$ rpki-client -vvf rpki-rsync.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/34332e3235322e3233362e302f32332d3234203d3e203535373031.roa File: 34332e3235322e3233362e302f32332d3234203d3e203535373031.roa (raw, json) Hash identifier: 9/aJzkpwQD5bM8J0s7lmNbtmibtAmha33amC/3lwiTs= Subject key identifier: 59:81:5D:C1:70:2D:1A:72:73:6C:85:3C:64:11:E2:56:28:66:9A:6C Certificate issuer: /CN=9FD7FF4D3FB37340FAA8C7EE71D1CB9EAF0859C1 Certificate serial: 6555AE51C7A21942F409EB1BEB4CF211823C7C6B Authority key identifier: 9F:D7:FF:4D:3F:B3:73:40:FA:A8:C7:EE:71:D1:CB:9E:AF:08:59:C1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9FD7FF4D3FB37340FAA8C7EE71D1CB9EAF0859C1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/34332e3235322e3233362e302f32332d3234203d3e203535373031.roa Signing time: Sun 03 May 2026 02:21:07 +0000 ROA not before: Sun 03 May 2026 02:16:07 +0000 ROA not after: Sun 02 May 2027 02:21:07 +0000 asID: 55701 IP address blocks: 43.252.236.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/9FD7FF4D3FB37340FAA8C7EE71D1CB9EAF0859C1.crl rsync://rpki-rsync.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/9FD7FF4D3FB37340FAA8C7EE71D1CB9EAF0859C1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9FD7FF4D3FB37340FAA8C7EE71D1CB9EAF0859C1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 22:33:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:55:ae:51:c7:a2:19:42:f4:09:eb:1b:eb:4c:f2:11:82:3c:7c:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9FD7FF4D3FB37340FAA8C7EE71D1CB9EAF0859C1 Validity Not Before: May 3 02:16:07 2026 GMT Not After : May 2 02:21:07 2027 GMT Subject: CN=59815DC1702D1A72736C853C6411E25628669A6C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:ed:d2:e0:61:15:96:91:05:63:98:68:5d:38: 75:91:9c:be:ab:23:b1:7d:7d:f2:bd:c6:5a:03:f5: 2d:b9:f2:d0:82:57:d0:9a:c5:dc:e9:4d:26:71:ec: 48:03:ba:08:61:f8:fa:88:5c:cd:8a:e9:41:ff:3a: d6:ec:c6:8f:6d:41:57:64:30:b4:29:a8:43:40:d1: f6:1e:87:64:04:c5:66:17:52:89:79:d8:e1:61:c0: fc:01:43:1a:88:d5:55:9c:f7:08:c1:47:e0:0b:95: 7f:7a:d8:f5:14:71:46:63:d4:c5:d9:dd:de:21:1a: 0b:17:74:88:00:6d:48:b3:7c:41:35:13:0d:40:05: df:6c:f7:b2:e8:f7:62:e4:54:2a:e1:d9:91:d1:1e: 59:9b:cc:31:44:7a:0d:e0:6d:6f:9b:4d:3d:84:55: a8:52:86:3a:b5:dd:5d:64:1f:92:fc:9c:b9:8f:0c: 9c:02:af:f1:f9:6e:b6:85:a3:1a:82:39:78:6a:b7: 89:71:53:4d:10:1d:8b:d6:be:70:88:a0:9e:3f:30: 63:4f:6e:b3:e6:67:1f:06:be:13:e8:cd:7f:6f:d2: 1a:93:c7:d8:e2:c8:b3:53:aa:0d:bb:82:d5:78:28: 30:d9:d9:b6:07:d5:f1:68:61:46:e0:cb:d3:45:3c: 2d:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:81:5D:C1:70:2D:1A:72:73:6C:85:3C:64:11:E2:56:28:66:9A:6C X509v3 Authority Key Identifier: keyid:9F:D7:FF:4D:3F:B3:73:40:FA:A8:C7:EE:71:D1:CB:9E:AF:08:59:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/9FD7FF4D3FB37340FAA8C7EE71D1CB9EAF0859C1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9FD7FF4D3FB37340FAA8C7EE71D1CB9EAF0859C1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/34332e3235322e3233362e302f32332d3234203d3e203535373031.