$ rpki-client -vvf rpki-rsync.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/34352e3132362e35362e302f32322d3234203d3e20313332363437.roa File: 34352e3132362e35362e302f32322d3234203d3e20313332363437.roa (raw, json) Hash identifier: 8tz20JsrCmWJ12URHbvfs5cYxrQj1byexdS6hWPseS4= Subject key identifier: CE:4D:38:FA:29:7F:4E:E4:28:AB:99:3F:D8:43:33:26:AF:09:15:F6 Certificate issuer: /CN=BB576835ED8A46E30FB8DDF566ABC47765537EB6 Certificate serial: 3B4A79D8A424E9DDD901B9550678F46067AF1794 Authority key identifier: BB:57:68:35:ED:8A:46:E3:0F:B8:DD:F5:66:AB:C4:77:65:53:7E:B6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB576835ED8A46E30FB8DDF566ABC47765537EB6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/34352e3132362e35362e302f32322d3234203d3e20313332363437.roa Signing time: Sun 03 May 2026 02:57:04 +0000 ROA not before: Sun 03 May 2026 02:52:04 +0000 ROA not after: Sun 02 May 2027 02:57:04 +0000 asID: 132647 IP address blocks: 45.126.56.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/BB576835ED8A46E30FB8DDF566ABC47765537EB6.crl rsync://rpki-rsync.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/BB576835ED8A46E30FB8DDF566ABC47765537EB6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB576835ED8A46E30FB8DDF566ABC47765537EB6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:4a:79:d8:a4:24:e9:dd:d9:01:b9:55:06:78:f4:60:67:af:17:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BB576835ED8A46E30FB8DDF566ABC47765537EB6 Validity Not Before: May 3 02:52:04 2026 GMT Not After : May 2 02:57:04 2027 GMT Subject: CN=CE4D38FA297F4EE428AB993FD8433326AF0915F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:ac:3c:bc:97:2b:c9:98:ba:d0:f1:f6:da:19: 58:d9:35:cd:d8:3a:bc:98:e6:9a:57:17:4b:4f:15: 94:cf:1d:e0:d3:65:c7:7a:78:53:5b:e5:64:6e:87: cf:96:36:ce:46:5d:5d:eb:7b:9a:ac:59:b9:f6:1c: a5:01:9c:97:ba:88:e0:52:83:59:dc:39:cf:ac:e4: a2:0d:2e:9e:d8:10:b1:9b:5a:c1:be:4d:ad:c4:ab: d5:5f:56:fb:d5:d8:44:bb:1a:e9:09:ad:d2:09:fd: 04:01:7e:b8:e1:eb:11:5b:cf:55:06:a6:7e:ac:db: cf:77:0f:41:46:1c:d2:ad:d9:b9:ce:26:f4:ff:c2: 9d:c6:80:15:cc:03:64:87:85:d5:ae:e0:c2:9d:69: 15:dd:5a:43:0e:7d:2e:e3:6e:91:69:9c:cd:cb:04: 6d:79:a8:fe:8f:37:50:96:4e:69:35:25:7e:87:29: 90:aa:17:6e:76:07:cc:47:35:c5:6c:97:f4:cb:b8: 38:25:2d:8d:2d:73:5a:f0:92:ca:ea:71:3f:f0:5f: 1e:e1:99:bd:4a:8c:a6:70:b9:ce:e2:be:e2:24:de: 4f:29:d8:be:6e:e6:4b:68:55:bb:e3:00:0f:b6:ce: 1f:d2:06:ca:74:ef:6d:15:3b:cc:22:0c:da:be:22: f1:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:4D:38:FA:29:7F:4E:E4:28:AB:99:3F:D8:43:33:26:AF:09:15:F6 X509v3 Authority Key Identifier: keyid:BB:57:68:35:ED:8A:46:E3:0F:B8:DD:F5:66:AB:C4:77:65:53:7E:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/BB576835ED8A46E30FB8DDF566ABC47765537EB6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB576835ED8A46E30FB8DDF566ABC47765537EB6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/34352e3132362e35362e302f32322d3234203d3e20313332363437.