$ rpki-client -vvf rpki-rsync.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/34332e3235322e3138342e302f32342d3234203d3e203538383136.roa File: 34332e3235322e3138342e302f32342d3234203d3e203538383136.roa (raw, json) Hash identifier: 44lhYNCTAO2siZihCQ900kwRRnxmW/3HfMRYLLv3vnA= Subject key identifier: BF:FB:B9:EB:9D:47:F1:95:29:51:BA:68:D3:66:84:F8:64:FC:79:26 Certificate issuer: /CN=92D91C78CED320B90BF6562D1B556AE9218F74A1 Certificate serial: 2E35B72B8F8ED41040B2ADD4DDFD286045FF58BE Authority key identifier: 92:D9:1C:78:CE:D3:20:B9:0B:F6:56:2D:1B:55:6A:E9:21:8F:74:A1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/92D91C78CED320B90BF6562D1B556AE9218F74A1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/34332e3235322e3138342e302f32342d3234203d3e203538383136.roa Signing time: Sun 03 May 2026 02:42:12 +0000 ROA not before: Sun 03 May 2026 02:37:12 +0000 ROA not after: Sun 02 May 2027 02:42:12 +0000 asID: 58816 IP address blocks: 43.252.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/92D91C78CED320B90BF6562D1B556AE9218F74A1.crl rsync://rpki-rsync.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/92D91C78CED320B90BF6562D1B556AE9218F74A1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/92D91C78CED320B90BF6562D1B556AE9218F74A1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:35:b7:2b:8f:8e:d4:10:40:b2:ad:d4:dd:fd:28:60:45:ff:58:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92D91C78CED320B90BF6562D1B556AE9218F74A1 Validity Not Before: May 3 02:37:12 2026 GMT Not After : May 2 02:42:12 2027 GMT Subject: CN=BFFBB9EB9D47F1952951BA68D36684F864FC7926 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:e9:c8:43:b3:a3:2e:2c:2a:db:3f:cf:44:0f: 75:3c:4e:32:27:66:46:68:62:df:62:71:2f:a3:af: 99:f0:76:e4:02:14:80:d7:d8:44:97:78:87:f4:0a: 22:0c:f9:a9:6d:ef:cc:c7:c4:51:34:9d:36:76:1a: 7a:fc:f9:68:39:88:7d:a8:bc:bc:69:38:dd:7b:af: 57:f3:86:5f:6d:95:e4:54:db:4c:d6:c5:35:79:53: 32:a4:dd:31:72:24:99:db:17:fa:62:a5:ae:d2:20: ba:39:ad:fe:44:86:67:3f:6f:f6:e7:fa:34:2f:d2: 06:21:90:38:b1:5e:2c:2a:57:da:0b:4e:ef:fd:ad: d8:3c:36:7c:7c:87:68:bd:ab:81:de:16:76:fd:44: d1:b5:5c:38:0a:b8:0b:0f:d2:14:c8:26:4c:cb:f3: 4f:1d:72:6f:29:3e:cd:9e:3c:7d:7b:ff:a1:17:81: d3:64:03:33:8c:7d:55:d5:c8:4a:30:23:6c:c1:71: 7c:4a:7d:ab:01:c3:c6:22:24:56:0d:7f:fb:b3:91: 1e:a7:01:1e:13:bf:3c:57:7f:d5:51:ca:27:94:7c: fe:35:14:7f:f4:44:46:db:dd:69:88:00:26:36:bc: 78:46:d4:67:37:ce:82:46:7b:58:a0:57:81:e4:de: 4f:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:FB:B9:EB:9D:47:F1:95:29:51:BA:68:D3:66:84:F8:64:FC:79:26 X509v3 Authority Key Identifier: keyid:92:D9:1C:78:CE:D3:20:B9:0B:F6:56:2D:1B:55:6A:E9:21:8F:74:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/92D91C78CED320B90BF6562D1B556AE9218F74A1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/92D91C78CED320B90BF6562D1B556AE9218F74A1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/34332e3235322e3138342e302f32342d3234203d3e203538383136.