$ rpki-client -vvf rpki-rsync.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/34332e3235322e3233382e302f32342d3234203d3e203535373031.roa File: 34332e3235322e3233382e302f32342d3234203d3e203535373031.roa (raw, json) Hash identifier: jervWvS7fVPh370uN91AucyVv2pORH48B5fUUflxIjw= Subject key identifier: AF:46:71:4B:36:D3:68:95:FB:28:D7:96:6E:75:B5:34:81:E6:C6:29 Certificate issuer: /CN=9FD7FF4D3FB37340FAA8C7EE71D1CB9EAF0859C1 Certificate serial: 0E9D06ACB7DB1BBA591262DE601028437F6385A1 Authority key identifier: 9F:D7:FF:4D:3F:B3:73:40:FA:A8:C7:EE:71:D1:CB:9E:AF:08:59:C1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9FD7FF4D3FB37340FAA8C7EE71D1CB9EAF0859C1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/34332e3235322e3233382e302f32342d3234203d3e203535373031.roa Signing time: Sun 03 May 2026 02:21:07 +0000 ROA not before: Sun 03 May 2026 02:16:07 +0000 ROA not after: Sun 02 May 2027 02:21:07 +0000 asID: 55701 IP address blocks: 43.252.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/9FD7FF4D3FB37340FAA8C7EE71D1CB9EAF0859C1.crl rsync://rpki-rsync.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/9FD7FF4D3FB37340FAA8C7EE71D1CB9EAF0859C1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9FD7FF4D3FB37340FAA8C7EE71D1CB9EAF0859C1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 22:33:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:9d:06:ac:b7:db:1b:ba:59:12:62:de:60:10:28:43:7f:63:85:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9FD7FF4D3FB37340FAA8C7EE71D1CB9EAF0859C1 Validity Not Before: May 3 02:16:07 2026 GMT Not After : May 2 02:21:07 2027 GMT Subject: CN=AF46714B36D36895FB28D7966E75B53481E6C629 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:91:27:bb:56:a8:a6:91:05:96:ac:a6:f9:f0: 5a:a1:e2:e5:fb:6b:a9:02:8f:60:9e:59:d3:5f:2d: 7f:d2:ff:e0:4f:e6:6a:f1:35:8a:d4:a7:0b:c5:4e: b5:9a:9d:4d:ed:ad:c0:6c:b9:d0:13:1e:78:3b:a6: ee:86:66:45:63:e5:0a:eb:1f:ae:98:3e:75:dd:c6: 72:b0:36:7c:38:5d:45:4c:21:49:38:74:46:74:0b: e0:c5:e8:48:ac:46:23:61:d4:25:f0:ae:e9:0f:7d: 39:46:49:d9:46:86:f7:41:56:db:fc:94:03:be:ce: 6f:7f:1b:02:7c:ae:8e:8c:0c:6e:6b:61:88:d4:dd: 46:fc:d1:44:26:e7:90:66:4a:e3:10:cc:b4:46:52: 24:74:b3:52:49:1c:6a:61:79:d5:82:cf:e2:72:cc: ae:52:f0:d2:b0:e6:4a:cb:8e:94:fd:26:62:9b:a2: 2b:09:8d:08:93:f5:1f:a9:26:6e:7f:80:81:a6:cb: 3f:6b:17:8e:72:a7:14:30:6f:95:43:ed:f0:fc:57: b2:69:df:f6:c4:2e:6e:38:66:85:57:89:02:1e:1c: 3b:f1:4b:e9:9d:d8:64:80:aa:9c:51:3a:99:86:c4: 16:2e:d3:4e:90:65:89:a2:03:5e:f6:1f:bc:33:d7: 1d:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:46:71:4B:36:D3:68:95:FB:28:D7:96:6E:75:B5:34:81:E6:C6:29 X509v3 Authority Key Identifier: keyid:9F:D7:FF:4D:3F:B3:73:40:FA:A8:C7:EE:71:D1:CB:9E:AF:08:59:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/9FD7FF4D3FB37340FAA8C7EE71D1CB9EAF0859C1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9FD7FF4D3FB37340FAA8C7EE71D1CB9EAF0859C1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/34332e3235322e3233382e302f32342d3234203d3e203535373031.