$ rpki-client -vvf rpki-rsync.idnic.net/repo/7d0f99c3-e567-41ae-aa00-26cb9781fbe9/0/34392e3233362e3231372e302f32342d3234203d3e203535363638.roa File: 34392e3233362e3231372e302f32342d3234203d3e203535363638.roa (raw, json) Hash identifier: OBjymGBPtqF6toUtxnYBK5T5zwUl52/5/S4t9wRi6y8= Subject key identifier: 51:B4:B1:BD:87:03:17:02:8C:0D:29:C4:DE:52:4C:38:E8:1A:00:96 Certificate issuer: /CN=777E6650C707BC53014C9FB0600EB998ECDCCEC8 Certificate serial: 6A0F1E609ABF5905E019A2716142A5CAB464ED Authority key identifier: 77:7E:66:50:C7:07:BC:53:01:4C:9F:B0:60:0E:B9:98:EC:DC:CE:C8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/777E6650C707BC53014C9FB0600EB998ECDCCEC8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7d0f99c3-e567-41ae-aa00-26cb9781fbe9/0/34392e3233362e3231372e302f32342d3234203d3e203535363638.roa Signing time: Sun 03 May 2026 02:45:35 +0000 ROA not before: Sun 03 May 2026 02:40:35 +0000 ROA not after: Sun 02 May 2027 02:45:35 +0000 asID: 55668 IP address blocks: 49.236.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7d0f99c3-e567-41ae-aa00-26cb9781fbe9/0/777E6650C707BC53014C9FB0600EB998ECDCCEC8.crl rsync://rpki-rsync.idnic.net/repo/7d0f99c3-e567-41ae-aa00-26cb9781fbe9/0/777E6650C707BC53014C9FB0600EB998ECDCCEC8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/777E6650C707BC53014C9FB0600EB998ECDCCEC8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:0f:1e:60:9a:bf:59:05:e0:19:a2:71:61:42:a5:ca:b4:64:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=777E6650C707BC53014C9FB0600EB998ECDCCEC8 Validity Not Before: May 3 02:40:35 2026 GMT Not After : May 2 02:45:35 2027 GMT Subject: CN=51B4B1BD870317028C0D29C4DE524C38E81A0096 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:61:0b:34:b1:3d:80:6f:a4:81:4c:e1:15:7e: 6d:0d:c3:eb:6c:b1:43:bf:9a:96:b3:a9:c2:a8:c7: 99:f0:24:15:26:ad:aa:f1:df:59:f3:3a:fc:35:30: 1a:74:85:d8:4a:43:37:ab:35:e3:86:b9:72:b2:f6: 99:3a:6a:96:43:de:07:43:21:15:f1:39:9f:91:20: 28:3c:c8:09:40:4b:2e:73:be:40:e0:6c:6f:ca:1f: 91:77:d0:72:b5:72:48:14:77:e8:4b:ea:29:41:44: 08:a0:b9:41:91:f6:83:2f:eb:41:f6:9e:8f:9f:96: 26:c5:6e:bc:fd:f0:15:c9:ae:c1:09:55:af:2c:8f: 62:ea:3d:4b:dd:a0:f7:99:a2:0e:72:09:ea:20:ec: 9d:e6:09:f5:5c:25:f0:e2:f4:13:d6:4b:97:d1:e2: 61:8a:78:a9:64:f4:a0:13:f0:76:73:c4:67:8c:15: e5:44:cd:3c:be:e3:50:81:ec:e0:99:d9:7b:f2:87: f4:33:ef:49:b7:40:d3:c1:59:f8:ef:66:a9:cf:72: 2a:15:7f:2d:c7:7f:9e:fa:b7:9b:8a:d0:4f:d1:0d: f1:a6:de:09:e8:0e:ea:20:e1:58:48:de:d8:c2:e5: ac:f1:7d:15:25:e3:aa:e3:58:84:21:30:c0:8e:a8: 21:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:B4:B1:BD:87:03:17:02:8C:0D:29:C4:DE:52:4C:38:E8:1A:00:96 X509v3 Authority Key Identifier: keyid:77:7E:66:50:C7:07:BC:53:01:4C:9F:B0:60:0E:B9:98:EC:DC:CE:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7d0f99c3-e567-41ae-aa00-26cb9781fbe9/0/777E6650C707BC53014C9FB0600EB998ECDCCEC8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/777E6650C707BC53014C9FB0600EB998ECDCCEC8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7d0f99c3-e567-41ae-aa00-26cb9781fbe9/0/34392e3233362e3231372e302f32342d3234203d3e203535363638.