$ rpki-client -vvf rpki-rsync.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/34352e3131382e3131342e302f32342d3234203d3e20313331373137.roa File: 34352e3131382e3131342e302f32342d3234203d3e20313331373137.roa (raw, json) Hash identifier: YBmRyy3cm/KALp/wtAif41lJP/42XGDuyciPr2frXjE= Subject key identifier: 85:92:D4:45:F9:15:8F:7F:B9:BE:59:34:B4:E1:6A:E4:A5:60:E2:C3 Certificate issuer: /CN=CB0A606FD0642E68B5212AE751953E0B9A92959F Certificate serial: 5F200417728A120B796F3B620372EEB8EA8F723F Authority key identifier: CB:0A:60:6F:D0:64:2E:68:B5:21:2A:E7:51:95:3E:0B:9A:92:95:9F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB0A606FD0642E68B5212AE751953E0B9A92959F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/34352e3131382e3131342e302f32342d3234203d3e20313331373137.roa Signing time: Sun 03 May 2026 03:08:07 +0000 ROA not before: Sun 03 May 2026 03:03:07 +0000 ROA not after: Sun 02 May 2027 03:08:07 +0000 asID: 131717 IP address blocks: 45.118.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/CB0A606FD0642E68B5212AE751953E0B9A92959F.crl rsync://rpki-rsync.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/CB0A606FD0642E68B5212AE751953E0B9A92959F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB0A606FD0642E68B5212AE751953E0B9A92959F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 08:16:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:20:04:17:72:8a:12:0b:79:6f:3b:62:03:72:ee:b8:ea:8f:72:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CB0A606FD0642E68B5212AE751953E0B9A92959F Validity Not Before: May 3 03:03:07 2026 GMT Not After : May 2 03:08:07 2027 GMT Subject: CN=8592D445F9158F7FB9BE5934B4E16AE4A560E2C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:ca:9c:e8:b1:f5:0f:43:09:da:c5:25:c7:bc: 55:eb:f7:e5:2e:59:c8:6a:21:84:b5:b2:1b:d4:d4: 05:47:ce:6d:b3:52:99:ce:9e:db:f7:2a:64:23:03: 0d:01:fb:71:cc:f3:70:ae:7e:a5:8b:c6:cc:93:eb: f7:90:ee:ce:e7:e1:b2:ea:7a:4c:e5:79:e9:49:08: 25:4e:78:1b:76:2a:9f:e9:a1:d6:bf:d6:38:93:10: 6b:70:e6:43:a8:11:5a:2c:47:47:1a:b6:49:88:da: e3:bb:93:22:3b:cd:fa:a3:0f:1d:44:54:4d:f6:80: 22:1c:8f:f7:1d:cc:41:ec:3f:0e:e7:51:10:d7:2b: 82:fc:df:05:eb:af:d5:90:98:b4:1b:51:70:1b:30: 3d:8c:12:f3:8b:3a:00:72:25:b2:7f:9c:23:5e:a6: e2:fa:b6:d9:79:c8:ae:35:48:50:4c:63:45:ff:5b: 77:55:76:3c:bf:0c:9b:e4:18:2d:9e:00:34:d8:1f: 3d:1a:6c:89:17:c6:96:46:dd:51:04:e8:df:d6:a6: 0c:ca:94:d2:67:21:6a:6e:d9:cf:9f:5f:29:64:87: a4:f4:9c:a5:c1:a7:a4:fc:ce:53:61:04:dd:fd:61: 63:9b:85:d0:af:0b:09:3e:3c:1f:37:48:05:8e:42: 5b:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:92:D4:45:F9:15:8F:7F:B9:BE:59:34:B4:E1:6A:E4:A5:60:E2:C3 X509v3 Authority Key Identifier: keyid:CB:0A:60:6F:D0:64:2E:68:B5:21:2A:E7:51:95:3E:0B:9A:92:95:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/CB0A606FD0642E68B5212AE751953E0B9A92959F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB0A606FD0642E68B5212AE751953E0B9A92959F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/34352e3131382e3131342e302f32342d3234203d3e20313331373137.