$ rpki-client -vvf rpki-rsync.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/34352e3132372e3133322e302f32342d3234203d3e203538343737.roa File: 34352e3132372e3133322e302f32342d3234203d3e203538343737.roa (raw, json) Hash identifier: pK3Vu7dEPBnTFAw3IDhWOXFOflNVhPv7/JjAZ1e/ubk= Subject key identifier: C2:09:BA:33:C7:1F:A5:66:CD:56:30:DD:B6:03:17:B4:86:9E:66:B2 Certificate issuer: /CN=8AE9BB21003E87396CEDD7898B4A50424E8CEC8F Certificate serial: 5B77F9295E2675C49542A4213AFDC51A5A06A6BD Authority key identifier: 8A:E9:BB:21:00:3E:87:39:6C:ED:D7:89:8B:4A:50:42:4E:8C:EC:8F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8AE9BB21003E87396CEDD7898B4A50424E8CEC8F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/34352e3132372e3133322e302f32342d3234203d3e203538343737.roa Signing time: Sun 03 May 2026 03:09:31 +0000 ROA not before: Sun 03 May 2026 03:04:31 +0000 ROA not after: Sun 02 May 2027 03:09:31 +0000 asID: 58477 IP address blocks: 45.127.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/8AE9BB21003E87396CEDD7898B4A50424E8CEC8F.crl rsync://rpki-rsync.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/8AE9BB21003E87396CEDD7898B4A50424E8CEC8F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8AE9BB21003E87396CEDD7898B4A50424E8CEC8F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:77:f9:29:5e:26:75:c4:95:42:a4:21:3a:fd:c5:1a:5a:06:a6:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8AE9BB21003E87396CEDD7898B4A50424E8CEC8F Validity Not Before: May 3 03:04:31 2026 GMT Not After : May 2 03:09:31 2027 GMT Subject: CN=C209BA33C71FA566CD5630DDB60317B4869E66B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:e5:75:1b:03:33:2e:41:fe:f1:54:0e:85:06: 54:2b:30:cd:86:f4:06:83:c1:14:96:b0:4e:9c:a4: c6:b5:2a:15:61:44:d4:32:eb:6e:77:d8:e8:74:97: aa:c9:3b:d4:64:b1:43:ba:5e:b2:dd:91:ab:b5:05: fa:0a:59:a2:55:26:95:65:d8:29:eb:77:cc:e8:06: 8e:41:9a:aa:51:32:7c:05:d7:07:48:f9:40:1e:af: 7c:b0:40:a2:fc:68:f9:50:92:9d:b2:a1:b1:89:bf: 31:8a:df:44:8a:17:1a:05:c4:9d:a3:7f:37:82:45: e2:3b:d9:5d:ec:ad:e6:e7:35:d9:cd:ff:29:79:4e: 12:bc:8c:b4:29:e0:01:7e:cd:9c:d6:e6:3b:04:f6: af:1a:c6:15:e3:fb:7d:ed:e5:c3:11:59:1d:f4:1b: 22:a5:dc:57:a3:39:6f:f2:5e:20:d6:b6:05:cb:db: a9:92:d6:08:7a:59:73:db:60:7f:12:7d:6c:61:b6: 01:d1:35:ef:f9:25:8f:57:f8:17:ee:a7:30:2d:fc: 10:7a:3d:9d:bc:cd:b8:d0:21:05:4d:93:1c:17:bb: 20:09:f6:59:a8:88:c4:91:b3:c8:4a:58:ed:b7:3b: cb:7a:74:ad:69:06:9d:d0:fa:f0:73:64:4f:e7:4a: 7e:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:09:BA:33:C7:1F:A5:66:CD:56:30:DD:B6:03:17:B4:86:9E:66:B2 X509v3 Authority Key Identifier: keyid:8A:E9:BB:21:00:3E:87:39:6C:ED:D7:89:8B:4A:50:42:4E:8C:EC:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/8AE9BB21003E87396CEDD7898B4A50424E8CEC8F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8AE9BB21003E87396CEDD7898B4A50424E8CEC8F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/34352e3132372e3133322e302f32342d3234203d3e203538343737.