$ rpki-client -vvf rpki-rsync.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/3231302e35372e3231372e302f32342d3234203d3e203338313432.roa File: 3231302e35372e3231372e302f32342d3234203d3e203338313432.roa (raw, json) Hash identifier: mUUIB+/mtgQYA4ZJFgHA5FD7YbXkeVVQm5wqTm9otqY= Subject key identifier: 78:21:30:DF:F3:5D:B7:9E:22:14:96:40:39:4D:65:18:EE:F3:3E:F9 Certificate issuer: /CN=3D090A1BCE9471798EE6D079EEC0726ECA9A0187 Certificate serial: 1BB08C58BB22F650A8D0F255819CB2AFD5898AB5 Authority key identifier: 3D:09:0A:1B:CE:94:71:79:8E:E6:D0:79:EE:C0:72:6E:CA:9A:01:87 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3D090A1BCE9471798EE6D079EEC0726ECA9A0187.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/3231302e35372e3231372e302f32342d3234203d3e203338313432.roa Signing time: Sun 03 May 2026 02:37:40 +0000 ROA not before: Sun 03 May 2026 02:32:40 +0000 ROA not after: Sun 02 May 2027 02:37:40 +0000 asID: 38142 IP address blocks: 210.57.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/3D090A1BCE9471798EE6D079EEC0726ECA9A0187.crl rsync://rpki-rsync.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/3D090A1BCE9471798EE6D079EEC0726ECA9A0187.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3D090A1BCE9471798EE6D079EEC0726ECA9A0187.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 21:18:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:b0:8c:58:bb:22:f6:50:a8:d0:f2:55:81:9c:b2:af:d5:89:8a:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D090A1BCE9471798EE6D079EEC0726ECA9A0187 Validity Not Before: May 3 02:32:40 2026 GMT Not After : May 2 02:37:40 2027 GMT Subject: CN=782130DFF35DB79E22149640394D6518EEF33EF9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:92:24:b9:e6:61:6e:fb:02:56:3b:88:09:3a: 6a:c0:5e:89:a8:5d:33:5a:cc:ca:1c:2b:81:f7:dc: e8:1d:33:1a:d6:91:56:63:72:c8:6f:fc:9d:7e:38: d4:30:ed:6d:2f:a8:89:71:60:3d:2c:49:9e:40:a1: 4c:ff:9e:ab:9e:a9:66:51:e5:77:0d:c3:bc:f8:c5: 78:c4:d3:60:b2:f0:09:1d:82:ae:c3:c6:4e:b2:bc: 2e:2d:d4:31:32:ac:b6:dc:bf:b0:16:49:e6:1c:a9: 3c:2d:ab:e6:bc:72:05:13:e7:13:34:6c:2f:83:17: 28:39:cb:cf:cf:44:78:32:81:bf:30:e1:7e:4e:f6: 0b:d5:af:bf:62:c1:7c:00:dd:0f:29:c6:d0:49:54: c7:b6:62:9e:51:99:36:ec:7c:da:70:5d:a0:77:c9: 36:b9:68:c0:2f:06:f9:40:73:64:da:1c:ef:14:64: 60:26:01:31:51:72:b2:e4:09:08:bc:40:49:4c:af: f2:94:fe:19:99:6a:9e:7a:b5:7b:72:e0:b1:f2:e0: d1:25:f7:b8:bb:50:51:f1:be:88:cf:81:45:6c:53: 74:f5:1b:7a:0e:8c:2b:36:bf:1e:11:4a:e3:c6:c0: 75:3a:21:2f:ee:d5:e8:0c:33:15:79:85:15:2c:2f: 52:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:21:30:DF:F3:5D:B7:9E:22:14:96:40:39:4D:65:18:EE:F3:3E:F9 X509v3 Authority Key Identifier: keyid:3D:09:0A:1B:CE:94:71:79:8E:E6:D0:79:EE:C0:72:6E:CA:9A:01:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/3D090A1BCE9471798EE6D079EEC0726ECA9A0187.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3D090A1BCE9471798EE6D079EEC0726ECA9A0187.