$ rpki-client -vvf rpki-rsync.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/3132342e34302e3234382e302f32312d3234203d3e203435333035.roa File: 3132342e34302e3234382e302f32312d3234203d3e203435333035.roa (raw, json) Hash identifier: bNdzrUkHylX3nBoyTDryEKwja6jOzq2DQP/kaLdB4H4= Subject key identifier: B1:53:AA:C9:93:EF:99:FD:46:D8:65:D4:B1:28:23:CB:D5:DF:D4:6C Certificate issuer: /CN=5843958BB240779320D7F0C2B674ACF5EF6122BC Certificate serial: 42F3470872050F93FEA185F0F65341E85138EFA4 Authority key identifier: 58:43:95:8B:B2:40:77:93:20:D7:F0:C2:B6:74:AC:F5:EF:61:22:BC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5843958BB240779320D7F0C2B674ACF5EF6122BC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/3132342e34302e3234382e302f32312d3234203d3e203435333035.roa Signing time: Sun 03 May 2026 02:23:01 +0000 ROA not before: Sun 03 May 2026 02:18:01 +0000 ROA not after: Sun 02 May 2027 02:23:01 +0000 asID: 45305 IP address blocks: 124.40.248.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/5843958BB240779320D7F0C2B674ACF5EF6122BC.crl rsync://rpki-rsync.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/5843958BB240779320D7F0C2B674ACF5EF6122BC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5843958BB240779320D7F0C2B674ACF5EF6122BC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:46:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:f3:47:08:72:05:0f:93:fe:a1:85:f0:f6:53:41:e8:51:38:ef:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5843958BB240779320D7F0C2B674ACF5EF6122BC Validity Not Before: May 3 02:18:01 2026 GMT Not After : May 2 02:23:01 2027 GMT Subject: CN=B153AAC993EF99FD46D865D4B12823CBD5DFD46C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:5e:9c:e5:28:9d:97:c4:82:26:cf:f9:47:bb: b1:e5:9e:b9:34:01:5c:32:90:16:c8:88:5f:1d:e9: 20:06:f6:19:01:58:e4:e8:df:a6:51:d1:6f:5a:4a: 83:24:cb:44:ec:c4:0d:3d:74:65:51:b3:3a:50:57: ff:77:2c:5c:e9:b1:54:be:2c:ca:2d:d4:18:a4:94: 58:27:8d:22:ea:07:23:ce:18:96:ac:78:f4:5c:4b: ef:4f:1c:dc:51:d3:05:29:d3:ee:25:43:b2:47:a2: 87:a3:26:3a:0b:f2:d7:c8:7b:4d:04:1d:36:ef:2a: 80:aa:64:ec:a5:11:b1:4a:0f:eb:91:8a:a3:9e:21: 47:bc:26:1f:b2:b8:7d:f3:bd:40:99:a8:c4:cc:70: f7:47:3f:4f:8e:95:de:61:99:10:12:ce:f8:12:14: e8:48:38:ec:75:26:d9:8b:32:49:05:2c:d1:02:61: c3:ca:f8:ee:7f:86:b8:bb:85:c3:cd:38:12:8c:40: 79:9a:7f:32:72:26:c7:94:dc:ca:48:87:60:39:ca: 1d:57:8c:2c:c4:80:c1:26:3f:1b:ae:65:37:80:31: eb:73:cb:05:52:37:d8:d4:ab:6f:1b:36:21:e2:f3: a7:2c:a6:76:d7:c6:08:c3:af:0b:9c:8c:03:b7:e1: 75:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:53:AA:C9:93:EF:99:FD:46:D8:65:D4:B1:28:23:CB:D5:DF:D4:6C X509v3 Authority Key Identifier: keyid:58:43:95:8B:B2:40:77:93:20:D7:F0:C2:B6:74:AC:F5:EF:61:22:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/5843958BB240779320D7F0C2B674ACF5EF6122BC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5843958BB240779320D7F0C2B674ACF5EF6122BC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/3132342e34302e3234382e302f32312d3234203d3e203435333035.