$ rpki-client -vvf rpki-rsync.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/34332e3235322e3130342e302f32322d3234203d3e203435333035.roa File: 34332e3235322e3130342e302f32322d3234203d3e203435333035.roa (raw, json) Hash identifier: lVR5iCrB58ZGOeyqsgP1KQLwdS0WjCcfUKPYsWN8lxI= Subject key identifier: 98:1E:A9:6D:C9:68:51:3B:96:2A:E2:98:94:3F:39:49:38:92:0A:B7 Certificate issuer: /CN=5843958BB240779320D7F0C2B674ACF5EF6122BC Certificate serial: 1F1EA3644DAE97F5A78AC068D192A0B257E29152 Authority key identifier: 58:43:95:8B:B2:40:77:93:20:D7:F0:C2:B6:74:AC:F5:EF:61:22:BC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5843958BB240779320D7F0C2B674ACF5EF6122BC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/34332e3235322e3130342e302f32322d3234203d3e203435333035.roa Signing time: Sun 03 May 2026 02:23:02 +0000 ROA not before: Sun 03 May 2026 02:18:02 +0000 ROA not after: Sun 02 May 2027 02:23:02 +0000 asID: 45305 IP address blocks: 43.252.104.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/5843958BB240779320D7F0C2B674ACF5EF6122BC.crl rsync://rpki-rsync.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/5843958BB240779320D7F0C2B674ACF5EF6122BC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5843958BB240779320D7F0C2B674ACF5EF6122BC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:1e:a3:64:4d:ae:97:f5:a7:8a:c0:68:d1:92:a0:b2:57:e2:91:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5843958BB240779320D7F0C2B674ACF5EF6122BC Validity Not Before: May 3 02:18:02 2026 GMT Not After : May 2 02:23:02 2027 GMT Subject: CN=981EA96DC968513B962AE298943F394938920AB7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:21:17:c1:81:30:58:fd:b9:78:64:53:55:81: 83:db:fc:ce:52:22:3d:d6:fb:ec:76:2b:e8:33:c2: ab:78:df:f6:62:d4:0c:5e:a7:b1:c8:95:e3:c6:bb: 52:ed:57:5d:46:58:33:ca:b7:47:9d:67:9a:f6:65: 77:30:77:fb:ca:31:c4:0a:2e:6a:ea:14:34:e7:c5: 19:67:a3:8d:86:e9:5c:48:ae:dd:19:04:1d:21:71: 83:7e:8f:1d:e5:f3:ca:1c:43:1a:e4:d5:4c:85:43: 67:4d:ee:cd:34:61:ce:7f:6e:79:52:14:95:33:6c: 37:2f:04:06:cb:ab:d4:da:cb:d1:bd:c3:60:75:64: 86:09:e3:34:a5:f6:84:66:35:25:c0:09:46:88:51: 3d:bc:4b:2c:f7:e9:d0:75:99:d0:c6:f7:a9:97:e5: c6:29:7e:4e:46:08:f2:df:e6:09:bf:02:86:20:9c: c5:8b:fc:cd:ee:55:42:11:96:a5:af:c6:2f:74:98: 45:f7:db:bd:81:c4:71:7e:f8:1f:d2:43:d8:c8:73: 56:29:84:ec:03:91:a7:46:c9:99:64:0b:66:2b:b1: b4:57:4a:8f:21:76:f0:dc:20:81:bb:07:3f:76:e0: e0:09:76:a4:29:87:92:a0:4b:99:a7:0a:7f:39:e7: 34:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:1E:A9:6D:C9:68:51:3B:96:2A:E2:98:94:3F:39:49:38:92:0A:B7 X509v3 Authority Key Identifier: keyid:58:43:95:8B:B2:40:77:93:20:D7:F0:C2:B6:74:AC:F5:EF:61:22:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/5843958BB240779320D7F0C2B674ACF5EF6122BC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5843958BB240779320D7F0C2B674ACF5EF6122BC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/34332e3235322e3130342e302f32322d3234203d3e203435333035.