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.126.56.0/22 Signature Algorithm: sha256WithRSAEncryption 53:75:d8:a9:aa:71:92:cc:37:86:f1:ad:51:e9:d7:26:39:ec: a3:df:89:46:27:c5:6f:ae:8b:24:f7:b7:cf:a7:64:91:1e:32: 2f:a6:10:8c:fb:7f:4b:33:4f:ff:54:67:a3:89:ed:af:31:38: 21:a6:0e:12:48:89:1b:76:a7:f2:bd:a3:fd:a2:1e:60:1a:7b: fb:55:93:10:db:34:09:e8:11:1f:2f:db:6c:8b:d7:2b:d0:56: 2b:b9:df:63:a3:8e:6e:68:53:14:5b:7c:e1:68:56:47:a8:eb: 5b:31:8d:2d:32:9d:94:53:92:a3:1b:29:cd:f3:79:41:5f:c0: 69:e4:8a:34:b5:8d:1b:1a:33:de:28:92:8a:b0:6d:71:dd:07: 66:a5:90:3a:e5:90:d4:92:00:44:d3:c8:36:5a:ce:3a:80:66: 89:ec:d0:2b:56:92:94:2a:ba:d8:ba:fd:e2:20:1e:51:b5:8d: 1c:fc:28:2d:ec:e5:51:29:5e:64:46:aa:c9:b3:97:78:ca:9c: 3b:e3:b4:89:ee:46:e6:fa:35:4d:29:99:dc:b4:72:20:45:2f: 99:5e:8c:0f:ac:6d:01:1c:91:5c:7f:3d:80:d1:85:61:c5:ee: 7d:28:5e:d3:2f:c7:7b:15:32:3c:ea:69:86:39:0a:7a:7e:d0: 6b:e6:cf:61 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUO0p52KQk6d3ZAblVBnj0YGevF5QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkI1NzY4MzVFRDhBNDZFMzBGQjhEREY1NjZBQkM0Nzc2 NTUzN0VCNjAeFw0yNjA1MDMwMjUyMDRaFw0yNzA1MDIwMjU3MDRaMDMxMTAvBgNV BAMTKENFNEQzOEZBMjk3RjRFRTQyOEFCOTkzRkQ4NDMzMzI2QUYwOTE1RjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQrDy8lyvJmLrQ8fbaGVjZNc3Y OryY5ppXF0tPFZTPHeDTZcd6eFNb5WRuh8+WNs5GXV3re5qsWbn2HKUBnJe6iOBS g1ncOc+s5KINLp7YELGbWsG+Ta3Eq9VfVvvV2ES7GukJrdIJ/QQBfrjh6xFbz1UG pn6s2893D0FGHNKt2bnOJvT/wp3GgBXMA2SHhdWu4MKdaRXdWkMOfS7jbpFpnM3L BG15qP6PN1CWTmk1JX6HKZCqF252B8xHNcVsl/TLuDglLY0tc1rwksrqcT/wXx7h mb1KjKZwuc7ivuIk3k8p2L5u5ktoVbvjAA+2zh/SBsp0720VO8wiDNq+IvGXAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUzk04+il/TuQoq5k/2EMzJq8JFfYwHwYDVR0j BBgwFoAUu1doNe2KRuMPuN31ZqvEd2VTfrYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTY2MTdkOGMtZDE1NC00NjFlLWJjY2EtYjY2ZDI2N2NmZmM3LzAvQkI1NzY4MzVF RDhBNDZFMzBGQjhEREY1NjZBQkM0Nzc2NTUzN0VCNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQjU3NjgzNUVEOEE0NkUzMEZCOERERjU2NkFCQzQ3NzY1NTM3 RUI2LmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2E2NjE3ZDhjLWQxNTQtNDYxZS1i Y2NhLWI2NmQyNjdjZmZjNy8wLzM0MzUyZTMxMzIzNjJlMzUzNjJlMzAyZjMyMzIy ZDMyMzQyMDNkM2UyMDMxMzMzMjM2MzQzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi1+ODANBgkqhkiG 9w0BAQsFAAOCAQEAU3XYqapxksw3hvGtUenXJjnso9+JRifFb66LJPe3z6dkkR4y L6YQjPt/SzNP/1Rno4ntrzE4IaYOEkiJG3an8r2j/aIeYBp7+1WTENs0CegRHy/b bIvXK9BWK7nfY6OObmhTFFt84WhWR6jrWzGNLTKdlFOSoxspzfN5QV/AaeSKNLWN Gxoz3iiSirBtcd0HZqWQOuWQ1JIARNPINlrOOoBmiezQK1aSlCq62Lr94iAeUbWN HPwoLezlUSleZEaqybOXeMqcO+O0ie5G5vo1TSmZ3LRyIEUvmV6MD6xtARyRXH89 gNGFYcXufShe0y/HexUyPOpphjkKen7Qa+bPYQ== -----END CERTIFICATE-----Generated at Wed May 13 02:49:56 2026 by rpki-client