$ rpki-client -vvf rpki-rsync.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/34332e3234372e33342e302f32342d3234203d3e203435333132.roa File: 34332e3234372e33342e302f32342d3234203d3e203435333132.roa (raw, json) Hash identifier: qx/6dJGtzychE9OYtvv22AJt3+rYGrj4aetT4KKd5Pc= Subject key identifier: 83:21:DA:DF:FD:CF:39:62:87:2E:61:DB:CD:FA:2E:01:AA:68:A8:13 Certificate issuer: /CN=E3C116D9160B6F21F7B647D6FB8EC1436CAD88D4 Certificate serial: 502E92EE65D11239DB38BB0577EAC7F82D45FB10 Authority key identifier: E3:C1:16:D9:16:0B:6F:21:F7:B6:47:D6:FB:8E:C1:43:6C:AD:88:D4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E3C116D9160B6F21F7B647D6FB8EC1436CAD88D4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/34332e3234372e33342e302f32342d3234203d3e203435333132.roa Signing time: Sun 03 May 2026 03:05:28 +0000 ROA not before: Sun 03 May 2026 03:00:28 +0000 ROA not after: Sun 02 May 2027 03:05:28 +0000 asID: 45312 IP address blocks: 43.247.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/E3C116D9160B6F21F7B647D6FB8EC1436CAD88D4.crl rsync://rpki-rsync.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/E3C116D9160B6F21F7B647D6FB8EC1436CAD88D4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E3C116D9160B6F21F7B647D6FB8EC1436CAD88D4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 22:46:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:2e:92:ee:65:d1:12:39:db:38:bb:05:77:ea:c7:f8:2d:45:fb:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E3C116D9160B6F21F7B647D6FB8EC1436CAD88D4 Validity Not Before: May 3 03:00:28 2026 GMT Not After : May 2 03:05:28 2027 GMT Subject: CN=8321DADFFDCF3962872E61DBCDFA2E01AA68A813 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:6f:75:2a:81:97:85:4d:3b:46:98:fb:23:4e: 85:47:b8:7a:2b:98:60:41:9e:08:b9:01:28:58:ac: ac:5d:29:3c:64:53:76:f2:f2:fa:4c:50:82:cc:2c: 8c:48:bd:bb:1b:2f:62:99:a3:7e:a3:ee:bb:5f:d6: 84:93:69:dd:33:44:a6:68:48:9e:22:10:cc:81:be: 10:e7:65:0d:91:fc:21:33:af:c0:33:e9:38:b0:80: b9:bd:b1:3e:52:d4:9a:31:24:7c:a3:33:05:95:33: e4:90:87:cc:54:e9:1f:42:26:63:a2:4b:38:db:d6: 1c:cc:ab:f6:f7:4d:5f:9c:ce:60:60:8b:5a:63:2b: a8:7b:fe:2a:9d:64:15:95:c0:5c:9c:ec:3c:4a:98: 4c:43:62:20:72:a4:6a:49:cc:1d:ca:df:2a:eb:88: 8e:fb:a6:9f:49:3a:6b:70:be:74:e8:70:d6:0b:08: e8:66:a6:3c:9f:4a:ef:c0:57:7a:d7:f0:50:0c:e6: d3:0b:0a:96:9d:22:82:05:44:92:60:7c:69:85:01: 95:b9:25:a3:c0:9b:99:35:be:c0:18:36:2b:cc:14: 5e:47:68:65:f0:e6:80:1a:d2:2d:5c:cb:02:e9:e4: dd:e4:26:3b:03:5f:a3:50:14:74:d6:32:09:60:0b: a5:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:21:DA:DF:FD:CF:39:62:87:2E:61:DB:CD:FA:2E:01:AA:68:A8:13 X509v3 Authority Key Identifier: keyid:E3:C1:16:D9:16:0B:6F:21:F7:B6:47:D6:FB:8E:C1:43:6C:AD:88:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/E3C116D9160B6F21F7B647D6FB8EC1436CAD88D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E3C116D9160B6F21F7B647D6FB8EC1436CAD88D4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/34332e3234372e33342e302f32342d3234203d3e203435333132.