$ rpki-client -vvf rpki-rsync.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/34332e3234372e33322e302f32322d3234203d3e203435333132.roa File: 34332e3234372e33322e302f32322d3234203d3e203435333132.roa (raw, json) Hash identifier: d7VTC+pgE4wgKxdm6p11JaNocnGmzYscctgF4uVwaOg= Subject key identifier: 44:09:7E:6A:F7:47:89:F3:B7:AF:0E:DE:0E:BE:48:1F:F2:A1:45:40 Certificate issuer: /CN=E3C116D9160B6F21F7B647D6FB8EC1436CAD88D4 Certificate serial: 5FC9F59E4874E3AF4E77EF8EF1C3B8CAB8FAB97D Authority key identifier: E3:C1:16:D9:16:0B:6F:21:F7:B6:47:D6:FB:8E:C1:43:6C:AD:88:D4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E3C116D9160B6F21F7B647D6FB8EC1436CAD88D4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/34332e3234372e33322e302f32322d3234203d3e203435333132.roa Signing time: Sun 03 May 2026 03:05:20 +0000 ROA not before: Sun 03 May 2026 03:00:20 +0000 ROA not after: Sun 02 May 2027 03:05:20 +0000 asID: 45312 IP address blocks: 43.247.32.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/E3C116D9160B6F21F7B647D6FB8EC1436CAD88D4.crl rsync://rpki-rsync.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/E3C116D9160B6F21F7B647D6FB8EC1436CAD88D4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E3C116D9160B6F21F7B647D6FB8EC1436CAD88D4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 22:46:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:c9:f5:9e:48:74:e3:af:4e:77:ef:8e:f1:c3:b8:ca:b8:fa:b9:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E3C116D9160B6F21F7B647D6FB8EC1436CAD88D4 Validity Not Before: May 3 03:00:20 2026 GMT Not After : May 2 03:05:20 2027 GMT Subject: CN=44097E6AF74789F3B7AF0EDE0EBE481FF2A14540 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:57:81:2a:aa:7a:43:a7:14:84:b2:87:85:04: 3f:8e:9c:e4:ae:2e:c2:d9:52:f1:6c:cf:d8:ea:5c: 6f:ac:f7:30:dc:8a:43:5d:e8:a4:4e:ca:9f:96:9d: b3:c0:69:c2:0e:20:92:83:e8:2c:93:74:e4:da:fa: ab:93:78:77:7e:4e:73:e9:04:fb:c0:5e:2b:43:16: 4d:ee:65:b0:92:f1:f9:3c:46:4c:ee:f3:d6:59:2b: 36:5e:b0:20:5a:99:a4:73:ee:96:b6:a3:cf:0f:e0: d3:c5:8d:47:e1:4e:95:d5:5d:68:9c:11:27:de:58: 71:c1:fb:34:ee:ff:4c:d0:e8:ad:b1:27:09:90:0c: 24:7a:87:de:4c:80:65:47:68:62:12:87:fb:47:39: 75:98:4e:7b:92:46:fb:99:66:9d:e1:26:ad:ae:cb: 89:b6:cb:de:b4:28:06:35:68:50:40:08:d9:fd:db: d9:9a:25:f9:5d:5f:c1:6a:4b:4a:ee:0d:e8:a8:0d: e0:39:51:5f:ef:65:85:8f:11:43:f7:b7:26:4d:65: 88:ca:13:5b:2c:82:18:21:dc:2f:e5:3c:b6:91:fd: 81:35:1a:1a:42:0c:37:28:d9:00:09:18:b4:e8:6c: 9d:78:18:6d:5a:d6:f8:23:b5:e7:49:7d:62:8e:34: 5c:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:09:7E:6A:F7:47:89:F3:B7:AF:0E:DE:0E:BE:48:1F:F2:A1:45:40 X509v3 Authority Key Identifier: keyid:E3:C1:16:D9:16:0B:6F:21:F7:B6:47:D6:FB:8E:C1:43:6C:AD:88:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/E3C116D9160B6F21F7B647D6FB8EC1436CAD88D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E3C116D9160B6F21F7B647D6FB8EC1436CAD88D4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/34332e3234372e33322e302f32322d3234203d3e203435333132.