$ rpki-client -vvf rpki-rsync.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/3132352e3231332e3132382e302f31392d3234203d3e2034383030.roa File: 3132352e3231332e3132382e302f31392d3234203d3e2034383030.roa (raw, json) Hash identifier: aOJnQA8BUfuxQfVNSyhFqfhSin0ZYrphjORcdL0q8eg= Subject key identifier: 16:E5:D8:48:52:3B:EB:13:93:59:C8:3C:73:61:02:8A:A9:83:F5:7A Certificate issuer: /CN=C5528B1880D1A3C409F79997E426F977596B3E01 Certificate serial: 42236C3973EFEFE0FCEB6C233B2B66FA794D7DAC Authority key identifier: C5:52:8B:18:80:D1:A3:C4:09:F7:99:97:E4:26:F9:77:59:6B:3E:01 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C5528B1880D1A3C409F79997E426F977596B3E01.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/3132352e3231332e3132382e302f31392d3234203d3e2034383030.roa Signing time: Sun 03 May 2026 02:34:05 +0000 ROA not before: Sun 03 May 2026 02:29:05 +0000 ROA not after: Sun 02 May 2027 02:34:05 +0000 asID: 4800 IP address blocks: 125.213.128.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/C5528B1880D1A3C409F79997E426F977596B3E01.crl rsync://rpki-rsync.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/C5528B1880D1A3C409F79997E426F977596B3E01.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C5528B1880D1A3C409F79997E426F977596B3E01.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 23:29:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:23:6c:39:73:ef:ef:e0:fc:eb:6c:23:3b:2b:66:fa:79:4d:7d:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C5528B1880D1A3C409F79997E426F977596B3E01 Validity Not Before: May 3 02:29:05 2026 GMT Not After : May 2 02:34:05 2027 GMT Subject: CN=16E5D848523BEB139359C83C7361028AA983F57A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:ee:ce:d3:64:b7:26:11:de:c2:52:c3:b2:cb: bb:39:84:7c:19:95:6c:be:72:29:26:4d:54:8e:d5: c5:80:ff:88:63:f6:2d:1d:55:08:f2:8e:36:3a:22: 1b:25:13:30:00:2e:e2:cf:3f:17:07:ba:84:3c:d3: cc:4e:1b:21:81:17:51:40:1d:08:26:24:46:b0:8d: c8:a9:6e:67:25:cf:5d:fa:36:cf:db:22:1b:71:09: 85:07:2a:77:56:4c:38:1f:3b:bb:25:68:9d:ba:af: 3a:e9:13:20:77:5c:88:03:2b:b3:0e:a8:ff:a4:d7: 71:5a:00:e2:69:36:0b:e0:9e:19:2d:f2:21:e2:78: 90:62:82:4e:c6:cd:4e:91:bf:e8:e4:52:a7:13:42: 82:1c:89:00:27:20:4e:21:d8:bd:6c:ce:de:5d:82: d9:94:3b:51:56:14:94:55:fe:35:f3:e9:ab:47:e6: eb:87:5b:79:14:99:ee:b9:79:c4:96:87:de:80:e6: 31:b1:75:21:5a:f8:f4:af:24:21:7c:2d:66:02:8b: ff:9e:1a:21:5e:d3:75:15:08:78:6d:1c:29:f8:39: 00:68:7a:6e:6d:d5:fb:91:bb:f4:32:71:b3:11:df: 02:37:be:5e:2d:a5:49:98:7a:27:eb:80:eb:2c:59: d2:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:E5:D8:48:52:3B:EB:13:93:59:C8:3C:73:61:02:8A:A9:83:F5:7A X509v3 Authority Key Identifier: keyid:C5:52:8B:18:80:D1:A3:C4:09:F7:99:97:E4:26:F9:77:59:6B:3E:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/C5528B1880D1A3C409F79997E426F977596B3E01.