$ rpki-client -vvf rpki-rsync.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/34332e3235322e3133362e302f32322d3233203d3e203538343034.roa File: 34332e3235322e3133362e302f32322d3233203d3e203538343034.roa (raw, json) Hash identifier: VOA028A1R3RrEVD4Qi7zXJp992kxYY/J4fv4wuhxPKY= Subject key identifier: 1F:61:24:36:38:27:88:2E:59:C5:75:17:89:A2:6F:00:5F:B2:00:41 Certificate issuer: /CN=9C58C1C6AFBB5B66C640694A98597306CC88DA0B Certificate serial: 039E24E47BD7D42BEA92620887CB8CD85216A288 Authority key identifier: 9C:58:C1:C6:AF:BB:5B:66:C6:40:69:4A:98:59:73:06:CC:88:DA:0B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9C58C1C6AFBB5B66C640694A98597306CC88DA0B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/34332e3235322e3133362e302f32322d3233203d3e203538343034.roa Signing time: Sun 03 May 2026 02:41:35 +0000 ROA not before: Sun 03 May 2026 02:36:35 +0000 ROA not after: Sun 02 May 2027 02:41:35 +0000 asID: 58404 IP address blocks: 43.252.136.0/22 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/9C58C1C6AFBB5B66C640694A98597306CC88DA0B.crl rsync://rpki-rsync.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/9C58C1C6AFBB5B66C640694A98597306CC88DA0B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9C58C1C6AFBB5B66C640694A98597306CC88DA0B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 23:44:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:9e:24:e4:7b:d7:d4:2b:ea:92:62:08:87:cb:8c:d8:52:16:a2:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9C58C1C6AFBB5B66C640694A98597306CC88DA0B Validity Not Before: May 3 02:36:35 2026 GMT Not After : May 2 02:41:35 2027 GMT Subject: CN=1F6124363827882E59C5751789A26F005FB20041 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:69:83:1a:85:6a:f0:a5:c7:09:b0:a3:54:74: bb:fb:6f:e8:47:da:d3:5f:bd:22:00:c5:4e:ed:63: dd:c5:9f:a8:5f:7d:19:26:c5:18:40:a5:66:41:61: da:08:9b:34:aa:57:c2:ce:be:11:6a:2b:77:26:fa: 23:74:11:08:dc:ac:63:96:b5:37:ef:6a:2b:c8:e3: dd:f4:a3:98:56:1e:81:89:8b:d6:f9:e8:05:42:78: 01:c3:33:aa:6f:fd:d1:74:0d:95:5b:de:db:36:b9: d7:2d:12:5a:fa:c5:02:bf:ad:0e:9f:2c:8e:a0:de: f7:66:80:a8:58:3a:03:fd:c0:9c:5d:e4:1f:79:8a: 17:88:88:0b:2b:c7:c5:7d:ec:ae:19:20:e7:b7:b2: 62:3d:c6:b0:99:30:40:d6:b8:d0:0e:8c:f9:94:fb: f2:24:4b:c4:1c:d7:87:75:8e:e9:63:0c:e8:f2:e1: d4:b7:77:cf:74:88:d1:58:ec:9e:04:54:4b:e4:75: 74:cc:f4:35:1b:b9:84:3e:39:38:a4:69:af:2a:2c: 39:5e:a6:a3:44:22:5d:36:1c:cd:c5:5f:9a:e1:47: 0f:d8:6f:9d:77:d0:e2:20:bf:02:a8:95:19:19:de: 7e:8a:d0:43:8c:db:5e:af:7d:ac:62:32:77:a5:18: a7:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:61:24:36:38:27:88:2E:59:C5:75:17:89:A2:6F:00:5F:B2:00:41 X509v3 Authority Key Identifier: keyid:9C:58:C1:C6:AF:BB:5B:66:C6:40:69:4A:98:59:73:06:CC:88:DA:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/9C58C1C6AFBB5B66C640694A98597306CC88DA0B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9C58C1C6AFBB5B66C640694A98597306CC88DA0B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/34332e3235322e3133362e302f32322d3233203d3e203538343034.