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.118.114.0/24 Signature Algorithm: sha256WithRSAEncryption 10:a1:31:db:0f:a2:c4:c3:21:d2:2d:05:34:58:38:01:72:c8: 7b:16:c5:b4:2a:6d:ec:d3:8e:67:c2:38:46:4a:69:d3:16:57: de:dc:66:c9:09:56:ee:c0:c2:10:96:9a:c0:49:5c:ab:d9:51: 49:14:c3:ec:55:f1:20:a8:f8:ba:00:c2:96:24:cc:45:3e:8d: 01:81:17:ef:7f:c6:ff:75:9a:40:94:b4:b1:a7:d3:f6:f4:18: fd:4e:3b:61:84:03:27:7c:da:1a:98:ca:e3:f8:44:27:f9:16: 2c:b9:8d:b5:97:6c:42:15:d4:9a:7d:ef:a3:20:b2:d9:92:ea: 95:af:96:9e:a9:ab:0f:ff:dd:f8:e3:b9:c6:25:bf:dc:0b:25: fb:4c:90:f4:fc:98:92:d3:92:54:1c:ce:71:3f:34:59:e1:80: bf:d4:5e:a5:77:56:05:83:91:2d:79:14:91:f9:ca:75:8b:7c: 7a:06:94:43:eb:d5:03:99:e6:9e:bc:4c:2b:83:1c:0a:89:2d: 2f:8d:34:6e:35:66:57:36:b0:a3:5c:04:41:5f:23:c4:ba:3c: 4d:99:b3:01:13:9f:66:dc:20:96:c7:55:44:ca:48:38:45:bb: 87:10:db:30:ec:28:3a:59:be:39:11:fd:fc:fd:fa:30:5a:19: bb:98:05:6a -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUXyAEF3KKEgt5bztiA3LuuOqPcj8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0IwQTYwNkZEMDY0MkU2OEI1MjEyQUU3NTE5NTNFMEI5 QTkyOTU5RjAeFw0yNjA1MDMwMzAzMDdaFw0yNzA1MDIwMzA4MDdaMDMxMTAvBgNV BAMTKDg1OTJENDQ1RjkxNThGN0ZCOUJFNTkzNEI0RTE2QUU0QTU2MEUyQzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChypzosfUPQwnaxSXHvFXr9+Uu WchqIYS1shvU1AVHzm2zUpnOntv3KmQjAw0B+3HM83CufqWLxsyT6/eQ7s7n4bLq ekzleelJCCVOeBt2Kp/poda/1jiTEGtw5kOoEVosR0catkmI2uO7kyI7zfqjDx1E VE32gCIcj/cdzEHsPw7nURDXK4L83wXrr9WQmLQbUXAbMD2MEvOLOgByJbJ/nCNe puL6ttl5yK41SFBMY0X/W3dVdjy/DJvkGC2eADTYHz0abIkXxpZG3VEE6N/WpgzK lNJnIWpu2c+fXylkh6T0nKXBp6T8zlNhBN39YWObhdCvCwk+PB83SAWOQltxAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUhZLURfkVj3+5vlk0tOFq5KVg4sMwHwYDVR0j BBgwFoAUywpgb9BkLmi1ISrnUZU+C5qSlZ8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDA3NDcxYTMtZWU1My00OTljLTlmMmQtY2YxNmIxZTRhMzUzLzAvQ0IwQTYwNkZE MDY0MkU2OEI1MjEyQUU3NTE5NTNFMEI5QTkyOTU5Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQjBBNjA2RkQwNjQyRTY4QjUyMTJBRTc1MTk1M0UwQjlBOTI5 NTlGLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2QwNzQ3MWEzLWVlNTMtNDk5Yy05 ZjJkLWNmMTZiMWU0YTM1My8wLzM0MzUyZTMxMzEzODJlMzEzMTM0MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzMxMzczMTM3LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALXZyMA0GCSqG SIb3DQEBCwUAA4IBAQAQoTHbD6LEwyHSLQU0WDgBcsh7FsW0Km3s045nwjhGSmnT Flfe3GbJCVbuwMIQlprASVyr2VFJFMPsVfEgqPi6AMKWJMxFPo0BgRfvf8b/dZpA lLSxp9P29Bj9TjthhAMnfNoamMrj+EQn+RYsuY21l2xCFdSafe+jILLZkuqVr5ae qasP/93447nGJb/cCyX7TJD0/JiS05JUHM5xPzRZ4YC/1F6ld1YFg5EteRSR+cp1 i3x6BpRD69UDmeaevEwrgxwKiS0vjTRuNWZXNrCjXARBXyPEujxNmbMBE59m3CCW x1VEykg4RbuHENsw7Cg6Wb45Ef38/fowWhm7mAVq -----END CERTIFICATE-----Generated at Wed May 13 01:36:56 2026 by rpki-client