$ rpki-client -vvf rpki-rsync.idnic.net/repo/2e434981-36bb-4539-9b55-07b67208fd06/0/3132322e34392e3232342e302f32342d3234203d3e203338353232.roa File: 3132322e34392e3232342e302f32342d3234203d3e203338353232.roa (raw, json) Hash identifier: koEaap+TYC8WrFoTgxyiCmDzNLWvbtVD5J+Pgu293Ms= Subject key identifier: A6:A4:89:D8:BB:22:86:9D:03:91:FC:D1:1F:3D:31:D0:6A:C5:C9:5B Certificate issuer: /CN=87BE318D9AB9E783D2D6A8E6473B14BE720F4F5C Certificate serial: 5667673AFFA6C5435B9DA560F799499E02B9898B Authority key identifier: 87:BE:31:8D:9A:B9:E7:83:D2:D6:A8:E6:47:3B:14:BE:72:0F:4F:5C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/87BE318D9AB9E783D2D6A8E6473B14BE720F4F5C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2e434981-36bb-4539-9b55-07b67208fd06/0/3132322e34392e3232342e302f32342d3234203d3e203338353232.roa Signing time: Sun 03 May 2026 02:23:12 +0000 ROA not before: Sun 03 May 2026 02:18:12 +0000 ROA not after: Sun 02 May 2027 02:23:12 +0000 asID: 38522 IP address blocks: 122.49.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2e434981-36bb-4539-9b55-07b67208fd06/0/87BE318D9AB9E783D2D6A8E6473B14BE720F4F5C.crl rsync://rpki-rsync.idnic.net/repo/2e434981-36bb-4539-9b55-07b67208fd06/0/87BE318D9AB9E783D2D6A8E6473B14BE720F4F5C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/87BE318D9AB9E783D2D6A8E6473B14BE720F4F5C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 01:58:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:67:67:3a:ff:a6:c5:43:5b:9d:a5:60:f7:99:49:9e:02:b9:89:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87BE318D9AB9E783D2D6A8E6473B14BE720F4F5C Validity Not Before: May 3 02:18:12 2026 GMT Not After : May 2 02:23:12 2027 GMT Subject: CN=A6A489D8BB22869D0391FCD11F3D31D06AC5C95B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:d3:c5:94:25:d3:02:c3:dd:60:2e:8a:8c:2f: d1:23:43:01:93:41:22:f6:72:72:5c:b4:f6:75:6b: 75:b0:fc:79:95:4f:1c:79:f4:fe:43:03:5a:74:6a: 31:34:27:9c:c8:47:a3:4f:da:6f:a7:fc:86:04:aa: 8a:62:82:87:95:f0:95:1c:5b:58:46:64:f4:df:11: 09:0f:54:9a:bb:96:f8:83:75:28:b7:18:23:c3:f5: 10:8c:46:bd:92:87:13:8f:e5:3a:1b:25:fc:e8:9f: b9:d8:a5:52:ff:15:67:b7:31:cd:d4:52:8e:53:29: 66:c9:c2:b8:13:e0:3e:2f:9f:e4:84:8b:d7:2b:2a: d6:07:28:41:9c:d0:0a:c5:93:27:0a:9a:18:1e:a0: dc:0c:5a:6a:14:bc:f8:ee:27:6e:6e:7a:53:1d:ba: fe:5d:2c:32:2a:5e:21:ba:4f:34:dd:b5:e7:34:69: 4f:13:28:52:f2:f2:fb:55:18:83:6b:21:f3:3b:d6: 27:ad:0b:99:e5:92:d5:c0:94:4c:c0:9a:b7:b4:0c: c3:79:bd:f5:29:47:77:ae:06:e2:9b:ed:ce:51:b0: 8e:74:39:8c:1b:f8:bd:03:6d:1b:dc:d7:08:29:ce: 10:48:8d:24:98:3d:1c:44:7d:b9:85:36:0a:48:d5: 6e:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:A4:89:D8:BB:22:86:9D:03:91:FC:D1:1F:3D:31:D0:6A:C5:C9:5B X509v3 Authority Key Identifier: keyid:87:BE:31:8D:9A:B9:E7:83:D2:D6:A8:E6:47:3B:14:BE:72:0F:4F:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2e434981-36bb-4539-9b55-07b67208fd06/0/87BE318D9AB9E783D2D6A8E6473B14BE720F4F5C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/87BE318D9AB9E783D2D6A8E6473B14BE720F4F5C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2e434981-36bb-4539-9b55-07b67208fd06/0/3132322e34392e3232342e302f32342d3234203d3e203338353232.