$ rpki-client -vvf rpki-rsync.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/3132322e3234382e33372e302f32342d3234203d3e20313431313432.roa File: 3132322e3234382e33372e302f32342d3234203d3e20313431313432.roa (raw, json) Hash identifier: a2g7FXBxKjJ9sPuBWUpxfzMOG1+kUNuv9IQ11Ti9Pks= Subject key identifier: 64:BD:D8:0A:C1:FB:F1:AA:D2:0D:A7:37:75:69:63:A0:DC:0B:0D:A2 Certificate issuer: /CN=D35962E8F839460DC5283C472D81ADB87BBD3992 Certificate serial: 4679014975247CF8C53806559C9E9DCC002DF824 Authority key identifier: D3:59:62:E8:F8:39:46:0D:C5:28:3C:47:2D:81:AD:B8:7B:BD:39:92 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D35962E8F839460DC5283C472D81ADB87BBD3992.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/3132322e3234382e33372e302f32342d3234203d3e20313431313432.roa Signing time: Sun 03 May 2026 03:11:56 +0000 ROA not before: Sun 03 May 2026 03:06:56 +0000 ROA not after: Sun 02 May 2027 03:11:56 +0000 asID: 141142 IP address blocks: 122.248.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/D35962E8F839460DC5283C472D81ADB87BBD3992.crl rsync://rpki-rsync.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/D35962E8F839460DC5283C472D81ADB87BBD3992.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D35962E8F839460DC5283C472D81ADB87BBD3992.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:79:01:49:75:24:7c:f8:c5:38:06:55:9c:9e:9d:cc:00:2d:f8:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D35962E8F839460DC5283C472D81ADB87BBD3992 Validity Not Before: May 3 03:06:56 2026 GMT Not After : May 2 03:11:56 2027 GMT Subject: CN=64BDD80AC1FBF1AAD20DA737756963A0DC0B0DA2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:70:73:c4:52:27:d3:68:92:ec:92:b7:ab:73: 7f:98:63:ca:1b:39:cd:1f:2d:59:5f:34:bf:28:5d: 9e:69:3d:e4:10:7e:e3:eb:4e:67:11:aa:3d:d8:1c: 5d:55:71:3e:5c:9e:c1:a1:12:28:ff:60:86:85:da: 5a:ff:bf:bf:f4:d2:3a:6a:42:42:66:c6:a9:04:b7: 2c:3c:5f:4a:f9:34:fb:76:86:a4:b6:23:ab:b8:f6: e7:ef:17:94:f7:08:6b:67:0a:24:2c:08:cd:0e:88: ff:c7:d7:9a:b1:f0:07:e7:3d:95:cb:ef:39:b0:54: ed:b6:0b:e1:49:92:5f:d7:1d:47:3c:15:d7:e9:2d: 2d:51:94:85:0d:7c:24:2c:fa:38:d6:6a:f9:9d:d8: 07:d1:5b:e8:48:ba:09:9f:7b:05:0d:11:c8:6c:db: 7a:e0:9d:35:9a:70:2f:ed:a4:1a:92:ac:f5:c6:7f: 99:c9:55:14:1c:8f:15:b6:c9:fc:87:7a:d2:50:cb: 1e:a0:42:84:ab:f1:e0:5f:98:a8:e7:3a:dc:5b:fa: da:89:99:b8:d0:1a:c5:63:78:ff:54:32:3f:06:52: 78:4c:ae:33:b0:37:d2:a9:16:2d:ae:0d:9b:e2:9c: a8:7a:46:df:8f:e8:ea:8a:43:3f:3d:c8:f7:b3:40: 6a:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:BD:D8:0A:C1:FB:F1:AA:D2:0D:A7:37:75:69:63:A0:DC:0B:0D:A2 X509v3 Authority Key Identifier: keyid:D3:59:62:E8:F8:39:46:0D:C5:28:3C:47:2D:81:AD:B8:7B:BD:39:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/D35962E8F839460DC5283C472D81ADB87BBD3992.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D35962E8F839460DC5283C472D81ADB87BBD3992.