$ rpki-client -vvf rpki-rsync.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/34332e3233302e3132382e302f32342d3234203d3e203233363739.roa File: 34332e3233302e3132382e302f32342d3234203d3e203233363739.roa (raw, json) Hash identifier: doOzsTzSE36mgoSIEk74sHNoCKgIA+A/ijb08tABwGQ= Subject key identifier: 0A:DB:FD:14:A9:47:1F:90:5C:CF:17:4B:17:4C:8F:21:C6:B0:1F:E1 Certificate issuer: /CN=3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5 Certificate serial: 22C13562B26BC3AE2793B49A380BF9DEC5794735 Authority key identifier: 38:03:AF:DA:7B:CC:D7:DB:E5:CE:9E:90:1A:2B:17:8E:F3:51:51:E5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/34332e3233302e3132382e302f32342d3234203d3e203233363739.roa Signing time: Sun 03 May 2026 02:51:40 +0000 ROA not before: Sun 03 May 2026 02:46:40 +0000 ROA not after: Sun 02 May 2027 02:51:40 +0000 asID: 23679 IP address blocks: 43.230.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5.crl rsync://rpki-rsync.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 20:34:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:c1:35:62:b2:6b:c3:ae:27:93:b4:9a:38:0b:f9:de:c5:79:47:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5 Validity Not Before: May 3 02:46:40 2026 GMT Not After : May 2 02:51:40 2027 GMT Subject: CN=0ADBFD14A9471F905CCF174B174C8F21C6B01FE1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:7c:72:e1:ea:f3:3d:d3:7d:0e:9b:3f:86:14: d5:fa:1d:7d:f3:65:b8:78:f8:6e:1c:65:20:73:7e: 30:ff:e3:ff:23:87:c3:6c:fd:9b:9c:77:3a:de:fd: ed:03:fa:6b:86:91:0b:d2:9b:75:21:2c:1b:0e:1b: f4:c3:a2:fd:b6:70:dc:1f:b0:9c:c6:04:2b:28:d7: 16:e6:e7:98:ae:0c:7b:f0:37:e1:78:5c:31:bd:b1: ed:fe:c9:1a:c0:76:e2:41:08:c6:28:fc:ec:a7:cd: a2:41:91:0a:e5:f9:0f:22:ac:b1:ed:98:0d:48:c5: 74:d5:43:f8:cc:72:ff:c9:04:ec:af:6b:ef:f9:b7: e2:a0:6c:a1:f4:d7:bc:f0:ae:24:bd:74:02:e1:3a: 2d:d2:c9:ca:5c:80:45:61:d2:7b:e8:a2:34:e7:8b: ab:77:e5:2e:01:50:24:e4:ea:75:d3:22:f5:78:19: f4:43:d9:28:d0:e8:78:a3:7a:db:8f:0f:af:00:0a: 97:b8:5b:ff:a0:8a:4c:01:3e:90:af:81:06:c6:cc: 72:61:74:cf:4f:bd:ed:6f:79:65:d5:07:fb:58:21: ed:d6:38:36:01:ea:f0:b6:d1:67:e9:9c:84:48:ad: a4:5c:1e:d2:8e:5a:b7:20:5d:98:e3:23:92:66:c6: d2:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:DB:FD:14:A9:47:1F:90:5C:CF:17:4B:17:4C:8F:21:C6:B0:1F:E1 X509v3 Authority Key Identifier: keyid:38:03:AF:DA:7B:CC:D7:DB:E5:CE:9E:90:1A:2B:17:8E:F3:51:51:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/34332e3233302e3132382e302f32342d3234203d3e203233363739.