$ rpki-client -vvf rpki-rsync.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/34332e3233302e3133302e302f32342d3234203d3e203233363739.roa File: 34332e3233302e3133302e302f32342d3234203d3e203233363739.roa (raw, json) Hash identifier: qy2wfZHRdLfbkgw90ebnyPI4997KQ+iwXU8qrVLm8HY= Subject key identifier: B3:EE:EB:6D:31:25:E7:3E:02:60:4F:0B:74:23:1D:D1:7E:84:FE:FF Certificate issuer: /CN=3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5 Certificate serial: 42043B16183D8189B2A71A846E7E43C7DC1BD84B Authority key identifier: 38:03:AF:DA:7B:CC:D7:DB:E5:CE:9E:90:1A:2B:17:8E:F3:51:51:E5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/34332e3233302e3133302e302f32342d3234203d3e203233363739.roa Signing time: Sun 03 May 2026 02:51:42 +0000 ROA not before: Sun 03 May 2026 02:46:42 +0000 ROA not after: Sun 02 May 2027 02:51:42 +0000 asID: 23679 IP address blocks: 43.230.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5.crl rsync://rpki-rsync.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 20:34:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:04:3b:16:18:3d:81:89:b2:a7:1a:84:6e:7e:43:c7:dc:1b:d8:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5 Validity Not Before: May 3 02:46:42 2026 GMT Not After : May 2 02:51:42 2027 GMT Subject: CN=B3EEEB6D3125E73E02604F0B74231DD17E84FEFF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:6e:81:6e:63:7f:fa:4e:e7:c6:e1:14:24:6b: ef:8b:6b:66:56:e2:27:ad:fa:d8:9d:16:14:94:74: f8:0a:44:f5:2b:07:7e:f0:3d:e4:40:cf:97:f3:da: 83:7a:b8:87:3b:47:af:18:a5:63:6d:fa:ca:b1:30: c6:b5:c2:f9:e3:61:01:bc:01:6b:77:0d:bb:c2:2e: 34:12:f4:2a:1c:a0:48:43:72:0a:a3:87:1b:46:78: 79:93:04:8a:d7:41:e1:04:ce:e5:c3:ae:b5:f2:ee: ee:e1:1b:ee:8d:b2:10:8a:08:63:5b:d8:2d:7b:99: f7:81:88:c1:4b:af:51:40:2c:62:02:75:f5:39:8a: 40:ad:ee:a8:08:5c:50:75:05:4e:67:1e:57:2c:9a: bb:da:9e:c7:c1:7c:f3:09:3f:f7:63:a5:92:31:9a: d2:61:d6:04:93:fe:6d:e4:3a:bc:c0:42:25:60:c1: f5:0b:58:ef:bd:86:f2:f3:7f:7c:f3:53:4e:04:8f: 98:a2:5e:81:2d:c4:b2:78:00:4b:fb:01:88:8d:a3: 1a:bd:61:74:24:74:19:d0:26:4e:27:1a:6e:5b:40: 15:3e:04:7e:c5:ef:09:6a:18:63:3e:25:5b:d2:c3: dd:a3:e8:ff:69:83:7c:ea:39:ef:4e:40:6d:39:47: eb:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:EE:EB:6D:31:25:E7:3E:02:60:4F:0B:74:23:1D:D1:7E:84:FE:FF X509v3 Authority Key Identifier: keyid:38:03:AF:DA:7B:CC:D7:DB:E5:CE:9E:90:1A:2B:17:8E:F3:51:51:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/34332e3233302e3133302e302f32342d3234203d3e203233363739.