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C5528B1880D1A3C409F79997E426F977596B3E01.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/3132352e3231332e3132382e302f31392d3234203d3e2034383030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 125.213.128.0/19 Signature Algorithm: sha256WithRSAEncryption 31:9a:a9:f9:d2:c9:bd:ad:28:8b:7a:30:fc:e9:67:dd:21:98: 5f:ce:0a:50:bf:fa:c1:9a:e5:34:10:33:6a:dd:2d:7d:a8:41: ad:c6:68:06:38:b7:12:58:a2:7f:86:c8:8a:d5:09:7e:bf:7e: 66:df:f5:77:56:84:43:66:f4:a8:52:96:87:33:07:96:21:42: e1:6b:12:5f:60:be:58:4d:71:b2:ac:e0:03:94:fd:84:7e:e2: 21:81:50:e7:6b:19:0b:07:d4:ab:5a:00:8c:ce:2c:f5:a8:aa: b0:17:c4:9d:ce:07:5a:be:27:9d:a2:ec:97:a9:c9:61:11:67: d7:6c:1f:b4:6d:d3:cf:be:40:c0:1c:b1:33:78:9f:77:1b:2a: b0:de:a0:47:11:73:58:c6:8c:5a:fe:68:32:7a:9b:f9:ea:06: 64:21:1a:f4:c2:b5:3d:23:13:aa:7c:aa:32:1d:c3:f5:cb:9f: 43:45:06:0f:d2:dd:63:e8:14:66:bd:89:a8:70:23:f6:e0:d5: f3:b4:67:c6:c9:e7:47:f7:c4:6d:80:ce:59:74:22:60:0a:0f: e9:31:4f:b2:b9:7a:cc:5e:d5:ba:c0:cc:62:42:46:d4:32:79: 26:12:10:ac:3e:d5:0a:4a:5a:39:42:cf:32:1a:53:65:32:f9: 97:28:23:3c -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUQiNsOXPv7+D862wjOytm+nlNfawwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzU1MjhCMTg4MEQxQTNDNDA5Rjc5OTk3RTQyNkY5Nzc1 OTZCM0UwMTAeFw0yNjA1MDMwMjI5MDVaFw0yNzA1MDIwMjM0MDVaMDMxMTAvBgNV BAMTKDE2RTVEODQ4NTIzQkVCMTM5MzU5QzgzQzczNjEwMjhBQTk4M0Y1N0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCL7s7TZLcmEd7CUsOyy7s5hHwZ lWy+cikmTVSO1cWA/4hj9i0dVQjyjjY6IhslEzAALuLPPxcHuoQ808xOGyGBF1FA HQgmJEawjcipbmclz136Ns/bIhtxCYUHKndWTDgfO7slaJ26rzrpEyB3XIgDK7MO qP+k13FaAOJpNgvgnhkt8iHieJBigk7GzU6Rv+jkUqcTQoIciQAnIE4h2L1szt5d gtmUO1FWFJRV/jXz6atH5uuHW3kUme65ecSWh96A5jGxdSFa+PSvJCF8LWYCi/+e GiFe03UVCHhtHCn4OQBoem5t1fuRu/QycbMR3wI3vl4tpUmYeifrgOssWdLXAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUFuXYSFI76xOTWcg8c2ECiqmD9XowHwYDVR0j BBgwFoAUxVKLGIDRo8QJ95mX5Cb5d1lrPgEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTVjZTM2ZGUtZjkyMS00Mjc0LTg0OTctMjk4N2Q5MDk1NDNlLzAvQzU1MjhCMTg4 MEQxQTNDNDA5Rjc5OTk3RTQyNkY5Nzc1OTZCM0UwMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DNTUyOEIxODgwRDFBM0M0MDlGNzk5OTdFNDI2Rjk3NzU5NkIz RTAxLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzU1Y2UzNmRlLWY5MjEtNDI3NC04 NDk3LTI5ODdkOTA5NTQzZS8wLzMxMzIzNTJlMzIzMTMzMmUzMTMyMzgyZTMwMmYz MTM5MmQzMjM0MjAzZDNlMjAzNDM4MzAzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBX3VgDANBgkqhkiG 9w0BAQsFAAOCAQEAMZqp+dLJva0oi3ow/Oln3SGYX84KUL/6wZrlNBAzat0tfahB rcZoBji3Eliif4bIitUJfr9+Zt/1d1aEQ2b0qFKWhzMHliFC4WsSX2C+WE1xsqzg A5T9hH7iIYFQ52sZCwfUq1oAjM4s9aiqsBfEnc4HWr4nnaLsl6nJYRFn12wftG3T z75AwByxM3ifdxsqsN6gRxFzWMaMWv5oMnqb+eoGZCEa9MK1PSMTqnyqMh3D9cuf Q0UGD9LdY+gUZr2JqHAj9uDV87RnxsnnR/fEbYDOWXQiYAoP6TFPsrl6zF7VusDM YkJG1DJ5JhIQrD7VCkpaOULPMhpTZTL5lygjPA== -----END CERTIFICATE-----Generated at Wed May 13 14:03:51 2026 by rpki-client