$ rpki-client -vvf rpki-rsync.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/34332e3234332e3138342e302f32322d3232203d3e203633383237.roa File: 34332e3234332e3138342e302f32322d3232203d3e203633383237.roa (raw, json) Hash identifier: MAEO7ACMQfPreayi5zBOy6AnAEF+RmZdQiFdMvjwjTI= Subject key identifier: 1D:A4:C5:FD:17:C3:97:DB:90:81:D2:F9:90:50:57:92:CE:40:91:2A Certificate issuer: /CN=08D3D556A989E0E477EFEB8242854D7A4029E6C4 Certificate serial: 5314D44DA530519F496F9CCEBF3AB9699BD5CD23 Authority key identifier: 08:D3:D5:56:A9:89:E0:E4:77:EF:EB:82:42:85:4D:7A:40:29:E6:C4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/08D3D556A989E0E477EFEB8242854D7A4029E6C4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/34332e3234332e3138342e302f32322d3232203d3e203633383237.roa Signing time: Sun 03 May 2026 02:51:57 +0000 ROA not before: Sun 03 May 2026 02:46:57 +0000 ROA not after: Sun 02 May 2027 02:51:57 +0000 asID: 63827 IP address blocks: 43.243.184.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/08D3D556A989E0E477EFEB8242854D7A4029E6C4.crl rsync://rpki-rsync.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/08D3D556A989E0E477EFEB8242854D7A4029E6C4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/08D3D556A989E0E477EFEB8242854D7A4029E6C4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 16:23:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:14:d4:4d:a5:30:51:9f:49:6f:9c:ce:bf:3a:b9:69:9b:d5:cd:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08D3D556A989E0E477EFEB8242854D7A4029E6C4 Validity Not Before: May 3 02:46:57 2026 GMT Not After : May 2 02:51:57 2027 GMT Subject: CN=1DA4C5FD17C397DB9081D2F990505792CE40912A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:62:24:12:8f:98:9d:42:bf:25:44:89:e7:f0: bd:54:32:c6:b4:d9:2e:66:60:6f:dc:a0:b7:b7:10: 30:bb:97:bb:77:52:c6:9a:57:11:5a:00:1c:1f:8e: 62:84:3e:15:e1:b0:c0:d1:5c:1b:6f:99:0e:c7:84: 4c:1f:e9:d1:c7:76:80:c0:f4:e5:13:1b:dc:57:a7: 17:ea:c4:fa:9b:8d:03:68:30:cb:b6:2a:de:f3:66: 04:b0:7c:d4:72:0d:09:ae:f1:a7:f7:48:6a:e8:2b: d3:50:b5:11:e5:e5:09:18:74:35:15:da:13:96:13: 18:90:a0:27:88:bd:b2:c3:3b:6b:e0:a3:e0:ef:e1: 7d:f5:00:1d:2b:18:bd:23:d7:58:23:da:ac:5c:ea: e1:6c:d1:3a:ad:23:bd:3c:bd:72:7d:5c:f5:93:51: 95:3c:84:5d:19:71:11:7b:12:28:b7:2c:2c:f2:f5: 2f:b6:c7:af:3f:e1:d8:58:39:f6:cd:cc:c8:bf:95: 9f:50:38:4d:54:35:d4:73:5a:23:14:07:54:89:4d: a6:15:37:36:c1:d6:b1:a4:8f:8c:f9:fa:32:51:bd: 30:d8:c1:ab:0b:58:b6:2d:93:9c:ab:63:e6:5c:2a: 08:1f:8a:d0:66:14:2e:02:2b:da:e2:8e:82:cf:36: f9:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:A4:C5:FD:17:C3:97:DB:90:81:D2:F9:90:50:57:92:CE:40:91:2A X509v3 Authority Key Identifier: keyid:08:D3:D5:56:A9:89:E0:E4:77:EF:EB:82:42:85:4D:7A:40:29:E6:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/08D3D556A989E0E477EFEB8242854D7A4029E6C4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/08D3D556A989E0E477EFEB8242854D7A4029E6C4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/34332e3234332e3138342e302f32322d3232203d3e203633383237.