$ rpki-client -vvf rpki-rsync.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/34332e3233302e342e302f32342d3234203d3e203338373838.roa File: 34332e3233302e342e302f32342d3234203d3e203338373838.roa (raw, json) Hash identifier: mJNCgdN/KYV4aqOGqcU3FG9C+9F17HUrX/9pj0TLKOE= Subject key identifier: 5E:33:BC:87:EA:21:C4:3C:41:CE:77:5D:90:C3:AE:EB:9E:1C:C9:46 Certificate issuer: /CN=99AD239A6C58BDC3650DB2BE817F2E9A39ABCB56 Certificate serial: 2C7587BDB00F3BEC3A702C220C3FDC0BAAE415D9 Authority key identifier: 99:AD:23:9A:6C:58:BD:C3:65:0D:B2:BE:81:7F:2E:9A:39:AB:CB:56 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/99AD239A6C58BDC3650DB2BE817F2E9A39ABCB56.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/34332e3233302e342e302f32342d3234203d3e203338373838.roa Signing time: Sun 03 May 2026 02:25:06 +0000 ROA not before: Sun 03 May 2026 02:20:06 +0000 ROA not after: Sun 02 May 2027 02:25:06 +0000 asID: 38788 IP address blocks: 43.230.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/99AD239A6C58BDC3650DB2BE817F2E9A39ABCB56.crl rsync://rpki-rsync.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/99AD239A6C58BDC3650DB2BE817F2E9A39ABCB56.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/99AD239A6C58BDC3650DB2BE817F2E9A39ABCB56.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:75:87:bd:b0:0f:3b:ec:3a:70:2c:22:0c:3f:dc:0b:aa:e4:15:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99AD239A6C58BDC3650DB2BE817F2E9A39ABCB56 Validity Not Before: May 3 02:20:06 2026 GMT Not After : May 2 02:25:06 2027 GMT Subject: CN=5E33BC87EA21C43C41CE775D90C3AEEB9E1CC946 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:f4:dd:af:d8:30:2c:76:dc:db:67:72:c6:e7: 38:5f:c4:c6:ae:20:2a:83:49:3c:a6:55:7e:88:e0: ff:82:a7:94:9b:3d:3c:97:13:d3:99:81:6c:cb:0b: a5:35:61:2c:37:0f:54:42:71:43:f5:94:50:e3:de: 62:7f:c9:1d:cb:96:12:46:f9:59:aa:b2:4a:30:1d: e7:fe:cc:8f:8c:42:cc:24:1c:4a:05:5f:28:45:b5: 25:23:e3:03:09:3b:7a:30:70:73:43:72:2f:03:a0: d3:9a:90:c2:e3:2a:e9:96:4d:46:e9:01:fa:25:5e: 61:a0:dc:7e:99:db:ed:c1:87:72:07:df:b8:0b:ef: 86:9d:de:8d:11:61:4c:c8:41:c6:21:81:42:eb:bf: da:64:35:b3:0d:ec:51:5e:45:a4:c0:6f:9c:4b:95: 28:13:64:48:f5:80:73:ba:b8:d3:a2:8e:86:0c:74: d8:fc:88:6d:fd:64:7c:93:a1:eb:61:4b:45:39:14: b9:dc:20:98:14:40:d7:29:f4:d0:bd:c9:f6:93:c8: 4d:fd:df:fa:f0:97:79:ff:15:00:49:81:29:a3:44: 25:b7:4e:f7:83:30:8a:45:b6:d9:7a:cf:55:46:06: 96:28:0c:8d:f7:af:af:35:0b:c3:a8:8e:5b:b2:69: 44:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:33:BC:87:EA:21:C4:3C:41:CE:77:5D:90:C3:AE:EB:9E:1C:C9:46 X509v3 Authority Key Identifier: keyid:99:AD:23:9A:6C:58:BD:C3:65:0D:B2:BE:81:7F:2E:9A:39:AB:CB:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/99AD239A6C58BDC3650DB2BE817F2E9A39ABCB56.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/99AD239A6C58BDC3650DB2BE817F2E9A39ABCB56.