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/3231302e35372e3231372e302f32342d3234203d3e203338313432.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 210.57.217.0/24 Signature Algorithm: sha256WithRSAEncryption a6:fc:a7:eb:b0:07:12:7c:b3:05:65:1c:b8:fc:67:42:67:0a: 7b:44:b5:66:60:90:f2:e7:f9:ef:cc:69:54:f8:db:27:34:05: 92:59:f4:24:50:5a:ee:d6:60:6f:fa:14:ba:21:a5:dd:ff:eb: 1b:d6:4e:8c:94:69:99:06:6b:84:39:00:a3:c7:85:54:c1:07: 69:49:5d:69:17:8e:0e:c4:2f:a9:91:96:44:71:2d:23:7d:80: ab:a9:ab:e0:d8:14:85:01:b9:e2:7d:6a:be:bb:92:4a:1f:72: c4:3d:bc:c6:b1:0c:23:68:ab:0a:f0:27:56:05:e9:14:c2:ad: c0:cc:42:35:97:6a:89:64:45:c0:d1:60:24:5f:7c:d0:cf:2d: 99:fd:b9:9a:96:a1:f8:bf:c0:31:c6:89:20:88:ee:19:e9:40: 22:a7:bd:fa:58:6c:87:84:92:dd:f3:80:45:28:16:6a:4e:ed: d0:1d:47:1d:7d:e9:6a:58:8f:5c:c0:29:96:07:5d:3c:da:86: 4d:01:0b:67:78:41:8b:cf:b6:ef:9c:5b:1e:61:4d:d9:6d:e4: 56:28:06:42:e4:96:42:a1:0f:1d:ec:fc:37:27:58:34:6e:86: dd:eb:58:11:60:8b:6c:b8:28:76:df:81:77:99:91:0f:73:aa: b3:7d:1b:34 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUG7CMWLsi9lCo0PJVgZyyr9WJirUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0QwOTBBMUJDRTk0NzE3OThFRTZEMDc5RUVDMDcyNkVD QTlBMDE4NzAeFw0yNjA1MDMwMjMyNDBaFw0yNzA1MDIwMjM3NDBaMDMxMTAvBgNV BAMTKDc4MjEzMERGRjM1REI3OUUyMjE0OTY0MDM5NEQ2NTE4RUVGMzNFRjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHkiS55mFu+wJWO4gJOmrAXomo XTNazMocK4H33OgdMxrWkVZjcshv/J1+ONQw7W0vqIlxYD0sSZ5AoUz/nqueqWZR 5XcNw7z4xXjE02Cy8Akdgq7Dxk6yvC4t1DEyrLbcv7AWSeYcqTwtq+a8cgUT5xM0 bC+DFyg5y8/PRHgygb8w4X5O9gvVr79iwXwA3Q8pxtBJVMe2Yp5RmTbsfNpwXaB3 yTa5aMAvBvlAc2TaHO8UZGAmATFRcrLkCQi8QElMr/KU/hmZap56tXty4LHy4NEl 97i7UFHxvojPgUVsU3T1G3oOjCs2vx4RSuPGwHU6IS/u1egMMxV5hRUsL1L5AgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUeCEw3/Ndt54iFJZAOU1lGO7zPvkwHwYDVR0j BBgwFoAUPQkKG86UcXmO5tB57sBybsqaAYcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjA4YjI5NTktMWMyNS00NmEwLTg5ZDEtZjc3ZDVjNDc0NjkxLzAvM0QwOTBBMUJD RTk0NzE3OThFRTZEMDc5RUVDMDcyNkVDQTlBMDE4Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zRDA5MEExQkNFOTQ3MTc5OEVFNkQwNzlFRUMwNzI2RUNBOUEw MTg3LmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzYwOGIyOTU5LTFjMjUtNDZhMC04 OWQxLWY3N2Q1YzQ3NDY5MS8wLzMyMzEzMDJlMzUzNzJlMzIzMTM3MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzMzODMxMzQzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANI52TANBgkqhkiG 9w0BAQsFAAOCAQEApvyn67AHEnyzBWUcuPxnQmcKe0S1ZmCQ8uf578xpVPjbJzQF kln0JFBa7tZgb/oUuiGl3f/rG9ZOjJRpmQZrhDkAo8eFVMEHaUldaReODsQvqZGW RHEtI32Aq6mr4NgUhQG54n1qvruSSh9yxD28xrEMI2irCvAnVgXpFMKtwMxCNZdq iWRFwNFgJF980M8tmf25mpah+L/AMcaJIIjuGelAIqe9+lhsh4SS3fOARSgWak7t 0B1HHX3paliPXMAplgddPNqGTQELZ3hBi8+275xbHmFN2W3kVigGQuSWQqEPHez8 NydYNG6G3etYEWCLbLgodt+Bd5mRD3Oqs30bNA== -----END CERTIFICATE-----Generated at Wed May 13 15:07:12 2026 by rpki-client