$ rpki-client -vvf rpki-rsync.idnic.net/repo/d9b899ac-4870-4e28-8e4e-2c23752a4a60/0/34352e3234392e3232342e302f32332d3233203d3e20313532303237.roa File: 34352e3234392e3232342e302f32332d3233203d3e20313532303237.roa (raw, json) Hash identifier: JM/02KXvppUFA6M2lfoMyS0PaD1KXTG0P2tE2Kswrq4= Subject key identifier: 37:C5:9C:15:F2:64:0C:D0:42:BB:B2:03:8A:0B:EB:AF:D2:68:8A:9F Certificate issuer: /CN=228D8D937BBC58B186163CE4DD0333EF171136B5 Certificate serial: 29A26C7AEF4E8AF37552B1A63A9F80C145CD2A37 Authority key identifier: 22:8D:8D:93:7B:BC:58:B1:86:16:3C:E4:DD:03:33:EF:17:11:36:B5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/228D8D937BBC58B186163CE4DD0333EF171136B5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d9b899ac-4870-4e28-8e4e-2c23752a4a60/0/34352e3234392e3232342e302f32332d3233203d3e20313532303237.roa Signing time: Sun 03 May 2026 03:10:53 +0000 ROA not before: Sun 03 May 2026 03:05:53 +0000 ROA not after: Sun 02 May 2027 03:10:53 +0000 asID: 152027 IP address blocks: 45.249.224.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d9b899ac-4870-4e28-8e4e-2c23752a4a60/0/228D8D937BBC58B186163CE4DD0333EF171136B5.crl rsync://rpki-rsync.idnic.net/repo/d9b899ac-4870-4e28-8e4e-2c23752a4a60/0/228D8D937BBC58B186163CE4DD0333EF171136B5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/228D8D937BBC58B186163CE4DD0333EF171136B5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:a2:6c:7a:ef:4e:8a:f3:75:52:b1:a6:3a:9f:80:c1:45:cd:2a:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=228D8D937BBC58B186163CE4DD0333EF171136B5 Validity Not Before: May 3 03:05:53 2026 GMT Not After : May 2 03:10:53 2027 GMT Subject: CN=37C59C15F2640CD042BBB2038A0BEBAFD2688A9F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:31:2b:1c:79:b4:56:4d:ac:a0:23:0d:85:f2: 96:01:7f:c8:69:aa:f9:02:7f:5d:9b:5d:73:35:eb: 51:f4:2f:1e:7d:08:85:ca:24:77:61:f5:68:3c:65: 12:14:18:75:f6:55:1e:86:a8:73:e3:42:fa:04:fc: 77:c8:b5:99:c3:71:6e:00:78:d3:68:b6:57:2f:03: 02:0d:e5:1f:3f:a2:e2:54:2d:6b:99:b3:d2:e5:d3: 06:c4:b0:a8:c7:1c:2d:27:54:37:65:68:d4:7a:31: 40:dc:ca:84:f2:6d:60:f0:fd:57:e7:bb:5f:a5:1a: dc:1c:02:16:6c:9f:01:e7:9f:27:ee:a7:7d:2a:c1: d2:b2:56:ed:84:a1:c7:30:ac:37:db:46:85:d3:47: ad:fe:aa:25:46:5d:3b:d5:3b:a5:db:1c:72:f4:5d: df:11:b6:e9:f5:eb:43:5a:a0:5f:09:98:75:6d:2f: 73:c8:26:d4:ef:0b:d8:1e:49:ee:e9:c1:52:db:e8: 8b:bb:e6:0a:bc:0f:d0:68:90:12:4e:c3:c8:4d:7f: a5:f6:45:9d:37:8f:8d:76:5b:a6:b4:4b:03:2d:77: 4b:28:30:65:9f:24:ae:75:44:e6:16:e4:cf:15:28: bb:37:68:cc:f2:93:26:01:2d:18:a5:18:ce:25:18: 45:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:C5:9C:15:F2:64:0C:D0:42:BB:B2:03:8A:0B:EB:AF:D2:68:8A:9F X509v3 Authority Key Identifier: keyid:22:8D:8D:93:7B:BC:58:B1:86:16:3C:E4:DD:03:33:EF:17:11:36:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d9b899ac-4870-4e28-8e4e-2c23752a4a60/0/228D8D937BBC58B186163CE4DD0333EF171136B5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/228D8D937BBC58B186163CE4DD0333EF171136B5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d9b899ac-4870-4e28-8e4e-2c23752a4a60/0/34352e3234392e3232342e302f32332d3233203d3e20313532303237.