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/34332e3233302e342e302f32342d3234203d3e203338373838.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.230.4.0/24 Signature Algorithm: sha256WithRSAEncryption 98:0c:32:ea:55:82:b8:ac:73:2a:cd:c5:3b:6c:01:15:77:fa: f4:f0:ef:02:6b:d8:2a:fc:f9:61:6d:94:d8:3c:53:3b:9e:e0: b3:2a:65:da:74:8a:4b:e6:f4:7f:ec:87:e2:a1:4d:47:13:1d: 1d:84:65:34:14:a0:78:ff:80:b1:3a:a5:5e:c7:aa:51:6c:5a: ae:f7:cb:f5:db:7f:50:cf:94:42:74:eb:c0:c8:fb:e8:99:6f: e1:00:72:3c:88:f4:fc:dc:60:d5:df:9a:33:c7:2e:0e:fa:8f: 34:7c:99:dd:b1:fb:ea:10:87:bb:1f:9d:6b:34:76:84:aa:dc: 01:55:60:90:bf:1a:dd:3c:35:6a:1c:81:57:1e:78:5f:7f:0e: 71:53:11:aa:58:4c:e1:43:7d:92:3d:dd:b7:fb:21:f0:9c:59: e4:a7:36:b3:5f:66:c9:8c:96:74:cb:7f:d5:6b:26:b3:4c:41: 41:0a:cf:eb:fd:94:06:d9:e5:6a:71:8a:75:ac:cf:af:30:03: 7c:a0:69:90:3e:9c:13:e3:96:7e:dc:29:a5:95:a2:4a:28:d9: 15:8c:37:85:a7:7b:4f:21:f5:26:9c:76:14:75:d9:21:e7:5e: a1:ed:c7:7b:02:cf:da:9b:c6:75:43:24:90:27:04:8a:84:f8: f1:d4:7e:bd -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgIULHWHvbAPO+w6cCwiDD/cC6rkFdkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTlBRDIzOUE2QzU4QkRDMzY1MERCMkJFODE3RjJFOUEz OUFCQ0I1NjAeFw0yNjA1MDMwMjIwMDZaFw0yNzA1MDIwMjI1MDZaMDMxMTAvBgNV BAMTKDVFMzNCQzg3RUEyMUM0M0M0MUNFNzc1RDkwQzNBRUVCOUUxQ0M5NDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE9N2v2DAsdtzbZ3LG5zhfxMau ICqDSTymVX6I4P+Cp5SbPTyXE9OZgWzLC6U1YSw3D1RCcUP1lFDj3mJ/yR3LlhJG +VmqskowHef+zI+MQswkHEoFXyhFtSUj4wMJO3owcHNDci8DoNOakMLjKumWTUbp AfolXmGg3H6Z2+3Bh3IH37gL74ad3o0RYUzIQcYhgULrv9pkNbMN7FFeRaTAb5xL lSgTZEj1gHO6uNOijoYMdNj8iG39ZHyToethS0U5FLncIJgUQNcp9NC9yfaTyE39 3/rwl3n/FQBJgSmjRCW3TveDMIpFttl6z1VGBpYoDI33r681C8OojluyaUQBAgMB AAGjggItMIICKTAdBgNVHQ4EFgQUXjO8h+ohxDxBznddkMOu654cyUYwHwYDVR0j BBgwFoAUma0jmmxYvcNlDbK+gX8umjmry1YwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzRlMmJmMDktNWY0Mi00YjY1LWE0MmQtNjNkMDc5NmQyMDZjLzAvOTlBRDIzOUE2 QzU4QkRDMzY1MERCMkJFODE3RjJFOUEzOUFCQ0I1Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85OUFEMjM5QTZDNThCREMzNjUwREIyQkU4MTdGMkU5QTM5QUJD QjU2LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUFBzALhn9yc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzRlMmJmMDktNWY0Mi00YjY1LWE0 MmQtNjNkMDc5NmQyMDZjLzAvMzQzMzJlMzIzMzMwMmUzNDJlMzAyZjMyMzQyZDMy MzQyMDNkM2UyMDMzMzgzNzM4Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAr5gQwDQYJKoZIhvcNAQEL BQADggEBAJgMMupVgriscyrNxTtsARV3+vTw7wJr2Cr8+WFtlNg8Uzue4LMqZdp0 ikvm9H/sh+KhTUcTHR2EZTQUoHj/gLE6pV7HqlFsWq73y/Xbf1DPlEJ068DI++iZ b+EAcjyI9PzcYNXfmjPHLg76jzR8md2x++oQh7sfnWs0doSq3AFVYJC/Gt08NWoc gVceeF9/DnFTEapYTOFDfZI93bf7IfCcWeSnNrNfZsmMlnTLf9VrJrNMQUEKz+v9 lAbZ5WpxinWsz68wA3ygaZA+nBPjln7cKaWVokoo2RWMN4Wne08h9SacdhR12SHn XqHtx3sCz9qbxnVDJJAnBIqE+PHUfr0= -----END CERTIFICATE-----Generated at Wed May 13 00:54:30 2026 by rpki-client