$ rpki-client -vvf rpki-rsync.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/34332e3233302e3135322e302f32322d3234203d3e203435373235.roa File: 34332e3233302e3135322e302f32322d3234203d3e203435373235.roa (raw, json) Hash identifier: 3lprK3TbantSlCD/hixxy+KCVWArYOFQdzp74g5ehZQ= Subject key identifier: 1F:FE:B0:22:06:D4:84:81:5D:7C:A4:1B:BC:B3:5C:AD:2F:FA:78:F7 Certificate issuer: /CN=62258C46C7EEF9427331E24A2D1EB9B699C68A9E Certificate serial: 773F666E56920EF74347A0791BC417395B7F4FCA Authority key identifier: 62:25:8C:46:C7:EE:F9:42:73:31:E2:4A:2D:1E:B9:B6:99:C6:8A:9E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/62258C46C7EEF9427331E24A2D1EB9B699C68A9E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/34332e3233302e3135322e302f32322d3234203d3e203435373235.roa Signing time: Sun 03 May 2026 02:39:15 +0000 ROA not before: Sun 03 May 2026 02:34:15 +0000 ROA not after: Sun 02 May 2027 02:39:15 +0000 asID: 45725 IP address blocks: 43.230.152.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/62258C46C7EEF9427331E24A2D1EB9B699C68A9E.crl rsync://rpki-rsync.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/62258C46C7EEF9427331E24A2D1EB9B699C68A9E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/62258C46C7EEF9427331E24A2D1EB9B699C68A9E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 17:03:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:3f:66:6e:56:92:0e:f7:43:47:a0:79:1b:c4:17:39:5b:7f:4f:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62258C46C7EEF9427331E24A2D1EB9B699C68A9E Validity Not Before: May 3 02:34:15 2026 GMT Not After : May 2 02:39:15 2027 GMT Subject: CN=1FFEB02206D484815D7CA41BBCB35CAD2FFA78F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:1f:3d:c4:4a:a3:57:85:ca:1d:4f:e7:c5:25: e9:f4:0f:02:1b:29:57:b5:93:59:e7:ef:df:02:cc: 9e:dc:55:58:fc:c1:2c:04:49:35:d3:aa:be:37:b0: 47:ef:4f:24:c0:b0:e4:8c:0c:3d:fc:ce:80:cc:b5: b4:ef:f8:ce:39:49:dd:34:de:e7:aa:ed:ce:52:cb: e3:4f:45:2f:86:cf:fb:fd:62:08:aa:d9:2f:0c:3d: 96:88:9a:16:a5:23:22:10:cf:fa:56:14:06:b7:a6: 24:e9:5c:84:27:ab:1a:32:f5:45:5f:58:3d:9a:06: 10:68:e6:ec:39:c9:ec:3c:7d:7e:a1:ea:d0:2d:8e: 51:be:41:0f:86:4e:8e:09:2b:18:d7:6b:22:29:b3: d3:74:10:b0:bf:62:72:fb:66:eb:a5:af:4c:f8:1e: 8b:68:b2:8a:74:2d:11:d9:bf:de:db:f9:13:ea:4d: 5c:37:e9:ca:bb:d2:6c:f2:46:20:0a:43:67:82:23: 7e:45:eb:9a:4d:a4:3a:ab:aa:a4:76:2d:2e:23:14: be:9c:9f:72:f3:5c:21:b3:cb:12:c1:91:6d:95:30: 4b:cb:c5:d2:39:c3:0d:2a:0d:19:58:6f:2a:4c:d7: 09:2c:03:53:a4:14:13:df:20:c7:7a:b0:83:8d:65: b2:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:FE:B0:22:06:D4:84:81:5D:7C:A4:1B:BC:B3:5C:AD:2F:FA:78:F7 X509v3 Authority Key Identifier: keyid:62:25:8C:46:C7:EE:F9:42:73:31:E2:4A:2D:1E:B9:B6:99:C6:8A:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/62258C46C7EEF9427331E24A2D1EB9B699C68A9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/62258C46C7EEF9427331E24A2D1EB9B699C68A9E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/34332e3233302e3135322e302f32322d3234203d3e203435373235.