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.252.184.0/24 Signature Algorithm: sha256WithRSAEncryption 6b:c9:33:bc:48:d5:d8:0e:8e:a5:70:59:5a:b3:af:a4:b9:4d: ba:c5:33:1b:f0:90:5e:f1:88:08:f0:2c:ac:d0:37:88:5d:c7: 64:62:db:09:a3:f9:1a:b9:a9:b8:51:cb:9e:3f:ad:2b:1c:15: 04:c7:e9:44:7d:65:c9:ac:1c:dd:20:4a:9e:3b:43:cd:9a:60: 87:a7:23:a5:bd:da:00:08:03:dc:fa:04:b2:9a:54:42:0f:a1: 56:89:11:eb:5f:37:bd:c6:6b:a3:d7:69:4f:21:59:e5:7f:60: 00:1a:d5:78:fb:a6:66:91:b5:ac:3e:b1:b3:2f:ac:f4:62:4c: 75:5c:95:e7:8a:fa:79:99:54:48:dd:b4:96:c3:ef:bc:fa:d6: 91:05:47:c4:30:a2:e6:3c:59:00:52:66:6f:c8:8a:01:ef:dc: 25:0e:08:62:0e:bb:29:60:0e:7b:8f:c6:9b:a8:d0:7f:eb:74: 11:dc:09:fc:b0:1e:0a:43:d6:da:5e:98:34:d2:c0:f1:ab:bd: 3a:61:01:6a:7a:b4:16:80:c8:2c:c6:2c:bc:cb:6a:2a:10:3f: 0e:6a:2f:52:57:92:40:ac:f8:c4:f5:d8:bd:48:6e:e7:73:37: 21:df:f9:46:35:63:58:74:87:e0:f4:11:f4:5d:06:e1:93:52: 56:b0:63:4c -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIULjW3K4+O1BBAsq3U3f0oYEX/WL4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTJEOTFDNzhDRUQzMjBCOTBCRjY1NjJEMUI1NTZBRTky MThGNzRBMTAeFw0yNjA1MDMwMjM3MTJaFw0yNzA1MDIwMjQyMTJaMDMxMTAvBgNV BAMTKEJGRkJCOUVCOUQ0N0YxOTUyOTUxQkE2OEQzNjY4NEY4NjRGQzc5MjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC36chDs6MuLCrbP89ED3U8TjIn ZkZoYt9icS+jr5nwduQCFIDX2ESXeIf0CiIM+alt78zHxFE0nTZ2Gnr8+Wg5iH2o vLxpON17r1fzhl9tleRU20zWxTV5UzKk3TFyJJnbF/pipa7SILo5rf5Ehmc/b/bn +jQv0gYhkDixXiwqV9oLTu/9rdg8Nnx8h2i9q4HeFnb9RNG1XDgKuAsP0hTIJkzL 808dcm8pPs2ePH17/6EXgdNkAzOMfVXVyEowI2zBcXxKfasBw8YiJFYNf/uzkR6n AR4TvzxXf9VRyieUfP41FH/0REbb3WmIACY2vHhG1Gc3zoJGe1igV4Hk3k+xAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUv/u5651H8ZUpUbpo02aE+GT8eSYwHwYDVR0j BBgwFoAUktkceM7TILkL9lYtG1Vq6SGPdKEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmZjM2NiYzQtODg4My00MTFjLTg3NmUtZTllMjNhOGQ4YWQ5LzAvOTJEOTFDNzhD RUQzMjBCOTBCRjY1NjJEMUI1NTZBRTkyMThGNzRBMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85MkQ5MUM3OENFRDMyMEI5MEJGNjU2MkQxQjU1NkFFOTIxOEY3 NEExLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzZmYzNjYmM0LTg4ODMtNDExYy04 NzZlLWU5ZTIzYThkOGFkOS8wLzM0MzMyZTMyMzUzMjJlMzEzODM0MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzUzODM4MzEzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEACv8uDANBgkqhkiG 9w0BAQsFAAOCAQEAa8kzvEjV2A6OpXBZWrOvpLlNusUzG/CQXvGICPAsrNA3iF3H ZGLbCaP5GrmpuFHLnj+tKxwVBMfpRH1lyawc3SBKnjtDzZpgh6cjpb3aAAgD3PoE sppUQg+hVokR6183vcZro9dpTyFZ5X9gABrVePumZpG1rD6xsy+s9GJMdVyV54r6 eZlUSN20lsPvvPrWkQVHxDCi5jxZAFJmb8iKAe/cJQ4IYg67KWAOe4/Gm6jQf+t0 EdwJ/LAeCkPW2l6YNNLA8au9OmEBanq0FoDILMYsvMtqKhA/DmovUleSQKz4xPXY vUhu53M3Id/5RjVjWHSH4PQR9F0G4ZNSVrBjTA== -----END CERTIFICATE-----Generated at Wed May 13 02:13:24 2026 by rpki-client