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.127.132.0/24 Signature Algorithm: sha256WithRSAEncryption 89:be:7c:87:c5:8c:f0:ff:c0:e7:16:7a:d6:90:21:9f:d5:c6: 78:cc:61:10:d2:ab:9f:7a:22:c1:0d:71:a6:aa:da:0b:59:71: dd:32:ee:c9:70:7a:db:8c:9d:87:75:8a:dd:99:85:b0:87:bb: d3:f7:83:81:1f:f6:27:c2:04:f0:30:6c:2e:e2:dd:4c:45:5b: 74:a0:4d:92:2c:a4:40:24:12:eb:0e:3a:bc:df:3a:cf:27:1f: bb:42:98:ec:4a:5e:e0:11:bc:45:88:d7:ee:95:e0:4e:85:33: 03:7e:99:08:00:b3:c8:ca:5a:8f:91:ad:f2:71:4e:48:19:17: 19:db:6c:8e:01:99:59:f5:90:2b:7b:a7:00:41:2b:03:e6:06: d4:94:d0:77:74:3b:9e:c3:a3:87:19:c3:c1:4c:9b:0d:96:88: d7:07:e8:95:99:b1:4b:e4:4a:5d:33:45:4e:3d:13:8d:f9:d6: a9:b6:bf:86:d9:9b:06:38:28:a9:ba:30:77:09:16:44:7d:4c: ff:e6:af:8c:51:ac:4b:ed:92:c1:46:ae:4a:43:42:cf:38:7a: fc:f2:bd:d1:40:60:1b:78:8f:c5:ed:66:db:df:96:9a:08:99: c4:80:7b:f3:46:fb:53:f0:27:40:01:4d:49:31:61:02:bd:df: 17:3c:90:ab -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUW3f5KV4mdcSVQqQhOv3FGloGpr0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEFFOUJCMjEwMDNFODczOTZDRURENzg5OEI0QTUwNDI0 RThDRUM4RjAeFw0yNjA1MDMwMzA0MzFaFw0yNzA1MDIwMzA5MzFaMDMxMTAvBgNV BAMTKEMyMDlCQTMzQzcxRkE1NjZDRDU2MzBEREI2MDMxN0I0ODY5RTY2QjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo5XUbAzMuQf7xVA6FBlQrMM2G 9AaDwRSWsE6cpMa1KhVhRNQy62532Oh0l6rJO9RksUO6XrLdkau1BfoKWaJVJpVl 2Cnrd8zoBo5BmqpRMnwF1wdI+UAer3ywQKL8aPlQkp2yobGJvzGK30SKFxoFxJ2j fzeCReI72V3srebnNdnN/yl5ThK8jLQp4AF+zZzW5jsE9q8axhXj+33t5cMRWR30 GyKl3FejOW/yXiDWtgXL26mS1gh6WXPbYH8SfWxhtgHRNe/5JY9X+BfupzAt/BB6 PZ28zbjQIQVNkxwXuyAJ9lmoiMSRs8hKWO23O8t6dK1pBp3Q+vBzZE/nSn4jAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUwgm6M8cfpWbNVjDdtgMXtIaeZrIwHwYDVR0j BBgwFoAUium7IQA+hzls7deJi0pQQk6M7I8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDNmOGY1NWMtOWUzNS00Y2UyLTg5MGYtMGRlM2UyNDA0NjExLzAvOEFFOUJCMjEw MDNFODczOTZDRURENzg5OEI0QTUwNDI0RThDRUM4Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84QUU5QkIyMTAwM0U4NzM5NkNFREQ3ODk4QjRBNTA0MjRFOENF QzhGLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2QzZjhmNTVjLTllMzUtNGNlMi04 OTBmLTBkZTNlMjQwNDYxMS8wLzM0MzUyZTMxMzIzNzJlMzEzMzMyMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzUzODM0MzczNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC1/hDANBgkqhkiG 9w0BAQsFAAOCAQEAib58h8WM8P/A5xZ61pAhn9XGeMxhENKrn3oiwQ1xpqraC1lx 3TLuyXB624ydh3WK3ZmFsIe70/eDgR/2J8IE8DBsLuLdTEVbdKBNkiykQCQS6w46 vN86zycfu0KY7Epe4BG8RYjX7pXgToUzA36ZCACzyMpaj5Gt8nFOSBkXGdtsjgGZ WfWQK3unAEErA+YG1JTQd3Q7nsOjhxnDwUybDZaI1wfolZmxS+RKXTNFTj0TjfnW qba/htmbBjgoqbowdwkWRH1M/+avjFGsS+2SwUauSkNCzzh6/PK90UBgG3iPxe1m 29+WmgiZxIB780b7U/AnQAFNSTFhAr3fFzyQqw== -----END CERTIFICATE-----Generated at Wed May 13 03:23:25 2026 by rpki-client