$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/3132332e3235332e3233332e302f32342d3234203d3e20313937353337.roa File: 3132332e3235332e3233332e302f32342d3234203d3e20313937353337.roa (raw, json) Hash identifier: O5FLNbUlt0ivd4BC3VQEtKA8g1c9yRV5LDB8OAY9HXU= Subject key identifier: 97:CF:36:69:7C:24:BA:1A:CD:0D:71:EA:32:6F:B9:76:4B:FB:6C:90 Certificate issuer: /CN=70562FBF0E190EE7E1BA063D6E46853A67FFEFAA Certificate serial: 0C37A78DF1AE09F41BDAEE4DB25814B0F952089B Authority key identifier: 70:56:2F:BF:0E:19:0E:E7:E1:BA:06:3D:6E:46:85:3A:67:FF:EF:AA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/70562FBF0E190EE7E1BA063D6E46853A67FFEFAA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/3132332e3235332e3233332e302f32342d3234203d3e20313937353337.roa Signing time: Tue 08 Sep 2026 06:34:15 +0000 ROA not before: Tue 08 Sep 2026 06:29:15 +0000 ROA not after: Tue 07 Sep 2027 06:34:15 +0000 asID: 197537 IP address blocks: 123.253.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/70562FBF0E190EE7E1BA063D6E46853A67FFEFAA.crl rsync://rpki-rsync.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/70562FBF0E190EE7E1BA063D6E46853A67FFEFAA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/70562FBF0E190EE7E1BA063D6E46853A67FFEFAA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 Oct 2026 04:21:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:37:a7:8d:f1:ae:09:f4:1b:da:ee:4d:b2:58:14:b0:f9:52:08:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70562FBF0E190EE7E1BA063D6E46853A67FFEFAA Validity Not Before: Sep 8 06:29:15 2026 GMT Not After : Sep 7 06:34:15 2027 GMT Subject: CN=97CF36697C24BA1ACD0D71EA326FB9764BFB6C90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:a3:fa:0a:68:ea:f9:77:2c:62:10:f7:9a:96: 30:ba:3f:eb:7b:b9:26:e3:b6:8e:48:d3:c0:ea:d8: e0:69:30:46:2f:be:39:77:34:d8:c5:c6:f1:47:a9: 46:00:8c:c4:b1:d7:9b:a3:b8:e1:da:aa:b6:5d:42: e9:d9:7b:49:76:49:5c:a8:3c:a8:05:52:23:71:7e: 43:57:69:a9:e3:0e:d7:1c:4f:71:5b:fe:b6:49:08: 92:aa:26:1e:3a:36:84:ad:28:46:19:50:36:5b:7d: df:23:b0:78:54:59:73:d5:15:82:ce:a7:bb:43:3b: a8:32:4e:55:be:6b:f2:f9:c7:1c:e6:bc:8e:b1:08: c9:35:7b:d1:25:8d:a9:8d:1a:ff:a8:76:7b:32:2d: fd:81:ba:61:88:b4:6c:90:51:de:b8:a3:f5:ec:68: 49:16:da:e0:50:86:d9:f2:26:03:97:da:03:87:4e: 6e:0e:7e:3c:09:6b:b9:f4:18:08:a3:46:6f:4e:ee: 05:2d:fd:d6:76:a4:33:e6:e3:bc:9f:88:ba:03:1f: db:98:55:c4:83:6a:19:f3:b9:c0:21:ab:84:66:16: 68:6b:9e:4c:f8:d0:f3:1b:27:15:fb:01:41:47:2f: ae:2d:ce:59:61:a9:cf:63:bf:b6:a5:dd:d2:cf:89: ab:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:CF:36:69:7C:24:BA:1A:CD:0D:71:EA:32:6F:B9:76:4B:FB:6C:90 X509v3 Authority Key Identifier: keyid:70:56:2F:BF:0E:19:0E:E7:E1:BA:06:3D:6E:46:85:3A:67:FF:EF:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/70562FBF0E190EE7E1BA063D6E46853A67FFEFAA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/70562FBF0E190EE7E1BA063D6E46853A67FFEFAA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/3132332e3235332e3233332e302f32342d3234203d3e20313937353337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 