$ rpki-client -vvf rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/34332e3234302e3233302e302f32342d3234203d3e203538333839.roa File: 34332e3234302e3233302e302f32342d3234203d3e203538333839.roa (raw, json) Hash identifier: UN9e/x05NITVk5DUAmcj4wvEtodCCZvcJBEs1b5VFjo= Subject key identifier: 3A:1E:35:E3:CB:87:0B:7C:71:C5:02:A0:D2:1C:1A:30:15:98:61:4B Certificate issuer: /CN=10DB2C44E26CA2A146EF738D39F53CBB0901DB52 Certificate serial: 773C4EFE44E2CBF86E01D8F5BFC7CE15EC8AADB9 Authority key identifier: 10:DB:2C:44:E2:6C:A2:A1:46:EF:73:8D:39:F5:3C:BB:09:01:DB:52 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/34332e3234302e3233302e302f32342d3234203d3e203538333839.roa Signing time: Sun 03 May 2026 02:36:37 +0000 ROA not before: Sun 03 May 2026 02:31:37 +0000 ROA not after: Sun 02 May 2027 02:36:37 +0000 asID: 58389 IP address blocks: 43.240.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.crl rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 00:10:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:3c:4e:fe:44:e2:cb:f8:6e:01:d8:f5:bf:c7:ce:15:ec:8a:ad:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10DB2C44E26CA2A146EF738D39F53CBB0901DB52 Validity Not Before: May 3 02:31:37 2026 GMT Not After : May 2 02:36:37 2027 GMT Subject: CN=3A1E35E3CB870B7C71C502A0D21C1A301598614B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:2e:32:80:af:7d:f9:3e:12:c3:6a:a5:93:d9: bc:bf:db:18:c8:53:67:ee:aa:98:40:e2:1d:7d:45: 2c:86:0a:d7:8b:aa:d8:64:6f:49:58:71:f7:29:d3: da:af:0c:8f:e8:f8:e7:5f:7b:64:6a:5a:38:5a:06: 14:71:d1:51:2d:f4:b1:5c:26:75:2f:15:a2:8c:57: 4a:96:a3:18:74:4f:e8:92:59:f3:4e:90:20:4e:a7: 2a:f0:c8:0b:09:d1:e0:4a:8e:a2:91:0d:a4:2e:d6: 8d:85:d9:12:87:be:9e:1f:c7:6e:46:d4:b2:a3:2f: 5a:60:03:38:58:ec:06:11:bf:8f:a7:a4:0a:34:d2: 59:cc:b3:99:33:4c:cb:4b:5e:ad:c3:04:e6:e0:8d: 0b:e9:07:12:12:12:7f:57:39:b9:fe:70:20:00:ef: 04:b7:4f:9c:5f:a5:54:f3:99:5e:e8:4e:8f:2a:a8: ff:2a:dc:69:e5:21:4f:7f:0d:0d:84:ab:b3:4e:d7: 5f:32:4b:2a:98:d6:44:fd:61:52:63:63:bd:d2:8e: e0:b9:6c:c0:69:de:9b:46:8f:99:a7:ae:45:fa:9c: d3:4a:78:4f:55:2c:3e:dd:a4:1e:07:82:71:27:04: 92:40:ab:fb:93:dc:f6:fb:f1:1a:54:66:f7:f8:c8: 6a:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:1E:35:E3:CB:87:0B:7C:71:C5:02:A0:D2:1C:1A:30:15:98:61:4B X509v3 Authority Key Identifier: keyid:10:DB:2C:44:E2:6C:A2:A1:46:EF:73:8D:39:F5:3C:BB:09:01:DB:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/34332e3234302e3233302e302f32342d3234203d3e203538333839.