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.252.238.0/24 Signature Algorithm: sha256WithRSAEncryption 65:df:73:07:4b:73:30:9a:db:6e:52:3d:ea:ef:bf:32:b3:c8: be:40:7e:7c:b1:6e:af:bc:f7:17:6d:a3:9b:45:38:77:ef:06: a3:ba:8b:fa:79:2f:ef:dc:cb:a5:22:ae:f8:e7:38:41:a2:34: 73:2c:11:bf:75:45:7a:75:e0:64:2b:53:90:c8:fc:a9:b0:8f: 4e:c0:70:36:b1:7a:e4:1b:27:a6:cc:b0:36:1f:5f:67:10:94: 09:8e:b7:0c:be:ac:66:8e:4c:58:dc:28:b5:f0:d9:be:51:0b: 4e:ff:53:96:1a:dd:33:c9:13:4a:cf:23:2a:fa:64:6c:8c:a1: 86:27:45:a3:b4:29:0b:44:26:b8:d1:47:ec:98:4f:54:00:2f: 37:8a:92:ac:97:eb:1a:35:27:d9:13:d8:92:a7:c5:9b:af:f3: 09:0b:84:ee:13:15:a3:ea:5c:2f:c4:f1:ef:12:87:17:fb:f6: cd:c1:0c:2c:6a:0c:ae:44:f5:f5:e6:ad:d3:80:21:4a:43:80: 75:ae:c4:b5:de:52:b8:d8:e0:93:67:c0:53:2d:f1:10:38:b1: d6:28:71:50:3e:99:9a:41:9b:3c:8b:cb:f8:95:b7:78:33:3b: 2e:7a:ca:9b:64:d8:db:cb:68:85:4d:76:ff:33:9e:1d:bf:a5: d3:1f:74:5e -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUDp0GrLfbG7pZEmLeYBAoQ39jhaEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUZEN0ZGNEQzRkIzNzM0MEZBQThDN0VFNzFEMUNCOUVB RjA4NTlDMTAeFw0yNjA1MDMwMjE2MDdaFw0yNzA1MDIwMjIxMDdaMDMxMTAvBgNV BAMTKEFGNDY3MTRCMzZEMzY4OTVGQjI4RDc5NjZFNzVCNTM0ODFFNkM2MjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXkSe7VqimkQWWrKb58Fqh4uX7 a6kCj2CeWdNfLX/S/+BP5mrxNYrUpwvFTrWanU3trcBsudATHng7pu6GZkVj5Qrr H66YPnXdxnKwNnw4XUVMIUk4dEZ0C+DF6EisRiNh1CXwrukPfTlGSdlGhvdBVtv8 lAO+zm9/GwJ8ro6MDG5rYYjU3Ub80UQm55BmSuMQzLRGUiR0s1JJHGphedWCz+Jy zK5S8NKw5krLjpT9JmKboisJjQiT9R+pJm5/gIGmyz9rF45ypxQwb5VD7fD8V7Jp 3/bELm44ZoVXiQIeHDvxS+md2GSAqpxROpmGxBYu006QZYmiA172H7wz1x19AgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUr0ZxSzbTaJX7KNeWbnW1NIHmxikwHwYDVR0j BBgwFoAUn9f/TT+zc0D6qMfucdHLnq8IWcEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjdkOWY4NTEtN2U3My00Mzg0LTk1MGUtOGJlOGUxNWZkM2VlLzAvOUZEN0ZGNEQz RkIzNzM0MEZBQThDN0VFNzFEMUNCOUVBRjA4NTlDMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85RkQ3RkY0RDNGQjM3MzQwRkFBOEM3RUU3MUQxQ0I5RUFGMDg1 OUMxLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzI3ZDlmODUxLTdlNzMtNDM4NC05 NTBlLThiZThlMTVmZDNlZS8wLzM0MzMyZTMyMzUzMjJlMzIzMzM4MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzUzNTM3MzAzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEACv87jANBgkqhkiG 9w0BAQsFAAOCAQEAZd9zB0tzMJrbblI96u+/MrPIvkB+fLFur7z3F22jm0U4d+8G o7qL+nkv79zLpSKu+Oc4QaI0cywRv3VFenXgZCtTkMj8qbCPTsBwNrF65Bsnpsyw Nh9fZxCUCY63DL6sZo5MWNwotfDZvlELTv9TlhrdM8kTSs8jKvpkbIyhhidFo7Qp C0QmuNFH7JhPVAAvN4qSrJfrGjUn2RPYkqfFm6/zCQuE7hMVo+pcL8Tx7xKHF/v2 zcEMLGoMrkT19eat04AhSkOAda7Etd5SuNjgk2fAUy3xEDix1ihxUD6ZmkGbPIvL +JW3eDM7LnrKm2TY28tohU12/zOeHb+l0x90Xg== -----END CERTIFICATE-----Generated at Wed May 13 04:47:00 2026 by rpki-client