$ rpki-client -vvf rpki-rsync.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/3132332e3233312e3139342e302f32342d3234203d3e20313333383431.roa File: 3132332e3233312e3139342e302f32342d3234203d3e20313333383431.roa (raw, json) Hash identifier: E5xaoMhIJJpQzcXEnlW+IRv8euAL1pbLqPkV9yn2SKY= Subject key identifier: 6C:52:1B:78:30:F1:A6:44:26:34:FA:32:50:6C:9F:E2:46:FA:D4:96 Certificate issuer: /CN=C5528B1880D1A3C409F79997E426F977596B3E01 Certificate serial: 2528374591056C860019BAEC6EF54E58CC7B53FE Authority key identifier: C5:52:8B:18:80:D1:A3:C4:09:F7:99:97:E4:26:F9:77:59:6B:3E:01 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C5528B1880D1A3C409F79997E426F977596B3E01.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/3132332e3233312e3139342e302f32342d3234203d3e20313333383431.roa Signing time: Sun 03 May 2026 02:34:07 +0000 ROA not before: Sun 03 May 2026 02:29:07 +0000 ROA not after: Sun 02 May 2027 02:34:07 +0000 asID: 133841 IP address blocks: 123.231.194.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/C5528B1880D1A3C409F79997E426F977596B3E01.crl rsync://rpki-rsync.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/C5528B1880D1A3C409F79997E426F977596B3E01.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C5528B1880D1A3C409F79997E426F977596B3E01.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 23:29:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:28:37:45:91:05:6c:86:00:19:ba:ec:6e:f5:4e:58:cc:7b:53:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C5528B1880D1A3C409F79997E426F977596B3E01 Validity Not Before: May 3 02:29:07 2026 GMT Not After : May 2 02:34:07 2027 GMT Subject: CN=6C521B7830F1A6442634FA32506C9FE246FAD496 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:fa:6e:05:13:45:18:fe:b8:3c:e8:34:b7:d6: 7b:6b:48:d1:1d:a7:0b:67:7a:38:9f:a4:98:d2:60: 48:5f:28:2d:db:0a:f6:b9:07:3b:6b:32:ff:2f:fb: 93:7d:a5:02:7b:fa:34:0b:da:39:1f:9c:03:32:65: 8c:ad:dc:55:38:74:17:33:a1:21:95:c4:43:4c:5e: 99:ad:13:04:4d:0c:74:4c:85:e8:0f:d7:5c:f2:0f: 92:3c:ba:d9:76:16:77:25:26:c5:da:7c:c5:73:71: 57:cf:a2:93:c3:7d:6b:16:c9:c2:f8:75:71:24:e8: ec:f4:29:1e:46:23:89:35:d6:7c:db:55:46:83:75: 33:b2:5b:c3:7d:37:e1:b9:46:7c:01:54:fc:b4:2e: 37:ee:bb:07:1c:6b:12:65:f3:16:14:a3:f2:1f:0f: 2c:1a:99:8a:6d:c2:76:86:76:85:df:04:b9:fb:94: 00:88:4c:73:7b:53:61:6b:6b:e9:13:80:74:e4:82: 2b:50:78:93:65:85:a9:0a:a7:4d:db:2f:83:9f:7f: ae:b4:33:32:01:c7:9e:a3:71:a2:f0:aa:8c:bb:4d: f8:ad:a5:f1:2b:d5:54:8e:fc:c4:97:7b:b6:f9:80: f0:41:20:73:45:5f:9b:03:87:89:26:81:35:41:25: bd:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:52:1B:78:30:F1:A6:44:26:34:FA:32:50:6C:9F:E2:46:FA:D4:96 X509v3 Authority Key Identifier: keyid:C5:52:8B:18:80:D1:A3:C4:09:F7:99:97:E4:26:F9:77:59:6B:3E:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/C5528B1880D1A3C409F79997E426F977596B3E01.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C5528B1880D1A3C409F79997E426F977596B3E01.