$ rpki-client -vvf rpki-rsync.idnic.net/repo/cc976ec5-b05a-480f-86da-d557f84a2364/0/3132332e3137362e3132322e302f32332d3234203d3e20313336313036.roa File: 3132332e3137362e3132322e302f32332d3234203d3e20313336313036.roa (raw, json) Hash identifier: Fm5DIjTwEczH/woDzsRLyNQNU1aSAK7oH6OWe3cCsR0= Subject key identifier: AE:78:BF:E1:5D:E8:E9:46:97:B2:C6:61:42:E8:02:0C:83:63:2E:F7 Certificate issuer: /CN=4C83950EB98A8B1F124109BDE09102A2EBC28ACC Certificate serial: 1117D43894E92D8E50045BD655C21613AEDCC67F Authority key identifier: 4C:83:95:0E:B9:8A:8B:1F:12:41:09:BD:E0:91:02:A2:EB:C2:8A:CC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C83950EB98A8B1F124109BDE09102A2EBC28ACC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/cc976ec5-b05a-480f-86da-d557f84a2364/0/3132332e3137362e3132322e302f32332d3234203d3e20313336313036.roa Signing time: Sun 03 May 2026 03:07:13 +0000 ROA not before: Sun 03 May 2026 03:02:13 +0000 ROA not after: Sun 02 May 2027 03:07:13 +0000 asID: 136106 IP address blocks: 123.176.122.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/cc976ec5-b05a-480f-86da-d557f84a2364/0/4C83950EB98A8B1F124109BDE09102A2EBC28ACC.crl rsync://rpki-rsync.idnic.net/repo/cc976ec5-b05a-480f-86da-d557f84a2364/0/4C83950EB98A8B1F124109BDE09102A2EBC28ACC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C83950EB98A8B1F124109BDE09102A2EBC28ACC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 00:34:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:17:d4:38:94:e9:2d:8e:50:04:5b:d6:55:c2:16:13:ae:dc:c6:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4C83950EB98A8B1F124109BDE09102A2EBC28ACC Validity Not Before: May 3 03:02:13 2026 GMT Not After : May 2 03:07:13 2027 GMT Subject: CN=AE78BFE15DE8E94697B2C66142E8020C83632EF7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:c2:cd:70:50:77:8b:37:f2:d5:29:09:3b:40: c7:83:7d:11:80:d2:ba:80:93:0c:12:d4:e5:d1:98: b9:fe:36:22:9c:e1:19:a3:ff:71:e6:ff:14:44:57: a2:02:77:2e:34:d1:81:4b:7c:4d:58:15:67:65:28: ea:e5:a2:57:a5:3f:4f:fd:a2:7d:cb:c8:b7:5f:96: 77:8d:c1:be:4a:4c:a1:71:1a:f4:fc:a3:21:bc:f2: e2:2b:fd:eb:9e:54:35:e9:d8:4e:08:33:64:3c:e6: 02:2a:3f:4d:7d:6c:4b:86:f9:0a:b9:2a:69:26:19: 0e:76:f1:2c:4e:df:8f:54:96:27:4d:50:88:2c:05: b4:30:91:1e:85:97:77:d4:6c:37:ac:29:09:42:5c: 26:d4:44:ce:9d:15:8d:87:cc:a8:f3:14:b2:80:83: fd:7c:73:31:fd:9f:f3:54:5c:4a:2b:2a:92:ff:bb: c7:d6:0f:c7:1b:13:4b:01:ae:87:b4:ee:06:61:95: 37:09:32:83:dd:e2:2a:b9:60:d4:e2:0e:1b:b8:3c: 35:cc:1c:bb:b5:90:b5:5f:3a:8e:f7:0e:d9:e7:fa: 72:46:cd:d2:37:f2:de:c0:34:d7:26:e2:dd:0c:da: 0a:53:bf:be:b9:67:be:95:ea:a3:9d:bf:c9:10:32: df:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:78:BF:E1:5D:E8:E9:46:97:B2:C6:61:42:E8:02:0C:83:63:2E:F7 X509v3 Authority Key Identifier: keyid:4C:83:95:0E:B9:8A:8B:1F:12:41:09:BD:E0:91:02:A2:EB:C2:8A:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/cc976ec5-b05a-480f-86da-d557f84a2364/0/4C83950EB98A8B1F124109BDE09102A2EBC28ACC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C83950EB98A8B1F124109BDE09102A2EBC28ACC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cc976ec5-b05a-480f-86da-d557f84a2364/0/3132332e3137362e3132322e302f32332d3234203d3e20313336313036.