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 49.236.217.0/24 Signature Algorithm: sha256WithRSAEncryption 43:0d:fe:b1:17:41:c2:6a:05:d1:89:73:23:d8:26:e2:b4:b3: 84:2f:0c:14:1a:69:b3:0f:29:e0:44:66:75:85:d7:30:21:84: a5:c6:2c:fc:5c:bc:f7:26:f7:65:e7:ae:46:92:ce:4b:35:bf: b4:53:df:ca:63:e7:ff:3e:ce:0c:f1:cb:c1:15:eb:e0:84:2a: 0b:c4:7b:3e:9a:0a:1c:d3:18:f3:3f:1e:8b:c7:40:5a:e1:b7: 9d:ad:e5:03:11:8a:71:36:3f:8b:c8:cf:a0:99:f6:23:8f:17: 5a:74:c1:49:98:0f:bd:af:34:30:af:ba:1b:2f:a5:2f:11:dc: df:ac:03:78:e7:d1:4e:9d:3c:66:bc:97:61:42:99:12:7f:c5: 28:e5:d7:ef:7e:84:80:d9:a6:fb:97:d1:b2:5d:0d:b0:a5:dc: c7:aa:ed:12:d8:bb:b9:1c:3b:45:78:1b:ec:68:7f:77:0a:d5: 6b:72:90:60:bb:33:80:53:19:8b:4c:25:1a:f6:93:36:92:61: 30:e7:03:89:41:ea:ce:68:d6:20:7f:f2:04:52:8f:43:7e:ba: d5:38:3d:99:ee:91:32:4b:0a:87:ee:a3:41:1f:86:c2:d4:ed: f6:7c:da:60:3c:99:49:cf:45:3e:7d:52:4a:73:57:5f:d2:5c: 8f:fd:13:3f -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgITag8eYJq/WQXgGaJxYUKlyrRk7TANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEyg3NzdFNjY1MEM3MDdCQzUzMDE0QzlGQjA2MDBFQjk5OEVD RENDRUM4MB4XDTI2MDUwMzAyNDAzNVoXDTI3MDUwMjAyNDUzNVowMzExMC8GA1UE AxMoNTFCNEIxQkQ4NzAzMTcwMjhDMEQyOUM0REU1MjRDMzhFODFBMDA5NjCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJ9hCzSxPYBvpIFM4RV+bQ3D62yx Q7+alrOpwqjHmfAkFSatqvHfWfM6/DUwGnSF2EpDN6s144a5crL2mTpqlkPeB0Mh FfE5n5EgKDzICUBLLnO+QOBsb8ofkXfQcrVySBR36EvqKUFECKC5QZH2gy/rQfae j5+WJsVuvP3wFcmuwQlVryyPYuo9S92g95miDnIJ6iDsneYJ9Vwl8OL0E9ZLl9Hi YYp4qWT0oBPwdnPEZ4wV5UTNPL7jUIHs4JnZe/KH9DPvSbdA08FZ+O9mqc9yKhV/ Lcd/nvq3m4rQT9EN8abeCegO6iDhWEje2MLlrPF9FSXjquNYhCEwwI6oIYMCAwEA AaOCAjIwggIuMB0GA1UdDgQWBBRRtLG9hwMXAowNKcTeUkw46BoAljAfBgNVHSME GDAWgBR3fmZQxwe8UwFMn7BgDrmY7NzOyDAOBgNVHQ8BAf8EBAMCB4AwgYYGA1Ud HwR/MH0we6B5oHeGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby83 ZDBmOTljMy1lNTY3LTQxYWUtYWEwMC0yNmNiOTc4MWZiZTkvMC83NzdFNjY1MEM3 MDdCQzUzMDE0QzlGQjA2MDBFQjk5OEVDRENDRUM4LmNybDByBggrBgEFBQcBAQRm MGQwYgYIKwYBBQUHMAKGVnJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVw by9JRE5JQy8xLzc3N0U2NjUwQzcwN0JDNTMwMTRDOUZCMDYwMEVCOTk4RUNEQ0NF QzguY2VyMIGjBggrBgEFBQcBCwSBljCBkzCBkAYIKwYBBQUHMAuGgYNyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2QwZjk5YzMtZTU2Ny00MWFlLWFh MDAtMjZjYjk3ODFmYmU5LzAvMzQzOTJlMzIzMzM2MmUzMjMxMzcyZTMwMmYzMjM0 MmQzMjM0MjAzZDNlMjAzNTM1MzYzNjM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsG AQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMezZMA0GCSqGSIb3 DQEBCwUAA4IBAQBDDf6xF0HCagXRiXMj2CbitLOELwwUGmmzDyngRGZ1hdcwIYSl xiz8XLz3Jvdl565Gks5LNb+0U9/KY+f/Ps4M8cvBFevghCoLxHs+mgoc0xjzPx6L x0Ba4bedreUDEYpxNj+LyM+gmfYjjxdadMFJmA+9rzQwr7obL6UvEdzfrAN459FO nTxmvJdhQpkSf8Uo5dfvfoSA2ab7l9GyXQ2wpdzHqu0S2Lu5HDtFeBvsaH93CtVr cpBguzOAUxmLTCUa9pM2kmEw5wOJQerOaNYgf/IEUo9DfrrVOD2Z7pEySwqH7qNB H4bC1O32fNpgPJlJz0U+fVJKc1df0lyP/RM/ -----END CERTIFICATE-----Generated at Wed May 13 02:19:21 2026 by rpki-client