123.253.233.0/24 Signature Algorithm: sha256WithRSAEncryption 7a:db:11:7f:77:92:f0:56:94:22:5e:85:73:52:04:e7:0e:8f: 84:39:7d:a4:11:9f:69:1f:8a:64:ea:79:d0:e5:46:91:51:98: 75:42:c6:c8:28:f4:e9:62:3a:8f:4d:34:9e:53:4a:c1:c8:56: 9a:e9:27:34:4d:30:5e:53:9a:c2:39:7c:8e:b8:4e:a8:34:0f: e9:8a:88:01:4c:1d:30:da:8c:7b:bb:09:e1:30:b9:1d:e3:90: b2:cc:af:68:2f:ac:91:bd:b3:22:29:c5:ee:70:7b:55:bd:20: 21:98:e8:d0:ae:54:63:40:57:98:86:00:92:ea:c9:e7:e4:bf: 67:38:71:b6:c3:ad:99:c6:96:5f:83:90:07:d8:f9:92:21:31: 67:d1:88:ea:67:1b:51:22:e2:94:81:a0:69:69:6a:77:1e:99: e5:a1:66:1d:dd:5f:a5:f1:9c:14:99:b5:f1:69:d0:a5:0b:c7: 3c:a7:8e:8a:b8:48:c0:2a:a8:e4:0a:e2:f2:e8:f2:71:e7:3a: db:f3:91:8e:ab:d5:b6:87:3d:3f:28:e5:21:43:ea:23:c4:9f: d4:5a:38:9e:ab:f8:b5:37:95:34:49:91:f5:a0:80:fe:d9:c4: 9a:1c:0a:7d:a5:89:7a:35:2b:58:82:4e:98:35:ea:8f:0a:e5: 43:aa:c8:e7 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUDDenjfGuCfQb2u5NslgUsPlSCJswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzA1NjJGQkYwRTE5MEVFN0UxQkEwNjNENkU0Njg1M0E2 N0ZGRUZBQTAeFw0yNjA5MDgwNjI5MTVaFw0yNzA5MDcwNjM0MTVaMDMxMTAvBgNV BAMTKDk3Q0YzNjY5N0MyNEJBMUFDRDBENzFFQTMyNkZCOTc2NEJGQjZDOTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjo/oKaOr5dyxiEPealjC6P+t7 uSbjto5I08Dq2OBpMEYvvjl3NNjFxvFHqUYAjMSx15ujuOHaqrZdQunZe0l2SVyo PKgFUiNxfkNXaanjDtccT3Fb/rZJCJKqJh46NoStKEYZUDZbfd8jsHhUWXPVFYLO p7tDO6gyTlW+a/L5xxzmvI6xCMk1e9EljamNGv+odnsyLf2BumGItGyQUd64o/Xs aEkW2uBQhtnyJgOX2gOHTm4OfjwJa7n0GAijRm9O7gUt/dZ2pDPm47yfiLoDH9uY VcSDahnzucAhq4RmFmhrnkz40PMbJxX7AUFHL64tzllhqc9jv7al3dLPiavHAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUl882aXwkuhrNDXHqMm+5dkv7bJAwHwYDVR0j BBgwFoAUcFYvvw4ZDufhugY9bkaFOmf/76owDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWZiMWM4MGMtNGQ2Yy00NDA4LTg5NDctZmJhNmU3YzRiZTdjLzAvNzA1NjJGQkYw RTE5MEVFN0UxQkEwNjNENkU0Njg1M0E2N0ZGRUZBQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83MDU2MkZCRjBFMTkwRUU3RTFCQTA2M0Q2RTQ2ODUzQTY3RkZF RkFBLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzVmYjFjODBjLTRkNmMtNDQwOC04 OTQ3LWZiYTZlN2M0YmU3Yy8wLzMxMzIzMzJlMzIzNTMzMmUzMjMzMzMyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM5MzczNTMzMzcucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAB7/ekwDQYJ KoZIhvcNAQELBQADggEBAHrbEX93kvBWlCJehXNSBOcOj4Q5faQRn2kfimTqedDl RpFRmHVCxsgo9OliOo9NNJ5TSsHIVprpJzRNMF5TmsI5fI64Tqg0D+mKiAFMHTDa jHu7CeEwuR3jkLLMr2gvrJG9syIpxe5we1W9ICGY6NCuVGNAV5iGAJLqyefkv2c4 cbbDrZnGll+DkAfY+ZIhMWfRiOpnG1Ei4pSBoGlpancemeWhZh3dX6XxnBSZtfFp 0KULxzynjoq4SMAqqOQK4vLo8nHnOtvzkY6r1baHPT8o5SFD6iPEn9RaOJ6r+LU3 lTRJkfWggP7ZxJocCn2liXo1K1iCTpg16o8K5UOqyOc= -----END CERTIFICATE-----Generated at Sat Oct 10 16:55:35 2026 by rpki-client