$ rpki-client -vvf rpki-rsync.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/34332e3234392e3231312e302f32342d3234203d3e203435323938.roa File: 34332e3234392e3231312e302f32342d3234203d3e203435323938.roa (raw, json) Hash identifier: dI4U8mJvEBf9UNAhV9zqVwxzHCXI77Ff764ltwQ4rhs= Subject key identifier: 2D:4A:CD:95:3D:71:29:82:0A:73:3C:26:61:C3:7B:CB:A2:43:3B:78 Certificate issuer: /CN=4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0 Certificate serial: 35717FA5C3F8AE6A97CDD0C18464FC993066C5FD Authority key identifier: 4A:4E:AE:6D:F7:EB:F8:D5:B4:40:4D:BA:E4:87:48:CC:F2:70:F7:A0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/34332e3234392e3231312e302f32342d3234203d3e203435323938.roa Signing time: Sun 03 May 2026 02:39:46 +0000 ROA not before: Sun 03 May 2026 02:34:46 +0000 ROA not after: Sun 02 May 2027 02:39:46 +0000 asID: 45298 IP address blocks: 43.249.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0.crl rsync://rpki-rsync.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 04:31:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:71:7f:a5:c3:f8:ae:6a:97:cd:d0:c1:84:64:fc:99:30:66:c5:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0 Validity Not Before: May 3 02:34:46 2026 GMT Not After : May 2 02:39:46 2027 GMT Subject: CN=2D4ACD953D7129820A733C2661C37BCBA2433B78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:56:f0:c3:e8:37:49:97:29:66:ec:f7:7d:5d: 66:6f:97:b1:37:ac:68:ea:2b:ab:2a:3e:13:15:fd: 9e:06:30:9e:12:e1:e5:8c:a7:2b:2b:52:ea:c6:15: bd:f1:9a:55:0e:9c:4f:14:24:ff:1c:dd:5f:a7:69: 24:96:74:87:89:d0:43:67:dc:7d:82:75:11:62:36: d2:01:66:c9:a4:af:c5:2c:7c:7a:e2:0b:90:93:b5: aa:05:b6:6f:4b:66:29:63:cf:de:1d:d1:89:93:4d: 07:25:a3:26:80:a4:5f:e5:c7:99:d2:9c:81:5f:c3: f8:89:a8:7f:ca:40:30:4a:63:aa:e4:94:25:be:8b: 34:8e:a5:1e:08:4e:72:de:02:6f:d5:ed:48:a6:6a: 4c:f0:29:a4:d5:0f:ba:7a:01:71:0e:c2:47:e0:39: ac:d7:16:98:6a:ba:16:77:8f:1b:40:ee:1b:34:db: 64:2e:a2:ce:9f:33:06:0a:27:57:b2:c3:c2:77:2a: ea:15:69:d0:39:eb:f1:4a:52:9d:f4:b4:60:03:78: 78:c5:f5:81:d8:61:88:bc:03:e3:cf:f1:7b:1a:52: 20:78:0e:c8:44:f7:4f:0c:62:ba:5c:79:3a:41:98: 19:55:da:67:7b:e0:30:a5:31:77:27:64:0a:f5:38: 5e:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:4A:CD:95:3D:71:29:82:0A:73:3C:26:61:C3:7B:CB:A2:43:3B:78 X509v3 Authority Key Identifier: keyid:4A:4E:AE:6D:F7:EB:F8:D5:B4:40:4D:BA:E4:87:48:CC:F2:70:F7:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/34332e3234392e3231312e302f32342d3234203d3e203435323938.