$ rpki-client -vvf rpki-rsync.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/34332e3234352e3138302e302f32322d3234203d3e203538333937.roa File: 34332e3234352e3138302e302f32322d3234203d3e203538333937.roa (raw, json) Hash identifier: tc2Aw1xglXhbLRMp6kuTfOMbUtYtC4WfWamomx8fpaI= Subject key identifier: F1:F7:9F:21:D4:D3:01:E8:37:3B:C1:E9:9F:5B:B2:BD:57:D1:8C:0B Certificate issuer: /CN=CAC3A4F21BC8F4DFA74E85151F8B3E9167DA5784 Certificate serial: 51D1C471618802B8C181DF817617C15FF791FB1A Authority key identifier: CA:C3:A4:F2:1B:C8:F4:DF:A7:4E:85:15:1F:8B:3E:91:67:DA:57:84 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAC3A4F21BC8F4DFA74E85151F8B3E9167DA5784.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/34332e3234352e3138302e302f32322d3234203d3e203538333937.roa Signing time: Sun 03 May 2026 03:10:26 +0000 ROA not before: Sun 03 May 2026 03:05:26 +0000 ROA not after: Sun 02 May 2027 03:10:26 +0000 asID: 58397 IP address blocks: 43.245.180.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/CAC3A4F21BC8F4DFA74E85151F8B3E9167DA5784.crl rsync://rpki-rsync.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/CAC3A4F21BC8F4DFA74E85151F8B3E9167DA5784.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAC3A4F21BC8F4DFA74E85151F8B3E9167DA5784.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:d1:c4:71:61:88:02:b8:c1:81:df:81:76:17:c1:5f:f7:91:fb:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CAC3A4F21BC8F4DFA74E85151F8B3E9167DA5784 Validity Not Before: May 3 03:05:26 2026 GMT Not After : May 2 03:10:26 2027 GMT Subject: CN=F1F79F21D4D301E8373BC1E99F5BB2BD57D18C0B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:d1:ef:a3:0b:6b:7e:c3:1f:8f:e2:c8:71:d2: 56:05:25:a7:ec:07:20:38:00:ab:62:e2:ee:36:d3: 9a:0d:63:20:de:49:e3:24:31:b3:e2:7c:b3:d8:ab: 7d:5c:3e:6f:8a:e4:99:db:fa:4d:dd:f8:9c:b3:76: 3a:3f:2e:af:d5:65:8b:3c:02:fc:ec:59:97:d7:ec: bf:ac:75:d1:e1:d4:d6:0d:03:ed:7e:aa:eb:e0:84: a8:65:a2:54:47:2e:f9:d7:e8:5d:7b:6a:c3:2b:3a: 08:ff:70:06:31:82:e9:f1:df:53:62:bf:71:00:d9: f2:e1:a0:06:e3:50:ff:d7:28:ab:cb:c1:9e:90:ae: be:63:cd:97:76:d5:ad:98:33:92:7b:19:cc:39:37: 48:f8:26:1e:8f:f2:bf:8f:da:4a:0c:9c:ee:97:cb: 4a:d4:f7:77:62:15:31:f9:9f:fa:2d:dd:03:f2:19: 75:62:fa:66:08:55:ca:a2:8f:f1:ee:c9:e8:e1:79: e1:a8:47:1e:42:11:37:98:17:9b:db:1d:85:0b:75: 0c:1e:c5:7a:c4:e7:2b:45:29:8c:d4:ec:36:6f:73: d0:d4:74:6d:d5:c0:f2:5f:81:4b:c0:da:f8:9b:4a: 83:35:bf:40:2b:bb:fc:e8:96:29:ec:23:ca:83:81: 7b:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:F7:9F:21:D4:D3:01:E8:37:3B:C1:E9:9F:5B:B2:BD:57:D1:8C:0B X509v3 Authority Key Identifier: keyid:CA:C3:A4:F2:1B:C8:F4:DF:A7:4E:85:15:1F:8B:3E:91:67:DA:57:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/CAC3A4F21BC8F4DFA74E85151F8B3E9167DA5784.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAC3A4F21BC8F4DFA74E85151F8B3E9167DA5784.