$ rpki-client -vvf rpki-rsync.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/3132332e3233312e3230332e302f32342d3234203d3e20313333383431.roa File: 3132332e3233312e3230332e302f32342d3234203d3e20313333383431.roa (raw, json) Hash identifier: iZ7rrvTpP13TLOrEpwbrP8seywLWjyotiEpyEnkmPd4= Subject key identifier: 8C:A3:08:61:4C:25:E0:70:FA:C8:E8:0C:37:D0:A1:FB:25:B9:9F:98 Certificate issuer: /CN=C5528B1880D1A3C409F79997E426F977596B3E01 Certificate serial: 484DBC92A10FF42AF6DB25A259694D0ED4D9EB90 Authority key identifier: C5:52:8B:18:80:D1:A3:C4:09:F7:99:97:E4:26:F9:77:59:6B:3E:01 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C5528B1880D1A3C409F79997E426F977596B3E01.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/3132332e3233312e3230332e302f32342d3234203d3e20313333383431.roa Signing time: Sun 03 May 2026 02:34:11 +0000 ROA not before: Sun 03 May 2026 02:29:11 +0000 ROA not after: Sun 02 May 2027 02:34:11 +0000 asID: 133841 IP address blocks: 123.231.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/C5528B1880D1A3C409F79997E426F977596B3E01.crl rsync://rpki-rsync.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/C5528B1880D1A3C409F79997E426F977596B3E01.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C5528B1880D1A3C409F79997E426F977596B3E01.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 23:29:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:4d:bc:92:a1:0f:f4:2a:f6:db:25:a2:59:69:4d:0e:d4:d9:eb:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C5528B1880D1A3C409F79997E426F977596B3E01 Validity Not Before: May 3 02:29:11 2026 GMT Not After : May 2 02:34:11 2027 GMT Subject: CN=8CA308614C25E070FAC8E80C37D0A1FB25B99F98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:cc:ec:8c:2b:30:8f:9f:f9:b9:e4:82:a8:3d: 62:32:cd:0a:48:52:80:67:46:2f:c1:89:78:95:d1: f1:38:57:5c:9f:27:a6:3f:be:15:0c:ff:21:21:d8: 93:42:9b:9c:e4:84:db:e1:5d:3f:1b:33:93:29:ce: 9a:42:27:f9:ae:80:09:be:bc:2c:80:91:8b:d9:58: b4:c7:ba:b1:a1:45:ee:18:c1:65:b3:82:81:23:d8: 2e:13:54:5f:fa:cc:41:84:75:e6:20:bf:7f:23:2e: dd:5b:87:f3:87:e0:12:4c:5e:13:79:2d:d0:ca:a9: da:9c:08:44:53:da:1e:ab:60:8b:75:2e:ac:85:80: ba:36:ae:87:07:99:50:da:45:2c:34:f2:78:be:cd: e8:dc:f2:55:2b:17:eb:f4:71:cc:24:00:9b:ba:ec: 01:9f:53:cf:25:20:5d:82:35:77:f7:64:a4:d1:b9: 40:54:1c:68:b8:ab:04:1c:61:5c:db:86:b5:7f:76: 78:1a:37:e9:fd:54:2a:6e:43:6c:e8:d1:51:c4:49: 97:71:f3:df:01:9d:47:6e:33:22:89:82:93:b2:a0: 91:db:28:bf:ff:f1:2d:07:eb:2c:83:de:b7:b0:85: 18:ba:b3:3b:b1:37:75:f5:7e:78:6f:25:cd:b4:52: 6d:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:A3:08:61:4C:25:E0:70:FA:C8:E8:0C:37:D0:A1:FB:25:B9:9F:98 X509v3 Authority Key Identifier: keyid:C5:52:8B:18:80:D1:A3:C4:09:F7:99:97:E4:26:F9:77:59:6B:3E:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/C5528B1880D1A3C409F79997E426F977596B3E01.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C5528B1880D1A3C409F79997E426F977596B3E01.