$ rpki-client -vvf rpki-rsync.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/3132332e3235332e3233322e302f32322d3234203d3e203137363730.roa File: 3132332e3235332e3233322e302f32322d3234203d3e203137363730.roa (raw, json) Hash identifier: 1pB/Nqd7vJqSwm7DTejyzXpeJQSOjzzPkrlOSeZoqb4= Subject key identifier: DF:F4:20:FC:0D:C6:99:EA:BF:0B:79:BB:69:D2:E6:7C:C1:BA:57:80 Certificate issuer: /CN=70562FBF0E190EE7E1BA063D6E46853A67FFEFAA Certificate serial: 42BB98B244C83193F6EBFDC4EDB8E4B5177A04F8 Authority key identifier: 70:56:2F:BF:0E:19:0E:E7:E1:BA:06:3D:6E:46:85:3A:67:FF:EF:AA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/70562FBF0E190EE7E1BA063D6E46853A67FFEFAA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/3132332e3235332e3233322e302f32322d3234203d3e203137363730.roa Signing time: Sun 03 May 2026 02:37:19 +0000 ROA not before: Sun 03 May 2026 02:32:19 +0000 ROA not after: Sun 02 May 2027 02:37:19 +0000 asID: 17670 IP address blocks: 123.253.232.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/70562FBF0E190EE7E1BA063D6E46853A67FFEFAA.crl rsync://rpki-rsync.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/70562FBF0E190EE7E1BA063D6E46853A67FFEFAA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/70562FBF0E190EE7E1BA063D6E46853A67FFEFAA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 01:28:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:bb:98:b2:44:c8:31:93:f6:eb:fd:c4:ed:b8:e4:b5:17:7a:04:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70562FBF0E190EE7E1BA063D6E46853A67FFEFAA Validity Not Before: May 3 02:32:19 2026 GMT Not After : May 2 02:37:19 2027 GMT Subject: CN=DFF420FC0DC699EABF0B79BB69D2E67CC1BA5780 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:c9:ca:fb:34:9d:41:8b:be:41:d6:4f:6a:43: e1:80:11:ee:ab:7b:26:70:1a:11:0d:93:54:50:a5: fc:54:f9:0e:be:e3:58:d3:f3:cc:44:a1:fa:c2:2e: 0d:ce:61:9f:59:55:8a:5e:fa:9e:fe:c1:30:8a:fb: 86:1d:d4:71:78:c8:f1:0b:53:6c:aa:a6:c1:35:71: c0:76:fb:fa:55:be:40:bb:db:ec:3c:18:a9:3f:17: ca:5b:5b:b1:68:d5:d7:31:b2:9f:42:30:85:93:c6: f4:95:fb:10:82:04:eb:20:ea:67:eb:9e:e9:a9:43: 20:94:f4:1a:b7:0b:cd:07:bf:75:ff:75:29:ed:44: 6b:d1:91:e2:36:e6:6f:c3:dc:0d:7b:01:80:ca:ce: ad:c8:d4:ba:bc:7b:e6:e6:49:52:54:81:56:ea:7e: 8b:04:79:99:7e:33:8e:6f:81:99:f8:96:19:11:22: d9:95:db:d1:d3:3b:38:15:05:8a:2d:4a:a7:ed:b5: 55:07:4a:48:7a:e9:35:d2:9c:8c:fd:99:3a:1c:21: 7e:aa:01:cd:31:05:12:d6:a6:32:e8:c4:8d:92:96: 9a:17:12:26:92:e0:de:e3:c5:a2:ac:02:14:1d:75: 6e:65:81:cd:8b:be:f5:c1:6d:b8:74:b5:29:15:12: b4:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:F4:20:FC:0D:C6:99:EA:BF:0B:79:BB:69:D2:E6:7C:C1:BA:57:80 X509v3 Authority Key Identifier: keyid:70:56:2F:BF:0E:19:0E:E7:E1:BA:06:3D:6E:46:85:3A:67:FF:EF:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/70562FBF0E190EE7E1BA063D6E46853A67FFEFAA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/70562FBF0E190EE7E1BA063D6E46853A67FFEFAA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/3132332e3235332e3233322e302f32322d3234203d3e203137363730.