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.240.230.0/24 Signature Algorithm: sha256WithRSAEncryption 41:54:6c:12:54:ff:76:19:c2:1d:5e:49:88:9d:6c:64:c9:86: 5f:1e:d2:bb:e4:a4:c6:30:05:9f:bc:f2:c4:ad:09:d5:28:1f: da:07:b5:59:ae:4a:ea:cb:14:e6:cd:18:39:fc:95:a5:bf:90: 56:de:b2:01:50:27:1b:c8:45:f2:44:bd:f4:70:32:a7:ce:96: b3:cf:ea:48:99:a1:b0:f1:ad:2e:20:9d:f7:b0:eb:55:5c:58: 65:65:ca:2a:dc:fa:ae:8c:7b:73:99:b9:c3:ff:a6:ae:44:7b: 09:1e:58:5a:78:dd:5a:b4:ac:6c:99:2e:38:49:01:3d:e2:af: 27:5a:f7:5a:05:d5:3a:5b:6d:01:e3:ca:59:d4:49:ec:99:95: da:46:11:78:bf:0f:43:11:98:f6:1b:b0:8d:0c:da:ab:d1:1b: 97:2c:00:be:85:76:e6:a4:2c:5f:0f:c8:db:bf:95:0f:37:ea: b2:56:bd:57:e5:5e:de:70:f9:2d:a2:3c:09:87:61:86:8d:73: 5f:04:ec:71:68:7c:46:b3:b2:14:c0:31:c3:c7:c1:40:54:60: 50:09:e9:30:4e:8f:57:eb:d4:86:5e:84:f1:e2:31:ec:cb:5b: a9:69:35:a1:e8:a6:96:57:0a:d9:fe:07:ec:71:8b:fb:92:c9: 6a:17:fb:1a -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUdzxO/kTiy/huAdj1v8fOFeyKrbkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTBEQjJDNDRFMjZDQTJBMTQ2RUY3MzhEMzlGNTNDQkIw OTAxREI1MjAeFw0yNjA1MDMwMjMxMzdaFw0yNzA1MDIwMjM2MzdaMDMxMTAvBgNV BAMTKDNBMUUzNUUzQ0I4NzBCN0M3MUM1MDJBMEQyMUMxQTMwMTU5ODYxNEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcLjKAr335PhLDaqWT2by/2xjI U2fuqphA4h19RSyGCteLqthkb0lYcfcp09qvDI/o+Odfe2RqWjhaBhRx0VEt9LFc JnUvFaKMV0qWoxh0T+iSWfNOkCBOpyrwyAsJ0eBKjqKRDaQu1o2F2RKHvp4fx25G 1LKjL1pgAzhY7AYRv4+npAo00lnMs5kzTMtLXq3DBObgjQvpBxISEn9XObn+cCAA 7wS3T5xfpVTzmV7oTo8qqP8q3GnlIU9/DQ2Eq7NO118ySyqY1kT9YVJjY73SjuC5 bMBp3ptGj5mnrkX6nNNKeE9VLD7dpB4HgnEnBJJAq/uT3Pb78RpUZvf4yGpJAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUOh4148uHC3xxxQKg0hwaMBWYYUswHwYDVR0j BBgwFoAUENssROJsoqFG73ONOfU8uwkB21IwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWQyMjdkYmUtNGExYy00MGIwLTk0YTYtNzkzYmRiZGEzNzc3LzAvMTBEQjJDNDRF MjZDQTJBMTQ2RUY3MzhEMzlGNTNDQkIwOTAxREI1Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xMERCMkM0NEUyNkNBMkExNDZFRjczOEQzOUY1M0NCQjA5MDFE QjUyLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzVkMjI3ZGJlLTRhMWMtNDBiMC05 NGE2LTc5M2JkYmRhMzc3Ny8wLzM0MzMyZTMyMzQzMDJlMzIzMzMwMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzUzODMzMzgzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEACvw5jANBgkqhkiG 9w0BAQsFAAOCAQEAQVRsElT/dhnCHV5JiJ1sZMmGXx7Su+SkxjAFn7zyxK0J1Sgf 2ge1Wa5K6ssU5s0YOfyVpb+QVt6yAVAnG8hF8kS99HAyp86Ws8/qSJmhsPGtLiCd 97DrVVxYZWXKKtz6rox7c5m5w/+mrkR7CR5YWnjdWrSsbJkuOEkBPeKvJ1r3WgXV OlttAePKWdRJ7JmV2kYReL8PQxGY9huwjQzaq9EblywAvoV25qQsXw/I27+VDzfq sla9V+Ve3nD5LaI8CYdhho1zXwTscWh8RrOyFMAxw8fBQFRgUAnpME6PV+vUhl6E 8eIx7MtbqWk1oeimllcK2f4H7HGL+5LJahf7Gg== -----END CERTIFICATE-----Generated at Wed May 13 04:17:10 2026 by rpki-client