$ rpki-client -vvf rpki-rsync.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/3138322e31362e3234392e302f32342d3234203d3e203435323938.roa File: 3138322e31362e3234392e302f32342d3234203d3e203435323938.roa (raw, json) Hash identifier: jVSlw7mhuZ3vxYknRaik0CpIjfafvJ7NQ7hP1n78XdA= Subject key identifier: 4C:88:2D:E3:1C:E3:83:2B:54:77:76:F9:E5:6C:66:2C:4D:0A:6C:37 Certificate issuer: /CN=4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0 Certificate serial: 46422997ABF85DDA180CB669D38BE75BE40B689E Authority key identifier: 4A:4E:AE:6D:F7:EB:F8:D5:B4:40:4D:BA:E4:87:48:CC:F2:70:F7:A0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/3138322e31362e3234392e302f32342d3234203d3e203435323938.roa Signing time: Sun 03 May 2026 02:39:42 +0000 ROA not before: Sun 03 May 2026 02:34:42 +0000 ROA not after: Sun 02 May 2027 02:39:42 +0000 asID: 45298 IP address blocks: 182.16.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0.crl rsync://rpki-rsync.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 04:31:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:42:29:97:ab:f8:5d:da:18:0c:b6:69:d3:8b:e7:5b:e4:0b:68:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0 Validity Not Before: May 3 02:34:42 2026 GMT Not After : May 2 02:39:42 2027 GMT Subject: CN=4C882DE31CE3832B547776F9E56C662C4D0A6C37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:fb:82:a2:de:06:4e:90:f5:03:de:8f:f9:3e: 35:d1:a9:9d:b5:c0:e9:cb:1c:59:cf:23:01:60:6a: 53:19:f0:d9:89:3b:29:cf:68:44:37:06:71:c2:18: 92:f8:5c:b5:75:bf:47:d0:8a:92:57:c9:19:07:54: eb:1e:12:ea:10:c7:7c:3b:78:fc:4a:6b:62:f4:01: 9f:d0:a9:ac:3e:0e:d7:93:5d:16:dd:de:6e:5a:96: 38:cc:b3:f3:ae:91:d1:49:dd:b1:52:1c:ce:a0:20: 1c:71:9a:44:32:08:e1:e4:01:e1:ab:d5:d6:1b:61: 13:39:70:3b:d4:b0:7f:c0:00:0b:3f:73:81:d7:c9: 13:12:35:8c:8b:a3:10:a6:18:5b:71:be:da:ba:e3: 65:20:3d:20:35:25:91:7b:a3:35:ea:78:5e:e9:3e: e6:a1:e7:63:38:cf:d1:97:df:d1:0c:75:d5:ab:9a: 9f:15:56:53:f2:15:c8:61:6d:1e:6f:be:bf:ab:c1: da:db:a6:a8:93:a9:a2:91:40:7b:33:ef:d5:55:33: cd:c1:70:e0:89:b6:52:ed:55:d7:28:92:a3:55:85: f3:c8:0c:38:f7:d3:5b:52:23:b8:03:8c:33:ba:65: 19:cb:1d:1e:74:fe:ee:d1:04:d7:47:0f:5e:72:27: 15:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:88:2D:E3:1C:E3:83:2B:54:77:76:F9:E5:6C:66:2C:4D:0A:6C:37 X509v3 Authority Key Identifier: keyid:4A:4E:AE:6D:F7:EB:F8:D5:B4:40:4D:BA:E4:87:48:CC:F2:70:F7:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/3138322e31362e3234392e302f32342d3234203d3e203435323938.