$ rpki-client -vvf rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/34332e3234302e3232392e302f32342d3234203d3e203538353532.roa File: 34332e3234302e3232392e302f32342d3234203d3e203538353532.roa (raw, json) Hash identifier: klb5avkd9COVXdDQ63wfzX634AT6dliyjYH2qUBahjw= Subject key identifier: 5D:3A:58:BC:24:49:31:D1:10:19:9B:22:CD:EB:08:97:4F:3C:80:F2 Certificate issuer: /CN=10DB2C44E26CA2A146EF738D39F53CBB0901DB52 Certificate serial: 0C1562C8580FC638D02FA00311C696A6FF73D944 Authority key identifier: 10:DB:2C:44:E2:6C:A2:A1:46:EF:73:8D:39:F5:3C:BB:09:01:DB:52 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/34332e3234302e3232392e302f32342d3234203d3e203538353532.roa Signing time: Sun 03 May 2026 02:36:29 +0000 ROA not before: Sun 03 May 2026 02:31:29 +0000 ROA not after: Sun 02 May 2027 02:36:29 +0000 asID: 58552 IP address blocks: 43.240.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.crl rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 00:10:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:15:62:c8:58:0f:c6:38:d0:2f:a0:03:11:c6:96:a6:ff:73:d9:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10DB2C44E26CA2A146EF738D39F53CBB0901DB52 Validity Not Before: May 3 02:31:29 2026 GMT Not After : May 2 02:36:29 2027 GMT Subject: CN=5D3A58BC244931D110199B22CDEB08974F3C80F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:68:43:9d:d9:71:64:e5:89:da:eb:0f:97:71: 44:c1:67:a0:41:4b:c7:fa:01:11:21:e1:24:ea:05: dc:94:e8:38:a6:73:c7:67:e5:5c:f2:c8:26:dd:07: 2f:c9:17:c6:8c:df:a3:d5:22:2d:43:a7:b1:b5:cd: 96:11:4c:f6:da:f4:34:b6:ca:7b:e8:bd:a0:49:32: 16:41:dc:c2:d4:39:54:9c:2f:37:9c:a5:a7:e6:8a: 0b:09:7f:9a:22:7c:1c:e3:94:12:83:74:a3:52:c8: 59:5f:46:ff:c8:22:97:2e:50:77:3e:23:e9:92:1f: a3:fe:2e:53:0e:fc:b0:5e:23:88:f5:d6:b6:5e:65: 36:4e:28:47:4a:87:c3:0c:5d:2f:bf:d4:60:7c:31: da:87:4d:12:d5:68:9e:8c:04:97:e5:51:07:d6:ee: ca:78:3e:66:90:4a:fe:8d:e8:23:2e:24:b6:ed:45: af:a7:55:02:39:49:24:59:1f:5d:b8:f6:08:81:b7: 5e:b2:bf:2e:b4:70:64:9d:19:af:12:b5:a0:3c:a6: 54:15:f0:15:3e:38:c5:4c:ad:00:23:32:ee:01:35: 04:07:64:ae:f2:3d:65:f1:1e:c9:b9:30:94:72:fe: 49:ca:e8:75:52:dc:2f:95:5e:0e:10:96:d0:78:7d: cf:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:3A:58:BC:24:49:31:D1:10:19:9B:22:CD:EB:08:97:4F:3C:80:F2 X509v3 Authority Key Identifier: keyid:10:DB:2C:44:E2:6C:A2:A1:46:EF:73:8D:39:F5:3C:BB:09:01:DB:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/34332e3234302e3232392e302f32342d3234203d3e203538353532.