$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/3132332e3235332e3233322e302f32342d3234203d3e20313937353337.roa File: 3132332e3235332e3233322e302f32342d3234203d3e20313937353337.roa (raw, json) Hash identifier: xAscsICyofL4lf/JlgWQbrEID5bG/l0KAfIP4/G7jFo= Subject key identifier: 1E:DD:B6:78:AC:DC:65:D8:CD:47:E3:18:B8:B7:95:C0:6C:B7:EC:BD Certificate issuer: /CN=70562FBF0E190EE7E1BA063D6E46853A67FFEFAA Certificate serial: 680CE511618B2D7B3E70E84005BA43D4AC16ABEF Authority key identifier: 70:56:2F:BF:0E:19:0E:E7:E1:BA:06:3D:6E:46:85:3A:67:FF:EF:AA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/70562FBF0E190EE7E1BA063D6E46853A67FFEFAA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/3132332e3235332e3233322e302f32342d3234203d3e20313937353337.roa Signing time: Tue 08 Sep 2026 06:32:08 +0000 ROA not before: Tue 08 Sep 2026 06:27:08 +0000 ROA not after: Tue 07 Sep 2027 06:32:08 +0000 asID: 197537 IP address blocks: 123.253.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/70562FBF0E190EE7E1BA063D6E46853A67FFEFAA.crl rsync://rpki-rsync.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/70562FBF0E190EE7E1BA063D6E46853A67FFEFAA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/70562FBF0E190EE7E1BA063D6E46853A67FFEFAA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 11:54:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:0c:e5:11:61:8b:2d:7b:3e:70:e8:40:05:ba:43:d4:ac:16:ab:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70562FBF0E190EE7E1BA063D6E46853A67FFEFAA Validity Not Before: Sep 8 06:27:08 2026 GMT Not After : Sep 7 06:32:08 2027 GMT Subject: CN=1EDDB678ACDC65D8CD47E318B8B795C06CB7ECBD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:4a:c6:06:be:9e:d0:cb:89:74:61:70:fc:95: 08:2c:39:38:34:37:20:37:36:29:a9:61:74:e3:a6: c2:8f:18:68:79:85:c1:2a:1c:e4:4e:59:ed:32:3f: 84:07:2c:43:07:62:ef:cc:f6:b1:f3:69:ec:1c:76: cf:f5:91:6b:f9:53:24:71:ce:67:53:02:09:c1:b4: c0:3a:20:78:db:09:df:57:18:ba:e6:da:63:e4:a7: f5:a4:d7:63:56:43:5b:27:27:ca:66:3a:67:e6:97: 60:e4:7b:49:e8:18:38:88:96:7e:b5:c7:e6:71:c1: b2:03:9e:aa:be:86:f4:0b:d4:3b:25:b1:73:91:86: f4:23:7d:c1:62:58:84:1a:66:40:4b:ed:0c:a9:9a: 19:6c:3f:6a:d8:6b:4f:72:8e:0c:67:d7:1a:85:ec: 93:a3:58:17:ac:7d:a9:a2:1e:42:eb:45:5b:8f:7f: e6:43:a9:0d:15:43:b4:04:02:be:77:aa:8b:ff:2b: db:c4:61:74:84:df:72:a0:50:1f:30:3d:cf:52:c3: db:26:c2:14:13:f5:6e:c1:a1:d7:bd:88:33:7e:4e: 1f:47:3d:47:f0:99:c6:b9:41:8e:86:2f:65:40:4b: eb:1e:0e:fb:4a:f7:10:c2:d6:77:30:ae:56:4f:61: e0:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:DD:B6:78:AC:DC:65:D8:CD:47:E3:18:B8:B7:95:C0:6C:B7:EC:BD X509v3 Authority Key Identifier: keyid:70:56:2F:BF:0E:19:0E:E7:E1:BA:06:3D:6E:46:85:3A:67:FF:EF:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/70562FBF0E190EE7E1BA063D6E46853A67FFEFAA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/70562FBF0E190EE7E1BA063D6E46853A67FFEFAA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/3132332e3235332e3233322e302f32342d3234203d3e20313937353337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 