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 182.16.249.0/24 Signature Algorithm: sha256WithRSAEncryption c0:ec:f9:54:b0:d3:0d:85:d0:d0:b8:58:a9:0e:88:c5:76:b3: df:ab:1a:7f:cc:e7:9d:51:9d:65:d7:3a:5d:bb:c0:ab:ae:fa: 11:42:91:cf:51:e7:29:27:48:b2:c1:b8:9f:7a:a3:a3:91:0b: 88:cb:a1:55:d6:64:ec:d9:1c:e6:90:6f:56:fd:52:2d:b4:76: 0f:fa:e4:04:fb:55:b4:f8:af:c7:c4:62:1f:c4:11:50:60:62: c9:a1:62:b4:38:6e:98:5b:2f:b3:35:4c:c4:78:6d:9d:f2:69: e1:1d:a2:e1:99:83:d5:62:6a:e0:47:dd:af:05:14:0e:7b:c3: 15:3b:3b:7a:ab:13:d1:a9:e8:56:8c:0e:f6:7a:78:36:08:6d: eb:33:23:02:ac:20:78:c0:4f:c6:37:f1:43:b5:21:4e:3f:ff: 44:6a:57:55:17:b3:32:14:5a:04:01:d6:5b:19:4d:ce:cc:a7: 38:37:f2:fe:1d:18:01:a7:96:7d:bd:ec:05:b0:5f:6a:70:49: 8c:32:38:f6:cb:b9:c6:68:fa:db:6f:49:6f:47:09:23:47:de: ff:4a:f1:e6:5e:51:62:dd:9c:83:57:e3:57:7c:6d:f7:ab:44: 7d:ad:58:96:d8:36:e8:7c:0e:17:45:c7:a3:a4:fb:ac:09:04: ea:4b:5e:dd -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIURkIpl6v4XdoYDLZp04vnW+QLaJ4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEE0RUFFNkRGN0VCRjhENUI0NDA0REJBRTQ4NzQ4Q0NG MjcwRjdBMDAeFw0yNjA1MDMwMjM0NDJaFw0yNzA1MDIwMjM5NDJaMDMxMTAvBgNV BAMTKDRDODgyREUzMUNFMzgzMkI1NDc3NzZGOUU1NkM2NjJDNEQwQTZDMzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCc+4Ki3gZOkPUD3o/5PjXRqZ21 wOnLHFnPIwFgalMZ8NmJOynPaEQ3BnHCGJL4XLV1v0fQipJXyRkHVOseEuoQx3w7 ePxKa2L0AZ/Qqaw+DteTXRbd3m5aljjMs/OukdFJ3bFSHM6gIBxxmkQyCOHkAeGr 1dYbYRM5cDvUsH/AAAs/c4HXyRMSNYyLoxCmGFtxvtq642UgPSA1JZF7ozXqeF7p Puah52M4z9GX39EMddWrmp8VVlPyFchhbR5vvr+rwdrbpqiTqaKRQHsz79VVM83B cOCJtlLtVdcokqNVhfPIDDj301tSI7gDjDO6ZRnLHR50/u7RBNdHD15yJxU9AgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUTIgt4xzjgytUd3b55WxmLE0KbDcwHwYDVR0j BBgwFoAUSk6ubffr+NW0QE265IdIzPJw96AwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjVlYzI1ZTQtOWFhOC00YmVmLTkwOTctYzBiZWMwYjI2NmE3LzAvNEE0RUFFNkRG N0VCRjhENUI0NDA0REJBRTQ4NzQ4Q0NGMjcwRjdBMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80QTRFQUU2REY3RUJGOEQ1QjQ0MDREQkFFNDg3NDhDQ0YyNzBG N0EwLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzY1ZWMyNWU0LTlhYTgtNGJlZi05 MDk3LWMwYmVjMGIyNjZhNy8wLzMxMzgzMjJlMzEzNjJlMzIzNDM5MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzQzNTMyMzkzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALYQ+TANBgkqhkiG 9w0BAQsFAAOCAQEAwOz5VLDTDYXQ0LhYqQ6IxXaz36saf8znnVGdZdc6XbvAq676 EUKRz1HnKSdIssG4n3qjo5ELiMuhVdZk7Nkc5pBvVv1SLbR2D/rkBPtVtPivx8Ri H8QRUGBiyaFitDhumFsvszVMxHhtnfJp4R2i4ZmD1WJq4EfdrwUUDnvDFTs7eqsT 0anoVowO9np4Nght6zMjAqwgeMBPxjfxQ7UhTj//RGpXVRezMhRaBAHWWxlNzsyn ODfy/h0YAaeWfb3sBbBfanBJjDI49su5xmj6229Jb0cJI0fe/0rx5l5RYt2cg1fj V3xt96tEfa1Yltg26HwOF0XHo6T7rAkE6kte3Q== -----END CERTIFICATE-----Generated at Wed May 13 08:35:31 2026 by rpki-client