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.252.236.0/23 Signature Algorithm: sha256WithRSAEncryption 79:36:c6:54:2b:aa:1d:44:6b:03:cc:f9:23:c6:12:81:d4:2c: af:fe:5d:fc:a6:7f:41:db:7a:81:f4:83:f4:fc:e1:8f:3e:cb: 58:94:da:06:f9:ed:92:0f:0f:34:e8:25:ca:30:ae:f2:79:63: d0:81:87:ef:d8:ad:c9:46:15:f1:4a:f8:67:9d:ec:a7:fb:f5: a7:30:c9:79:ab:34:56:62:c4:21:11:db:98:44:1e:86:f0:cb: f6:c0:d6:cf:26:e1:e9:0d:bc:8b:1b:dc:24:fb:17:0f:37:7d: 86:7a:64:93:37:48:55:bb:a8:95:80:f5:16:90:fc:d5:15:b5: 91:c2:4b:bd:32:db:67:55:5e:fd:06:af:5b:2f:2d:c0:e0:a9: bb:a9:4f:49:e9:ae:aa:e0:1b:e5:0e:b4:dc:9e:d4:9d:25:fe: e3:6b:a2:0d:04:e5:7b:9e:f6:d0:b9:f3:14:5e:22:c1:3f:4b: 7f:2b:ab:8e:b2:26:2a:8e:de:a9:16:74:fe:40:22:fc:9f:ad: 9a:28:f5:13:67:6e:64:8d:d2:9b:41:24:46:ea:f8:4d:95:e2: ac:b4:b1:da:45:b4:a3:65:85:c7:b7:70:ab:7f:a5:6a:43:9e: cf:82:ac:80:e2:2f:7c:b0:90:5f:e0:b3:37:14:b1:40:17:c6: 3a:40:66:15 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUZVWuUceiGUL0Cesb60zyEYI8fGswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUZEN0ZGNEQzRkIzNzM0MEZBQThDN0VFNzFEMUNCOUVB RjA4NTlDMTAeFw0yNjA1MDMwMjE2MDdaFw0yNzA1MDIwMjIxMDdaMDMxMTAvBgNV BAMTKDU5ODE1REMxNzAyRDFBNzI3MzZDODUzQzY0MTFFMjU2Mjg2NjlBNkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCm7dLgYRWWkQVjmGhdOHWRnL6r I7F9ffK9xloD9S258tCCV9CaxdzpTSZx7EgDughh+PqIXM2K6UH/Otbsxo9tQVdk MLQpqENA0fYeh2QExWYXUol52OFhwPwBQxqI1VWc9wjBR+ALlX962PUUcUZj1MXZ 3d4hGgsXdIgAbUizfEE1Ew1ABd9s97Lo92LkVCrh2ZHRHlmbzDFEeg3gbW+bTT2E VahShjq13V1kH5L8nLmPDJwCr/H5braFoxqCOXhqt4lxU00QHYvWvnCIoJ4/MGNP brPmZx8GvhPozX9v0hqTx9jiyLNTqg27gtV4KDDZ2bYH1fFoYUbgy9NFPC2jAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUWYFdwXAtGnJzbIU8ZBHiVihmmmwwHwYDVR0j BBgwFoAUn9f/TT+zc0D6qMfucdHLnq8IWcEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjdkOWY4NTEtN2U3My00Mzg0LTk1MGUtOGJlOGUxNWZkM2VlLzAvOUZEN0ZGNEQz RkIzNzM0MEZBQThDN0VFNzFEMUNCOUVBRjA4NTlDMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85RkQ3RkY0RDNGQjM3MzQwRkFBOEM3RUU3MUQxQ0I5RUFGMDg1 OUMxLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzI3ZDlmODUxLTdlNzMtNDM4NC05 NTBlLThiZThlMTVmZDNlZS8wLzM0MzMyZTMyMzUzMjJlMzIzMzM2MmUzMDJmMzIz MzJkMzIzNDIwM2QzZTIwMzUzNTM3MzAzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEASv87DANBgkqhkiG 9w0BAQsFAAOCAQEAeTbGVCuqHURrA8z5I8YSgdQsr/5d/KZ/Qdt6gfSD9Pzhjz7L WJTaBvntkg8PNOglyjCu8nlj0IGH79ityUYV8Ur4Z53sp/v1pzDJeas0VmLEIRHb mEQehvDL9sDWzybh6Q28ixvcJPsXDzd9hnpkkzdIVbuolYD1FpD81RW1kcJLvTLb Z1Ve/QavWy8twOCpu6lPSemuquAb5Q603J7UnSX+42uiDQTle5720LnzFF4iwT9L fyurjrImKo7eqRZ0/kAi/J+tmij1E2duZI3Sm0EkRur4TZXirLSx2kW0o2WFx7dw q3+lakOez4KsgOIvfLCQX+CzNxSxQBfGOkBmFQ== -----END CERTIFICATE-----Generated at Wed May 13 04:47:45 2026 by rpki-client