123.253.232.0/24 Signature Algorithm: sha256WithRSAEncryption 92:62:d4:ed:57:8f:78:2e:c1:2c:b0:4d:26:49:93:86:e1:46: 83:0a:4f:cd:0a:83:04:17:6c:b4:6e:91:86:b7:78:4d:e9:f2: 14:5a:a6:21:4d:c5:5b:9c:88:e0:42:aa:7b:b7:d8:46:70:8a: 62:91:7f:da:4b:0c:3d:d2:27:f2:0e:4d:69:3a:da:4a:17:8d: 4b:85:5e:45:a5:56:af:f9:c5:06:53:ac:f5:8e:6f:c9:09:79: 2a:2c:a5:fa:5a:41:42:39:bd:db:f0:b2:ae:89:57:bb:d7:fe: 6a:1c:d1:d8:89:8b:e8:31:32:f0:a5:7f:d6:a3:5f:6b:94:7a: cf:70:c6:d3:62:66:56:f4:c9:1c:83:ca:ca:af:00:f0:cf:07: 61:0b:eb:66:fe:f2:39:76:fb:e4:a1:4e:8e:df:93:b0:ed:40: bc:0d:60:56:c0:86:0c:dd:89:46:1f:41:d3:95:1a:04:1d:cf: 66:52:b3:51:66:b5:b2:94:dd:4a:51:e4:c6:63:b6:c6:db:2b: 84:18:72:b8:da:9f:51:79:3e:c1:43:9f:f0:26:41:39:b0:2e: 20:65:cd:c5:63:5a:f6:cd:91:01:e0:af:04:8b:6c:cf:cb:c0: 34:35:5b:2a:fe:71:1e:7c:73:78:f7:c7:b3:eb:42:7b:59:1b: 33:63:6a:7d -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUaAzlEWGLLXs+cOhABbpD1KwWq+8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzA1NjJGQkYwRTE5MEVFN0UxQkEwNjNENkU0Njg1M0E2 N0ZGRUZBQTAeFw0yNjA5MDgwNjI3MDhaFw0yNzA5MDcwNjMyMDhaMDMxMTAvBgNV BAMTKDFFRERCNjc4QUNEQzY1RDhDRDQ3RTMxOEI4Qjc5NUMwNkNCN0VDQkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtSsYGvp7Qy4l0YXD8lQgsOTg0 NyA3NimpYXTjpsKPGGh5hcEqHOROWe0yP4QHLEMHYu/M9rHzaewcds/1kWv5UyRx zmdTAgnBtMA6IHjbCd9XGLrm2mPkp/Wk12NWQ1snJ8pmOmfml2Dke0noGDiIln61 x+ZxwbIDnqq+hvQL1DslsXORhvQjfcFiWIQaZkBL7QypmhlsP2rYa09yjgxn1xqF 7JOjWBesfamiHkLrRVuPf+ZDqQ0VQ7QEAr53qov/K9vEYXSE33KgUB8wPc9Sw9sm whQT9W7Bode9iDN+Th9HPUfwmca5QY6GL2VAS+seDvtK9xDC1ncwrlZPYeBjAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUHt22eKzcZdjNR+MYuLeVwGy37L0wHwYDVR0j BBgwFoAUcFYvvw4ZDufhugY9bkaFOmf/76owDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWZiMWM4MGMtNGQ2Yy00NDA4LTg5NDctZmJhNmU3YzRiZTdjLzAvNzA1NjJGQkYw RTE5MEVFN0UxQkEwNjNENkU0Njg1M0E2N0ZGRUZBQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83MDU2MkZCRjBFMTkwRUU3RTFCQTA2M0Q2RTQ2ODUzQTY3RkZF RkFBLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzVmYjFjODBjLTRkNmMtNDQwOC04 OTQ3LWZiYTZlN2M0YmU3Yy8wLzMxMzIzMzJlMzIzNTMzMmUzMjMzMzIyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM5MzczNTMzMzcucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAB7/egwDQYJ KoZIhvcNAQELBQADggEBAJJi1O1Xj3guwSywTSZJk4bhRoMKT80KgwQXbLRukYa3 eE3p8hRapiFNxVuciOBCqnu32EZwimKRf9pLDD3SJ/IOTWk62koXjUuFXkWlVq/5 xQZTrPWOb8kJeSospfpaQUI5vdvwsq6JV7vX/moc0diJi+gxMvClf9ajX2uUes9w xtNiZlb0yRyDysqvAPDPB2EL62b+8jl2++ShTo7fk7DtQLwNYFbAhgzdiUYfQdOV GgQdz2ZSs1FmtbKU3UpR5MZjtsbbK4QYcrjan1F5PsFDn/AmQTmwLiBlzcVjWvbN kQHgrwSLbM/LwDQ1Wyr+cR58c3j3x7PrQntZGzNjan0= -----END CERTIFICATE-----Generated at Mon Sep 28 22:05:12 2026 by rpki-client