$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/3132322e3132382e32322e302f32342d3234203d3e20313530343630.roa File: 3132322e3132382e32322e302f32342d3234203d3e20313530343630.roa (raw, json) Hash identifier: YwYJOrEsiDWcVSn+LtSvLPeO90hqCBR1ZCpXlYX2WzQ= Subject key identifier: C6:0F:06:75:1D:2D:97:AF:D9:E5:7A:2D:6A:8B:28:32:35:96:26:DC Certificate issuer: /CN=684DE34A64F3AFED44A02385FCB35882FB2E6AA5 Certificate serial: 4814E214B2BC8875C929DA9E6363D8E53CFA7267 Authority key identifier: 68:4D:E3:4A:64:F3:AF:ED:44:A0:23:85:FC:B3:58:82:FB:2E:6A:A5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/684DE34A64F3AFED44A02385FCB35882FB2E6AA5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/3132322e3132382e32322e302f32342d3234203d3e20313530343630.roa Signing time: Sun 20 Sep 2026 16:19:56 +0000 ROA not before: Sun 20 Sep 2026 16:14:56 +0000 ROA not after: Sun 19 Sep 2027 16:19:56 +0000 asID: 150460 IP address blocks: 122.128.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/684DE34A64F3AFED44A02385FCB35882FB2E6AA5.crl rsync://rpki-rsync.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/684DE34A64F3AFED44A02385FCB35882FB2E6AA5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/684DE34A64F3AFED44A02385FCB35882FB2E6AA5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 05:42:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:14:e2:14:b2:bc:88:75:c9:29:da:9e:63:63:d8:e5:3c:fa:72:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=684DE34A64F3AFED44A02385FCB35882FB2E6AA5 Validity Not Before: Sep 20 16:14:56 2026 GMT Not After : Sep 19 16:19:56 2027 GMT Subject: CN=C60F06751D2D97AFD9E57A2D6A8B2832359626DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:9d:34:e7:d0:a9:67:e6:ef:ed:21:15:38:ae: 2d:45:17:2a:19:d1:c0:ef:be:ae:5b:db:d1:42:df: 76:52:9f:5a:51:86:ea:6d:aa:b9:81:f2:94:2f:55: e2:99:1b:99:dc:9b:e6:6a:8f:a2:46:bd:83:d9:0d: 95:cf:28:f1:b4:3b:bd:36:c5:18:2f:52:fd:1d:40: 21:5d:5d:af:ba:35:f3:e3:cd:50:95:ac:aa:f7:06: 9e:65:3c:27:fb:56:52:0e:82:74:c7:b9:89:0e:2d: a4:35:e4:03:49:67:5f:7f:1b:29:c1:53:a1:14:3d: 51:e8:31:f4:d8:3c:52:69:c4:82:c5:d3:f1:90:f3: 96:63:34:ff:b7:3b:8c:a2:10:a1:36:49:b5:42:6d: 74:71:6a:16:67:1a:79:48:c7:cd:b0:ca:ce:4c:6a: 05:2d:41:7b:df:dc:be:47:89:80:96:ef:dc:57:b5: 5c:29:99:5a:d8:0e:50:52:d0:23:e1:d4:e8:12:44: c4:0c:27:c5:0d:e8:b7:1a:58:50:1a:39:22:34:1c: 5f:bc:40:dc:79:48:4c:7a:26:dc:64:2d:59:c4:6d: c1:c4:31:f7:b3:94:c1:bf:e6:63:c5:a4:2d:84:78: 1d:fb:9a:83:eb:47:3d:3a:9c:27:e0:6a:4d:d9:8a: 92:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:0F:06:75:1D:2D:97:AF:D9:E5:7A:2D:6A:8B:28:32:35:96:26:DC X509v3 Authority Key Identifier: keyid:68:4D:E3:4A:64:F3:AF:ED:44:A0:23:85:FC:B3:58:82:FB:2E:6A:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/684DE34A64F3AFED44A02385FCB35882FB2E6AA5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/684DE34A64F3AFED44A02385FCB35882FB2E6AA5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/3132322e3132382e32322e302f32342d3234203d3e20313530343630.