$ rpki-client -vvf rpki-rsync.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/34332e3234372e31322e302f32322d3234203d3e203338333230.roa File: 34332e3234372e31322e302f32322d3234203d3e203338333230.roa (raw, json) Hash identifier: SBWhEba9nbctUyFhfmHmCGJfJLFuvZIwVJb4MxQzTUY= Subject key identifier: 11:4B:89:D2:F6:49:35:8A:1A:CD:3D:36:09:D7:6E:0D:BC:5B:9D:13 Certificate issuer: /CN=1DACDC41C28CE5C38F4251C614DE100A3F1EFCAD Certificate serial: 5F7A9017CABADF8B95E72EEDD65E3B73E4B71422 Authority key identifier: 1D:AC:DC:41:C2:8C:E5:C3:8F:42:51:C6:14:DE:10:0A:3F:1E:FC:AD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1DACDC41C28CE5C38F4251C614DE100A3F1EFCAD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/34332e3234372e31322e302f32322d3234203d3e203338333230.roa Signing time: Sun 03 May 2026 02:58:02 +0000 ROA not before: Sun 03 May 2026 02:53:02 +0000 ROA not after: Sun 02 May 2027 02:58:02 +0000 asID: 38320 IP address blocks: 43.247.12.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/1DACDC41C28CE5C38F4251C614DE100A3F1EFCAD.crl rsync://rpki-rsync.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/1DACDC41C28CE5C38F4251C614DE100A3F1EFCAD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1DACDC41C28CE5C38F4251C614DE100A3F1EFCAD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 03:13:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:7a:90:17:ca:ba:df:8b:95:e7:2e:ed:d6:5e:3b:73:e4:b7:14:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1DACDC41C28CE5C38F4251C614DE100A3F1EFCAD Validity Not Before: May 3 02:53:02 2026 GMT Not After : May 2 02:58:02 2027 GMT Subject: CN=114B89D2F649358A1ACD3D3609D76E0DBC5B9D13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:63:5e:b8:c7:f5:00:f2:76:99:81:28:a5:e2: b3:c4:44:6f:d3:58:99:8d:e5:0f:0a:c2:36:29:cc: 27:28:d1:3a:42:1f:39:81:02:f4:a6:99:e7:ce:a3: d0:82:6d:ea:82:b3:b6:3d:05:aa:ab:58:c4:37:43: 34:d7:4e:2e:70:36:fa:99:69:cc:9e:55:49:24:dc: 43:2e:c3:dc:46:a4:46:22:71:38:4a:78:47:ff:ae: 18:ed:b3:3e:3d:02:66:63:34:d4:36:45:60:9c:44: a1:2d:21:6f:d1:7b:20:24:d3:9b:1d:2b:48:c6:c2: ce:10:d5:0b:76:49:5e:e2:d9:47:df:3c:68:06:74: 64:07:c1:0d:39:10:15:7f:8f:ab:ec:23:73:e6:c6: e2:a4:bb:0d:87:09:80:07:a9:76:c7:fd:bb:8f:f5: e3:79:2d:6d:32:86:11:a3:1e:68:c1:2a:41:a3:f8: 7f:d4:33:ab:bb:ab:e9:71:f5:31:e4:7b:f6:8c:97: 66:22:16:21:2b:55:52:e4:3b:36:9f:ca:90:4c:13: cb:0f:02:5a:e8:78:92:a2:36:1c:47:9b:ed:e6:08: 49:02:93:02:92:48:6f:ac:95:cf:92:e0:71:0a:e7: f0:13:2c:60:b9:2a:1a:e4:d6:41:92:de:40:8f:fe: db:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:4B:89:D2:F6:49:35:8A:1A:CD:3D:36:09:D7:6E:0D:BC:5B:9D:13 X509v3 Authority Key Identifier: keyid:1D:AC:DC:41:C2:8C:E5:C3:8F:42:51:C6:14:DE:10:0A:3F:1E:FC:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/1DACDC41C28CE5C38F4251C614DE100A3F1EFCAD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1DACDC41C28CE5C38F4251C614DE100A3F1EFCAD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/34332e3234372e31322e302f32322d3234203d3e203338333230.