$ rpki-client -vvf rpki-rsync.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/34332e3233302e3132392e302f32342d3234203d3e203233363739.roa File: 34332e3233302e3132392e302f32342d3234203d3e203233363739.roa (raw, json) Hash identifier: UGlFvxlrSD3eWOHFR+RqkvAQb3F8Wtbfd776kf/FNfc= Subject key identifier: CF:D6:18:13:C7:CE:02:84:1E:F7:E6:C3:10:89:2A:D3:07:81:D0:13 Certificate issuer: /CN=3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5 Certificate serial: 50348CDD57F02251F982F2651BF549F245D51ABF Authority key identifier: 38:03:AF:DA:7B:CC:D7:DB:E5:CE:9E:90:1A:2B:17:8E:F3:51:51:E5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/34332e3233302e3132392e302f32342d3234203d3e203233363739.roa Signing time: Sun 03 May 2026 02:51:43 +0000 ROA not before: Sun 03 May 2026 02:46:43 +0000 ROA not after: Sun 02 May 2027 02:51:43 +0000 asID: 23679 IP address blocks: 43.230.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5.crl rsync://rpki-rsync.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 20:34:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:34:8c:dd:57:f0:22:51:f9:82:f2:65:1b:f5:49:f2:45:d5:1a:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5 Validity Not Before: May 3 02:46:43 2026 GMT Not After : May 2 02:51:43 2027 GMT Subject: CN=CFD61813C7CE02841EF7E6C310892AD30781D013 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:40:d5:26:70:c5:ee:62:7f:48:2b:81:64:e3: d9:96:5c:99:33:05:f9:64:20:aa:47:57:e6:31:88: 10:7d:28:2c:3a:29:ca:3a:9f:fa:aa:c9:1a:ad:c6: 90:e3:6f:4b:a0:08:28:93:45:4a:79:e4:9f:34:dd: 3b:10:e1:de:48:9a:fa:e1:65:b5:be:53:81:2d:27: 61:94:aa:db:b6:99:70:3e:65:ff:dd:9d:b5:9f:25: df:f8:f8:37:01:8e:69:b6:88:66:a5:19:d3:ef:da: e6:99:ae:2e:1d:67:89:7f:58:ed:17:53:1d:77:52: b9:5c:63:7c:33:db:83:2f:da:c7:e5:82:8e:04:93: 01:b6:84:73:90:94:dc:6b:fd:49:3a:c7:c7:13:71: 21:2b:f8:1a:c3:f7:8a:1a:d8:6e:d6:f3:4d:3d:08: 04:b8:81:b6:b2:da:87:1d:21:a8:75:94:d9:10:c1: ee:5d:64:8d:85:c9:c1:c0:86:1b:7c:37:0e:a6:db: fe:88:92:a6:ff:d6:ac:19:05:dc:60:49:03:66:28: 44:8d:e2:0c:bc:f6:68:a0:7d:14:9f:98:99:e0:a4: ed:4e:5e:b3:00:e1:b0:c5:64:47:6b:3e:54:e5:4e: f9:37:ab:3f:eb:7f:96:67:24:34:da:20:9f:2f:24: 15:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:D6:18:13:C7:CE:02:84:1E:F7:E6:C3:10:89:2A:D3:07:81:D0:13 X509v3 Authority Key Identifier: keyid:38:03:AF:DA:7B:CC:D7:DB:E5:CE:9E:90:1A:2B:17:8E:F3:51:51:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/34332e3233302e3132392e302f32342d3234203d3e203233363739.