$ rpki-client -vvf rpki-rsync.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/3231302e35372e3231312e302f32342d3234203d3e203338313432.roa File: 3231302e35372e3231312e302f32342d3234203d3e203338313432.roa (raw, json) Hash identifier: S43umrQnayZCpSzQYIAmH2LGDnCAWJ6VcBOOrq/ns7Y= Subject key identifier: 57:D7:C3:42:92:9C:E8:2D:54:81:1F:68:2F:18:78:64:A3:EA:F7:9D Certificate issuer: /CN=3D090A1BCE9471798EE6D079EEC0726ECA9A0187 Certificate serial: 212A7C67C33A049AE657B9BAD4DBBF6C9847C99F Authority key identifier: 3D:09:0A:1B:CE:94:71:79:8E:E6:D0:79:EE:C0:72:6E:CA:9A:01:87 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3D090A1BCE9471798EE6D079EEC0726ECA9A0187.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/3231302e35372e3231312e302f32342d3234203d3e203338313432.roa Signing time: Sun 03 May 2026 02:37:37 +0000 ROA not before: Sun 03 May 2026 02:32:37 +0000 ROA not after: Sun 02 May 2027 02:37:37 +0000 asID: 38142 IP address blocks: 210.57.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/3D090A1BCE9471798EE6D079EEC0726ECA9A0187.crl rsync://rpki-rsync.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/3D090A1BCE9471798EE6D079EEC0726ECA9A0187.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3D090A1BCE9471798EE6D079EEC0726ECA9A0187.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 21:18:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:2a:7c:67:c3:3a:04:9a:e6:57:b9:ba:d4:db:bf:6c:98:47:c9:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D090A1BCE9471798EE6D079EEC0726ECA9A0187 Validity Not Before: May 3 02:32:37 2026 GMT Not After : May 2 02:37:37 2027 GMT Subject: CN=57D7C342929CE82D54811F682F187864A3EAF79D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:82:f2:3c:42:fe:19:8e:da:94:e1:ab:a4:8d: ac:9e:ca:06:65:80:5e:7a:bc:04:14:8e:14:cc:48: ff:5b:c5:e3:85:fc:ea:f3:19:1d:47:b9:4e:23:1a: c1:d1:84:7f:70:c8:83:c2:13:f3:4c:7b:55:fd:b4: 64:76:30:07:43:29:89:60:ca:2e:c0:39:31:2f:82: d7:24:af:1a:d0:49:99:9e:5a:b9:0e:f5:a9:7a:2c: 89:78:f4:3d:a6:cc:3b:26:14:fb:7d:60:24:a3:41: cc:d3:40:9b:a1:43:d4:20:5a:1e:30:dc:2c:98:8e: 50:fb:46:3b:3a:97:3f:b9:99:b7:87:f3:3a:91:2e: f0:7f:70:60:30:82:e8:9a:01:00:c7:40:33:c5:f3: 20:0a:65:b2:bb:ad:cc:2a:01:a8:70:e3:7f:47:d3: af:07:05:d4:39:8b:89:88:67:c5:46:ec:4c:b8:b6: ad:d3:54:75:23:66:69:eb:b5:c6:5f:5b:dd:2c:09: 32:43:40:04:1a:89:3c:b3:62:04:4c:38:45:5b:67: dc:d4:83:c9:9f:81:31:21:73:2c:15:2c:ef:39:ed: 36:10:aa:77:66:90:5c:13:b9:10:e2:f6:74:aa:db: e1:2e:ce:8d:1e:c6:e9:27:d6:b0:cf:a1:a1:53:ac: 85:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:D7:C3:42:92:9C:E8:2D:54:81:1F:68:2F:18:78:64:A3:EA:F7:9D X509v3 Authority Key Identifier: keyid:3D:09:0A:1B:CE:94:71:79:8E:E6:D0:79:EE:C0:72:6E:CA:9A:01:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/3D090A1BCE9471798EE6D079EEC0726ECA9A0187.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3D090A1BCE9471798EE6D079EEC0726ECA9A0187.