$ rpki-client -vvf rpki-rsync.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/34352e3132362e35382e302f32332d3234203d3e20313332363437.roa File: 34352e3132362e35382e302f32332d3234203d3e20313332363437.roa (raw, json) Hash identifier: elFR1hwQeXN8BTtaNU77MnFeZSQYNz4QlrPnRy3FSWk= Subject key identifier: 8D:03:65:01:69:92:85:85:69:11:96:36:2C:B1:16:3A:A3:5F:93:59 Certificate issuer: /CN=BB576835ED8A46E30FB8DDF566ABC47765537EB6 Certificate serial: 5A0854A89287A094C60522DBF6AED97C8156679E Authority key identifier: BB:57:68:35:ED:8A:46:E3:0F:B8:DD:F5:66:AB:C4:77:65:53:7E:B6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB576835ED8A46E30FB8DDF566ABC47765537EB6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/34352e3132362e35382e302f32332d3234203d3e20313332363437.roa Signing time: Sun 03 May 2026 02:57:00 +0000 ROA not before: Sun 03 May 2026 02:52:00 +0000 ROA not after: Sun 02 May 2027 02:57:00 +0000 asID: 132647 IP address blocks: 45.126.58.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/BB576835ED8A46E30FB8DDF566ABC47765537EB6.crl rsync://rpki-rsync.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/BB576835ED8A46E30FB8DDF566ABC47765537EB6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB576835ED8A46E30FB8DDF566ABC47765537EB6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:08:54:a8:92:87:a0:94:c6:05:22:db:f6:ae:d9:7c:81:56:67:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BB576835ED8A46E30FB8DDF566ABC47765537EB6 Validity Not Before: May 3 02:52:00 2026 GMT Not After : May 2 02:57:00 2027 GMT Subject: CN=8D03650169928585691196362CB1163AA35F9359 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:af:01:8a:11:88:8d:df:39:4f:e3:1f:32:2c: 8b:97:2b:e6:36:10:75:d3:98:5e:34:18:5d:0d:94: 6e:bf:41:10:78:c8:3a:29:eb:8e:c7:1c:28:08:83: 9e:64:b7:3d:23:85:ef:32:15:2d:49:3d:f0:04:f7: b0:0f:d8:50:9e:08:e7:ce:71:8c:20:28:7d:e1:a3: 5a:68:f8:c3:66:e7:6c:9f:7a:3d:bb:82:1f:8e:de: 71:c5:83:f3:eb:ba:e2:19:32:38:bd:e3:9d:ee:66: 76:18:21:4b:e8:92:20:cc:af:19:0a:8f:78:2b:59: dc:28:ec:95:25:f7:4c:34:ee:63:f2:d6:ca:f4:1b: a0:9b:dd:9d:ab:ae:f0:6a:a2:c4:fe:10:07:c5:17: 49:7b:94:09:d1:91:05:af:71:f4:49:d2:d9:de:09: 11:56:0b:67:94:aa:60:bf:32:2b:75:ed:5a:e2:21: ec:4b:21:1c:28:d7:1b:a5:93:3f:fc:12:7a:27:c1: 02:fb:c8:6b:00:e7:14:c9:4c:7b:25:de:90:9b:74: 83:1f:78:00:b1:00:4b:e2:17:f2:72:5e:19:63:93: ec:fa:93:dd:7d:27:aa:c5:b6:6c:18:ce:65:82:7b: c7:ff:6b:fd:4c:69:1e:63:16:aa:11:61:fb:ae:c1: db:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:03:65:01:69:92:85:85:69:11:96:36:2C:B1:16:3A:A3:5F:93:59 X509v3 Authority Key Identifier: keyid:BB:57:68:35:ED:8A:46:E3:0F:B8:DD:F5:66:AB:C4:77:65:53:7E:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/BB576835ED8A46E30FB8DDF566ABC47765537EB6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB576835ED8A46E30FB8DDF566ABC47765537EB6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/34352e3132362e35382e302f32332d3234203d3e20313332363437.