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.247.34.0/24 Signature Algorithm: sha256WithRSAEncryption 31:79:f5:73:d5:c8:6c:53:eb:4c:e8:ce:7c:b6:cc:db:f3:13: 41:cd:b0:b3:6a:2b:32:00:90:7c:3b:23:15:a6:e9:13:06:cc: c6:5e:2d:8b:1b:cf:de:da:02:74:2e:99:00:a5:1a:2e:57:ad: 94:4f:ca:56:27:8a:ae:00:12:f9:7e:24:cd:e0:34:26:40:3f: 36:72:45:2c:e2:fc:8e:56:6c:f7:45:e5:69:5b:1a:98:e8:f5: 8e:51:37:9f:4b:c5:85:cf:92:0c:17:71:7c:b5:a2:0c:33:07: 16:29:e6:30:42:dc:a9:8c:78:bf:f4:88:52:67:48:c2:80:3f: 8c:7a:e0:62:70:de:75:1c:37:d4:bb:8d:c1:cd:1c:6b:01:27: 77:fb:d1:43:7c:f1:fd:42:6b:06:4f:ce:64:f3:5a:8d:d7:e7: ef:1e:3d:8b:78:df:4f:53:1a:ad:7a:6d:3f:9a:0b:e8:64:5d: 46:34:ae:2b:ec:82:a4:6a:fa:7b:98:97:90:4f:87:fa:f0:7a: c7:f2:10:ed:ef:6b:fd:b9:f0:b6:76:ba:ab:16:8c:1d:ac:c0: 81:fd:4d:44:50:55:ef:0e:6a:a9:60:6e:3a:1b:52:f7:8c:a6: e9:ba:05:6b:cf:34:89:42:d7:61:73:25:5f:b5:a0:37:4c:b7: b2:89:e8:54 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUUC6S7mXREjnbOLsFd+rH+C1F+xAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTNDMTE2RDkxNjBCNkYyMUY3QjY0N0Q2RkI4RUMxNDM2 Q0FEODhENDAeFw0yNjA1MDMwMzAwMjhaFw0yNzA1MDIwMzA1MjhaMDMxMTAvBgNV BAMTKDgzMjFEQURGRkRDRjM5NjI4NzJFNjFEQkNERkEyRTAxQUE2OEE4MTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfb3UqgZeFTTtGmPsjToVHuHor mGBBngi5AShYrKxdKTxkU3by8vpMUILMLIxIvbsbL2KZo36j7rtf1oSTad0zRKZo SJ4iEMyBvhDnZQ2R/CEzr8Az6TiwgLm9sT5S1JoxJHyjMwWVM+SQh8xU6R9CJmOi Szjb1hzMq/b3TV+czmBgi1pjK6h7/iqdZBWVwFyc7DxKmExDYiBypGpJzB3K3yrr iI77pp9JOmtwvnTocNYLCOhmpjyfSu/AV3rX8FAM5tMLCpadIoIFRJJgfGmFAZW5 JaPAm5k1vsAYNivMFF5HaGXw5oAa0i1cywLp5N3kJjsDX6NQFHTWMglgC6XdAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUgyHa3/3POWKHLmHbzfouAapoqBMwHwYDVR0j BBgwFoAU48EW2RYLbyH3tkfW+47BQ2ytiNQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzYyMWY3NTMtYTg4ZS00ZWRmLWEzMDYtYmQ5M2Q1YTM4ZmVhLzAvRTNDMTE2RDkx NjBCNkYyMUY3QjY0N0Q2RkI4RUMxNDM2Q0FEODhENC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FM0MxMTZEOTE2MEI2RjIxRjdCNjQ3RDZGQjhFQzE0MzZDQUQ4 OEQ0LmNlcjCBoQYIKwYBBQUHAQsEgZQwgZEwgY4GCCsGAQUFBzALhoGBcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2M2MjFmNzUzLWE4OGUtNGVkZi1h MzA2LWJkOTNkNWEzOGZlYS8wLzM0MzMyZTMyMzQzNzJlMzMzNDJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDM0MzUzMzMxMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAr9yIwDQYJKoZIhvcN AQELBQADggEBADF59XPVyGxT60zozny2zNvzE0HNsLNqKzIAkHw7IxWm6RMGzMZe LYsbz97aAnQumQClGi5XrZRPylYniq4AEvl+JM3gNCZAPzZyRSzi/I5WbPdF5Wlb Gpjo9Y5RN59LxYXPkgwXcXy1ogwzBxYp5jBC3KmMeL/0iFJnSMKAP4x64GJw3nUc N9S7jcHNHGsBJ3f70UN88f1CawZPzmTzWo3X5+8ePYt4309TGq16bT+aC+hkXUY0 rivsgqRq+nuYl5BPh/rwesfyEO3va/258LZ2uqsWjB2swIH9TURQVe8Oaqlgbjob UveMpum6BWvPNIlC12FzJV+1oDdMt7KJ6FQ= -----END CERTIFICATE-----Generated at Wed May 13 03:58:43 2026 by rpki-client