$ rpki-client -vvf rpki-rsync.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/3132342e34302e3235332e302f32342d3234203d3e20313432333237.roa File: 3132342e34302e3235332e302f32342d3234203d3e20313432333237.roa (raw, json) Hash identifier: t3N8/NmkXItiVJAARc4CSYWSo+yW57apDjW3aqHeSkc= Subject key identifier: A0:B5:C5:5D:9C:EA:59:F5:FD:4A:3B:16:0A:78:CC:CC:48:51:18:25 Certificate issuer: /CN=5843958BB240779320D7F0C2B674ACF5EF6122BC Certificate serial: 21C5DA726AD69431672D318CBDE8F03F18135D83 Authority key identifier: 58:43:95:8B:B2:40:77:93:20:D7:F0:C2:B6:74:AC:F5:EF:61:22:BC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5843958BB240779320D7F0C2B674ACF5EF6122BC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/3132342e34302e3235332e302f32342d3234203d3e20313432333237.roa Signing time: Sun 03 May 2026 02:22:59 +0000 ROA not before: Sun 03 May 2026 02:17:59 +0000 ROA not after: Sun 02 May 2027 02:22:59 +0000 asID: 142327 IP address blocks: 124.40.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/5843958BB240779320D7F0C2B674ACF5EF6122BC.crl rsync://rpki-rsync.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/5843958BB240779320D7F0C2B674ACF5EF6122BC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5843958BB240779320D7F0C2B674ACF5EF6122BC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:46:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:c5:da:72:6a:d6:94:31:67:2d:31:8c:bd:e8:f0:3f:18:13:5d:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5843958BB240779320D7F0C2B674ACF5EF6122BC Validity Not Before: May 3 02:17:59 2026 GMT Not After : May 2 02:22:59 2027 GMT Subject: CN=A0B5C55D9CEA59F5FD4A3B160A78CCCC48511825 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:fc:91:85:52:7a:c8:80:9c:62:d4:c6:a7:c9: 2e:86:be:eb:3f:70:b6:c1:7c:0f:57:41:63:d0:02: 21:eb:9d:8c:82:4d:6a:6d:a6:43:69:29:b0:7f:41: 9c:34:ef:5d:0b:1f:93:54:77:9c:d3:61:f8:74:9a: e9:7e:93:b7:6a:3a:09:0c:10:c7:00:db:72:13:7d: 89:8d:29:9b:48:d6:4a:3a:3d:54:4d:c1:f8:c2:41: 66:1e:fb:7c:e8:ce:35:7d:77:60:5a:72:c6:4f:da: a9:04:a9:20:0d:71:01:2a:b7:46:fe:4b:e6:8d:49: 41:77:72:7e:79:11:95:3c:bd:c8:d8:19:50:24:9f: 37:e1:6e:76:1b:6f:64:4f:ca:32:d2:9b:88:99:2d: 3d:b8:63:29:4c:8e:ad:df:0e:19:cc:14:d3:f9:b7: 39:00:b2:32:d2:cf:7e:05:15:0a:da:d3:16:87:c9: 8e:64:dc:fe:72:d4:9a:fe:b2:95:96:5d:22:f1:62: c1:04:b0:8e:0f:39:6f:2e:9c:f9:be:9b:5b:95:4b: a4:78:70:79:40:31:5b:26:a6:45:c5:bd:0b:3c:7d: e7:7b:f4:7c:9a:53:c1:5a:1a:3c:41:d8:f6:62:d6: 2a:27:a8:2b:fc:59:21:18:3d:64:c1:bd:3c:6c:af: 0f:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:B5:C5:5D:9C:EA:59:F5:FD:4A:3B:16:0A:78:CC:CC:48:51:18:25 X509v3 Authority Key Identifier: keyid:58:43:95:8B:B2:40:77:93:20:D7:F0:C2:B6:74:AC:F5:EF:61:22:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/5843958BB240779320D7F0C2B674ACF5EF6122BC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5843958BB240779320D7F0C2B674ACF5EF6122BC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/3132342e34302e3235332e302f32342d3234203d3e20313432333237.