$ rpki-client -vvf rpki-rsync.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/3132322e3234382e33392e302f32342d3234203d3e203435333235.roa File: 3132322e3234382e33392e302f32342d3234203d3e203435333235.roa (raw, json) Hash identifier: F2/X+b+sJTBnlu6Sh9LFFYTW3UjFRRXVyNaKWEGhbhY= Subject key identifier: 45:CF:C0:6A:CC:3E:39:1C:CF:3F:0A:DA:2E:FE:9A:99:37:9B:84:4A Certificate issuer: /CN=D35962E8F839460DC5283C472D81ADB87BBD3992 Certificate serial: 30010EFC2E573EA35F3BB89B0011BBF955ECCFBE Authority key identifier: D3:59:62:E8:F8:39:46:0D:C5:28:3C:47:2D:81:AD:B8:7B:BD:39:92 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D35962E8F839460DC5283C472D81ADB87BBD3992.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/3132322e3234382e33392e302f32342d3234203d3e203435333235.roa Signing time: Sun 03 May 2026 03:11:56 +0000 ROA not before: Sun 03 May 2026 03:06:56 +0000 ROA not after: Sun 02 May 2027 03:11:56 +0000 asID: 45325 IP address blocks: 122.248.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/D35962E8F839460DC5283C472D81ADB87BBD3992.crl rsync://rpki-rsync.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/D35962E8F839460DC5283C472D81ADB87BBD3992.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D35962E8F839460DC5283C472D81ADB87BBD3992.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:01:0e:fc:2e:57:3e:a3:5f:3b:b8:9b:00:11:bb:f9:55:ec:cf:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D35962E8F839460DC5283C472D81ADB87BBD3992 Validity Not Before: May 3 03:06:56 2026 GMT Not After : May 2 03:11:56 2027 GMT Subject: CN=45CFC06ACC3E391CCF3F0ADA2EFE9A99379B844A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:07:d9:0a:02:ef:e3:ab:60:73:97:30:24:75: af:ca:a8:12:73:c4:c0:a4:18:8f:8f:a6:c9:ed:e1: 3d:2a:6c:13:5a:50:66:be:a5:9a:53:3a:a5:86:1d: 90:74:c8:1c:0e:76:cf:14:44:0f:09:75:2c:4d:67: da:34:34:18:79:ea:f5:c1:9c:27:f8:f5:54:11:f7: cc:28:77:d1:52:58:75:d9:5d:88:2b:45:e6:f6:0c: 70:b6:81:ca:3f:c7:fa:02:1b:06:23:bf:46:b1:4e: 06:ad:1a:9c:e9:1c:f8:de:08:d3:6e:30:58:e4:d8: 69:44:44:19:bf:46:a7:2c:90:79:3e:98:5e:53:07: 27:2a:26:ba:e1:28:30:cc:5c:bb:7f:c7:15:e1:56: 7a:e5:d7:cb:e7:03:63:57:c8:f1:38:a9:30:7b:b7: c3:45:80:49:75:9b:cd:84:bd:67:11:60:d7:01:8f: 47:74:52:ab:18:1b:d9:15:cb:1c:f6:bb:04:e1:2e: 00:e6:ce:54:f2:09:40:8b:55:bb:67:47:81:92:bd: b9:6f:7d:20:64:99:22:e0:22:a2:69:03:ba:64:e6: 77:e8:d4:09:04:d6:e6:b6:c3:7b:e3:8b:20:a2:d4: 64:80:3b:3c:11:0c:db:71:22:fb:0e:b4:3a:e1:61: 5c:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:CF:C0:6A:CC:3E:39:1C:CF:3F:0A:DA:2E:FE:9A:99:37:9B:84:4A X509v3 Authority Key Identifier: keyid:D3:59:62:E8:F8:39:46:0D:C5:28:3C:47:2D:81:AD:B8:7B:BD:39:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/D35962E8F839460DC5283C472D81ADB87BBD3992.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D35962E8F839460DC5283C472D81ADB87BBD3992.