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/3132322e3234382e33372e302f32342d3234203d3e20313431313432.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 122.248.37.0/24 Signature Algorithm: sha256WithRSAEncryption 86:6c:30:43:e5:d1:34:84:ca:b2:5a:2b:15:48:22:3e:c8:9e: 63:68:97:97:77:32:27:68:33:4f:da:4c:21:02:62:06:4c:5f: e3:80:70:fc:e5:e4:36:93:ab:1b:b0:39:dd:86:4c:01:5e:1a: 31:74:54:98:2d:79:25:34:50:d7:59:10:d6:da:f5:49:20:40: c9:18:a2:be:f4:be:5d:c2:54:2c:6c:a2:f8:3e:a1:d7:33:16: 16:18:0a:4e:83:c2:f4:9b:fe:99:cd:06:83:68:0d:59:29:51: 8e:35:66:df:46:9f:a3:0a:91:80:6d:66:31:10:a5:c4:b9:d6: ed:2a:72:0b:7e:0a:a0:c4:48:f6:6c:2e:c4:57:e8:7e:01:b6: 32:23:15:02:d4:49:ff:54:7f:22:c2:32:64:37:3b:05:00:66: a1:11:65:08:81:28:4a:0f:f5:73:01:7d:e6:06:11:d1:a5:3c: 52:49:3e:10:c3:5f:e3:09:56:7a:47:da:94:14:b6:3b:18:ea: b4:98:ea:fa:58:7b:a4:10:fd:4e:6d:50:ff:b1:fb:84:14:dd: 1a:d9:79:ad:a4:d4:f9:45:f0:8b:b5:1e:e4:cf:aa:21:4b:ee: 90:59:12:76:34:68:9e:ea:f9:ce:5c:23:7f:c2:bc:75:96:97: 6c:8a:c8:26 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIURnkBSXUkfPjFOAZVnJ6dzAAt+CQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM1OTYyRThGODM5NDYwREM1MjgzQzQ3MkQ4MUFEQjg3 QkJEMzk5MjAeFw0yNjA1MDMwMzA2NTZaFw0yNzA1MDIwMzExNTZaMDMxMTAvBgNV BAMTKDY0QkREODBBQzFGQkYxQUFEMjBEQTczNzc1Njk2M0EwREMwQjBEQTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpcHPEUifTaJLskrerc3+YY8ob Oc0fLVlfNL8oXZ5pPeQQfuPrTmcRqj3YHF1VcT5cnsGhEij/YIaF2lr/v7/00jpq QkJmxqkEtyw8X0r5NPt2hqS2I6u49ufvF5T3CGtnCiQsCM0OiP/H15qx8AfnPZXL 7zmwVO22C+FJkl/XHUc8FdfpLS1RlIUNfCQs+jjWavmd2AfRW+hIugmfewUNEchs 23rgnTWacC/tpBqSrPXGf5nJVRQcjxW2yfyHetJQyx6gQoSr8eBfmKjnOtxb+tqJ mbjQGsVjeP9UMj8GUnhMrjOwN9KpFi2uDZvinKh6Rt+P6OqKQz89yPezQGoJAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUZL3YCsH78arSDac3dWljoNwLDaIwHwYDVR0j BBgwFoAU01li6Pg5Rg3FKDxHLYGtuHu9OZIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGYyZTdmZDYtZWI1ZS00ODBhLThlOTctYzU1ZjY4ZTA1ODlhLzAvRDM1OTYyRThG ODM5NDYwREM1MjgzQzQ3MkQ4MUFEQjg3QkJEMzk5Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EMzU5NjJFOEY4Mzk0NjBEQzUyODNDNDcyRDgxQURCODdCQkQz OTkyLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2RmMmU3ZmQ2LWViNWUtNDgwYS04 ZTk3LWM1NWY2OGUwNTg5YS8wLzMxMzIzMjJlMzIzNDM4MmUzMzM3MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNDMxMzEzNDMyLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAevglMA0GCSqG SIb3DQEBCwUAA4IBAQCGbDBD5dE0hMqyWisVSCI+yJ5jaJeXdzInaDNP2kwhAmIG TF/jgHD85eQ2k6sbsDndhkwBXhoxdFSYLXklNFDXWRDW2vVJIEDJGKK+9L5dwlQs bKL4PqHXMxYWGApOg8L0m/6ZzQaDaA1ZKVGONWbfRp+jCpGAbWYxEKXEudbtKnIL fgqgxEj2bC7EV+h+AbYyIxUC1En/VH8iwjJkNzsFAGahEWUIgShKD/VzAX3mBhHR pTxSST4Qw1/jCVZ6R9qUFLY7GOq0mOr6WHukEP1ObVD/sfuEFN0a2XmtpNT5RfCL tR7kz6ohS+6QWRJ2NGie6vnOXCN/wrx1lpdsisgm -----END CERTIFICATE-----Generated at Wed May 13 01:36:04 2026 by rpki-client