$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/3132332e3235332e3233342e302f32342d3234203d3e203137363730.roa File: 3132332e3235332e3233342e302f32342d3234203d3e203137363730.roa (raw, json) Hash identifier: cND9IkoYQx+CLaj+y6Gh0x9QJKJQc+ErI+RneqD6xKo= Subject key identifier: 7E:71:86:F4:63:C6:4E:64:88:66:3A:5B:B9:50:D1:49:2E:50:60:02 Certificate issuer: /CN=70562FBF0E190EE7E1BA063D6E46853A67FFEFAA Certificate serial: 44520072A915B9D7E8E3D34A46870CEB949D333F Authority key identifier: 70:56:2F:BF:0E:19:0E:E7:E1:BA:06:3D:6E:46:85:3A:67:FF:EF:AA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/70562FBF0E190EE7E1BA063D6E46853A67FFEFAA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/3132332e3235332e3233342e302f32342d3234203d3e203137363730.roa Signing time: Tue 08 Sep 2026 06:38:53 +0000 ROA not before: Tue 08 Sep 2026 06:33:53 +0000 ROA not after: Tue 07 Sep 2027 06:38:53 +0000 asID: 17670 IP address blocks: 123.253.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/70562FBF0E190EE7E1BA063D6E46853A67FFEFAA.crl rsync://rpki-rsync.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/70562FBF0E190EE7E1BA063D6E46853A67FFEFAA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/70562FBF0E190EE7E1BA063D6E46853A67FFEFAA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 05:12:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:52:00:72:a9:15:b9:d7:e8:e3:d3:4a:46:87:0c:eb:94:9d:33:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70562FBF0E190EE7E1BA063D6E46853A67FFEFAA Validity Not Before: Sep 8 06:33:53 2026 GMT Not After : Sep 7 06:38:53 2027 GMT Subject: CN=7E7186F463C64E6488663A5BB950D1492E506002 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:52:7a:74:10:e7:51:e9:fe:d1:5a:9a:e1:df: e1:0b:b1:d2:a7:85:a6:20:df:b5:0b:f9:03:fc:c5: f7:3e:f5:27:9e:c3:ef:ef:43:b3:53:57:c3:d6:36: 9d:73:d9:ff:66:29:02:cc:7d:76:d4:90:57:4f:50: c5:ea:5e:7d:1f:25:5a:7a:64:e4:ca:4d:c7:0e:3d: 99:5e:c6:9c:37:80:10:67:88:7e:e2:b0:2d:1f:b5: f1:0d:3b:1f:fd:0c:65:1e:fe:94:ea:62:18:17:ef: ba:22:bb:0c:03:a6:4e:e6:71:d6:e2:27:0f:70:30: d2:2d:d5:7d:2d:f0:60:7e:2f:b8:d2:73:08:a5:8a: 0f:3f:5b:13:25:dd:7c:c6:25:65:ae:44:f4:bb:e8: 3d:e4:5f:dc:0a:30:b3:41:8d:76:61:af:ac:5c:68: 92:fa:6d:08:33:f4:2e:c2:a1:8d:75:89:e0:9d:e0: cf:92:ba:6c:eb:45:86:ed:66:88:cd:9f:64:a9:0a: 40:7b:da:1f:50:72:d1:a0:63:78:26:89:42:8c:05: 47:41:27:db:b0:19:8b:39:37:a5:50:fc:05:bb:f1: a7:c8:3e:b5:38:3e:5c:7e:32:ca:d9:64:b0:ba:ad: f9:34:2d:71:81:0b:b9:48:87:c1:f4:67:e7:8a:49: 45:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:71:86:F4:63:C6:4E:64:88:66:3A:5B:B9:50:D1:49:2E:50:60:02 X509v3 Authority Key Identifier: keyid:70:56:2F:BF:0E:19:0E:E7:E1:BA:06:3D:6E:46:85:3A:67:FF:EF:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/70562FBF0E190EE7E1BA063D6E46853A67FFEFAA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/70562FBF0E190EE7E1BA063D6E46853A67FFEFAA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/3132332e3235332e3233342e302f32342d3234203d3e203137363730.