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.230.128.0/24 Signature Algorithm: sha256WithRSAEncryption b6:ce:18:ec:02:92:32:6e:d1:15:29:d1:70:28:2a:db:65:ce: c4:d6:e9:70:3a:09:4a:6f:cc:95:d1:5c:a7:86:5e:96:c4:06: e6:81:84:61:9a:86:0e:9c:bb:8b:80:48:32:e8:a6:b9:b1:ae: c0:95:af:c8:57:c2:f5:f6:c9:c4:3f:91:20:12:77:75:35:21: e5:e3:6e:56:73:8e:12:c0:3f:6c:f8:1f:7c:36:35:13:fa:06: 4d:b1:42:67:65:d9:68:55:07:f0:e3:da:ec:0b:6c:02:8c:95: c3:b8:4e:1e:74:31:0b:38:42:47:80:ab:54:21:d6:46:ae:6f: 81:a7:bd:21:94:7f:4d:4f:29:af:87:38:07:3a:bc:a8:c7:8f: 1c:58:6d:eb:da:24:70:99:35:ab:89:d9:a1:34:31:6a:82:bc: 5f:5d:b6:93:aa:a5:d0:63:57:ec:76:52:31:de:9f:59:11:26: 09:52:f9:b6:f9:f9:9c:9f:c4:25:be:9f:d0:74:de:30:10:c4: a3:96:82:ca:64:1a:c6:db:c6:d5:c8:28:a4:8f:aa:f0:d6:c1: 7a:5d:19:9c:53:1d:56:68:dc:e3:d6:f1:fc:34:a1:c0:27:32: dc:63:60:a4:f2:7b:df:d9:50:28:1a:1d:4e:d7:f4:5f:07:9a: 20:2a:37:d3 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUIsE1YrJrw64nk7SaOAv53sV5RzUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzgwM0FGREE3QkNDRDdEQkU1Q0U5RTkwMUEyQjE3OEVG MzUxNTFFNTAeFw0yNjA1MDMwMjQ2NDBaFw0yNzA1MDIwMjUxNDBaMDMxMTAvBgNV BAMTKDBBREJGRDE0QTk0NzFGOTA1Q0NGMTc0QjE3NEM4RjIxQzZCMDFGRTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwfHLh6vM9030Omz+GFNX6HX3z Zbh4+G4cZSBzfjD/4/8jh8Ns/Zucdzre/e0D+muGkQvSm3UhLBsOG/TDov22cNwf sJzGBCso1xbm55iuDHvwN+F4XDG9se3+yRrAduJBCMYo/OynzaJBkQrl+Q8irLHt mA1IxXTVQ/jMcv/JBOyva+/5t+KgbKH017zwriS9dALhOi3SycpcgEVh0nvoojTn i6t35S4BUCTk6nXTIvV4GfRD2SjQ6HijetuPD68ACpe4W/+gikwBPpCvgQbGzHJh dM9Pve1veWXVB/tYIe3WODYB6vC20WfpnIRIraRcHtKOWrcgXZjjI5JmxtIdAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUCtv9FKlHH5BczxdLF0yPIcawH+EwHwYDVR0j BBgwFoAUOAOv2nvM19vlzp6QGisXjvNRUeUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTExNDE3YzAtMzdiYi00NDZkLTg3ZjItZDgxODQxNzhjMTQ5LzAvMzgwM0FGREE3 QkNDRDdEQkU1Q0U5RTkwMUEyQjE3OEVGMzUxNTFFNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zODAzQUZEQTdCQ0NEN0RCRTVDRTlFOTAxQTJCMTc4RUYzNTE1 MUU1LmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzkxMTQxN2MwLTM3YmItNDQ2ZC04 N2YyLWQ4MTg0MTc4YzE0OS8wLzM0MzMyZTMyMzMzMDJlMzEzMjM4MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzIzMzM2MzczOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEACvmgDANBgkqhkiG 9w0BAQsFAAOCAQEAts4Y7AKSMm7RFSnRcCgq22XOxNbpcDoJSm/MldFcp4ZelsQG 5oGEYZqGDpy7i4BIMuimubGuwJWvyFfC9fbJxD+RIBJ3dTUh5eNuVnOOEsA/bPgf fDY1E/oGTbFCZ2XZaFUH8OPa7AtsAoyVw7hOHnQxCzhCR4CrVCHWRq5vgae9IZR/ TU8pr4c4Bzq8qMePHFht69okcJk1q4nZoTQxaoK8X122k6ql0GNX7HZSMd6fWREm CVL5tvn5nJ/EJb6f0HTeMBDEo5aCymQaxtvG1cgopI+q8NbBel0ZnFMdVmjc49bx /DShwCcy3GNgpPJ739lQKBodTtf0XweaICo30w== -----END CERTIFICATE-----Generated at Wed May 13 05:47:52 2026 by rpki-client