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.230.130.0/24 Signature Algorithm: sha256WithRSAEncryption 2f:9f:5e:5b:de:4d:49:a4:25:fe:6e:d3:65:32:28:b7:bd:77: 4b:26:2c:6e:52:99:b5:66:11:fe:26:0e:f3:70:87:9e:2b:b3: df:8f:83:6e:0f:5c:38:8c:9d:01:c4:4b:f5:9e:f5:fe:a8:7c: e5:c6:7d:2c:ca:76:b8:1c:b4:5b:1d:f0:7f:b7:e9:81:ee:b5: 81:3b:88:c1:64:7a:60:71:79:6a:b4:41:f2:0f:af:69:62:e0: a1:35:76:8d:31:48:c2:a6:db:8b:ed:55:f6:b5:e4:eb:eb:87: dd:b1:fe:a5:c5:7a:ca:ab:b1:de:da:f4:c0:ce:f1:f3:8c:3c: d3:ab:e6:15:66:a4:f4:33:9b:51:87:02:14:be:26:97:0d:f0: c1:cc:1a:23:be:64:70:45:a1:7c:2b:8a:50:0d:27:ef:57:2f: 31:46:c7:78:cf:5d:2c:f2:d7:3f:c0:d0:44:9c:6d:ec:6d:2b: d4:2c:06:ab:95:ca:6b:bd:19:fc:04:22:0d:0c:e3:f6:ac:1b: 4e:9d:4b:6d:79:43:91:0a:99:aa:a3:f2:29:08:6c:59:c3:e3: be:00:9b:e4:3d:67:db:f7:10:e9:93:b9:1d:f0:08:13:e8:ee: 6a:4f:5c:f5:61:54:40:c3:f6:eb:5f:7c:6a:1d:ea:c4:ec:85: 18:7d:7b:6a -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUQgQ7Fhg9gYmypxqEbn5Dx9wb2EswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzgwM0FGREE3QkNDRDdEQkU1Q0U5RTkwMUEyQjE3OEVG MzUxNTFFNTAeFw0yNjA1MDMwMjQ2NDJaFw0yNzA1MDIwMjUxNDJaMDMxMTAvBgNV BAMTKEIzRUVFQjZEMzEyNUU3M0UwMjYwNEYwQjc0MjMxREQxN0U4NEZFRkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlboFuY3/6TufG4RQka++La2ZW 4iet+tidFhSUdPgKRPUrB37wPeRAz5fz2oN6uIc7R68YpWNt+sqxMMa1wvnjYQG8 AWt3DbvCLjQS9CocoEhDcgqjhxtGeHmTBIrXQeEEzuXDrrXy7u7hG+6NshCKCGNb 2C17mfeBiMFLr1FALGICdfU5ikCt7qgIXFB1BU5nHlcsmrvansfBfPMJP/djpZIx mtJh1gST/m3kOrzAQiVgwfULWO+9hvLzf3zzU04Ej5iiXoEtxLJ4AEv7AYiNoxq9 YXQkdBnQJk4nGm5bQBU+BH7F7wlqGGM+JVvSw92j6P9pg3zqOe9OQG05R+sRAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUs+7rbTEl5z4CYE8LdCMd0X6E/v8wHwYDVR0j BBgwFoAUOAOv2nvM19vlzp6QGisXjvNRUeUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTExNDE3YzAtMzdiYi00NDZkLTg3ZjItZDgxODQxNzhjMTQ5LzAvMzgwM0FGREE3 QkNDRDdEQkU1Q0U5RTkwMUEyQjE3OEVGMzUxNTFFNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zODAzQUZEQTdCQ0NEN0RCRTVDRTlFOTAxQTJCMTc4RUYzNTE1 MUU1LmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzkxMTQxN2MwLTM3YmItNDQ2ZC04 N2YyLWQ4MTg0MTc4YzE0OS8wLzM0MzMyZTMyMzMzMDJlMzEzMzMwMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzIzMzM2MzczOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEACvmgjANBgkqhkiG 9w0BAQsFAAOCAQEAL59eW95NSaQl/m7TZTIot713SyYsblKZtWYR/iYO83CHniuz 34+Dbg9cOIydAcRL9Z71/qh85cZ9LMp2uBy0Wx3wf7fpge61gTuIwWR6YHF5arRB 8g+vaWLgoTV2jTFIwqbbi+1V9rXk6+uH3bH+pcV6yqux3tr0wM7x84w806vmFWak 9DObUYcCFL4mlw3wwcwaI75kcEWhfCuKUA0n71cvMUbHeM9dLPLXP8DQRJxt7G0r 1CwGq5XKa70Z/AQiDQzj9qwbTp1LbXlDkQqZqqPyKQhsWcPjvgCb5D1n2/cQ6ZO5 HfAIE+juak9c9WFUQMP26198ah3qxOyFGH17ag== -----END CERTIFICATE-----Generated at Wed May 13 06:38:02 2026 by rpki-client