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 123.253.232.0/22 Signature Algorithm: sha256WithRSAEncryption 59:77:37:8f:fc:1b:ab:21:c6:b5:30:fe:89:36:a3:4b:7e:9e: c5:7d:9d:39:d7:ce:1e:cd:17:f0:99:e4:f5:e8:d6:a6:26:b5: 10:e8:0a:0d:46:48:36:e6:26:6b:c4:90:6c:ee:2f:bc:9f:4c: 11:6a:6f:40:89:05:59:14:1e:5a:28:01:2d:9a:61:0f:1c:f9: 3d:ae:17:76:d0:ec:8b:00:93:e5:de:a0:df:10:55:ec:1c:0c: 7a:33:da:80:e0:81:52:47:25:cc:a9:9b:14:1f:ec:3d:a4:2a: 53:db:aa:bd:05:59:04:6d:0c:81:55:6a:50:f1:0b:54:90:b3: 88:25:e4:91:7b:b2:c4:d1:c1:b8:09:a6:f8:49:f5:cd:d1:32: 89:fb:7b:b1:26:d0:a4:c1:fe:a3:64:67:e4:be:c2:8f:95:07: 1f:af:94:ec:65:ed:ea:48:f9:68:5a:50:8a:a3:40:0e:3c:50: cf:46:3e:b5:13:2a:49:ec:08:2c:c9:25:69:3f:b4:a8:d9:d1: 7b:ff:5a:36:18:ba:f6:bf:f4:a2:72:93:d6:cf:76:b7:d8:2d: 46:7a:1b:e0:e9:38:ba:d3:e4:6e:34:54:46:b1:a0:51:ad:90: 27:08:57:9c:cd:56:5f:9e:f9:fb:1d:68:69:2f:40:05:74:36: 01:90:89:77 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUQruYskTIMZP26/3E7bjktRd6BPgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzA1NjJGQkYwRTE5MEVFN0UxQkEwNjNENkU0Njg1M0E2 N0ZGRUZBQTAeFw0yNjA1MDMwMjMyMTlaFw0yNzA1MDIwMjM3MTlaMDMxMTAvBgNV BAMTKERGRjQyMEZDMERDNjk5RUFCRjBCNzlCQjY5RDJFNjdDQzFCQTU3ODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCycr7NJ1Bi75B1k9qQ+GAEe6r eyZwGhENk1RQpfxU+Q6+41jT88xEofrCLg3OYZ9ZVYpe+p7+wTCK+4Yd1HF4yPEL U2yqpsE1ccB2+/pVvkC72+w8GKk/F8pbW7Fo1dcxsp9CMIWTxvSV+xCCBOsg6mfr numpQyCU9Bq3C80Hv3X/dSntRGvRkeI25m/D3A17AYDKzq3I1Lq8e+bmSVJUgVbq fosEeZl+M45vgZn4lhkRItmV29HTOzgVBYotSqfttVUHSkh66TXSnIz9mTocIX6q Ac0xBRLWpjLoxI2SlpoXEiaS4N7jxaKsAhQddW5lgc2LvvXBbbh0tSkVErS5AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU3/Qg/A3Gmeq/C3m7adLmfMG6V4AwHwYDVR0j BBgwFoAUcFYvvw4ZDufhugY9bkaFOmf/76owDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWZiMWM4MGMtNGQ2Yy00NDA4LTg5NDctZmJhNmU3YzRiZTdjLzAvNzA1NjJGQkYw RTE5MEVFN0UxQkEwNjNENkU0Njg1M0E2N0ZGRUZBQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83MDU2MkZCRjBFMTkwRUU3RTFCQTA2M0Q2RTQ2ODUzQTY3RkZF RkFBLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzVmYjFjODBjLTRkNmMtNDQwOC04 OTQ3LWZiYTZlN2M0YmU3Yy8wLzMxMzIzMzJlMzIzNTMzMmUzMjMzMzIyZTMwMmYz MjMyMmQzMjM0MjAzZDNlMjAzMTM3MzYzNzMwLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCe/3oMA0GCSqG SIb3DQEBCwUAA4IBAQBZdzeP/BurIca1MP6JNqNLfp7FfZ05184ezRfwmeT16Nam JrUQ6AoNRkg25iZrxJBs7i+8n0wRam9AiQVZFB5aKAEtmmEPHPk9rhd20OyLAJPl 3qDfEFXsHAx6M9qA4IFSRyXMqZsUH+w9pCpT26q9BVkEbQyBVWpQ8QtUkLOIJeSR e7LE0cG4Cab4SfXN0TKJ+3uxJtCkwf6jZGfkvsKPlQcfr5TsZe3qSPloWlCKo0AO PFDPRj61EypJ7AgsySVpP7So2dF7/1o2GLr2v/SicpPWz3a32C1Gehvg6Ti60+Ru NFRGsaBRrZAnCFeczVZfnvn7HWhpL0AFdDYBkIl3 -----END CERTIFICATE-----Generated at Wed May 13 14:58:18 2026 by rpki-client