:29:0d:ba:65:96:7b:5f:b6:d7:f2:76:e9:46:29:5b:4e:da: 78:3c:ac:e8:53:02:fc:69:d7:1e:7a:e7:e9:22:28:5a:f1:35: 27:53:25:0b:2c:40:fa:32:67:cc:7d:6f:af:a4:14:16:76:de: 8c:89:88:9d -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUAjbEJR/qXc/Bo+GEBzPQJeDLv04wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDA5RUE5NUZGMTBDMDE2NkMyOTU0Qzk5N0E4QTQ5ODlC RDg5MEE4NzAeFw0yNjA1MDMwMjEzNTRaFw0yNzA1MDIwMjE4NTRaMDMxMTAvBgNV BAMTKEVDRkZBQzMyNjVFMDBDOTNGQjA1M0U0RjRDMjhCODFCM0IzMTU0QjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDq3ED+owoRdNFiZ9imBViDnV68 SDVFeVntWLjRhDdPCum9z40Pqow5oLVrWDUNy+qoiXvvNtREpxxEwJ7cMOOr1h5n vSgsU7vP3d8MyS1PNjwG7RLGPhbf7qPunQGS8gMcqUTIVhNyd5Qs+50AudCQpCl3 Fw5QVPMHq1aYE12giIxJfkbbWqo2fZLZIR7XABsEJE7MmTkFpGeld7JC5kgZ2Ywv IH8xuZxv3OBZ9SoQb2oOoiPqS6WvEU4sInZvxEvNkE+GrIPGR8Nr803VMLgxRNpP engO14zYS47PccjL0f0S8AIzuxKKmIPA1QG4jwTsrtdB4+HntirK5dBS092BAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQU7P+sMmXgDJP7BT5PTCi4GzsxVLIwHwYDVR0j BBgwFoAU0J6pX/EMAWbClUyZeopJib2JCocwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjAxNDMyY2MtM2JjOS00ODU4LWI1MDYtMjE4YWFiMGIwODljLzAvRDA5RUE5NUZG MTBDMDE2NkMyOTU0Qzk5N0E4QTQ5ODlCRDg5MEE4Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EMDlFQTk1RkYxMEMwMTY2QzI5NTRDOTk3QThBNDk4OUJEODkw QTg3LmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzIwMTQzMmNjLTNiYzktNDg1OC1i NTA2LTIxOGFhYjBiMDg5Yy8wLzM0MzMyZTMyMzIzOTJlMzIzNTM0MmUzMDJmMzIz MzJkMzIzNDIwM2QzZTIwMzIzMzM2MzczOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEASvl/jANBgkqhkiG 9w0BAQsFAAOCAQEADDQft7EU8eNJN/g7QMbJ6U591/bj9ilWYY9crBq/pIq6tbuf MRJuL2PGEgRUnDMiaIGGp5krWy11xuDCwRktC62thFXMiskiW6LI4hu/LKEVICtS c7u5k1GyTtNyy0rsNlWsSdU4kIhxppNW8uKiIrGugkZKiWEuBwRwRq3c4RJ7dZdd 7USDpXNC9ii8HDJRe7wkFsgr7wvzbRjpILaeMjyOoP0gUAMc8IjHZPZgrKR+dP2x IOJAGUzpRJnbdOIj2TGYEWzkpikNumWWe1+21/J26UYpW07aeDys6FMC/GnXHnrn 6SIoWvE1J1MlCyxA+jJnzH1vr6QUFnbejImInQ== -----END CERTIFICATE-----Generated at Wed May 13 07:14:52 2026 by rpki-client