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 124.40.248.0/21 Signature Algorithm: sha256WithRSAEncryption 49:fb:77:2f:7a:ae:47:ad:c1:39:8e:81:65:8d:2e:62:b4:a3: fd:10:c8:8e:30:5b:9e:9a:93:30:49:e8:ca:86:13:8b:b9:63: 69:3e:42:29:7c:06:7a:41:e5:73:5b:64:2b:5e:ef:4e:25:27: 40:b2:9c:b7:8f:a6:f4:5c:ee:79:c8:28:3f:d2:ad:4e:55:49: 10:d6:5c:99:ea:3e:11:a0:58:46:34:50:06:63:fc:5c:84:97: 62:42:27:8a:b4:3b:6f:d6:0c:0d:d3:2f:aa:dc:d2:5d:b5:49: f3:1c:a2:76:af:48:a1:c0:db:7e:f3:5b:c8:25:74:8b:12:7a: 0e:c9:4f:15:da:61:12:43:d7:64:4b:1f:67:df:eb:38:8c:67: 43:36:3d:61:96:d6:a1:f3:1f:73:1b:3b:33:fb:b6:cf:08:4b: 6e:d4:69:83:16:d2:d0:85:31:be:9a:25:4d:5e:f1:0e:e9:1a: a6:d6:7f:59:c0:de:2f:5b:3a:70:1d:c8:e8:da:38:22:5e:49: bc:46:4c:bb:3a:5a:0f:81:44:36:3a:26:13:dd:77:aa:be:c1: 0b:60:8b:ac:06:ac:d3:db:e7:a7:a2:49:18:f0:a5:ea:a6:9e: cf:83:44:8f:ee:09:aa:0f:5a:96:88:2c:7e:36:c8:29:9f:0f: fe:38:cb:ae -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUQvNHCHIFD5P+oYXw9lNB6FE476QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTg0Mzk1OEJCMjQwNzc5MzIwRDdGMEMyQjY3NEFDRjVF RjYxMjJCQzAeFw0yNjA1MDMwMjE4MDFaFw0yNzA1MDIwMjIzMDFaMDMxMTAvBgNV BAMTKEIxNTNBQUM5OTNFRjk5RkQ0NkQ4NjVENEIxMjgyM0NCRDVERkQ0NkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuXpzlKJ2XxIImz/lHu7Hlnrk0 AVwykBbIiF8d6SAG9hkBWOTo36ZR0W9aSoMky0TsxA09dGVRszpQV/93LFzpsVS+ LMot1BiklFgnjSLqByPOGJasePRcS+9PHNxR0wUp0+4lQ7JHooejJjoL8tfIe00E HTbvKoCqZOylEbFKD+uRiqOeIUe8Jh+yuH3zvUCZqMTMcPdHP0+Old5hmRASzvgS FOhIOOx1JtmLMkkFLNECYcPK+O5/hri7hcPNOBKMQHmafzJyJseU3MpIh2A5yh1X jCzEgMEmPxuuZTeAMetzywVSN9jUq28bNiHi86cspnbXxgjDrwucjAO34XWHAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUsVOqyZPvmf1G2GXUsSgjy9Xf1GwwHwYDVR0j BBgwFoAUWEOVi7JAd5Mg1/DCtnSs9e9hIrwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmQ5NWMxOWMtMzI2Mi00OGM3LWFmMDItMzdhODM1ZDBhNzc5LzAvNTg0Mzk1OEJC MjQwNzc5MzIwRDdGMEMyQjY3NEFDRjVFRjYxMjJCQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81ODQzOTU4QkIyNDA3NzkzMjBEN0YwQzJCNjc0QUNGNUVGNjEy MkJDLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzJkOTVjMTljLTMyNjItNDhjNy1h ZjAyLTM3YTgzNWQwYTc3OS8wLzMxMzIzNDJlMzQzMDJlMzIzNDM4MmUzMDJmMzIz MTJkMzIzNDIwM2QzZTIwMzQzNTMzMzAzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA3wo+DANBgkqhkiG 9w0BAQsFAAOCAQEASft3L3quR63BOY6BZY0uYrSj/RDIjjBbnpqTMEnoyoYTi7lj aT5CKXwGekHlc1tkK17vTiUnQLKct4+m9FzuecgoP9KtTlVJENZcmeo+EaBYRjRQ BmP8XISXYkInirQ7b9YMDdMvqtzSXbVJ8xyidq9IocDbfvNbyCV0ixJ6DslPFdph EkPXZEsfZ9/rOIxnQzY9YZbWofMfcxs7M/u2zwhLbtRpgxbS0IUxvpolTV7xDuka ptZ/WcDeL1s6cB3I6No4Il5JvEZMuzpaD4FENjomE913qr7BC2CLrAas09vnp6JJ GPCl6qaez4NEj+4Jqg9alogsfjbIKZ8P/jjLrg== -----END CERTIFICATE-----Generated at Wed May 13 00:20:55 2026 by rpki-client