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.230.152.0/22 Signature Algorithm: sha256WithRSAEncryption a3:63:15:5a:89:ea:1a:46:b2:d5:9e:66:a8:f7:a9:a8:09:6a: e5:f0:3c:be:f1:3c:a6:01:1f:da:58:8e:56:96:06:6e:f1:aa: a8:ba:a1:13:34:b4:0d:d7:4a:c2:84:dc:eb:cd:68:8d:3c:7b: 14:eb:c7:7b:93:72:9a:97:56:e3:e3:e3:0d:89:42:85:89:3f: 53:ce:a5:7f:62:a8:85:37:58:b9:a2:0b:37:6b:7f:02:43:35: 0d:38:8b:d2:23:6d:a8:c5:6d:dc:56:2a:af:c7:f9:a3:02:33: 98:93:8e:f5:ef:7e:f3:61:2e:b6:c1:b9:a3:3a:c6:bc:b8:93: 0d:86:20:61:dd:8a:d5:e7:03:b1:b9:72:89:ab:2c:72:88:6b: 58:4d:37:a3:59:40:63:be:40:8c:65:92:d3:ab:99:90:0d:8a: 62:e3:8f:05:91:94:d9:10:42:a2:27:7b:43:75:d4:e9:f6:38: 24:0a:d8:dc:bf:ef:cb:1b:9b:c0:ae:9c:2c:b0:20:5e:55:d5: 07:e9:7a:f1:cb:92:5e:6f:6e:41:4f:83:4d:e9:8e:be:62:b8: 62:38:15:13:58:65:cc:22:ec:70:fd:1a:35:2a:f5:74:d8:3e: 8e:d8:d4:d9:88:2a:94:b5:6f:bc:8b:96:bd:0f:34:b3:49:c8: 7a:8a:4c:f7 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUdz9mblaSDvdDR6B5G8QXOVt/T8owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjIyNThDNDZDN0VFRjk0MjczMzFFMjRBMkQxRUI5QjY5 OUM2OEE5RTAeFw0yNjA1MDMwMjM0MTVaFw0yNzA1MDIwMjM5MTVaMDMxMTAvBgNV BAMTKDFGRkVCMDIyMDZENDg0ODE1RDdDQTQxQkJDQjM1Q0FEMkZGQTc4RjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhHz3ESqNXhcodT+fFJen0DwIb KVe1k1nn798CzJ7cVVj8wSwESTXTqr43sEfvTyTAsOSMDD38zoDMtbTv+M45Sd00 3ueq7c5Sy+NPRS+Gz/v9Ygiq2S8MPZaImhalIyIQz/pWFAa3piTpXIQnqxoy9UVf WD2aBhBo5uw5yew8fX6h6tAtjlG+QQ+GTo4JKxjXayIps9N0ELC/YnL7Zuulr0z4 Hotosop0LRHZv97b+RPqTVw36cq70mzyRiAKQ2eCI35F65pNpDqrqqR2LS4jFL6c n3LzXCGzyxLBkW2VMEvLxdI5ww0qDRlYbypM1wksA1OkFBPfIMd6sIONZbLBAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUH/6wIgbUhIFdfKQbvLNcrS/6ePcwHwYDVR0j BBgwFoAUYiWMRsfu+UJzMeJKLR65tpnGip4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjQ0MjE2ZDgtNzBjZS00OTA4LWE3MmItZWMyNzNmNDNiYmMyLzAvNjIyNThDNDZD N0VFRjk0MjczMzFFMjRBMkQxRUI5QjY5OUM2OEE5RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82MjI1OEM0NkM3RUVGOTQyNzMzMUUyNEEyRDFFQjlCNjk5QzY4 QTlFLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzY0NDIxNmQ4LTcwY2UtNDkwOC1h NzJiLWVjMjczZjQzYmJjMi8wLzM0MzMyZTMyMzMzMDJlMzEzNTMyMmUzMDJmMzIz MjJkMzIzNDIwM2QzZTIwMzQzNTM3MzIzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAivmmDANBgkqhkiG 9w0BAQsFAAOCAQEAo2MVWonqGkay1Z5mqPepqAlq5fA8vvE8pgEf2liOVpYGbvGq qLqhEzS0DddKwoTc681ojTx7FOvHe5NympdW4+PjDYlChYk/U86lf2KohTdYuaIL N2t/AkM1DTiL0iNtqMVt3FYqr8f5owIzmJOO9e9+82EutsG5ozrGvLiTDYYgYd2K 1ecDsblyiasscohrWE03o1lAY75AjGWS06uZkA2KYuOPBZGU2RBCoid7Q3XU6fY4 JArY3L/vyxubwK6cLLAgXlXVB+l68cuSXm9uQU+DTemOvmK4YjgVE1hlzCLscP0a NSr1dNg+jtjU2YgqlLVvvIuWvQ80s0nIeopM9w== -----END CERTIFICATE-----Generated at Wed May 13 05:58:20 2026 by rpki-client