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.126.58.0/23 Signature Algorithm: sha256WithRSAEncryption 30:af:ab:89:a6:9e:63:04:eb:32:2a:5b:7a:c3:e3:5f:31:f3: 45:8b:2f:ec:92:80:ab:f3:07:80:5a:e3:27:08:de:9b:11:1c: dd:6b:8f:87:4c:1a:39:65:c9:3e:b3:d8:4c:3b:be:49:9b:5e: cb:f0:68:86:09:19:09:30:80:3e:6a:bd:6d:a5:6d:c3:f8:f8: 76:4d:81:ee:28:07:f5:69:55:e6:b2:14:44:52:5b:29:58:10: 60:da:7a:c1:c3:c1:d8:6d:bc:ad:f3:99:18:0b:9a:66:36:45: 12:25:5f:b7:8c:95:2d:ba:e9:d3:b1:b3:17:d9:66:ad:43:a4: c4:02:23:6f:26:d3:35:7b:2b:b2:fd:ea:80:7b:cf:d9:a5:36: ef:e2:0c:10:b8:86:62:14:2f:d0:7e:f5:25:2e:6c:d7:fe:68: c1:d3:88:0b:e6:e2:69:a9:58:09:5e:0d:7a:74:ae:71:71:49: 22:d3:15:50:8a:94:42:b6:06:5b:1b:b6:d5:30:1e:d6:92:a1: dd:4b:22:8f:6b:21:dc:87:01:7d:b1:f7:50:c2:dc:7f:ca:26: 80:e9:d1:70:ee:52:83:2d:4a:8b:36:01:39:8e:bc:54:62:b3: 19:b0:be:f0:14:c8:81:8d:61:eb:a8:67:71:b8:ee:5c:01:19: 06:ab:51:1c -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUWghUqJKHoJTGBSLb9q7ZfIFWZ54wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkI1NzY4MzVFRDhBNDZFMzBGQjhEREY1NjZBQkM0Nzc2 NTUzN0VCNjAeFw0yNjA1MDMwMjUyMDBaFw0yNzA1MDIwMjU3MDBaMDMxMTAvBgNV BAMTKDhEMDM2NTAxNjk5Mjg1ODU2OTExOTYzNjJDQjExNjNBQTM1RjkzNTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkrwGKEYiN3zlP4x8yLIuXK+Y2 EHXTmF40GF0NlG6/QRB4yDop647HHCgIg55ktz0jhe8yFS1JPfAE97AP2FCeCOfO cYwgKH3ho1po+MNm52yfej27gh+O3nHFg/PruuIZMji9453uZnYYIUvokiDMrxkK j3grWdwo7JUl90w07mPy1sr0G6Cb3Z2rrvBqosT+EAfFF0l7lAnRkQWvcfRJ0tne CRFWC2eUqmC/Mit17VriIexLIRwo1xulkz/8EnonwQL7yGsA5xTJTHsl3pCbdIMf eACxAEviF/JyXhljk+z6k919J6rFtmwYzmWCe8f/a/1MaR5jFqoRYfuuwdt5AgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUjQNlAWmShYVpEZY2LLEWOqNfk1kwHwYDVR0j BBgwFoAUu1doNe2KRuMPuN31ZqvEd2VTfrYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTY2MTdkOGMtZDE1NC00NjFlLWJjY2EtYjY2ZDI2N2NmZmM3LzAvQkI1NzY4MzVF RDhBNDZFMzBGQjhEREY1NjZBQkM0Nzc2NTUzN0VCNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQjU3NjgzNUVEOEE0NkUzMEZCOERERjU2NkFCQzQ3NzY1NTM3 RUI2LmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2E2NjE3ZDhjLWQxNTQtNDYxZS1i Y2NhLWI2NmQyNjdjZmZjNy8wLzM0MzUyZTMxMzIzNjJlMzUzODJlMzAyZjMyMzMy ZDMyMzQyMDNkM2UyMDMxMzMzMjM2MzQzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAS1+OjANBgkqhkiG 9w0BAQsFAAOCAQEAMK+riaaeYwTrMipbesPjXzHzRYsv7JKAq/MHgFrjJwjemxEc 3WuPh0waOWXJPrPYTDu+SZtey/BohgkZCTCAPmq9baVtw/j4dk2B7igH9WlV5rIU RFJbKVgQYNp6wcPB2G28rfOZGAuaZjZFEiVft4yVLbrp07GzF9lmrUOkxAIjbybT NXsrsv3qgHvP2aU27+IMELiGYhQv0H71JS5s1/5owdOIC+biaalYCV4NenSucXFJ ItMVUIqUQrYGWxu21TAe1pKh3Usij2sh3IcBfbH3UMLcf8omgOnRcO5Sgy1KizYB OY68VGKzGbC+8BTIgY1h66hncbjuXAEZBqtRHA== -----END CERTIFICATE-----Generated at Wed May 13 02:15:33 2026 by rpki-client