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/3231302e35372e3231312e302f32342d3234203d3e203338313432.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 210.57.211.0/24 Signature Algorithm: sha256WithRSAEncryption 55:47:b4:cd:ed:86:38:af:a5:d4:cc:11:47:3d:b8:85:47:71: 96:7e:e8:94:b4:ad:e3:57:b0:49:ac:b5:4c:71:6a:5a:00:ea: b7:bb:31:a2:cb:ee:b6:8e:54:c0:c4:66:cb:f9:9f:82:23:5a: 75:b4:91:8c:0e:74:5d:11:e0:8a:55:8c:27:5f:99:06:70:7a: 84:cb:d6:67:d2:25:ff:86:a0:99:b1:c5:61:8b:83:aa:6b:68: f2:6f:82:6d:ae:da:fb:df:9f:98:2f:1a:b6:11:45:26:93:57: 0c:df:56:25:a9:f0:a4:7e:43:2d:0b:ff:fd:9b:68:fb:1b:e7: bd:55:48:fd:37:ba:fb:c8:af:14:08:24:0a:c2:a4:11:83:b2: 7d:2b:b0:4c:2f:a7:69:d7:7f:75:ac:c0:ec:cc:53:3e:3e:9d: 8f:fd:be:ff:ec:91:e5:ea:ec:c5:71:5b:39:3a:35:ba:0d:8c: 30:e7:a8:83:ae:df:1f:f5:e9:da:cf:cc:f3:6f:59:b7:8f:39: 6d:66:c0:88:19:35:37:14:4f:c3:9a:13:98:02:64:bc:35:ab: b0:25:99:95:c0:cd:4f:09:f4:d6:fd:53:f1:ca:2b:34:b8:f7: 06:1f:0a:18:cd:e4:c3:91:2f:59:db:c0:0e:d0:be:af:c3:46: cb:a6:47:0e -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUISp8Z8M6BJrmV7m61Nu/bJhHyZ8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0QwOTBBMUJDRTk0NzE3OThFRTZEMDc5RUVDMDcyNkVD QTlBMDE4NzAeFw0yNjA1MDMwMjMyMzdaFw0yNzA1MDIwMjM3MzdaMDMxMTAvBgNV BAMTKDU3RDdDMzQyOTI5Q0U4MkQ1NDgxMUY2ODJGMTg3ODY0QTNFQUY3OUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDagvI8Qv4ZjtqU4aukjayeygZl gF56vAQUjhTMSP9bxeOF/OrzGR1HuU4jGsHRhH9wyIPCE/NMe1X9tGR2MAdDKYlg yi7AOTEvgtckrxrQSZmeWrkO9al6LIl49D2mzDsmFPt9YCSjQczTQJuhQ9QgWh4w 3CyYjlD7Rjs6lz+5mbeH8zqRLvB/cGAwguiaAQDHQDPF8yAKZbK7rcwqAahw439H 068HBdQ5i4mIZ8VG7Ey4tq3TVHUjZmnrtcZfW90sCTJDQAQaiTyzYgRMOEVbZ9zU g8mfgTEhcywVLO857TYQqndmkFwTuRDi9nSq2+Euzo0exukn1rDPoaFTrIXTAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUV9fDQpKc6C1UgR9oLxh4ZKPq950wHwYDVR0j BBgwFoAUPQkKG86UcXmO5tB57sBybsqaAYcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjA4YjI5NTktMWMyNS00NmEwLTg5ZDEtZjc3ZDVjNDc0NjkxLzAvM0QwOTBBMUJD RTk0NzE3OThFRTZEMDc5RUVDMDcyNkVDQTlBMDE4Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zRDA5MEExQkNFOTQ3MTc5OEVFNkQwNzlFRUMwNzI2RUNBOUEw MTg3LmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzYwOGIyOTU5LTFjMjUtNDZhMC04 OWQxLWY3N2Q1YzQ3NDY5MS8wLzMyMzEzMDJlMzUzNzJlMzIzMTMxMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzMzODMxMzQzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANI50zANBgkqhkiG 9w0BAQsFAAOCAQEAVUe0ze2GOK+l1MwRRz24hUdxln7olLSt41ewSay1THFqWgDq t7sxosvuto5UwMRmy/mfgiNadbSRjA50XRHgilWMJ1+ZBnB6hMvWZ9Il/4agmbHF YYuDqmto8m+Cba7a+9+fmC8athFFJpNXDN9WJanwpH5DLQv//Zto+xvnvVVI/Te6 +8ivFAgkCsKkEYOyfSuwTC+nadd/dazA7MxTPj6dj/2+/+yR5ersxXFbOTo1ug2M MOeog67fH/Xp2s/M829Zt485bWbAiBk1NxRPw5oTmAJkvDWrsCWZlcDNTwn01v1T 8corNLj3Bh8KGM3kw5EvWdvADtC+r8NGy6ZHDg== -----END CERTIFICATE-----Generated at Wed May 13 14:34:24 2026 by rpki-client