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 123.253.234.0/24 Signature Algorithm: sha256WithRSAEncryption 19:db:5a:e3:4e:4b:79:dc:44:7c:e7:33:d7:79:95:77:c5:10: 6c:a2:a8:8e:f7:c5:2e:f8:c7:68:79:39:6a:ab:79:86:f8:2c: 91:f3:c7:89:9a:a0:0d:94:d8:87:26:23:33:b6:1e:ff:14:3f: 3d:36:0c:17:4a:cd:28:ce:64:3f:33:b5:32:33:7e:02:07:c1: c4:d3:98:bc:db:d5:1f:6d:85:52:eb:05:7e:e4:1a:fe:9c:00: c3:e7:35:ca:97:2d:f8:c2:0c:d7:3d:dc:5d:9b:51:7b:a2:3a: 57:50:d9:ca:9f:d3:b2:e7:e5:fa:ef:98:2d:d6:33:22:59:54: 06:89:3b:e4:b8:37:2b:f9:d8:99:64:c9:dc:06:e0:93:0d:9f: 88:cd:58:a1:ca:26:6d:ac:7d:7a:55:18:79:09:b6:19:d5:34: bd:ea:f8:c8:e0:bb:68:12:03:e4:a7:5b:1a:10:58:2f:1d:c3: 02:b5:c5:db:15:46:9f:14:3b:49:44:7e:db:a6:0b:5d:4e:0f: 13:84:0a:48:d1:25:0a:ca:63:fc:64:1b:19:44:c0:e2:7f:6d: cf:a3:9c:b4:b0:91:52:0c:57:ae:4b:4e:14:dc:07:51:70:68: f5:c0:3e:ac:a4:e0:df:2b:41:11:83:73:31:3c:e6:46:3d:9a: 71:17:15:c9 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIURFIAcqkVudfo49NKRocM65SdMz8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzA1NjJGQkYwRTE5MEVFN0UxQkEwNjNENkU0Njg1M0E2 N0ZGRUZBQTAeFw0yNjA5MDgwNjMzNTNaFw0yNzA5MDcwNjM4NTNaMDMxMTAvBgNV BAMTKDdFNzE4NkY0NjNDNjRFNjQ4ODY2M0E1QkI5NTBEMTQ5MkU1MDYwMDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXUnp0EOdR6f7RWprh3+ELsdKn haYg37UL+QP8xfc+9Seew+/vQ7NTV8PWNp1z2f9mKQLMfXbUkFdPUMXqXn0fJVp6 ZOTKTccOPZlexpw3gBBniH7isC0ftfENOx/9DGUe/pTqYhgX77oiuwwDpk7mcdbi Jw9wMNIt1X0t8GB+L7jScwilig8/WxMl3XzGJWWuRPS76D3kX9wKMLNBjXZhr6xc aJL6bQgz9C7CoY11ieCd4M+SumzrRYbtZojNn2SpCkB72h9QctGgY3gmiUKMBUdB J9uwGYs5N6VQ/AW78afIPrU4Plx+MsrZZLC6rfk0LXGBC7lIh8H0Z+eKSUWTAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUfnGG9GPGTmSIZjpbuVDRSS5QYAIwHwYDVR0j BBgwFoAUcFYvvw4ZDufhugY9bkaFOmf/76owDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWZiMWM4MGMtNGQ2Yy00NDA4LTg5NDctZmJhNmU3YzRiZTdjLzAvNzA1NjJGQkYw RTE5MEVFN0UxQkEwNjNENkU0Njg1M0E2N0ZGRUZBQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83MDU2MkZCRjBFMTkwRUU3RTFCQTA2M0Q2RTQ2ODUzQTY3RkZF RkFBLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzVmYjFjODBjLTRkNmMtNDQwOC04 OTQ3LWZiYTZlN2M0YmU3Yy8wLzMxMzIzMzJlMzIzNTMzMmUzMjMzMzQyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM3MzYzNzMwLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAe/3qMA0GCSqG SIb3DQEBCwUAA4IBAQAZ21rjTkt53ER85zPXeZV3xRBsoqiO98Uu+MdoeTlqq3mG +CyR88eJmqANlNiHJiMzth7/FD89NgwXSs0ozmQ/M7UyM34CB8HE05i829UfbYVS 6wV+5Br+nADD5zXKly34wgzXPdxdm1F7ojpXUNnKn9Oy5+X675gt1jMiWVQGiTvk uDcr+diZZMncBuCTDZ+IzVihyiZtrH16VRh5CbYZ1TS96vjI4LtoEgPkp1saEFgv HcMCtcXbFUafFDtJRH7bpgtdTg8ThApI0SUKymP8ZBsZRMDif23Po5y0sJFSDFeu S04U3AdRcGj1wD6spODfK0ERg3MxPOZGPZpxFxXJ -----END CERTIFICATE-----Generated at Sat Sep 26 16:18:45 2026 by rpki-client