$ rpki-client -vvf rpki-rsync.idnic.net/repo/c4f9f9a1-4ad8-49ce-9fa9-d476573af50f/0/3132322e3132392e3230302e302f32312d3234203d3e203338373633.roa File: 3132322e3132392e3230302e302f32312d3234203d3e203338373633.roa (raw, json) Hash identifier: Tg4cupk2DXjSvW5xjuL6mIy6JAE0QREMVdBvwDzs2pY= Subject key identifier: 52:C8:C7:DB:26:88:DC:96:8C:04:09:A4:ED:E2:6B:0A:85:98:3D:50 Certificate issuer: /CN=045D9E46EE6E6BBD2AFEE477964C6D9BA9BC1DD4 Certificate serial: 49CD65B350F10933D0AF3CA4389CB5A4166FFBB7 Authority key identifier: 04:5D:9E:46:EE:6E:6B:BD:2A:FE:E4:77:96:4C:6D:9B:A9:BC:1D:D4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/045D9E46EE6E6BBD2AFEE477964C6D9BA9BC1DD4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c4f9f9a1-4ad8-49ce-9fa9-d476573af50f/0/3132322e3132392e3230302e302f32312d3234203d3e203338373633.roa Signing time: Sun 03 May 2026 03:04:57 +0000 ROA not before: Sun 03 May 2026 02:59:57 +0000 ROA not after: Sun 02 May 2027 03:04:57 +0000 asID: 38763 IP address blocks: 122.129.200.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c4f9f9a1-4ad8-49ce-9fa9-d476573af50f/0/045D9E46EE6E6BBD2AFEE477964C6D9BA9BC1DD4.crl rsync://rpki-rsync.idnic.net/repo/c4f9f9a1-4ad8-49ce-9fa9-d476573af50f/0/045D9E46EE6E6BBD2AFEE477964C6D9BA9BC1DD4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/045D9E46EE6E6BBD2AFEE477964C6D9BA9BC1DD4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 19:56:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:cd:65:b3:50:f1:09:33:d0:af:3c:a4:38:9c:b5:a4:16:6f:fb:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=045D9E46EE6E6BBD2AFEE477964C6D9BA9BC1DD4 Validity Not Before: May 3 02:59:57 2026 GMT Not After : May 2 03:04:57 2027 GMT Subject: CN=52C8C7DB2688DC968C0409A4EDE26B0A85983D50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:58:e0:f3:29:d7:54:1c:66:63:16:31:1c:83: b6:65:f5:2f:f7:11:c6:25:56:d5:29:05:2f:18:14: 2c:ba:f5:42:20:20:83:64:e5:4b:68:4e:b1:14:4a: 36:28:26:81:fb:57:e2:6b:70:90:8c:36:61:4c:7b: 7d:e1:ed:28:7a:cc:d2:19:e1:36:a0:80:fc:ad:b3: cc:75:2f:93:ee:42:cc:5f:b8:67:45:1d:1b:02:e3: 5c:9a:4b:12:cd:f5:4d:50:5d:e5:a3:aa:cd:ca:47: 19:d1:21:c5:7f:bd:94:8e:08:14:c7:48:8d:16:1c: 50:29:1b:c8:ba:1c:5b:33:70:61:22:a9:7d:c6:79: 91:09:6b:e3:66:20:a6:98:7f:5a:b3:2d:df:4f:22: 99:0f:32:5a:fc:e0:b9:e9:e1:3e:ae:33:22:67:64: fc:39:e4:9e:b7:cd:8b:84:b5:23:c8:ba:19:26:6d: 20:60:a6:0e:d4:75:12:88:be:59:1d:0f:f5:af:5a: cc:14:42:24:e4:08:cd:9c:f2:1e:11:d5:2e:b5:f6: 9d:b8:53:a9:99:01:4d:79:ee:0f:d4:8b:82:4b:eb: b0:f5:36:f4:62:a1:08:50:50:51:d9:0f:b0:be:71: fe:f0:57:63:a5:0d:fb:15:50:9f:de:fd:1c:ee:89: 99:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:C8:C7:DB:26:88:DC:96:8C:04:09:A4:ED:E2:6B:0A:85:98:3D:50 X509v3 Authority Key Identifier: keyid:04:5D:9E:46:EE:6E:6B:BD:2A:FE:E4:77:96:4C:6D:9B:A9:BC:1D:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c4f9f9a1-4ad8-49ce-9fa9-d476573af50f/0/045D9E46EE6E6BBD2AFEE477964C6D9BA9BC1DD4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/045D9E46EE6E6BBD2AFEE477964C6D9BA9BC1DD4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c4f9f9a1-4ad8-49ce-9fa9-d476573af50f/0/3132322e3132392e3230302e302f32312d3234203d3e203338373633.