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 124.40.253.0/24 Signature Algorithm: sha256WithRSAEncryption af:8c:e4:4e:da:35:f3:81:17:f5:f4:2a:ac:41:79:e0:f2:c6: bf:68:97:ba:65:f1:85:67:88:b7:98:53:a6:62:2f:37:ec:58: 9d:ea:27:37:c6:2d:74:60:18:71:9a:be:cf:2e:7b:f8:98:89: d6:70:b8:23:ab:79:d4:ec:31:67:3f:46:24:bb:3e:e3:75:79: c0:19:63:28:f6:ce:47:6d:c2:9a:66:67:77:58:37:58:fa:86: be:46:6a:0c:51:99:33:74:ad:21:72:99:9f:45:37:69:1b:7e: 7f:7f:ab:c5:6f:65:80:19:9c:f5:19:4c:ee:5c:31:69:45:10: bc:bc:da:4d:ef:1b:37:a0:df:4f:b4:cb:d1:09:20:46:76:80: ae:24:20:0b:17:7e:16:04:a9:75:88:f6:09:b0:de:b0:e5:e2: e8:02:04:a5:2f:50:1b:29:97:97:b3:da:1b:a6:44:14:c8:6a: f6:2c:8c:f4:c5:a3:c0:ef:09:ad:01:c5:e8:6b:e2:bd:14:30: d6:f3:2e:8c:2a:44:df:da:3c:7f:a7:0f:6c:25:6b:7a:55:c0: ba:31:1f:43:6d:fb:f6:a6:47:56:45:c5:45:dd:49:27:4e:9e: 51:72:a4:8d:ce:e2:8f:7c:39:5e:90:eb:06:1d:67:5c:02:86: df:67:1f:f6 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUIcXacmrWlDFnLTGMvejwPxgTXYMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTg0Mzk1OEJCMjQwNzc5MzIwRDdGMEMyQjY3NEFDRjVF RjYxMjJCQzAeFw0yNjA1MDMwMjE3NTlaFw0yNzA1MDIwMjIyNTlaMDMxMTAvBgNV BAMTKEEwQjVDNTVEOUNFQTU5RjVGRDRBM0IxNjBBNzhDQ0NDNDg1MTE4MjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCO/JGFUnrIgJxi1ManyS6Gvus/ cLbBfA9XQWPQAiHrnYyCTWptpkNpKbB/QZw0710LH5NUd5zTYfh0mul+k7dqOgkM EMcA23ITfYmNKZtI1ko6PVRNwfjCQWYe+3zozjV9d2BacsZP2qkEqSANcQEqt0b+ S+aNSUF3cn55EZU8vcjYGVAknzfhbnYbb2RPyjLSm4iZLT24YylMjq3fDhnMFNP5 tzkAsjLSz34FFQra0xaHyY5k3P5y1Jr+spWWXSLxYsEEsI4POW8unPm+m1uVS6R4 cHlAMVsmpkXFvQs8fed79HyaU8FaGjxB2PZi1ionqCv8WSEYPWTBvTxsrw8dAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUoLXFXZzqWfX9SjsWCnjMzEhRGCUwHwYDVR0j BBgwFoAUWEOVi7JAd5Mg1/DCtnSs9e9hIrwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmQ5NWMxOWMtMzI2Mi00OGM3LWFmMDItMzdhODM1ZDBhNzc5LzAvNTg0Mzk1OEJC MjQwNzc5MzIwRDdGMEMyQjY3NEFDRjVFRjYxMjJCQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81ODQzOTU4QkIyNDA3NzkzMjBEN0YwQzJCNjc0QUNGNUVGNjEy MkJDLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzJkOTVjMTljLTMyNjItNDhjNy1h ZjAyLTM3YTgzNWQwYTc3OS8wLzMxMzIzNDJlMzQzMDJlMzIzNTMzMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNDMyMzMzMjM3LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAfCj9MA0GCSqG SIb3DQEBCwUAA4IBAQCvjORO2jXzgRf19CqsQXng8sa/aJe6ZfGFZ4i3mFOmYi83 7Fid6ic3xi10YBhxmr7PLnv4mInWcLgjq3nU7DFnP0Ykuz7jdXnAGWMo9s5HbcKa Zmd3WDdY+oa+RmoMUZkzdK0hcpmfRTdpG35/f6vFb2WAGZz1GUzuXDFpRRC8vNpN 7xs3oN9PtMvRCSBGdoCuJCALF34WBKl1iPYJsN6w5eLoAgSlL1AbKZeXs9obpkQU yGr2LIz0xaPA7wmtAcXoa+K9FDDW8y6MKkTf2jx/pw9sJWt6VcC6MR9Dbfv2pkdW RcVF3UknTp5RcqSNzuKPfDlekOsGHWdcAobfZx/2 -----END CERTIFICATE-----Generated at Wed May 13 01:10:14 2026 by rpki-client