$ rpki-client -vvf rpki-rsync.idnic.net/repo/caecb002-24a4-4955-a333-002fdb74553f/0/3132332e3235332e3235322e302f32322d3234203d3e20313339333937.roa File: 3132332e3235332e3235322e302f32322d3234203d3e20313339333937.roa (raw, json) Hash identifier: 4l+iqPdBiSlCoKQVmREPhK2V683AQV+EJjvlxdf5bAw= Subject key identifier: 0A:09:26:98:8F:58:89:40:55:AD:27:C5:E8:52:5D:F2:30:AB:4A:95 Certificate issuer: /CN=EDE74DB94791A93866EC7291214CFE17A2E8847C Certificate serial: 022D257E1CE85DA5E185754A6AADA816754DCB83 Authority key identifier: ED:E7:4D:B9:47:91:A9:38:66:EC:72:91:21:4C:FE:17:A2:E8:84:7C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EDE74DB94791A93866EC7291214CFE17A2E8847C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/caecb002-24a4-4955-a333-002fdb74553f/0/3132332e3235332e3235322e302f32322d3234203d3e20313339333937.roa Signing time: Sun 03 May 2026 03:06:51 +0000 ROA not before: Sun 03 May 2026 03:01:51 +0000 ROA not after: Sun 02 May 2027 03:06:51 +0000 asID: 139397 IP address blocks: 123.253.252.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/caecb002-24a4-4955-a333-002fdb74553f/0/EDE74DB94791A93866EC7291214CFE17A2E8847C.crl rsync://rpki-rsync.idnic.net/repo/caecb002-24a4-4955-a333-002fdb74553f/0/EDE74DB94791A93866EC7291214CFE17A2E8847C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EDE74DB94791A93866EC7291214CFE17A2E8847C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 03:23:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:2d:25:7e:1c:e8:5d:a5:e1:85:75:4a:6a:ad:a8:16:75:4d:cb:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EDE74DB94791A93866EC7291214CFE17A2E8847C Validity Not Before: May 3 03:01:51 2026 GMT Not After : May 2 03:06:51 2027 GMT Subject: CN=0A0926988F58894055AD27C5E8525DF230AB4A95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:bd:4d:d2:78:ba:5a:dc:1b:b9:ee:92:2d:11: 21:0c:b7:0a:de:0b:e4:17:44:c6:d0:92:d4:7d:2a: e9:af:97:cc:2a:eb:b2:3a:3b:24:97:25:21:34:f8: 02:f8:a2:a6:da:fa:33:2a:6c:82:cc:9b:b5:a3:f5: 2c:6d:72:a7:99:4b:84:b8:2c:35:bd:31:8e:49:9e: a6:dd:4d:5c:89:ff:bd:9a:69:76:a8:c4:d0:5a:25: 8d:b9:ca:31:23:c5:da:80:76:e0:07:c9:39:87:a5: ab:5d:ac:6a:f2:2d:7f:38:31:df:28:36:c9:6f:a0: c0:86:ac:91:d5:41:e6:8c:dd:32:4f:ba:4b:d1:72: 96:67:52:03:2d:0a:e3:f0:b8:30:f8:8f:37:16:96: af:56:7b:cd:7c:b9:d4:d5:f5:77:02:80:34:fc:7b: a9:5a:f1:ae:27:9c:68:3b:d1:cf:49:05:ab:55:01: bf:d2:17:3a:7e:9c:bd:ca:c3:2d:34:a7:76:43:70: a9:ef:ab:2e:de:a3:b5:b9:85:a8:58:07:06:7f:59: cf:36:b5:cd:65:e3:a3:e3:45:bb:f7:dd:5b:41:f8: f5:3b:43:ce:5c:e5:d3:76:ec:70:9c:46:a7:fe:fe: dc:e6:92:78:20:c6:41:f8:77:9d:56:ee:5b:2f:24: b0:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:09:26:98:8F:58:89:40:55:AD:27:C5:E8:52:5D:F2:30:AB:4A:95 X509v3 Authority Key Identifier: keyid:ED:E7:4D:B9:47:91:A9:38:66:EC:72:91:21:4C:FE:17:A2:E8:84:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/caecb002-24a4-4955-a333-002fdb74553f/0/EDE74DB94791A93866EC7291214CFE17A2E8847C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EDE74DB94791A93866EC7291214CFE17A2E8847C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/caecb002-24a4-4955-a333-002fdb74553f/0/3132332e3235332e3235322e302f32322d3234203d3e20313339333937.