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 122.129.200.0/21 Signature Algorithm: sha256WithRSAEncryption 74:cf:32:3a:05:fb:d9:f1:3d:7d:07:a7:89:ee:32:16:9f:55: 51:b7:20:b0:14:f5:04:89:29:f7:0b:73:0a:ca:89:71:31:40: 49:87:73:4c:c9:4b:7e:b6:ff:6d:4f:6d:3f:55:88:48:78:51: d5:d2:43:07:07:0f:98:16:31:13:64:7d:a4:24:ff:94:db:2c: 17:f1:f9:54:eb:22:87:a4:41:73:f1:5b:f6:f2:c3:b9:9b:44: ac:95:d8:fa:ee:a6:4e:3e:8b:25:9e:82:48:b3:4a:88:66:a5: c3:db:0f:89:13:2a:83:80:f6:0f:1d:ad:32:83:7f:c9:19:cd: 63:86:df:16:32:a1:f4:f6:7a:77:21:01:39:ab:45:0e:da:c2: b3:14:f2:19:54:57:aa:73:6b:4c:10:6c:68:70:5e:4a:59:db: 93:16:58:b4:21:f3:89:fc:ec:6e:aa:a6:e1:82:45:56:a7:bd: 8d:c3:b9:95:61:6c:6e:ff:63:bb:cc:b0:20:58:5f:da:b3:73: a4:07:2f:45:57:47:fb:a6:ee:cc:d4:d7:01:24:fa:4e:63:fc: ac:70:4b:99:d9:7f:95:43:23:70:33:8e:1d:9a:1d:62:45:16: 14:4f:f8:dd:3c:81:e1:a1:66:42:d1:42:48:c4:3b:c3:4b:f3: c2:15:c2:2f -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUSc1ls1DxCTPQrzykOJy1pBZv+7cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDQ1RDlFNDZFRTZFNkJCRDJBRkVFNDc3OTY0QzZEOUJB OUJDMURENDAeFw0yNjA1MDMwMjU5NTdaFw0yNzA1MDIwMzA0NTdaMDMxMTAvBgNV BAMTKDUyQzhDN0RCMjY4OERDOTY4QzA0MDlBNEVERTI2QjBBODU5ODNENTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTWODzKddUHGZjFjEcg7Zl9S/3 EcYlVtUpBS8YFCy69UIgIINk5UtoTrEUSjYoJoH7V+JrcJCMNmFMe33h7Sh6zNIZ 4TaggPyts8x1L5PuQsxfuGdFHRsC41yaSxLN9U1QXeWjqs3KRxnRIcV/vZSOCBTH SI0WHFApG8i6HFszcGEiqX3GeZEJa+NmIKaYf1qzLd9PIpkPMlr84Lnp4T6uMyJn ZPw55J63zYuEtSPIuhkmbSBgpg7UdRKIvlkdD/WvWswUQiTkCM2c8h4R1S619p24 U6mZAU157g/Ui4JL67D1NvRioQhQUFHZD7C+cf7wV2OlDfsVUJ/e/RzuiZltAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUUsjH2yaI3JaMBAmk7eJrCoWYPVAwHwYDVR0j BBgwFoAUBF2eRu5ua70q/uR3lkxtm6m8HdQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzRmOWY5YTEtNGFkOC00OWNlLTlmYTktZDQ3NjU3M2FmNTBmLzAvMDQ1RDlFNDZF RTZFNkJCRDJBRkVFNDc3OTY0QzZEOUJBOUJDMURENC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wNDVEOUU0NkVFNkU2QkJEMkFGRUU0Nzc5NjRDNkQ5QkE5QkMx REQ0LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2M0ZjlmOWExLTRhZDgtNDljZS05 ZmE5LWQ0NzY1NzNhZjUwZi8wLzMxMzIzMjJlMzEzMjM5MmUzMjMwMzAyZTMwMmYz MjMxMmQzMjM0MjAzZDNlMjAzMzM4MzczNjMzLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDeoHIMA0GCSqG SIb3DQEBCwUAA4IBAQB0zzI6BfvZ8T19B6eJ7jIWn1VRtyCwFPUEiSn3C3MKyolx MUBJh3NMyUt+tv9tT20/VYhIeFHV0kMHBw+YFjETZH2kJP+U2ywX8flU6yKHpEFz 8Vv28sO5m0Ssldj67qZOPoslnoJIs0qIZqXD2w+JEyqDgPYPHa0yg3/JGc1jht8W MqH09np3IQE5q0UO2sKzFPIZVFeqc2tMEGxocF5KWduTFli0IfOJ/OxuqqbhgkVW p72Nw7mVYWxu/2O7zLAgWF/as3OkBy9FV0f7pu7M1NcBJPpOY/yscEuZ2X+VQyNw M44dmh1iRRYUT/jdPIHhoWZC0UJIxDvDS/PCFcIv -----END CERTIFICATE-----Generated at Wed May 13 03:56:41 2026 by rpki-client