$ rpki-client -vvf rpki-rsync.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/34332e3234372e33352e302f32342d3234203d3e203435333132.roa File: 34332e3234372e33352e302f32342d3234203d3e203435333132.roa (raw, json) Hash identifier: q9WB/muGcJ8++0qA2meMDEOddbA2BwalSzopAMix+i8= Subject key identifier: A5:46:0B:65:22:D0:56:7B:CD:05:26:05:05:B2:94:76:27:42:B3:0A Certificate issuer: /CN=E3C116D9160B6F21F7B647D6FB8EC1436CAD88D4 Certificate serial: 3E6780A801D4AA0EE4DA84341704298F3E7DE758 Authority key identifier: E3:C1:16:D9:16:0B:6F:21:F7:B6:47:D6:FB:8E:C1:43:6C:AD:88:D4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E3C116D9160B6F21F7B647D6FB8EC1436CAD88D4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/34332e3234372e33352e302f32342d3234203d3e203435333132.roa Signing time: Sun 03 May 2026 03:05:25 +0000 ROA not before: Sun 03 May 2026 03:00:25 +0000 ROA not after: Sun 02 May 2027 03:05:25 +0000 asID: 45312 IP address blocks: 43.247.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/E3C116D9160B6F21F7B647D6FB8EC1436CAD88D4.crl rsync://rpki-rsync.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/E3C116D9160B6F21F7B647D6FB8EC1436CAD88D4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E3C116D9160B6F21F7B647D6FB8EC1436CAD88D4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:67:80:a8:01:d4:aa:0e:e4:da:84:34:17:04:29:8f:3e:7d:e7:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E3C116D9160B6F21F7B647D6FB8EC1436CAD88D4 Validity Not Before: May 3 03:00:25 2026 GMT Not After : May 2 03:05:25 2027 GMT Subject: CN=A5460B6522D0567BCD05260505B294762742B30A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:ae:0a:d5:e2:e3:84:db:22:38:84:b6:29:e7: e1:ae:49:d9:41:60:a0:a2:40:b1:ca:ef:86:3b:df: eb:aa:03:1a:4e:95:ad:67:15:da:51:17:93:48:da: a3:37:e3:91:1f:f3:31:08:53:6e:c3:e7:73:85:c1: 1b:66:6d:ae:fc:77:94:3d:b2:76:aa:0d:1c:38:8d: 7e:6a:41:8c:52:71:70:30:ae:d3:2f:b4:3c:82:9f: 4c:8b:05:68:62:50:b9:5b:d3:9b:f9:b1:1c:da:31: 3c:57:95:2b:17:b4:44:e1:34:cc:3f:fb:b8:57:a6: 8d:aa:5e:36:65:de:9b:62:13:b4:55:97:6a:ce:07: 60:58:6d:e6:ab:f5:14:24:71:32:aa:bc:fe:ef:5e: 15:d1:a4:70:ef:e8:1b:86:73:10:ce:5f:45:51:5c: 20:b9:bb:b0:04:22:ed:71:8d:f5:a2:f6:50:f0:0c: 6a:6e:9a:76:0b:90:0c:36:d9:12:3c:62:06:81:cb: 2d:31:62:b7:2e:df:72:e0:f1:3a:d5:48:83:08:04: d7:d2:20:8c:5d:19:54:12:01:db:eb:f0:1a:b1:a0: 49:8c:d3:ba:47:38:71:09:81:59:95:ba:6c:a5:bf: 61:17:43:44:51:31:b3:36:05:ce:64:fe:11:27:9f: 8a:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:46:0B:65:22:D0:56:7B:CD:05:26:05:05:B2:94:76:27:42:B3:0A X509v3 Authority Key Identifier: keyid:E3:C1:16:D9:16:0B:6F:21:F7:B6:47:D6:FB:8E:C1:43:6C:AD:88:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/E3C116D9160B6F21F7B647D6FB8EC1436CAD88D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E3C116D9160B6F21F7B647D6FB8EC1436CAD88D4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/34332e3234372e33352e302f32342d3234203d3e203435333132.