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.249.224.0/23 Signature Algorithm: sha256WithRSAEncryption 30:73:b3:d4:c9:fb:dd:8f:10:cf:5e:b6:92:5a:2e:b5:84:bc: 17:a2:87:6b:fa:2b:74:7c:a9:ba:03:61:de:4c:c2:38:cc:b6: 17:1a:8b:52:73:cc:27:2e:0b:1b:35:d9:5e:6f:e1:cd:5d:7a: 7b:fc:e3:48:a5:5a:42:78:ac:53:4f:0f:dc:eb:e4:7d:36:68: 51:1a:51:d2:bc:40:48:b8:ca:74:07:43:bb:19:0b:5e:b7:e0: 38:73:6e:48:89:36:c0:69:66:4e:c8:2f:35:97:e7:00:8b:04: ac:08:13:0b:fa:d2:20:11:56:e7:c0:f0:a8:ec:92:1f:2c:a5: 6c:2d:13:50:19:a4:00:ab:cd:12:38:09:35:a6:46:7b:e0:fc: 33:eb:d0:77:76:34:62:4d:a7:ff:d0:53:08:26:bb:0d:fa:43: 96:7b:ec:37:fc:02:ed:07:b5:7a:d2:00:8f:b2:c8:2b:4e:96: 4c:a5:b9:58:a9:57:59:2b:5a:ec:c7:72:44:83:ae:5b:33:0d: 9b:70:13:74:ba:4b:9d:6a:ea:71:20:f9:6c:f0:f3:36:9e:c5: bf:8a:5c:57:73:b8:ab:08:10:ea:6e:1d:93:4f:63:02:7e:2c: 61:c7:7a:ea:03:cc:d8:73:37:fa:0b:1b:40:32:5f:99:6f:9d: 59:fb:63:6e -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUKaJseu9OivN1UrGmOp+AwUXNKjcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjI4RDhEOTM3QkJDNThCMTg2MTYzQ0U0REQwMzMzRUYx NzExMzZCNTAeFw0yNjA1MDMwMzA1NTNaFw0yNzA1MDIwMzEwNTNaMDMxMTAvBgNV BAMTKDM3QzU5QzE1RjI2NDBDRDA0MkJCQjIwMzhBMEJFQkFGRDI2ODhBOUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIMSscebRWTaygIw2F8pYBf8hp qvkCf12bXXM161H0Lx59CIXKJHdh9Wg8ZRIUGHX2VR6GqHPjQvoE/HfItZnDcW4A eNNotlcvAwIN5R8/ouJULWuZs9Ll0wbEsKjHHC0nVDdlaNR6MUDcyoTybWDw/Vfn u1+lGtwcAhZsnwHnnyfup30qwdKyVu2EoccwrDfbRoXTR63+qiVGXTvVO6XbHHL0 Xd8Rtun160NaoF8JmHVtL3PIJtTvC9geSe7pwVLb6Iu75gq8D9BokBJOw8hNf6X2 RZ03j412W6a0SwMtd0soMGWfJK51ROYW5M8VKLs3aMzykyYBLRilGM4lGEVPAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUN8WcFfJkDNBCu7IDigvrr9Joip8wHwYDVR0j BBgwFoAUIo2Nk3u8WLGGFjzk3QMz7xcRNrUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDliODk5YWMtNDg3MC00ZTI4LThlNGUtMmMyMzc1MmE0YTYwLzAvMjI4RDhEOTM3 QkJDNThCMTg2MTYzQ0U0REQwMzMzRUYxNzExMzZCNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yMjhEOEQ5MzdCQkM1OEIxODYxNjNDRTRERDAzMzNFRjE3MTEz NkI1LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2Q5Yjg5OWFjLTQ4NzAtNGUyOC04 ZTRlLTJjMjM3NTJhNGE2MC8wLzM0MzUyZTMyMzQzOTJlMzIzMjM0MmUzMDJmMzIz MzJkMzIzMzIwM2QzZTIwMzEzNTMyMzAzMjM3LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLfngMA0GCSqG SIb3DQEBCwUAA4IBAQAwc7PUyfvdjxDPXraSWi61hLwXoodr+it0fKm6A2HeTMI4 zLYXGotSc8wnLgsbNdleb+HNXXp7/ONIpVpCeKxTTw/c6+R9NmhRGlHSvEBIuMp0 B0O7GQtet+A4c25IiTbAaWZOyC81l+cAiwSsCBML+tIgEVbnwPCo7JIfLKVsLRNQ GaQAq80SOAk1pkZ74Pwz69B3djRiTaf/0FMIJrsN+kOWe+w3/ALtB7V60gCPssgr TpZMpblYqVdZK1rsx3JEg65bMw2bcBN0ukudaupxIPls8PM2nsW/ilxXc7irCBDq bh2TT2MCfixhx3rqA8zYczf6CxtAMl+Zb51Z+2Nu -----END CERTIFICATE-----Generated at Wed May 13 00:44:58 2026 by rpki-client