$ rpki-client -vvf rpki-rsync.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0/3132302e32392e3233302e302f32342d3234203d3e203139393035.roa File: 3132302e32392e3233302e302f32342d3234203d3e203139393035.roa (raw, json) Hash identifier: /6rKJIPdCG5UyO3XHODZZ3EDU0CTpBfu4ou77AX6cek= Subject key identifier: 2C:47:3D:87:32:E0:54:82:30:C6:4F:29:FC:6F:5E:79:BD:FF:97:72 Certificate issuer: /CN=90A149FB759A6A176FE4D47F5082FA60C9767022 Certificate serial: 43DB134DD885F8E07265F2F9AEAA5842D36D4763 Authority key identifier: 90:A1:49:FB:75:9A:6A:17:6F:E4:D4:7F:50:82:FA:60:C9:76:70:22 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90A149FB759A6A176FE4D47F5082FA60C9767022.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0/3132302e32392e3233302e302f32342d3234203d3e203139393035.roa Signing time: Sun 03 May 2026 02:19:39 +0000 ROA not before: Sun 03 May 2026 02:14:39 +0000 ROA not after: Sun 02 May 2027 02:19:39 +0000 asID: 19905 IP address blocks: 120.29.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0/90A149FB759A6A176FE4D47F5082FA60C9767022.crl rsync://rpki-rsync.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0/90A149FB759A6A176FE4D47F5082FA60C9767022.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90A149FB759A6A176FE4D47F5082FA60C9767022.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 14:26:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:db:13:4d:d8:85:f8:e0:72:65:f2:f9:ae:aa:58:42:d3:6d:47:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90A149FB759A6A176FE4D47F5082FA60C9767022 Validity Not Before: May 3 02:14:39 2026 GMT Not After : May 2 02:19:39 2027 GMT Subject: CN=2C473D8732E0548230C64F29FC6F5E79BDFF9772 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:6e:75:85:87:24:61:c7:6e:db:99:98:df:cf: 2d:70:df:ba:ea:76:43:7b:a3:05:2e:ab:c4:27:55: eb:f1:24:f8:59:55:94:bf:ec:ea:99:90:ac:3e:0d: 3c:12:9b:dc:09:ce:66:56:0e:ed:47:4f:a4:a6:d5: a3:2d:e1:22:4a:cf:ac:26:0f:97:d8:57:95:41:ae: f0:2f:65:94:41:f4:3c:e2:d5:cc:2d:12:6f:d1:d7: fd:86:c5:f2:0d:74:44:17:ee:dd:04:a0:f0:2a:12: f2:cf:cb:5b:58:5e:29:0a:14:d1:b2:8d:75:75:3a: e6:79:f3:95:40:c9:0f:4d:d3:68:ab:18:9b:33:ab: 55:80:23:f6:94:53:ce:77:2e:65:f4:f3:b4:84:5e: 8b:3a:d6:3d:a7:9d:3d:3c:fd:16:fd:fd:f3:9d:6f: 33:ab:d2:7c:77:c3:89:7c:e4:7c:8e:fd:47:96:dc: 01:df:d2:40:d3:97:3b:b7:50:38:72:b5:e8:14:c6: 32:23:39:e0:e0:36:58:d4:33:b1:94:00:c5:89:58: ac:35:a0:d9:b9:fd:06:02:0c:54:a6:c8:fd:53:4e: ce:73:62:27:18:25:93:1a:93:3b:f8:56:00:1c:77: 8e:eb:e6:20:62:50:7c:81:9d:f8:cb:81:cd:10:60: 88:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:47:3D:87:32:E0:54:82:30:C6:4F:29:FC:6F:5E:79:BD:FF:97:72 X509v3 Authority Key Identifier: keyid:90:A1:49:FB:75:9A:6A:17:6F:E4:D4:7F:50:82:FA:60:C9:76:70:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0/90A149FB759A6A176FE4D47F5082FA60C9767022.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90A149FB759A6A176FE4D47F5082FA60C9767022.