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.230.129.0/24 Signature Algorithm: sha256WithRSAEncryption ac:f1:ac:d4:47:68:09:db:60:e4:b5:fe:82:39:ac:97:b0:7a: c0:82:59:07:98:df:4c:ab:65:7a:df:3d:3c:cf:06:bf:4b:fb: ca:ba:bf:d8:e7:4b:1d:40:1a:c0:48:03:0a:1c:fd:ee:0b:78: 29:cb:c5:f3:a9:be:4c:89:e3:38:72:af:4d:59:4b:ca:ba:c2: d2:25:94:38:2d:6a:de:6d:5f:20:77:41:68:e9:b2:e8:f4:53: d2:42:97:9e:37:ba:57:3a:5b:75:c8:4d:b3:5c:e2:92:97:7c: 6e:2e:73:b1:d1:e7:08:04:35:40:c8:da:59:1d:fa:5a:3a:3c: 85:1f:b7:5f:78:70:9c:1f:89:8e:c5:21:6d:86:6f:53:56:b9: bd:bf:7f:b5:34:60:71:67:54:cc:82:6d:1a:8e:c8:af:e4:db: 87:f8:9c:f2:f3:ac:69:da:3c:c6:0a:16:87:ff:7f:03:17:bd: 8d:4a:b2:2d:bb:bf:52:8c:a5:89:c9:f2:57:c7:b7:fc:ef:a1: 36:6c:a4:9e:0b:a4:3c:6d:37:f4:a5:99:fd:e9:50:80:63:42: 10:f9:c2:a8:5d:ab:a0:bf:90:e0:f5:a7:2c:77:35:6d:34:bd: bd:62:41:92:6e:52:bb:03:9c:b0:e8:9f:f2:13:4c:a7:e3:76: 51:e1:f9:0e -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUUDSM3VfwIlH5gvJlG/VJ8kXVGr8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzgwM0FGREE3QkNDRDdEQkU1Q0U5RTkwMUEyQjE3OEVG MzUxNTFFNTAeFw0yNjA1MDMwMjQ2NDNaFw0yNzA1MDIwMjUxNDNaMDMxMTAvBgNV BAMTKENGRDYxODEzQzdDRTAyODQxRUY3RTZDMzEwODkyQUQzMDc4MUQwMTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxQNUmcMXuYn9IK4Fk49mWXJkz BflkIKpHV+YxiBB9KCw6Kco6n/qqyRqtxpDjb0ugCCiTRUp55J803TsQ4d5Imvrh ZbW+U4EtJ2GUqtu2mXA+Zf/dnbWfJd/4+DcBjmm2iGalGdPv2uaZri4dZ4l/WO0X Ux13UrlcY3wz24Mv2sflgo4EkwG2hHOQlNxr/Uk6x8cTcSEr+BrD94oa2G7W8009 CAS4gbay2ocdIah1lNkQwe5dZI2FycHAhht8Nw6m2/6Ikqb/1qwZBdxgSQNmKESN 4gy89migfRSfmJngpO1OXrMA4bDFZEdrPlTlTvk3qz/rf5ZnJDTaIJ8vJBVvAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUz9YYE8fOAoQe9+bDEIkq0weB0BMwHwYDVR0j BBgwFoAUOAOv2nvM19vlzp6QGisXjvNRUeUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTExNDE3YzAtMzdiYi00NDZkLTg3ZjItZDgxODQxNzhjMTQ5LzAvMzgwM0FGREE3 QkNDRDdEQkU1Q0U5RTkwMUEyQjE3OEVGMzUxNTFFNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zODAzQUZEQTdCQ0NEN0RCRTVDRTlFOTAxQTJCMTc4RUYzNTE1 MUU1LmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzkxMTQxN2MwLTM3YmItNDQ2ZC04 N2YyLWQ4MTg0MTc4YzE0OS8wLzM0MzMyZTMyMzMzMDJlMzEzMjM5MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzIzMzM2MzczOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEACvmgTANBgkqhkiG 9w0BAQsFAAOCAQEArPGs1EdoCdtg5LX+gjmsl7B6wIJZB5jfTKtlet89PM8Gv0v7 yrq/2OdLHUAawEgDChz97gt4KcvF86m+TInjOHKvTVlLyrrC0iWUOC1q3m1fIHdB aOmy6PRT0kKXnje6VzpbdchNs1zikpd8bi5zsdHnCAQ1QMjaWR36Wjo8hR+3X3hw nB+JjsUhbYZvU1a5vb9/tTRgcWdUzIJtGo7Ir+Tbh/ic8vOsado8xgoWh/9/Axe9 jUqyLbu/UoylicnyV8e3/O+hNmykngukPG039KWZ/elQgGNCEPnCqF2roL+Q4PWn LHc1bTS9vWJBkm5SuwOcsOif8hNMp+N2UeH5Dg== -----END CERTIFICATE-----Generated at Wed May 13 05:28:48 2026 by rpki-client