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.243.184.0/22 Signature Algorithm: sha256WithRSAEncryption 08:85:d5:af:60:c3:a0:ae:b3:49:1f:ca:6f:a7:64:8a:2c:49: f3:6f:ed:f4:dd:f7:54:fb:16:d6:80:f1:e9:a4:e8:16:df:57: 4e:1b:42:54:f2:66:7e:7f:eb:3c:8e:2d:58:f7:21:46:30:c5: e9:69:46:80:6b:7d:e2:36:5c:62:a9:be:a2:23:ae:ad:d8:05: e7:08:e5:42:5e:23:2d:8a:e1:92:15:ed:e0:21:33:7a:ae:65: e2:47:bf:88:4c:d4:3a:cd:2b:bb:e3:b5:90:26:d9:15:2d:d0: 33:6b:34:c1:44:ff:30:90:bc:de:e2:f8:9d:67:9b:38:b0:3f: 7b:e0:14:3c:cc:75:d7:54:ab:c4:18:e0:a8:4f:de:87:d3:38: b1:c5:8c:43:66:b5:bb:73:f4:c5:dd:3e:19:2e:29:57:d0:30: c7:6d:b3:5c:48:94:15:25:4b:82:4e:0d:e2:b5:1f:59:58:95: 4e:95:74:72:67:52:c3:64:92:24:a0:01:c4:dd:34:04:c3:52: 09:b3:4c:25:d9:61:46:4e:2c:d9:f9:9e:54:e3:9c:1b:f2:e3: 9c:37:c9:4f:fa:89:bf:d9:c3:65:a8:fb:cd:9d:a1:09:29:78: 65:3b:0d:b5:58:de:e3:65:b1:94:71:52:aa:0b:74:8d:68:35: 3b:eb:22:dd -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUUxTUTaUwUZ9Jb5zOvzq5aZvVzSMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDhEM0Q1NTZBOTg5RTBFNDc3RUZFQjgyNDI4NTREN0E0 MDI5RTZDNDAeFw0yNjA1MDMwMjQ2NTdaFw0yNzA1MDIwMjUxNTdaMDMxMTAvBgNV BAMTKDFEQTRDNUZEMTdDMzk3REI5MDgxRDJGOTkwNTA1NzkyQ0U0MDkxMkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQYiQSj5idQr8lRInn8L1UMsa0 2S5mYG/coLe3EDC7l7t3UsaaVxFaABwfjmKEPhXhsMDRXBtvmQ7HhEwf6dHHdoDA 9OUTG9xXpxfqxPqbjQNoMMu2Kt7zZgSwfNRyDQmu8af3SGroK9NQtRHl5QkYdDUV 2hOWExiQoCeIvbLDO2vgo+Dv4X31AB0rGL0j11gj2qxc6uFs0TqtI708vXJ9XPWT UZU8hF0ZcRF7Eii3LCzy9S+2x68/4dhYOfbNzMi/lZ9QOE1UNdRzWiMUB1SJTaYV NzbB1rGkj4z5+jJRvTDYwasLWLYtk5yrY+ZcKggfitBmFC4CK9rijoLPNvnJAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUHaTF/RfDl9uQgdL5kFBXks5AkSowHwYDVR0j BBgwFoAUCNPVVqmJ4OR37+uCQoVNekAp5sQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTFhNjg3MTItMWQ5YS00MTQzLTgyZjEtMWM4MmMzMzE2NWVhLzAvMDhEM0Q1NTZB OTg5RTBFNDc3RUZFQjgyNDI4NTREN0E0MDI5RTZDNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wOEQzRDU1NkE5ODlFMEU0NzdFRkVCODI0Mjg1NEQ3QTQwMjlF NkM0LmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzkxYTY4NzEyLTFkOWEtNDE0My04 MmYxLTFjODJjMzMxNjVlYS8wLzM0MzMyZTMyMzQzMzJlMzEzODM0MmUzMDJmMzIz MjJkMzIzMjIwM2QzZTIwMzYzMzM4MzIzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAivzuDANBgkqhkiG 9w0BAQsFAAOCAQEACIXVr2DDoK6zSR/Kb6dkiixJ82/t9N33VPsW1oDx6aToFt9X ThtCVPJmfn/rPI4tWPchRjDF6WlGgGt94jZcYqm+oiOurdgF5wjlQl4jLYrhkhXt 4CEzeq5l4ke/iEzUOs0ru+O1kCbZFS3QM2s0wUT/MJC83uL4nWebOLA/e+AUPMx1 11SrxBjgqE/eh9M4scWMQ2a1u3P0xd0+GS4pV9Awx22zXEiUFSVLgk4N4rUfWViV TpV0cmdSw2SSJKABxN00BMNSCbNMJdlhRk4s2fmeVOOcG/LjnDfJT/qJv9nDZaj7 zZ2hCSl4ZTsNtVje42WxlHFSqgt0jWg1O+si3Q== -----END CERTIFICATE-----Generated at Wed May 13 10:40:30 2026 by rpki-client