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.252.104.0/22 Signature Algorithm: sha256WithRSAEncryption 15:6a:ce:c0:bf:7a:33:cd:8c:f7:8d:d0:d1:7d:a8:d0:8c:ff: 66:12:5a:ce:45:b6:68:9c:92:73:65:b7:2e:aa:03:b6:47:ef: fb:48:b9:1e:c1:09:c8:d5:fe:66:98:de:be:4c:7e:06:7b:04: bb:f0:5c:fb:b4:af:f0:cc:b1:1e:1c:ec:a2:86:64:55:c4:b0: 6b:13:bf:4c:12:4f:de:36:b2:2a:82:25:d9:f8:a7:ec:72:d5: d4:a3:1a:43:9d:f0:cc:ac:a4:57:a2:a9:cf:5b:cd:77:49:33: fd:05:e5:a7:95:d5:6a:09:7a:8b:ad:6d:4d:03:80:f0:de:0a: 29:9c:7a:30:f7:48:36:64:fa:6c:07:c4:cf:1a:2d:12:5e:01: 5c:a2:0c:ac:15:20:ee:18:99:d6:60:93:27:eb:32:c8:a8:ec: cc:4b:ad:09:34:c0:cd:d8:96:e0:38:01:4b:f7:c3:93:c1:aa: 65:6d:ca:f5:da:de:47:11:c5:dd:22:8f:84:cd:13:ad:e6:d8: bb:c0:db:1e:e2:e4:4d:33:ae:ec:ce:c2:74:e0:69:bd:64:b0: 61:9b:9a:35:7e:63:f6:b1:35:4c:c3:b3:59:0a:be:d1:cf:bc: 76:7b:d3:ac:26:67:3f:a4:6e:bc:78:53:11:01:8e:02:58:d0: d1:e9:14:e0 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUHx6jZE2ul/WnisBo0ZKgslfikVIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTg0Mzk1OEJCMjQwNzc5MzIwRDdGMEMyQjY3NEFDRjVF RjYxMjJCQzAeFw0yNjA1MDMwMjE4MDJaFw0yNzA1MDIwMjIzMDJaMDMxMTAvBgNV BAMTKDk4MUVBOTZEQzk2ODUxM0I5NjJBRTI5ODk0M0YzOTQ5Mzg5MjBBQjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1IRfBgTBY/bl4ZFNVgYPb/M5S Ij3W++x2K+gzwqt43/Zi1Axep7HIlePGu1LtV11GWDPKt0edZ5r2ZXcwd/vKMcQK LmrqFDTnxRlno42G6VxIrt0ZBB0hcYN+jx3l88ocQxrk1UyFQ2dN7s00Yc5/bnlS FJUzbDcvBAbLq9Tay9G9w2B1ZIYJ4zSl9oRmNSXACUaIUT28Syz36dB1mdDG96mX 5cYpfk5GCPLf5gm/AoYgnMWL/M3uVUIRlqWvxi90mEX3272BxHF++B/SQ9jIc1Yp hOwDkadGyZlkC2YrsbRXSo8hdvDcIIG7Bz924OAJdqQph5KgS5mnCn855zT9AgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUmB6pbcloUTuWKuKYlD85STiSCrcwHwYDVR0j BBgwFoAUWEOVi7JAd5Mg1/DCtnSs9e9hIrwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmQ5NWMxOWMtMzI2Mi00OGM3LWFmMDItMzdhODM1ZDBhNzc5LzAvNTg0Mzk1OEJC MjQwNzc5MzIwRDdGMEMyQjY3NEFDRjVFRjYxMjJCQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81ODQzOTU4QkIyNDA3NzkzMjBEN0YwQzJCNjc0QUNGNUVGNjEy MkJDLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzJkOTVjMTljLTMyNjItNDhjNy1h ZjAyLTM3YTgzNWQwYTc3OS8wLzM0MzMyZTMyMzUzMjJlMzEzMDM0MmUzMDJmMzIz MjJkMzIzNDIwM2QzZTIwMzQzNTMzMzAzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAiv8aDANBgkqhkiG 9w0BAQsFAAOCAQEAFWrOwL96M82M943Q0X2o0Iz/ZhJazkW2aJySc2W3LqoDtkfv +0i5HsEJyNX+Zpjevkx+BnsEu/Bc+7Sv8MyxHhzsooZkVcSwaxO/TBJP3jayKoIl 2fin7HLV1KMaQ53wzKykV6Kpz1vNd0kz/QXlp5XVagl6i61tTQOA8N4KKZx6MPdI NmT6bAfEzxotEl4BXKIMrBUg7hiZ1mCTJ+syyKjszEutCTTAzdiW4DgBS/fDk8Gq ZW3K9dreRxHF3SKPhM0TrebYu8DbHuLkTTOu7M7CdOBpvWSwYZuaNX5j9rE1TMOz WQq+0c+8dnvTrCZnP6RuvHhTEQGOAljQ0ekU4A== -----END CERTIFICATE-----Generated at Wed May 13 02:37:55 2026 by rpki-client