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/3132332e3233312e3230332e302f32342d3234203d3e20313333383431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 123.231.203.0/24 Signature Algorithm: sha256WithRSAEncryption 77:9e:6f:02:85:52:ce:38:5e:3c:bf:6c:0e:58:22:8c:3d:20: ec:45:7b:96:0e:fb:de:07:17:9a:4a:4b:42:15:26:80:8b:6c: 9e:a8:79:48:2f:f1:bb:de:91:65:1c:3f:43:36:cf:aa:a1:1d: 26:81:77:dd:aa:a6:15:3d:1b:24:9c:21:29:d9:2c:5d:31:21: 66:6e:52:8e:4f:c8:55:47:13:b6:7e:ac:16:96:e5:18:6c:66: 49:3a:39:0f:0f:80:31:64:dd:4a:2f:fe:c3:e5:08:f1:78:46: be:f2:17:a3:d8:fd:1f:42:f0:f7:f4:73:56:4a:d4:95:fd:c4: de:1d:bc:c7:73:73:73:b0:c3:f7:0e:03:7a:40:27:ec:8f:75: a0:3d:60:4f:30:67:b0:6d:44:97:e4:83:30:7a:27:d3:53:73: e1:47:07:e7:cd:99:67:47:1c:09:09:65:2a:ee:21:d7:ae:56: 71:0a:88:6d:0f:fa:c4:8e:fc:5b:7a:25:1a:09:97:96:4d:7d: 98:19:81:5f:90:c6:2f:d9:91:b9:33:7d:09:b2:ed:a6:ec:90: 37:68:18:c5:db:60:69:a5:3d:de:c5:5b:67:15:23:d4:68:74: 8c:44:2c:14:94:9a:12:df:81:79:ca:98:7c:0d:21:40:3c:dc: 16:09:d2:5d -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUSE28kqEP9Cr22yWiWWlNDtTZ65AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzU1MjhCMTg4MEQxQTNDNDA5Rjc5OTk3RTQyNkY5Nzc1 OTZCM0UwMTAeFw0yNjA1MDMwMjI5MTFaFw0yNzA1MDIwMjM0MTFaMDMxMTAvBgNV BAMTKDhDQTMwODYxNEMyNUUwNzBGQUM4RTgwQzM3RDBBMUZCMjVCOTlGOTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKzOyMKzCPn/m55IKoPWIyzQpI UoBnRi/BiXiV0fE4V1yfJ6Y/vhUM/yEh2JNCm5zkhNvhXT8bM5MpzppCJ/mugAm+ vCyAkYvZWLTHurGhRe4YwWWzgoEj2C4TVF/6zEGEdeYgv38jLt1bh/OH4BJMXhN5 LdDKqdqcCERT2h6rYIt1LqyFgLo2rocHmVDaRSw08ni+zejc8lUrF+v0ccwkAJu6 7AGfU88lIF2CNXf3ZKTRuUBUHGi4qwQcYVzbhrV/dngaN+n9VCpuQ2zo0VHESZdx 898BnUduMyKJgpOyoJHbKL//8S0H6yyD3rewhRi6szuxN3X1fnhvJc20Um0/AgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUjKMIYUwl4HD6yOgMN9Ch+yW5n5gwHwYDVR0j BBgwFoAUxVKLGIDRo8QJ95mX5Cb5d1lrPgEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTVjZTM2ZGUtZjkyMS00Mjc0LTg0OTctMjk4N2Q5MDk1NDNlLzAvQzU1MjhCMTg4 MEQxQTNDNDA5Rjc5OTk3RTQyNkY5Nzc1OTZCM0UwMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DNTUyOEIxODgwRDFBM0M0MDlGNzk5OTdFNDI2Rjk3NzU5NkIz RTAxLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzU1Y2UzNmRlLWY5MjEtNDI3NC04 NDk3LTI5ODdkOTA5NTQzZS8wLzMxMzIzMzJlMzIzMzMxMmUzMjMwMzMyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzMzODM0MzEucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAB758swDQYJ KoZIhvcNAQELBQADggEBAHeebwKFUs44Xjy/bA5YIow9IOxFe5YO+94HF5pKS0IV JoCLbJ6oeUgv8bvekWUcP0M2z6qhHSaBd92qphU9GyScISnZLF0xIWZuUo5PyFVH E7Z+rBaW5RhsZkk6OQ8PgDFk3Uov/sPlCPF4Rr7yF6PY/R9C8Pf0c1ZK1JX9xN4d vMdzc3Oww/cOA3pAJ+yPdaA9YE8wZ7BtRJfkgzB6J9NTc+FHB+fNmWdHHAkJZSru IdeuVnEKiG0P+sSO/Ft6JRoJl5ZNfZgZgV+Qxi/ZkbkzfQmy7abskDdoGMXbYGml Pd7FW2cVI9RodIxELBSUmhLfgXnKmHwNIUA83BYJ0l0= -----END CERTIFICATE-----Generated at Wed May 13 14:27:12 2026 by rpki-client