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 122.49.224.0/24 Signature Algorithm: sha256WithRSAEncryption 58:aa:8b:43:07:2c:73:70:b1:aa:f1:82:c5:dd:c0:fd:61:bd: 44:3a:d1:9a:75:aa:5c:40:21:7a:58:35:ac:8c:dc:14:c3:e6: 57:0c:cc:ea:b0:35:15:ba:99:7f:cf:78:2d:51:d3:54:22:83: 56:15:7b:8b:cb:b0:96:32:08:5f:e3:70:ef:ae:fe:22:41:4d: 72:1f:3a:d6:a1:20:17:aa:85:55:b7:28:90:eb:ae:cd:94:e1: 6b:ee:cd:42:b8:8f:8f:ad:1f:1f:b7:28:97:a8:17:b7:b1:8f: 67:88:4e:e0:8d:48:83:88:34:0c:fd:00:bf:75:14:d6:ee:ab: 65:04:8b:b8:d2:8a:ac:13:86:73:8f:60:c3:b5:b8:15:62:3d: 56:a7:b6:94:bf:3c:07:e2:f0:81:90:06:c9:2c:10:1b:0d:33: ff:a6:16:a4:a6:e7:92:81:de:29:d6:b1:7a:ff:db:61:7e:91: 93:fa:91:0a:d9:a8:b5:28:b7:f9:bd:a7:0f:30:7d:91:11:e4: a5:7c:a4:02:c0:e0:14:17:fb:bc:49:28:17:24:4d:3d:78:f1: 9d:9b:7d:a9:84:c6:fa:50:5f:bf:a6:c4:5f:19:cd:cd:94:89: 78:ff:7a:f0:65:cd:c3:e6:73:27:9e:50:bc:0d:1b:b3:97:d8: b7:0d:d2:e5 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUVmdnOv+mxUNbnaVg95lJngK5iYswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODdCRTMxOEQ5QUI5RTc4M0QyRDZBOEU2NDczQjE0QkU3 MjBGNEY1QzAeFw0yNjA1MDMwMjE4MTJaFw0yNzA1MDIwMjIzMTJaMDMxMTAvBgNV BAMTKEE2QTQ4OUQ4QkIyMjg2OUQwMzkxRkNEMTFGM0QzMUQwNkFDNUM5NUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDY08WUJdMCw91gLoqML9EjQwGT QSL2cnJctPZ1a3Ww/HmVTxx59P5DA1p0ajE0J5zIR6NP2m+n/IYEqopigoeV8JUc W1hGZPTfEQkPVJq7lviDdSi3GCPD9RCMRr2ShxOP5TobJfzon7nYpVL/FWe3Mc3U Uo5TKWbJwrgT4D4vn+SEi9crKtYHKEGc0ArFkycKmhgeoNwMWmoUvPjuJ25uelMd uv5dLDIqXiG6TzTdtec0aU8TKFLy8vtVGINrIfM71ietC5nlktXAlEzAmre0DMN5 vfUpR3euBuKb7c5RsI50OYwb+L0DbRvc1wgpzhBIjSSYPRxEfbmFNgpI1W6hAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUpqSJ2Lsihp0DkfzRHz0x0GrFyVswHwYDVR0j BBgwFoAUh74xjZq554PS1qjmRzsUvnIPT1wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmU0MzQ5ODEtMzZiYi00NTM5LTliNTUtMDdiNjcyMDhmZDA2LzAvODdCRTMxOEQ5 QUI5RTc4M0QyRDZBOEU2NDczQjE0QkU3MjBGNEY1Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84N0JFMzE4RDlBQjlFNzgzRDJENkE4RTY0NzNCMTRCRTcyMEY0 RjVDLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzJlNDM0OTgxLTM2YmItNDUzOS05 YjU1LTA3YjY3MjA4ZmQwNi8wLzMxMzIzMjJlMzQzOTJlMzIzMjM0MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzMzODM1MzIzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHox4DANBgkqhkiG 9w0BAQsFAAOCAQEAWKqLQwcsc3CxqvGCxd3A/WG9RDrRmnWqXEAhelg1rIzcFMPm VwzM6rA1FbqZf894LVHTVCKDVhV7i8uwljIIX+Nw767+IkFNch861qEgF6qFVbco kOuuzZTha+7NQriPj60fH7col6gXt7GPZ4hO4I1Ig4g0DP0Av3UU1u6rZQSLuNKK rBOGc49gw7W4FWI9Vqe2lL88B+LwgZAGySwQGw0z/6YWpKbnkoHeKdaxev/bYX6R k/qRCtmotSi3+b2nDzB9kRHkpXykAsDgFBf7vEkoFyRNPXjxnZt9qYTG+lBfv6bE XxnNzZSJeP968GXNw+ZzJ55QvA0bs5fYtw3S5Q== -----END CERTIFICATE-----Generated at Wed May 13 05:25:50 2026 by rpki-client