$ rpki-client -vvf rpki-rsync.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/34352e3131362e3135392e302f32342d3234203d3e20313333383233.roa File: 34352e3131362e3135392e302f32342d3234203d3e20313333383233.roa (raw, json) Hash identifier: ZItAPK09I34Sz0y4vN9sPudl3u7/pYoXuiySE0aWVzw= Subject key identifier: 05:89:66:69:32:00:31:FB:94:67:75:C4:5F:9F:36:59:58:D6:82:90 Certificate issuer: /CN=DECA93C2172E503BC5CAAA1974410D3FA59D2454 Certificate serial: 0B88EAD5C451AD058E03CB6802251A246C1C316B Authority key identifier: DE:CA:93:C2:17:2E:50:3B:C5:CA:AA:19:74:41:0D:3F:A5:9D:24:54 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DECA93C2172E503BC5CAAA1974410D3FA59D2454.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/34352e3131362e3135392e302f32342d3234203d3e20313333383233.roa Signing time: Sun 03 May 2026 02:29:49 +0000 ROA not before: Sun 03 May 2026 02:24:49 +0000 ROA not after: Sun 02 May 2027 02:29:49 +0000 asID: 133823 IP address blocks: 45.116.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/DECA93C2172E503BC5CAAA1974410D3FA59D2454.crl rsync://rpki-rsync.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/DECA93C2172E503BC5CAAA1974410D3FA59D2454.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DECA93C2172E503BC5CAAA1974410D3FA59D2454.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 04:31:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:88:ea:d5:c4:51:ad:05:8e:03:cb:68:02:25:1a:24:6c:1c:31:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DECA93C2172E503BC5CAAA1974410D3FA59D2454 Validity Not Before: May 3 02:24:49 2026 GMT Not After : May 2 02:29:49 2027 GMT Subject: CN=05896669320031FB946775C45F9F365958D68290 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:1a:48:14:47:10:c7:c5:c0:83:d1:aa:7e:0b: 7e:72:c8:58:d5:77:08:48:ff:13:45:4a:b4:f1:f8: 1b:d5:db:73:18:b3:d2:f2:85:03:f1:2a:3a:80:51: 9b:93:bb:4a:40:36:92:f0:2f:0a:3b:86:c1:42:06: 03:e9:48:9d:f1:0c:3a:96:35:b9:e9:76:b5:c0:35: 21:a3:0d:69:75:e4:e6:89:50:ca:44:17:c3:9d:e9: 0e:1f:c3:1c:5f:b2:2c:e9:83:a6:b4:b6:1c:2e:40: 09:b3:75:a6:66:6f:74:89:f5:64:32:a9:c6:82:73: f8:68:50:b4:1f:b3:b2:6a:ff:53:e2:ff:b6:f5:c5: e6:d4:31:f0:ca:ed:6b:c8:12:51:be:b1:01:53:14: 66:2d:61:8f:32:e8:a0:38:ff:62:f4:2a:9e:4b:5f: fd:97:1b:e3:4b:bc:27:e1:2e:b9:f9:e8:de:4e:13: be:04:13:7a:7b:b8:1d:75:bc:39:91:3f:40:28:9d: fa:a7:59:17:27:da:8e:96:48:a9:b2:d2:6b:9c:4f: 74:3c:f7:36:a8:2e:6c:12:ad:26:81:46:72:d7:35: a7:e5:50:6d:29:65:23:80:c6:65:c0:38:e7:fe:49: d1:c8:ef:51:47:e3:9f:25:be:42:82:35:d9:89:b4: 71:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:89:66:69:32:00:31:FB:94:67:75:C4:5F:9F:36:59:58:D6:82:90 X509v3 Authority Key Identifier: keyid:DE:CA:93:C2:17:2E:50:3B:C5:CA:AA:19:74:41:0D:3F:A5:9D:24:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/DECA93C2172E503BC5CAAA1974410D3FA59D2454.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DECA93C2172E503BC5CAAA1974410D3FA59D2454.