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.252.136.0/22 Signature Algorithm: sha256WithRSAEncryption 7c:73:f6:a3:33:43:30:bf:36:72:3c:b6:f7:7e:0f:9a:b6:40: 0d:d1:03:a5:50:4c:ac:cd:1c:1f:41:a4:09:76:ad:89:e9:be: c4:3f:4c:08:4e:01:44:db:8d:f2:75:06:16:be:d7:aa:01:ae: 5b:91:b6:fd:08:b1:28:a5:82:82:e3:f1:c1:35:43:2c:e7:93: 8f:05:97:5e:8d:6b:6c:2f:05:89:5e:32:d8:3b:6c:08:50:a0: 6b:e2:29:8f:53:6c:c7:db:48:cd:ec:9d:3a:a8:81:fe:1c:d8: 76:25:ae:35:24:18:f8:5e:5e:88:a4:6a:16:3b:3b:ca:a6:71: 80:e6:0e:c0:e0:9e:36:1a:20:29:9d:99:31:00:fb:b6:de:f0: 6b:c0:29:28:8e:c1:23:4b:d3:2c:23:fe:9b:72:2b:9d:5b:28: d8:e0:c3:2c:8c:29:56:34:a8:da:28:e2:b4:b5:99:21:e2:3a: b6:45:fa:92:0b:f5:a0:07:6a:21:47:7e:89:4b:67:0b:fa:63: 3c:45:41:bd:82:97:f6:b3:9f:ff:2d:41:0d:75:5f:4c:ff:45: dc:82:ef:7b:48:eb:a1:82:b6:a4:ce:5e:1e:8a:e8:2c:fc:e6: 4c:7e:73:57:a4:43:8b:a3:c5:96:79:0a:8c:b7:b6:94:60:11: 64:ac:4d:2d -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUA54k5HvX1CvqkmIIh8uM2FIWoogwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUM1OEMxQzZBRkJCNUI2NkM2NDA2OTRBOTg1OTczMDZD Qzg4REEwQjAeFw0yNjA1MDMwMjM2MzVaFw0yNzA1MDIwMjQxMzVaMDMxMTAvBgNV BAMTKDFGNjEyNDM2MzgyNzg4MkU1OUM1NzUxNzg5QTI2RjAwNUZCMjAwNDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWaYMahWrwpccJsKNUdLv7b+hH 2tNfvSIAxU7tY93Fn6hffRkmxRhApWZBYdoImzSqV8LOvhFqK3cm+iN0EQjcrGOW tTfvaivI4930o5hWHoGJi9b56AVCeAHDM6pv/dF0DZVb3ts2udctElr6xQK/rQ6f LI6g3vdmgKhYOgP9wJxd5B95iheIiAsrx8V97K4ZIOe3smI9xrCZMEDWuNAOjPmU +/IkS8Qc14d1juljDOjy4dS3d890iNFY7J4EVEvkdXTM9DUbuYQ+OTikaa8qLDle pqNEIl02HM3FX5rhRw/Yb5130OIgvwKolRkZ3n6K0EOM216vfaxiMnelGKcNAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUH2EkNjgniC5ZxXUXiaJvAF+yAEEwHwYDVR0j BBgwFoAUnFjBxq+7W2bGQGlKmFlzBsyI2gswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmUwZjkxNjMtM2U1YS00ZWZhLThiZDktNGFjNGJjNjMwNDE0LzAvOUM1OEMxQzZB RkJCNUI2NkM2NDA2OTRBOTg1OTczMDZDQzg4REEwQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85QzU4QzFDNkFGQkI1QjY2QzY0MDY5NEE5ODU5NzMwNkNDODhE QTBCLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzZlMGY5MTYzLTNlNWEtNGVmYS04 YmQ5LTRhYzRiYzYzMDQxNC8wLzM0MzMyZTMyMzUzMjJlMzEzMzM2MmUzMDJmMzIz MjJkMzIzMzIwM2QzZTIwMzUzODM0MzAzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAiv8iDANBgkqhkiG 9w0BAQsFAAOCAQEAfHP2ozNDML82cjy2934PmrZADdEDpVBMrM0cH0GkCXatiem+ xD9MCE4BRNuN8nUGFr7XqgGuW5G2/QixKKWCguPxwTVDLOeTjwWXXo1rbC8FiV4y 2DtsCFCga+Ipj1Nsx9tIzeydOqiB/hzYdiWuNSQY+F5eiKRqFjs7yqZxgOYOwOCe NhogKZ2ZMQD7tt7wa8ApKI7BI0vTLCP+m3IrnVso2ODDLIwpVjSo2ijitLWZIeI6 tkX6kgv1oAdqIUd+iUtnC/pjPEVBvYKX9rOf/y1BDXVfTP9F3ILve0jroYK2pM5e HoroLPzmTH5zV6RDi6PFlnkKjLe2lGARZKxNLQ== -----END CERTIFICATE-----Generated at Wed May 13 05:14:34 2026 by rpki-client