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.247.12.0/22 Signature Algorithm: sha256WithRSAEncryption 9d:fd:53:b4:16:cc:c1:ef:ed:3f:61:6e:6f:7b:4a:bb:42:53: 61:79:4f:28:b3:a7:0a:2b:da:e2:94:e0:b8:68:48:57:a1:0e: de:7f:50:20:a2:9f:ab:78:87:d9:b0:c4:0f:6d:b8:8a:fd:8f: ff:19:3d:0f:7d:31:d2:e0:ff:b0:b7:b9:4a:75:ac:b6:35:f5: 0c:0b:24:d6:02:dd:64:b5:1e:39:4c:5c:e0:ac:81:c9:76:0b: 43:02:31:84:ec:ad:d4:a8:e4:ca:38:dd:76:9f:b3:c8:c0:b4: 1d:dd:2d:0e:69:f4:ba:34:d9:f0:0c:c9:2f:a6:31:8a:6f:4a: 71:db:e8:2b:07:27:c4:db:2b:36:14:4a:57:81:93:46:a6:7a: e0:13:26:08:76:30:32:a2:d1:b4:6e:27:e1:20:07:26:44:0c: ea:bb:30:ca:91:7e:51:fc:8d:a3:aa:c3:c3:8e:ed:af:04:10: 1d:3b:c0:c8:71:f6:97:87:fe:20:ca:3f:1a:91:d8:1b:d7:33: 52:3a:83:aa:a3:ec:f9:dd:3a:ec:e1:ea:9c:6e:06:43:1e:f7: 8a:07:54:c9:e4:b8:e4:05:06:63:f6:42:75:46:d7:87:fb:c1: b8:a3:d8:52:bf:6d:1c:61:4d:a8:36:02:24:19:27:38:b6:a7: 43:0e:d7:be -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUX3qQF8q634uV5y7t1l47c+S3FCIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMURBQ0RDNDFDMjhDRTVDMzhGNDI1MUM2MTRERTEwMEEz RjFFRkNBRDAeFw0yNjA1MDMwMjUzMDJaFw0yNzA1MDIwMjU4MDJaMDMxMTAvBgNV BAMTKDExNEI4OUQyRjY0OTM1OEExQUNEM0QzNjA5RDc2RTBEQkM1QjlEMTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxY164x/UA8naZgSil4rPERG/T WJmN5Q8KwjYpzCco0TpCHzmBAvSmmefOo9CCbeqCs7Y9BaqrWMQ3QzTXTi5wNvqZ acyeVUkk3EMuw9xGpEYicThKeEf/rhjtsz49AmZjNNQ2RWCcRKEtIW/ReyAk05sd K0jGws4Q1Qt2SV7i2UffPGgGdGQHwQ05EBV/j6vsI3PmxuKkuw2HCYAHqXbH/buP 9eN5LW0yhhGjHmjBKkGj+H/UM6u7q+lx9THke/aMl2YiFiErVVLkOzafypBME8sP AlroeJKiNhxHm+3mCEkCkwKSSG+slc+S4HEK5/ATLGC5Khrk1kGS3kCP/ts/AgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUEUuJ0vZJNYoazT02CdduDbxbnRMwHwYDVR0j BBgwFoAUHazcQcKM5cOPQlHGFN4QCj8e/K0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTk0NWI4NmUtMDg5NS00NzU5LWE3N2MtYTA2Y2UxNGUyNDNjLzAvMURBQ0RDNDFD MjhDRTVDMzhGNDI1MUM2MTRERTEwMEEzRjFFRkNBRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xREFDREM0MUMyOENFNUMzOEY0MjUxQzYxNERFMTAwQTNGMUVG Q0FELmNlcjCBoQYIKwYBBQUHAQsEgZQwgZEwgY4GCCsGAQUFBzALhoGBcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2E5NDViODZlLTA4OTUtNDc1OS1h NzdjLWEwNmNlMTRlMjQzYy8wLzM0MzMyZTMyMzQzNzJlMzEzMjJlMzAyZjMyMzIy ZDMyMzQyMDNkM2UyMDMzMzgzMzMyMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIr9wwwDQYJKoZIhvcN AQELBQADggEBAJ39U7QWzMHv7T9hbm97SrtCU2F5Tyizpwor2uKU4LhoSFehDt5/ UCCin6t4h9mwxA9tuIr9j/8ZPQ99MdLg/7C3uUp1rLY19QwLJNYC3WS1HjlMXOCs gcl2C0MCMYTsrdSo5Mo43Xafs8jAtB3dLQ5p9Lo02fAMyS+mMYpvSnHb6CsHJ8Tb KzYUSleBk0ameuATJgh2MDKi0bRuJ+EgByZEDOq7MMqRflH8jaOqw8OO7a8EEB07 wMhx9peH/iDKPxqR2BvXM1I6g6qj7PndOuzh6pxuBkMe94oHVMnkuOQFBmP2QnVG 14f7wbij2FK/bRxhTag2AiQZJzi2p0MO174= -----END CERTIFICATE-----Generated at Wed May 13 07:52:47 2026 by rpki-client