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.249.211.0/24 Signature Algorithm: sha256WithRSAEncryption 39:0f:b5:c9:ff:e9:56:e2:fe:d8:6e:41:ff:d2:62:6d:c8:a1: f9:f8:00:40:7b:c8:7e:fa:dc:86:54:0f:48:22:da:c4:64:ca: d8:c1:d7:2c:57:2c:c6:67:a5:bd:a9:55:45:f1:16:14:e5:32: 9e:ea:08:99:cb:34:f7:20:3f:1e:ca:ca:e5:fe:67:cd:d9:50: a0:1e:08:33:d0:9f:86:e5:8d:39:dc:f0:8e:20:ac:a5:f4:59: 2a:ff:1d:b7:56:44:a8:16:33:24:95:e8:9f:98:b7:6c:d9:13: 6b:53:11:56:77:45:eb:29:b8:35:6c:07:81:86:61:62:b4:93: 4e:f4:5b:c4:b7:96:a6:0e:eb:55:20:29:5f:6c:ef:9c:e7:c2: c0:88:b8:16:70:34:cf:c1:1b:7f:b0:16:cd:b7:6b:7b:ab:80: 03:ed:9d:f7:4a:0c:6a:a4:90:ef:6d:44:ed:02:de:6a:9f:c7: 61:82:1a:95:f4:af:7c:f8:03:3f:cc:2c:a1:04:5e:31:ff:47: 6d:3c:e9:66:4f:38:20:d8:d2:8b:fe:60:cd:22:9f:1a:7d:ec: e5:60:7e:65:ab:01:c7:a3:a8:b1:2f:78:21:c8:9d:72:66:93: e8:69:02:74:9e:72:32:eb:04:7a:f8:99:ba:37:75:75:9a:ee: 43:5d:59:9c -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUNXF/pcP4rmqXzdDBhGT8mTBmxf0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEE0RUFFNkRGN0VCRjhENUI0NDA0REJBRTQ4NzQ4Q0NG MjcwRjdBMDAeFw0yNjA1MDMwMjM0NDZaFw0yNzA1MDIwMjM5NDZaMDMxMTAvBgNV BAMTKDJENEFDRDk1M0Q3MTI5ODIwQTczM0MyNjYxQzM3QkNCQTI0MzNCNzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJVvDD6DdJlylm7Pd9XWZvl7E3 rGjqK6sqPhMV/Z4GMJ4S4eWMpysrUurGFb3xmlUOnE8UJP8c3V+naSSWdIeJ0ENn 3H2CdRFiNtIBZsmkr8UsfHriC5CTtaoFtm9LZiljz94d0YmTTQcloyaApF/lx5nS nIFfw/iJqH/KQDBKY6rklCW+izSOpR4ITnLeAm/V7UimakzwKaTVD7p6AXEOwkfg OazXFphquhZ3jxtA7hs022Quos6fMwYKJ1eyw8J3KuoVadA56/FKUp30tGADeHjF 9YHYYYi8A+PP8XsaUiB4DshE908MYrpceTpBmBlV2md74DClMXcnZAr1OF4/AgMB AAGjggIyMIICLjAdBgNVHQ4EFgQULUrNlT1xKYIKczwmYcN7y6JDO3gwHwYDVR0j BBgwFoAUSk6ubffr+NW0QE265IdIzPJw96AwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjVlYzI1ZTQtOWFhOC00YmVmLTkwOTctYzBiZWMwYjI2NmE3LzAvNEE0RUFFNkRG N0VCRjhENUI0NDA0REJBRTQ4NzQ4Q0NGMjcwRjdBMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80QTRFQUU2REY3RUJGOEQ1QjQ0MDREQkFFNDg3NDhDQ0YyNzBG N0EwLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzY1ZWMyNWU0LTlhYTgtNGJlZi05 MDk3LWMwYmVjMGIyNjZhNy8wLzM0MzMyZTMyMzQzOTJlMzIzMTMxMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzQzNTMyMzkzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEACv50zANBgkqhkiG 9w0BAQsFAAOCAQEAOQ+1yf/pVuL+2G5B/9Jibcih+fgAQHvIfvrchlQPSCLaxGTK 2MHXLFcsxmelvalVRfEWFOUynuoImcs09yA/HsrK5f5nzdlQoB4IM9CfhuWNOdzw jiCspfRZKv8dt1ZEqBYzJJXon5i3bNkTa1MRVndF6ym4NWwHgYZhYrSTTvRbxLeW pg7rVSApX2zvnOfCwIi4FnA0z8Ebf7AWzbdre6uAA+2d90oMaqSQ721E7QLeap/H YYIalfSvfPgDP8wsoQReMf9HbTzpZk84INjSi/5gzSKfGn3s5WB+ZasBx6OosS94 IcidcmaT6GkCdJ5yMusEeviZujd1dZruQ11ZnA== -----END CERTIFICATE-----Generated at Wed May 13 07:57:13 2026 by rpki-client