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/34332e3234352e3138302e302f32322d3234203d3e203538333937.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.245.180.0/22 Signature Algorithm: sha256WithRSAEncryption ae:ba:26:13:6c:d1:00:2d:43:9e:71:e7:45:c0:10:23:24:e9: e9:b8:42:7d:eb:f5:80:93:0e:ad:af:17:fe:73:7a:5d:9d:41: ae:8c:d3:4e:98:ef:27:c4:65:1a:a1:cd:e5:01:80:92:44:ad: 44:4e:f6:51:75:5f:77:c8:d0:6f:3c:b5:8d:b6:d2:66:0b:64: e5:a2:18:21:14:8f:bc:74:c8:ba:a1:e5:26:0a:1e:b1:31:55: c3:b9:03:e1:58:e5:b7:fa:fa:ba:c4:65:a6:6d:a8:ff:a8:26: 8a:54:1c:34:af:38:03:11:51:8a:1b:ef:30:4e:f5:e3:cd:f3: 52:7e:44:64:4f:4d:2d:a9:c6:d2:02:78:f7:82:97:03:08:cf: 49:2c:34:eb:2a:64:7c:3a:e4:fb:3e:a8:fa:e6:b7:58:8a:41: d7:34:67:1a:cd:bf:fe:de:b8:31:f5:d7:3b:bf:35:ba:21:1c: 52:c2:a4:8d:89:3c:81:35:6f:ef:ab:53:45:79:89:48:2d:13: a0:bf:04:62:b4:c8:0a:8d:82:6d:59:ae:79:e5:68:e1:a3:e9: ef:26:43:db:d4:68:e5:dc:fe:fd:97:35:a7:3c:03:5a:e2:fb: 2d:fd:5e:75:b3:35:e3:2e:c6:3e:e7:dd:7d:77:c4:b1:47:a3: 8b:04:00:c6 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUUdHEcWGIArjBgd+BdhfBX/eR+xowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0FDM0E0RjIxQkM4RjRERkE3NEU4NTE1MUY4QjNFOTE2 N0RBNTc4NDAeFw0yNjA1MDMwMzA1MjZaFw0yNzA1MDIwMzEwMjZaMDMxMTAvBgNV BAMTKEYxRjc5RjIxRDREMzAxRTgzNzNCQzFFOTlGNUJCMkJENTdEMThDMEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN0e+jC2t+wx+P4shx0lYFJafs ByA4AKti4u4205oNYyDeSeMkMbPifLPYq31cPm+K5Jnb+k3d+Jyzdjo/Lq/VZYs8 AvzsWZfX7L+sddHh1NYNA+1+quvghKhlolRHLvnX6F17asMrOgj/cAYxgunx31Ni v3EA2fLhoAbjUP/XKKvLwZ6Qrr5jzZd21a2YM5J7Gcw5N0j4Jh6P8r+P2koMnO6X y0rU93diFTH5n/ot3QPyGXVi+mYIVcqij/HuyejheeGoRx5CETeYF5vbHYULdQwe xXrE5ytFKYzU7DZvc9DUdG3VwPJfgUvA2vibSoM1v0Aru/zolinsI8qDgXvNAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQU8fefIdTTAeg3O8Hpn1uyvVfRjAswHwYDVR0j BBgwFoAUysOk8hvI9N+nToUVH4s+kWfaV4QwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDhiOTg3MjItMWNiNC00MGQ0LWFjOGItYzNiY2EyYmNhMjE3LzAvQ0FDM0E0RjIx QkM4RjRERkE3NEU4NTE1MUY4QjNFOTE2N0RBNTc4NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQUMzQTRGMjFCQzhGNERGQTc0RTg1MTUxRjhCM0U5MTY3REE1 Nzg0LmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2Q4Yjk4NzIyLTFjYjQtNDBkNC1h YzhiLWMzYmNhMmJjYTIxNy8wLzM0MzMyZTMyMzQzNTJlMzEzODMwMmUzMDJmMzIz MjJkMzIzNDIwM2QzZTIwMzUzODMzMzkzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAiv1tDANBgkqhkiG 9w0BAQsFAAOCAQEArromE2zRAC1DnnHnRcAQIyTp6bhCfev1gJMOra8X/nN6XZ1B rozTTpjvJ8RlGqHN5QGAkkStRE72UXVfd8jQbzy1jbbSZgtk5aIYIRSPvHTIuqHl JgoesTFVw7kD4Vjlt/r6usRlpm2o/6gmilQcNK84AxFRihvvME71483zUn5EZE9N LanG0gJ494KXAwjPSSw06ypkfDrk+z6o+ua3WIpB1zRnGs2//t64MfXXO781uiEc UsKkjYk8gTVv76tTRXmJSC0ToL8EYrTICo2CbVmueeVo4aPp7yZD29Ro5dz+/Zc1 pzwDWuL7Lf1edbM14y7GPufdfXfEsUejiwQAxg== -----END CERTIFICATE-----Generated at Wed May 13 02:49:09 2026 by rpki-client