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 122.128.22.0/24 Signature Algorithm: sha256WithRSAEncryption 2e:0c:82:5a:37:d7:c3:10:20:4c:18:58:06:56:36:10:dc:c6: 49:72:66:e1:9a:17:bf:18:e5:cd:f2:8c:4c:9f:94:a9:5d:1c: 2d:ac:fd:54:60:1a:48:7d:a1:85:72:e4:06:fe:2a:91:25:62: 1f:b5:93:69:ba:e8:67:cb:01:6f:4d:1b:f4:03:f2:23:dc:38: 91:a4:5d:4d:5a:4e:b4:35:2f:e8:e9:05:a8:85:4c:43:41:53: 50:b4:e0:10:1a:e1:c2:ae:59:73:e4:2e:48:02:d2:07:db:86: fa:fc:ed:1c:1e:33:42:76:54:11:26:cc:14:da:c0:48:37:7f: 9e:da:6e:90:ca:6a:6f:7e:d0:09:90:a7:58:c8:e8:c1:b7:5a: 2b:d1:91:b5:81:77:c1:f9:ff:98:fe:eb:26:75:b7:2a:96:d0: 85:12:8e:52:0a:08:2a:e8:8f:13:8b:4f:73:ca:ac:8a:2e:fb: 3b:47:d1:7d:cf:7d:89:8c:a0:bd:33:cb:a2:74:b1:f1:dd:a6: 25:fb:30:43:df:7a:01:8b:24:30:50:65:1b:2a:e0:52:e4:0d: 29:c6:fc:d8:ae:af:72:a8:98:68:4c:ff:1e:ed:69:f0:d3:98: 32:9b:7c:50:46:c7:d0:99:e2:46:16:e6:b4:00:92:d3:07:5c: e1:1c:cd:76 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUSBTiFLK8iHXJKdqeY2PY5Tz6cmcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjg0REUzNEE2NEYzQUZFRDQ0QTAyMzg1RkNCMzU4ODJG QjJFNkFBNTAeFw0yNjA5MjAxNjE0NTZaFw0yNzA5MTkxNjE5NTZaMDMxMTAvBgNV BAMTKEM2MEYwNjc1MUQyRDk3QUZEOUU1N0EyRDZBOEIyODMyMzU5NjI2REMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDanTTn0Kln5u/tIRU4ri1FFyoZ 0cDvvq5b29FC33ZSn1pRhuptqrmB8pQvVeKZG5ncm+Zqj6JGvYPZDZXPKPG0O702 xRgvUv0dQCFdXa+6NfPjzVCVrKr3Bp5lPCf7VlIOgnTHuYkOLaQ15ANJZ19/GynB U6EUPVHoMfTYPFJpxILF0/GQ85ZjNP+3O4yiEKE2SbVCbXRxahZnGnlIx82wys5M agUtQXvf3L5HiYCW79xXtVwpmVrYDlBS0CPh1OgSRMQMJ8UN6LcaWFAaOSI0HF+8 QNx5SEx6JtxkLVnEbcHEMfezlMG/5mPFpC2EeB37moPrRz06nCfgak3ZipJXAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUxg8GdR0tl6/Z5XotaosoMjWWJtwwHwYDVR0j BBgwFoAUaE3jSmTzr+1EoCOF/LNYgvsuaqUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Mzg1M2YyMjgtMzdmMi00N2Q5LWI5ZmUtNDc2YmFkZTEzMzkzLzAvNjg0REUzNEE2 NEYzQUZFRDQ0QTAyMzg1RkNCMzU4ODJGQjJFNkFBNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82ODRERTM0QTY0RjNBRkVENDRBMDIzODVGQ0IzNTg4MkZCMkU2 QUE1LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzM4NTNmMjI4LTM3ZjItNDdkOS1i OWZlLTQ3NmJhZGUxMzM5My8wLzMxMzIzMjJlMzEzMjM4MmUzMjMyMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNTMwMzQzNjMwLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAeoAWMA0GCSqG SIb3DQEBCwUAA4IBAQAuDIJaN9fDECBMGFgGVjYQ3MZJcmbhmhe/GOXN8oxMn5Sp XRwtrP1UYBpIfaGFcuQG/iqRJWIftZNpuuhnywFvTRv0A/Ij3DiRpF1NWk60NS/o 6QWohUxDQVNQtOAQGuHCrllz5C5IAtIH24b6/O0cHjNCdlQRJswU2sBIN3+e2m6Q ympvftAJkKdYyOjBt1or0ZG1gXfB+f+Y/usmdbcqltCFEo5SCggq6I8Ti09zyqyK Lvs7R9F9z32JjKC9M8uidLHx3aYl+zBD33oBiyQwUGUbKuBS5A0pxvzYrq9yqJho TP8e7Wnw05gym3xQRsfQmeJGFua0AJLTB1zhHM12 -----END CERTIFICATE-----Generated at Fri Sep 25 23:18:29 2026 by rpki-client