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0/3132302e32392e3233302e302f32342d3234203d3e203139393035.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 120.29.230.0/24 Signature Algorithm: sha256WithRSAEncryption 9a:42:1b:4e:0a:91:16:db:67:97:28:7b:89:a6:eb:22:6e:c9: 1b:4a:03:b0:2b:b2:9f:25:c2:4e:ab:c4:4d:9b:10:26:75:b3: 84:39:73:3a:a5:49:b6:b7:bd:ed:4d:49:07:db:28:61:66:a8: 36:90:d8:73:e3:6e:4a:5c:71:7f:96:33:28:ff:fa:53:37:e5: de:70:e9:d3:fb:64:2d:34:03:27:20:10:ff:6d:37:71:db:1c: 65:74:e5:e0:10:30:a4:8f:81:33:18:d8:9d:8e:6e:a1:32:65: 3b:0b:26:92:29:37:a1:77:ab:4f:f3:00:15:6a:44:cc:21:20: d1:1b:02:e6:5a:97:d2:ac:99:4d:8d:67:30:d7:65:df:0d:12: 42:cd:a6:7f:d8:3c:9a:ed:72:ff:42:57:00:bf:3b:c8:c9:52: db:91:3f:a4:1d:9e:30:0c:35:7f:17:a6:63:0e:fe:7d:4d:a7: bf:5c:41:66:24:c8:9d:a0:9b:63:55:df:ee:3e:a9:39:be:c9: 8a:fc:ef:2c:b6:9c:7f:5e:9f:89:f2:21:4f:cc:df:90:22:41: d4:77:a2:7e:01:a7:e7:9c:29:37:c2:ac:ca:16:c0:b1:64:12: 57:f9:06:fb:c4:9b:23:ae:f3:7f:1f:f7:89:5f:51:6c:56:14: e7:a2:0b:fb -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUQ9sTTdiF+OByZfL5rqpYQtNtR2MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTBBMTQ5RkI3NTlBNkExNzZGRTRENDdGNTA4MkZBNjBD OTc2NzAyMjAeFw0yNjA1MDMwMjE0MzlaFw0yNzA1MDIwMjE5MzlaMDMxMTAvBgNV BAMTKDJDNDczRDg3MzJFMDU0ODIzMEM2NEYyOUZDNkY1RTc5QkRGRjk3NzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwbnWFhyRhx27bmZjfzy1w37rq dkN7owUuq8QnVevxJPhZVZS/7OqZkKw+DTwSm9wJzmZWDu1HT6Sm1aMt4SJKz6wm D5fYV5VBrvAvZZRB9Dzi1cwtEm/R1/2GxfINdEQX7t0EoPAqEvLPy1tYXikKFNGy jXV1OuZ585VAyQ9N02irGJszq1WAI/aUU853LmX087SEXos61j2nnT08/Rb9/fOd bzOr0nx3w4l85HyO/UeW3AHf0kDTlzu3UDhytegUxjIjOeDgNljUM7GUAMWJWKw1 oNm5/QYCDFSmyP1TTs5zYicYJZMakzv4VgAcd47r5iBiUHyBnfjLgc0QYIiNAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQULEc9hzLgVIIwxk8p/G9eeb3/l3IwHwYDVR0j BBgwFoAUkKFJ+3Waahdv5NR/UIL6YMl2cCIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjIxYzljYWQtYzNiOS00NWEwLWJlYjYtYmNlNDhlMmIyMjcyLzAvOTBBMTQ5RkI3 NTlBNkExNzZGRTRENDdGNTA4MkZBNjBDOTc2NzAyMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85MEExNDlGQjc1OUE2QTE3NkZFNEQ0N0Y1MDgyRkE2MEM5NzY3 MDIyLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzIyMWM5Y2FkLWMzYjktNDVhMC1i ZWI2LWJjZTQ4ZTJiMjI3Mi8wLzMxMzIzMDJlMzIzOTJlMzIzMzMwMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzOTM5MzAzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHgd5jANBgkqhkiG 9w0BAQsFAAOCAQEAmkIbTgqRFttnlyh7iabrIm7JG0oDsCuynyXCTqvETZsQJnWz hDlzOqVJtre97U1JB9soYWaoNpDYc+NuSlxxf5YzKP/6Uzfl3nDp0/tkLTQDJyAQ /203cdscZXTl4BAwpI+BMxjYnY5uoTJlOwsmkik3oXerT/MAFWpEzCEg0RsC5lqX 0qyZTY1nMNdl3w0SQs2mf9g8mu1y/0JXAL87yMlS25E/pB2eMAw1fxemYw7+fU2n v1xBZiTInaCbY1Xf7j6pOb7JivzvLLacf16fifIhT8zfkCJB1HeifgGn55wpN8Ks yhbAsWQSV/kG+8SbI67zfx/3iV9RbFYU56IL+w== -----END CERTIFICATE-----Generated at Wed May 13 06:04:23 2026 by rpki-client