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.247.35.0/24 Signature Algorithm: sha256WithRSAEncryption c5:ad:c6:7a:b0:1b:87:61:f8:a4:33:4b:ad:58:96:1b:76:39: df:b7:58:58:d6:fa:26:b6:69:79:e4:ef:56:1b:db:0d:f4:cd: 3b:7c:e1:2d:f7:d1:9d:3a:6c:0b:ad:a0:97:3a:42:2a:1a:b0: 3d:9d:8a:ac:97:d1:f2:33:f3:1c:e7:78:23:b8:49:11:8b:a8: d7:bb:bd:85:aa:48:ea:75:f3:de:f1:c3:c0:73:92:2a:1d:0e: b1:1f:db:c3:ec:64:6e:55:a1:12:fc:5f:49:4e:70:5e:e0:03: cb:26:f3:ae:fa:a6:64:6d:c2:18:e3:04:17:e3:75:fd:3e:17: bf:72:29:1d:f7:7b:80:15:c2:ca:35:ff:21:b6:dc:61:9e:9a: 21:a9:af:ba:c8:0d:ad:5a:f6:49:35:1f:5a:77:98:3d:a8:0d: 1e:e2:cc:3b:11:6a:5d:29:0d:e9:ca:cc:30:28:69:c5:e5:6d: e5:c9:05:b0:0d:5a:41:e3:b9:a0:c9:09:ac:36:5c:36:cf:12: 76:27:96:54:d0:86:20:5a:90:08:fe:2b:6f:ff:ee:18:42:20: eb:c2:4d:c1:2d:61:9d:d2:5a:3c:61:c7:2c:12:c6:d3:e6:82: aa:80:0d:51:bd:9e:cf:ff:02:aa:2c:94:3a:e0:a2:44:bd:6f: d1:1a:80:23 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUPmeAqAHUqg7k2oQ0FwQpjz5951gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTNDMTE2RDkxNjBCNkYyMUY3QjY0N0Q2RkI4RUMxNDM2 Q0FEODhENDAeFw0yNjA1MDMwMzAwMjVaFw0yNzA1MDIwMzA1MjVaMDMxMTAvBgNV BAMTKEE1NDYwQjY1MjJEMDU2N0JDRDA1MjYwNTA1QjI5NDc2Mjc0MkIzMEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPrgrV4uOE2yI4hLYp5+GuSdlB YKCiQLHK74Y73+uqAxpOla1nFdpRF5NI2qM345Ef8zEIU27D53OFwRtmba78d5Q9 snaqDRw4jX5qQYxScXAwrtMvtDyCn0yLBWhiULlb05v5sRzaMTxXlSsXtEThNMw/ +7hXpo2qXjZl3ptiE7RVl2rOB2BYbear9RQkcTKqvP7vXhXRpHDv6BuGcxDOX0VR XCC5u7AEIu1xjfWi9lDwDGpumnYLkAw22RI8YgaByy0xYrcu33Lg8TrVSIMIBNfS IIxdGVQSAdvr8BqxoEmM07pHOHEJgVmVumylv2EXQ0RRMbM2Bc5k/hEnn4pfAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUpUYLZSLQVnvNBSYFBbKUdidCswowHwYDVR0j BBgwFoAU48EW2RYLbyH3tkfW+47BQ2ytiNQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzYyMWY3NTMtYTg4ZS00ZWRmLWEzMDYtYmQ5M2Q1YTM4ZmVhLzAvRTNDMTE2RDkx NjBCNkYyMUY3QjY0N0Q2RkI4RUMxNDM2Q0FEODhENC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FM0MxMTZEOTE2MEI2RjIxRjdCNjQ3RDZGQjhFQzE0MzZDQUQ4 OEQ0LmNlcjCBoQYIKwYBBQUHAQsEgZQwgZEwgY4GCCsGAQUFBzALhoGBcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2M2MjFmNzUzLWE4OGUtNGVkZi1h MzA2LWJkOTNkNWEzOGZlYS8wLzM0MzMyZTMyMzQzNzJlMzMzNTJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDM0MzUzMzMxMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAr9yMwDQYJKoZIhvcN AQELBQADggEBAMWtxnqwG4dh+KQzS61Ylht2Od+3WFjW+ia2aXnk71Yb2w30zTt8 4S330Z06bAutoJc6QioasD2diqyX0fIz8xzneCO4SRGLqNe7vYWqSOp1897xw8Bz kiodDrEf28PsZG5VoRL8X0lOcF7gA8sm8676pmRtwhjjBBfjdf0+F79yKR33e4AV wso1/yG23GGemiGpr7rIDa1a9kk1H1p3mD2oDR7izDsRal0pDenKzDAoacXlbeXJ BbANWkHjuaDJCaw2XDbPEnYnllTQhiBakAj+K2//7hhCIOvCTcEtYZ3SWjxhxywS xtPmgqqADVG9ns//AqoslDrgokS9b9EagCM= -----END CERTIFICATE-----Generated at Wed May 13 03:23:11 2026 by rpki-client