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 123.253.252.0/22 Signature Algorithm: sha256WithRSAEncryption 8a:49:9b:f7:61:01:b4:0b:17:54:84:42:8f:cf:b5:8c:7d:b7: 76:58:10:0b:b0:4e:70:53:34:c0:ed:16:10:b1:06:be:f5:7f: 9a:3e:7a:2d:48:fe:01:a8:4f:89:91:06:20:9e:08:65:ec:3d: 0a:30:ae:7b:b2:97:77:2d:da:29:64:ac:bd:73:ed:cb:35:25: ad:08:10:5f:ef:8c:cc:95:74:f3:65:1f:17:1d:7d:a9:59:64: 56:b6:54:a0:77:a0:55:ae:cd:8e:e6:61:e8:bb:c8:4a:02:55: d0:6c:d7:ab:c4:21:8d:36:8b:15:92:e7:db:1e:35:3f:ea:b9: ba:d3:57:af:9f:d9:c9:c9:49:03:28:3a:52:11:f2:c7:6d:d9: 69:92:a7:e4:33:0d:5f:08:26:48:50:00:cf:9c:7a:bd:3b:8a: f7:20:94:02:f2:ee:f3:45:d3:93:1a:b1:6b:05:91:6c:88:14: 98:ad:87:1a:29:af:11:16:8a:ba:db:84:ca:d3:a6:93:0d:ef: 6e:db:f3:41:37:c2:f3:ad:5d:db:52:29:64:1d:de:d0:ba:f2: 5d:d0:ed:a2:c1:90:d7:35:d9:66:b1:66:87:4c:24:1b:19:0a: 75:15:44:fd:8b:86:c1:9c:bd:4a:33:c4:83:de:c0:64:7c:e4: f3:31:56:6b -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUAi0lfhzoXaXhhXVKaq2oFnVNy4MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRURFNzREQjk0NzkxQTkzODY2RUM3MjkxMjE0Q0ZFMTdB MkU4ODQ3QzAeFw0yNjA1MDMwMzAxNTFaFw0yNzA1MDIwMzA2NTFaMDMxMTAvBgNV BAMTKDBBMDkyNjk4OEY1ODg5NDA1NUFEMjdDNUU4NTI1REYyMzBBQjRBOTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJvU3SeLpa3Bu57pItESEMtwre C+QXRMbQktR9Kumvl8wq67I6OySXJSE0+AL4oqba+jMqbILMm7Wj9SxtcqeZS4S4 LDW9MY5JnqbdTVyJ/72aaXaoxNBaJY25yjEjxdqAduAHyTmHpatdrGryLX84Md8o NslvoMCGrJHVQeaM3TJPukvRcpZnUgMtCuPwuDD4jzcWlq9We818udTV9XcCgDT8 e6la8a4nnGg70c9JBatVAb/SFzp+nL3Kwy00p3ZDcKnvqy7eo7W5hahYBwZ/Wc82 tc1l46PjRbv33VtB+PU7Q85c5dN27HCcRqf+/tzmknggxkH4d51W7lsvJLBFAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUCgkmmI9YiUBVrSfF6FJd8jCrSpUwHwYDVR0j BBgwFoAU7edNuUeRqThm7HKRIUz+F6LohHwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2FlY2IwMDItMjRhNC00OTU1LWEzMzMtMDAyZmRiNzQ1NTNmLzAvRURFNzREQjk0 NzkxQTkzODY2RUM3MjkxMjE0Q0ZFMTdBMkU4ODQ3Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FREU3NERCOTQ3OTFBOTM4NjZFQzcyOTEyMTRDRkUxN0EyRTg4 NDdDLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2NhZWNiMDAyLTI0YTQtNDk1NS1h MzMzLTAwMmZkYjc0NTUzZi8wLzMxMzIzMzJlMzIzNTMzMmUzMjM1MzIyZTMwMmYz MjMyMmQzMjM0MjAzZDNlMjAzMTMzMzkzMzM5Mzcucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7/fwwDQYJ KoZIhvcNAQELBQADggEBAIpJm/dhAbQLF1SEQo/PtYx9t3ZYEAuwTnBTNMDtFhCx Br71f5o+ei1I/gGoT4mRBiCeCGXsPQowrnuyl3ct2ilkrL1z7cs1Ja0IEF/vjMyV dPNlHxcdfalZZFa2VKB3oFWuzY7mYei7yEoCVdBs16vEIY02ixWS59seNT/qubrT V6+f2cnJSQMoOlIR8sdt2WmSp+QzDV8IJkhQAM+cer07ivcglALy7vNF05MasWsF kWyIFJithxoprxEWirrbhMrTppMN727b80E3wvOtXdtSKWQd3tC68l3Q7aLBkNc1 2WaxZodMJBsZCnUVRP2LhsGcvUozxIPewGR85PMxVms= -----END CERTIFICATE-----Generated at Wed May 13 12:51:44 2026 by rpki-client