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 123.176.122.0/23 Signature Algorithm: sha256WithRSAEncryption b2:c8:65:00:1e:4f:2e:45:1d:03:0e:6e:3c:2a:16:8e:34:fb: e3:64:b2:de:dc:8d:07:34:c9:43:e4:8d:01:90:dc:e2:37:53: 9c:5d:12:5b:67:f9:4f:7d:60:62:ac:6c:d6:7a:45:fa:be:e0: 74:4c:2a:9e:12:66:dd:3e:b2:fb:ea:70:8f:67:e9:72:f3:56: 14:e4:79:38:fc:3e:64:24:01:e2:4c:e6:13:95:89:f4:94:02: 0a:f4:60:17:b9:3d:dc:fd:bd:5c:fb:84:57:0c:43:9d:7d:ae: 8b:99:2f:f7:d5:07:99:d1:a3:91:e0:d9:e2:3a:fe:37:e5:f7: 2b:1d:f0:a5:f7:a8:3b:2c:8c:27:2f:e7:86:05:9e:9c:d3:51: 6c:e8:4e:56:45:49:4b:90:92:28:98:9f:13:a3:6d:a0:59:09: aa:ac:fb:78:84:be:80:74:aa:8f:0b:b3:41:32:ad:f2:8f:e7: cd:7c:07:23:55:3f:f5:a7:5b:e5:a5:f1:00:d8:65:26:18:29: 31:a2:48:f6:5a:25:4f:41:96:d9:55:3c:e3:2b:09:af:39:cc: 79:50:d8:24:a4:39:c1:90:a2:01:11:46:da:06:f8:c4:da:98: 36:72:d9:68:0e:99:d3:a7:86:97:98:f0:11:c4:a8:b0:ed:95: f5:6e:c8:45 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUERfUOJTpLY5QBFvWVcIWE67cxn8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEM4Mzk1MEVCOThBOEIxRjEyNDEwOUJERTA5MTAyQTJF QkMyOEFDQzAeFw0yNjA1MDMwMzAyMTNaFw0yNzA1MDIwMzA3MTNaMDMxMTAvBgNV BAMTKEFFNzhCRkUxNURFOEU5NDY5N0IyQzY2MTQyRTgwMjBDODM2MzJFRjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHws1wUHeLN/LVKQk7QMeDfRGA 0rqAkwwS1OXRmLn+NiKc4Rmj/3Hm/xREV6ICdy400YFLfE1YFWdlKOrlolelP0/9 on3LyLdflneNwb5KTKFxGvT8oyG88uIr/eueVDXp2E4IM2Q85gIqP019bEuG+Qq5 KmkmGQ528SxO349UlidNUIgsBbQwkR6Fl3fUbDesKQlCXCbURM6dFY2HzKjzFLKA g/18czH9n/NUXEorKpL/u8fWD8cbE0sBroe07gZhlTcJMoPd4iq5YNTiDhu4PDXM HLu1kLVfOo73Dtnn+nJGzdI38t7ANNcm4t0M2gpTv765Z76V6qOdv8kQMt8XAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUrni/4V3o6UaXssZhQugCDINjLvcwHwYDVR0j BBgwFoAUTIOVDrmKix8SQQm94JECouvCiswwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2M5NzZlYzUtYjA1YS00ODBmLTg2ZGEtZDU1N2Y4NGEyMzY0LzAvNEM4Mzk1MEVC OThBOEIxRjEyNDEwOUJERTA5MTAyQTJFQkMyOEFDQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80QzgzOTUwRUI5OEE4QjFGMTI0MTA5QkRFMDkxMDJBMkVCQzI4 QUNDLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2NjOTc2ZWM1LWIwNWEtNDgwZi04 NmRhLWQ1NTdmODRhMjM2NC8wLzMxMzIzMzJlMzEzNzM2MmUzMTMyMzIyZTMwMmYz MjMzMmQzMjM0MjAzZDNlMjAzMTMzMzYzMTMwMzYucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAF7sHowDQYJ KoZIhvcNAQELBQADggEBALLIZQAeTy5FHQMObjwqFo40++Nkst7cjQc0yUPkjQGQ 3OI3U5xdEltn+U99YGKsbNZ6Rfq+4HRMKp4SZt0+svvqcI9n6XLzVhTkeTj8PmQk AeJM5hOVifSUAgr0YBe5Pdz9vVz7hFcMQ519rouZL/fVB5nRo5Hg2eI6/jfl9ysd 8KX3qDssjCcv54YFnpzTUWzoTlZFSUuQkiiYnxOjbaBZCaqs+3iEvoB0qo8Ls0Ey rfKP5818ByNVP/WnW+Wl8QDYZSYYKTGiSPZaJU9BltlVPOMrCa85zHlQ2CSkOcGQ ogERRtoG+MTamDZy2WgOmdOnhpeY8BHEqLDtlfVuyEU= -----END CERTIFICATE-----Generated at Wed May 13 05:46:55 2026 by rpki-client