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/3132332e3233312e3139342e302f32342d3234203d3e20313333383431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 123.231.194.0/24 Signature Algorithm: sha256WithRSAEncryption 96:ce:15:93:64:5b:c6:b5:7c:6f:29:b5:8f:19:ec:92:ab:9c: 5b:8e:b9:74:87:e9:84:1b:a3:6f:26:4d:93:67:f7:f4:d8:13: 88:31:06:2b:28:94:c0:24:6e:46:f2:53:55:7a:e1:60:eb:14: 67:4f:06:c1:4b:f9:a6:59:9f:2f:2e:5e:64:8e:bc:d8:ee:e5: 37:d5:e0:31:10:c5:fb:cf:5f:40:ab:61:09:fb:65:b4:4c:0f: 8d:47:7b:0e:f1:d5:9a:69:41:14:de:d9:a8:4e:1e:88:28:f1: 80:14:f5:07:e6:92:7a:d7:94:66:ef:4b:1d:59:32:01:78:84: e5:6f:94:3e:95:9b:3a:31:cb:ec:ce:2a:bc:60:8a:ef:af:49: 91:54:8c:2a:e0:69:cf:db:7e:9d:d7:f0:33:31:aa:93:84:02: 4f:71:c7:82:c0:2f:c1:3b:e4:e4:e2:d3:6a:8c:db:f3:af:4c: a0:94:2f:b0:07:bf:4c:7e:e8:f9:90:0d:7e:32:26:34:3d:94: 57:b8:d9:17:f2:fc:a3:f9:57:80:5e:22:37:7b:d4:d0:99:c8: 83:84:47:4f:e5:46:1a:63:01:ae:9d:3a:d4:ba:2e:fb:d0:a0: 2e:c2:38:d5:ef:6b:65:fa:75:25:81:97:1b:e6:df:95:63:49: 6b:a9:fd:ad -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUJSg3RZEFbIYAGbrsbvVOWMx7U/4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzU1MjhCMTg4MEQxQTNDNDA5Rjc5OTk3RTQyNkY5Nzc1 OTZCM0UwMTAeFw0yNjA1MDMwMjI5MDdaFw0yNzA1MDIwMjM0MDdaMDMxMTAvBgNV BAMTKDZDNTIxQjc4MzBGMUE2NDQyNjM0RkEzMjUwNkM5RkUyNDZGQUQ0OTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD+m4FE0UY/rg86DS31ntrSNEd pwtnejifpJjSYEhfKC3bCva5BztrMv8v+5N9pQJ7+jQL2jkfnAMyZYyt3FU4dBcz oSGVxENMXpmtEwRNDHRMhegP11zyD5I8utl2FnclJsXafMVzcVfPopPDfWsWycL4 dXEk6Oz0KR5GI4k11nzbVUaDdTOyW8N9N+G5RnwBVPy0LjfuuwccaxJl8xYUo/If DywamYptwnaGdoXfBLn7lACITHN7U2Fra+kTgHTkgitQeJNlhakKp03bL4Off660 MzIBx56jcaLwqoy7TfitpfEr1VSO/MSXe7b5gPBBIHNFX5sDh4kmgTVBJb0dAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUbFIbeDDxpkQmNPoyUGyf4kb61JYwHwYDVR0j BBgwFoAUxVKLGIDRo8QJ95mX5Cb5d1lrPgEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTVjZTM2ZGUtZjkyMS00Mjc0LTg0OTctMjk4N2Q5MDk1NDNlLzAvQzU1MjhCMTg4 MEQxQTNDNDA5Rjc5OTk3RTQyNkY5Nzc1OTZCM0UwMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DNTUyOEIxODgwRDFBM0M0MDlGNzk5OTdFNDI2Rjk3NzU5NkIz RTAxLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzU1Y2UzNmRlLWY5MjEtNDI3NC04 NDk3LTI5ODdkOTA5NTQzZS8wLzMxMzIzMzJlMzIzMzMxMmUzMTM5MzQyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzMzODM0MzEucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAB758IwDQYJ KoZIhvcNAQELBQADggEBAJbOFZNkW8a1fG8ptY8Z7JKrnFuOuXSH6YQbo28mTZNn 9/TYE4gxBisolMAkbkbyU1V64WDrFGdPBsFL+aZZny8uXmSOvNju5TfV4DEQxfvP X0CrYQn7ZbRMD41Hew7x1ZppQRTe2ahOHogo8YAU9QfmknrXlGbvSx1ZMgF4hOVv lD6Vmzoxy+zOKrxgiu+vSZFUjCrgac/bfp3X8DMxqpOEAk9xx4LAL8E75OTi02qM 2/OvTKCUL7AHv0x+6PmQDX4yJjQ9lFe42Rfy/KP5V4BeIjd71NCZyIOER0/lRhpj Aa6dOtS6LvvQoC7CONXva2X6dSWBlxvm35VjSWup/a0= -----END CERTIFICATE-----Generated at Wed May 13 15:43:28 2026 by rpki-client