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.247.32.0/22 Signature Algorithm: sha256WithRSAEncryption 91:be:08:18:01:bb:97:94:50:37:2c:cc:77:3e:a5:a7:1e:73: d5:2b:2b:3d:5d:df:73:64:83:d6:d3:be:57:ca:88:4b:f1:f6: ac:2f:72:e5:43:81:16:a9:0b:c8:f4:e8:c3:19:42:60:94:a9: 4f:11:0b:64:2d:47:48:06:d7:04:14:4a:c1:7a:b9:07:9b:00: e2:3c:53:83:d3:c3:2b:d0:79:5e:3b:07:47:32:3d:10:ec:9a: e8:45:cf:e9:aa:20:5a:b6:1c:50:b1:34:57:2d:d8:d6:d7:eb: 48:26:86:18:ba:5e:21:fb:5d:28:8e:1d:21:a3:7f:00:8e:75: 25:ac:c1:d8:09:a4:cd:ef:e8:90:36:ff:f3:d8:f0:af:17:71: 9b:71:05:2a:e7:e9:36:2b:13:71:28:1e:2f:65:5d:26:34:64: ff:d5:c7:ed:7b:31:c5:d9:39:f0:e5:d4:53:84:55:03:3e:31: 0c:8f:a6:44:e8:7d:9b:e5:cc:1c:7c:3b:d9:a6:7f:f5:cf:44: 55:f2:80:db:40:9e:78:ba:f1:13:88:cc:ff:ca:56:be:e8:b3: 4d:b9:c8:64:0c:73:38:fe:e2:41:26:83:87:c0:b4:17:b6:5e: 19:89:f8:30:86:8b:51:8a:8e:a9:90:fd:5c:bf:fb:2f:8f:3f: 1c:9f:68:21 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUX8n1nkh0469Od++O8cO4yrj6uX0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTNDMTE2RDkxNjBCNkYyMUY3QjY0N0Q2RkI4RUMxNDM2 Q0FEODhENDAeFw0yNjA1MDMwMzAwMjBaFw0yNzA1MDIwMzA1MjBaMDMxMTAvBgNV BAMTKDQ0MDk3RTZBRjc0Nzg5RjNCN0FGMEVERTBFQkU0ODFGRjJBMTQ1NDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9V4EqqnpDpxSEsoeFBD+OnOSu LsLZUvFsz9jqXG+s9zDcikNd6KROyp+WnbPAacIOIJKD6CyTdOTa+quTeHd+TnPp BPvAXitDFk3uZbCS8fk8Rkzu89ZZKzZesCBamaRz7pa2o88P4NPFjUfhTpXVXWic ESfeWHHB+zTu/0zQ6K2xJwmQDCR6h95MgGVHaGISh/tHOXWYTnuSRvuZZp3hJq2u y4m2y960KAY1aFBACNn929maJfldX8FqS0ruDeioDeA5UV/vZYWPEUP3tyZNZYjK E1ssghgh3C/lPLaR/YE1GhpCDDco2QAJGLTobJ14GG1a1vgjtedJfWKONFwRAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQURAl+avdHifO3rw7eDr5IH/KhRUAwHwYDVR0j BBgwFoAU48EW2RYLbyH3tkfW+47BQ2ytiNQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzYyMWY3NTMtYTg4ZS00ZWRmLWEzMDYtYmQ5M2Q1YTM4ZmVhLzAvRTNDMTE2RDkx NjBCNkYyMUY3QjY0N0Q2RkI4RUMxNDM2Q0FEODhENC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FM0MxMTZEOTE2MEI2RjIxRjdCNjQ3RDZGQjhFQzE0MzZDQUQ4 OEQ0LmNlcjCBoQYIKwYBBQUHAQsEgZQwgZEwgY4GCCsGAQUFBzALhoGBcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2M2MjFmNzUzLWE4OGUtNGVkZi1h MzA2LWJkOTNkNWEzOGZlYS8wLzM0MzMyZTMyMzQzNzJlMzMzMjJlMzAyZjMyMzIy ZDMyMzQyMDNkM2UyMDM0MzUzMzMxMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIr9yAwDQYJKoZIhvcN AQELBQADggEBAJG+CBgBu5eUUDcszHc+pacec9UrKz1d33Nkg9bTvlfKiEvx9qwv cuVDgRapC8j06MMZQmCUqU8RC2QtR0gG1wQUSsF6uQebAOI8U4PTwyvQeV47B0cy PRDsmuhFz+mqIFq2HFCxNFct2NbX60gmhhi6XiH7XSiOHSGjfwCOdSWswdgJpM3v 6JA2//PY8K8XcZtxBSrn6TYrE3EoHi9lXSY0ZP/Vx+17McXZOfDl1FOEVQM+MQyP pkTofZvlzBx8O9mmf/XPRFXygNtAnni68ROIzP/KVr7os025yGQMczj+4kEmg4fA tBe2XhmJ+DCGi1GKjqmQ/Vy/+y+PPxyfaCE= -----END CERTIFICATE-----Generated at Wed May 13 04:47:22 2026 by rpki-client