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/3132322e3234382e33392e302f32342d3234203d3e203435333235.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 122.248.39.0/24 Signature Algorithm: sha256WithRSAEncryption 61:58:77:1e:a3:8d:39:c5:5c:94:df:1c:b8:ab:3b:ea:50:73: ab:6f:af:05:17:49:20:20:5e:46:4c:22:c6:f0:0f:52:38:ef: 13:63:5d:95:32:f7:92:ff:ec:aa:53:cf:23:76:13:80:c6:96: ac:c9:b0:27:de:15:86:c6:0b:03:1c:fe:df:58:af:fe:bf:c7: 2b:fd:6c:5c:e0:83:3c:87:9d:67:17:45:93:c8:75:3b:ec:1e: 53:2e:41:ae:b6:92:d8:d5:1b:a8:82:2f:ac:6b:89:b5:23:93: 26:bf:3b:31:b3:63:ba:41:24:2a:3f:4c:73:25:21:71:2b:7f: 13:33:02:12:a3:22:2b:55:c0:8d:2b:ab:f1:e3:c2:18:74:5b: 9f:2d:2f:9e:30:47:55:3b:31:d7:f8:5b:f7:62:06:3d:34:c8: bc:6a:13:91:29:73:2a:9d:1e:3e:3e:4f:f2:fa:26:d8:52:e5: 4a:70:35:48:46:61:be:8d:e0:1f:68:de:bd:cf:90:c6:f9:e2: d9:0d:1b:2a:dd:51:ff:74:14:2e:04:0b:0f:da:d3:f6:e3:37: c3:ae:e3:99:95:1c:46:2b:b3:ad:84:4d:0f:22:15:78:b1:35: ef:d0:34:4d:01:cd:61:75:5d:9a:d7:de:2e:a7:dd:16:c8:d6: b4:49:76:ce -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUMAEO/C5XPqNfO7ibABG7+VXsz74wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM1OTYyRThGODM5NDYwREM1MjgzQzQ3MkQ4MUFEQjg3 QkJEMzk5MjAeFw0yNjA1MDMwMzA2NTZaFw0yNzA1MDIwMzExNTZaMDMxMTAvBgNV BAMTKDQ1Q0ZDMDZBQ0MzRTM5MUNDRjNGMEFEQTJFRkU5QTk5Mzc5Qjg0NEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBB9kKAu/jq2BzlzAkda/KqBJz xMCkGI+Ppsnt4T0qbBNaUGa+pZpTOqWGHZB0yBwOds8URA8JdSxNZ9o0NBh56vXB nCf49VQR98wod9FSWHXZXYgrReb2DHC2gco/x/oCGwYjv0axTgatGpzpHPjeCNNu MFjk2GlERBm/RqcskHk+mF5TBycqJrrhKDDMXLt/xxXhVnrl18vnA2NXyPE4qTB7 t8NFgEl1m82EvWcRYNcBj0d0UqsYG9kVyxz2uwThLgDmzlTyCUCLVbtnR4GSvblv fSBkmSLgIqJpA7pk5nfo1AkE1ua2w3vjiyCi1GSAOzwRDNtxIvsOtDrhYVyPAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQURc/Aasw+ORzPPwraLv6amTebhEowHwYDVR0j BBgwFoAU01li6Pg5Rg3FKDxHLYGtuHu9OZIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGYyZTdmZDYtZWI1ZS00ODBhLThlOTctYzU1ZjY4ZTA1ODlhLzAvRDM1OTYyRThG ODM5NDYwREM1MjgzQzQ3MkQ4MUFEQjg3QkJEMzk5Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EMzU5NjJFOEY4Mzk0NjBEQzUyODNDNDcyRDgxQURCODdCQkQz OTkyLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2RmMmU3ZmQ2LWViNWUtNDgwYS04 ZTk3LWM1NWY2OGUwNTg5YS8wLzMxMzIzMjJlMzIzNDM4MmUzMzM5MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzQzNTMzMzIzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHr4JzANBgkqhkiG 9w0BAQsFAAOCAQEAYVh3HqONOcVclN8cuKs76lBzq2+vBRdJICBeRkwixvAPUjjv E2NdlTL3kv/sqlPPI3YTgMaWrMmwJ94VhsYLAxz+31iv/r/HK/1sXOCDPIedZxdF k8h1O+weUy5BrraS2NUbqIIvrGuJtSOTJr87MbNjukEkKj9McyUhcSt/EzMCEqMi K1XAjSur8ePCGHRbny0vnjBHVTsx1/hb92IGPTTIvGoTkSlzKp0ePj5P8vom2FLl SnA1SEZhvo3gH2jevc+Qxvni2Q0bKt1R/3QULgQLD9rT9uM3w67jmZUcRiuzrYRN DyIVeLE179A0TQHNYXVdmtfeLqfdFsjWtEl2zg== -----END CERTIFICATE-----Generated at Wed May 13 03:16:38 2026 by rpki-client