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/34352e3131362e3135392e302f32342d3234203d3e20313333383233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.116.159.0/24 Signature Algorithm: sha256WithRSAEncryption 44:9c:9d:9d:74:e7:44:07:d8:37:e6:a7:8d:b1:0e:a7:fa:d7: 19:ae:d7:32:f0:87:54:fa:84:af:74:97:24:d5:9c:ff:75:b7: e8:59:d7:fc:dd:70:2e:29:93:c4:93:a0:ae:76:fb:b7:9e:97: f0:26:fc:f0:d6:89:b1:33:b9:ef:2b:d3:22:b6:c4:40:ff:36: ad:8c:41:cd:4a:75:35:87:3c:b6:78:8f:1f:e9:1b:20:10:b6: ca:77:f6:67:37:04:47:85:6e:6f:d9:2a:6e:0e:d1:6c:51:91: e9:c3:d9:f1:f8:8c:fa:74:39:70:cb:02:32:48:89:ca:3b:8c: be:97:b8:23:53:1d:ec:c0:53:10:96:9b:bc:ef:97:62:f9:bc: f3:15:f0:97:62:0f:fd:85:4f:46:88:20:ca:a3:01:b1:8f:51: f0:eb:73:0d:b8:f4:19:36:d3:0a:6d:39:1c:29:b9:b3:69:1f: 8f:5a:a8:76:d8:90:33:b1:ff:70:96:b8:10:7c:3c:53:f4:ab: 88:61:92:70:44:b6:81:26:2b:9d:c1:0e:2b:76:20:6f:ba:a6: 8b:d7:3a:77:d0:81:89:56:06:74:e2:79:2a:55:71:bf:7c:64: a4:4e:a1:7b:4a:0b:8a:3e:dd:d3:70:f0:7a:f9:b2:1b:c8:c6: fc:0a:d6:07 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUC4jq1cRRrQWOA8toAiUaJGwcMWswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREVDQTkzQzIxNzJFNTAzQkM1Q0FBQTE5NzQ0MTBEM0ZB NTlEMjQ1NDAeFw0yNjA1MDMwMjI0NDlaFw0yNzA1MDIwMjI5NDlaMDMxMTAvBgNV BAMTKDA1ODk2NjY5MzIwMDMxRkI5NDY3NzVDNDVGOUYzNjU5NThENjgyOTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4GkgURxDHxcCD0ap+C35yyFjV dwhI/xNFSrTx+BvV23MYs9LyhQPxKjqAUZuTu0pANpLwLwo7hsFCBgPpSJ3xDDqW NbnpdrXANSGjDWl15OaJUMpEF8Od6Q4fwxxfsizpg6a0thwuQAmzdaZmb3SJ9WQy qcaCc/hoULQfs7Jq/1Pi/7b1xebUMfDK7WvIElG+sQFTFGYtYY8y6KA4/2L0Kp5L X/2XG+NLvCfhLrn56N5OE74EE3p7uB11vDmRP0AonfqnWRcn2o6WSKmy0mucT3Q8 9zaoLmwSrSaBRnLXNaflUG0pZSOAxmXAOOf+SdHI71FH458lvkKCNdmJtHEbAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUBYlmaTIAMfuUZ3XEX582WVjWgpAwHwYDVR0j BBgwFoAU3sqTwhcuUDvFyqoZdEENP6WdJFQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDQ3OTFiMWYtNmRhOS00MDBkLThiMTQtOTkyYWFlNjM3NDZjLzAvREVDQTkzQzIx NzJFNTAzQkM1Q0FBQTE5NzQ0MTBEM0ZBNTlEMjQ1NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ERUNBOTNDMjE3MkU1MDNCQzVDQUFBMTk3NDQxMEQzRkE1OUQy NDU0LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzQ0NzkxYjFmLTZkYTktNDAwZC04 YjE0LTk5MmFhZTYzNzQ2Yy8wLzM0MzUyZTMxMzEzNjJlMzEzNTM5MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzMzMzgzMjMzLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALXSfMA0GCSqG SIb3DQEBCwUAA4IBAQBEnJ2ddOdEB9g35qeNsQ6n+tcZrtcy8IdU+oSvdJck1Zz/ dbfoWdf83XAuKZPEk6Cudvu3npfwJvzw1omxM7nvK9MitsRA/zatjEHNSnU1hzy2 eI8f6RsgELbKd/ZnNwRHhW5v2SpuDtFsUZHpw9nx+Iz6dDlwywIySInKO4y+l7gj Ux3swFMQlpu875di+bzzFfCXYg/9hU9GiCDKowGxj1Hw63MNuPQZNtMKbTkcKbmz aR+PWqh22JAzsf9wlrgQfDxT9KuIYZJwRLaBJiudwQ4rdiBvuqaL1zp30IGJVgZ0 4nkqVXG/fGSkTqF7SguKPt3TcPB6+bIbyMb8CtYH -----END CERTIFICATE-----Generated at Wed May 13 10:54:36 2026 by rpki-client