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.240.229.0/24 Signature Algorithm: sha256WithRSAEncryption 7e:52:e3:28:0c:14:95:fa:2a:64:40:a8:26:77:79:0c:a0:f8: ee:9a:4d:df:09:57:b5:19:43:fe:4c:88:d5:76:5f:69:05:2b: 94:81:a1:99:db:d3:6e:ee:c1:9a:80:9d:29:c1:1d:3e:e5:d4: 61:31:39:6a:fd:0b:ab:7a:3f:47:da:38:57:31:b6:e5:2f:0f: df:56:f3:ca:a8:8f:ef:c9:78:4c:cb:9c:7d:74:b3:ae:c4:46: b8:8c:65:17:c8:0a:d5:37:a4:6c:88:a8:bb:71:94:29:7e:a0: 13:87:34:c3:e9:4f:5c:01:b3:c5:9c:71:e9:c5:b3:e4:db:35: ac:74:50:05:c0:0e:12:66:ec:bb:35:7b:7a:5c:2d:49:89:32: 3f:fa:bc:45:d5:83:01:e9:1e:20:0e:ad:a6:dd:74:ae:d2:ed: c9:a3:6c:c2:03:4b:66:62:e0:87:e0:28:50:1b:21:15:01:d4: 6b:3c:b0:cc:e6:ef:f1:65:52:5b:ba:67:99:4e:f6:61:bc:bb: a1:36:6b:d5:75:e8:f8:c3:7f:44:36:cb:79:d1:e0:aa:54:07: 29:8e:ef:14:f4:68:0f:22:09:ca:87:f9:ed:9c:dc:6c:9f:14: a0:b3:8e:c6:2b:83:a4:d3:15:44:2a:49:b5:27:be:11:fd:d4: 1a:7e:10:70 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUDBViyFgPxjjQL6ADEcaWpv9z2UQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTBEQjJDNDRFMjZDQTJBMTQ2RUY3MzhEMzlGNTNDQkIw OTAxREI1MjAeFw0yNjA1MDMwMjMxMjlaFw0yNzA1MDIwMjM2MjlaMDMxMTAvBgNV BAMTKDVEM0E1OEJDMjQ0OTMxRDExMDE5OUIyMkNERUIwODk3NEYzQzgwRjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCMaEOd2XFk5Yna6w+XcUTBZ6BB S8f6AREh4STqBdyU6Dimc8dn5VzyyCbdBy/JF8aM36PVIi1Dp7G1zZYRTPba9DS2 ynvovaBJMhZB3MLUOVScLzecpafmigsJf5oifBzjlBKDdKNSyFlfRv/IIpcuUHc+ I+mSH6P+LlMO/LBeI4j11rZeZTZOKEdKh8MMXS+/1GB8MdqHTRLVaJ6MBJflUQfW 7sp4PmaQSv6N6CMuJLbtRa+nVQI5SSRZH1249giBt16yvy60cGSdGa8StaA8plQV 8BU+OMVMrQAjMu4BNQQHZK7yPWXxHsm5MJRy/knK6HVS3C+VXg4QltB4fc+RAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUXTpYvCRJMdEQGZsizesIl088gPIwHwYDVR0j BBgwFoAUENssROJsoqFG73ONOfU8uwkB21IwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWQyMjdkYmUtNGExYy00MGIwLTk0YTYtNzkzYmRiZGEzNzc3LzAvMTBEQjJDNDRF MjZDQTJBMTQ2RUY3MzhEMzlGNTNDQkIwOTAxREI1Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xMERCMkM0NEUyNkNBMkExNDZFRjczOEQzOUY1M0NCQjA5MDFE QjUyLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzVkMjI3ZGJlLTRhMWMtNDBiMC05 NGE2LTc5M2JkYmRhMzc3Ny8wLzM0MzMyZTMyMzQzMDJlMzIzMjM5MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzUzODM1MzUzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEACvw5TANBgkqhkiG 9w0BAQsFAAOCAQEAflLjKAwUlfoqZECoJnd5DKD47ppN3wlXtRlD/kyI1XZfaQUr lIGhmdvTbu7BmoCdKcEdPuXUYTE5av0Lq3o/R9o4VzG25S8P31bzyqiP78l4TMuc fXSzrsRGuIxlF8gK1TekbIiou3GUKX6gE4c0w+lPXAGzxZxx6cWz5Ns1rHRQBcAO EmbsuzV7elwtSYkyP/q8RdWDAekeIA6tpt10rtLtyaNswgNLZmLgh+AoUBshFQHU azywzObv8WVSW7pnmU72Yby7oTZr1XXo+MN/RDbLedHgqlQHKY7vFPRoDyIJyof5 7ZzcbJ8UoLOOxiuDpNMVRCpJtSe+Ef3UGn4QcA== -----END CERTIFICATE-----Generated at Wed May 13 04:26:04 2026 by rpki-client