$ rpki-client -vvf rpki-rsync.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/3132322e3234382e34342e302f32342d3234203d3e20313431313432.roa File: 3132322e3234382e34342e302f32342d3234203d3e20313431313432.roa (raw, json) Hash identifier: xgjDAhQZn+M5QT3iWDFTTkYvcaKaz/dtqKLQQBwYvgA= Subject key identifier: 00:EB:5E:46:A9:7A:11:06:03:E5:E6:66:33:D1:AC:51:E4:B7:55:39 Certificate issuer: /CN=D35962E8F839460DC5283C472D81ADB87BBD3992 Certificate serial: 163B05CD8CAC2E4995765B75AC5F0BAB43F88BC2 Authority key identifier: D3:59:62:E8:F8:39:46:0D:C5:28:3C:47:2D:81:AD:B8:7B:BD:39:92 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D35962E8F839460DC5283C472D81ADB87BBD3992.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/3132322e3234382e34342e302f32342d3234203d3e20313431313432.roa Signing time: Sun 03 May 2026 03:12:02 +0000 ROA not before: Sun 03 May 2026 03:07:02 +0000 ROA not after: Sun 02 May 2027 03:12:02 +0000 asID: 141142 IP address blocks: 122.248.44.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/D35962E8F839460DC5283C472D81ADB87BBD3992.crl rsync://rpki-rsync.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/D35962E8F839460DC5283C472D81ADB87BBD3992.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D35962E8F839460DC5283C472D81ADB87BBD3992.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:3b:05:cd:8c:ac:2e:49:95:76:5b:75:ac:5f:0b:ab:43:f8:8b:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D35962E8F839460DC5283C472D81ADB87BBD3992 Validity Not Before: May 3 03:07:02 2026 GMT Not After : May 2 03:12:02 2027 GMT Subject: CN=00EB5E46A97A110603E5E66633D1AC51E4B75539 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:17:c2:88:17:6b:02:d4:25:ff:13:aa:9b:82: 18:c0:37:47:00:74:67:0b:65:de:a8:96:e3:55:0f: bd:43:38:04:78:2d:d3:59:a3:ac:29:63:42:cc:8d: 71:e4:63:64:fa:23:06:cf:24:ed:a2:d3:74:5a:21: 7d:b0:14:59:04:f3:9f:7b:97:8c:23:80:94:5d:90: 9b:f8:8d:da:c0:c6:9f:27:43:18:9a:f7:59:1d:d8: 9b:db:9c:be:1a:91:5d:46:bd:05:2b:73:f8:44:a2: 91:b4:8b:40:20:ba:b9:f7:69:df:d8:61:1a:13:92: 37:52:49:7a:87:64:1a:0f:4c:0b:37:e2:ac:2b:39: 3e:16:1a:ce:18:86:56:09:16:6e:3f:0f:08:ff:c5: 33:1c:1b:8a:56:c9:11:2b:46:0a:b6:87:b4:f4:56: de:de:76:83:01:96:2f:45:96:d7:80:49:1f:39:83: 1f:52:27:d2:fb:2e:50:53:09:bc:5c:ac:3b:53:ba: 80:83:97:73:e7:cc:96:34:18:f6:96:95:7b:a4:97: 56:4f:e4:97:c4:f9:3f:02:c1:8f:38:3f:d4:7e:8b: 9c:f8:02:1d:14:d6:67:f8:62:5d:d8:38:30:5d:62: 54:d7:5c:49:37:f0:2e:a1:ed:72:26:26:0f:b0:75: 99:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:EB:5E:46:A9:7A:11:06:03:E5:E6:66:33:D1:AC:51:E4:B7:55:39 X509v3 Authority Key Identifier: keyid:D3:59:62:E8:F8:39:46:0D:C5:28:3C:47:2D:81:AD:B8:7B:BD:39:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/D35962E8F839460DC5283C472D81ADB87BBD3992.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D35962E8F839460DC5283C472D81ADB87BBD3992.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/3132322e3234382e34342e302f32342d3234203d3e20313431313432.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 122.248.44.0/24 Signature Algorithm: sha256WithRSAEncryption 08:1e:98:66:2f:f1:7b:bb:bc:de:39:64:51:80:e1:ca:b9:34: 43:9a:35:17:0e:f9:fa:ba:aa:cc:04:24:25:a0:bb:de:45:f0: b6:1f:80:8b:14:0f:e6:75:0b:6e:74:82:3f:9b:c2:c0:12:76: a3:0f:2b:ff:cf:c8:fb:01:49:ff:ac:3c:6c:bc:68:24:e4:a5: 73:b6:19:f2:44:84:35:64:e6:30:41:c8:3f:d5:c5:c5:c2:5e: cd:1c:1e:ea:08:e9:da:e5:46:3c:4c:c7:a6:7a:f1:29:d7:1b: 55:da:f1:00:7b:1c:83:b5:1f:1e:db:a3:66:fc:38:bf:77:10: 40:1b:6e:bd:e9:39:86:cc:96:9e:92:60:db:57:23:fc:ce:6f: b8:4b:e1:be:c3:ab:de:5e:05:25:37:d3:64:1a:6f:7e:c9:8c: e2:bf:4f:19:c8:35:c9:ac:2b:a2:46:7e:87:64:5d:7d:db:aa: 8f:c3:d9:e0:4f:a0:a4:80:67:68:c9:36:a8:38:f6:70:92:2e: 1f:15:b6:cb:bd:09:97:0e:72:d7:72:f2:01:d3:3a:74:0e:78: 75:de:c2:63:33:05:db:1f:34:68:7d:25:eb:8a:9a:4e:b7:78: 15:75:ea:fc:33:58:60:f9:81:f3:bb:6d:ee:88:70:1b:d3:fb: 31:5e:76:1e -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUFjsFzYysLkmVdlt1rF8Lq0P4i8IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM1OTYyRThGODM5NDYwREM1MjgzQzQ3MkQ4MUFEQjg3 QkJEMzk5MjAeFw0yNjA1MDMwMzA3MDJaFw0yNzA1MDIwMzEyMDJaMDMxMTAvBgNV BAMTKDAwRUI1RTQ2QTk3QTExMDYwM0U1RTY2NjMzRDFBQzUxRTRCNzU1MzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCF8KIF2sC1CX/E6qbghjAN0cA dGcLZd6oluNVD71DOAR4LdNZo6wpY0LMjXHkY2T6IwbPJO2i03RaIX2wFFkE8597 l4wjgJRdkJv4jdrAxp8nQxia91kd2JvbnL4akV1GvQUrc/hEopG0i0Agurn3ad/Y YRoTkjdSSXqHZBoPTAs34qwrOT4WGs4YhlYJFm4/Dwj/xTMcG4pWyRErRgq2h7T0 Vt7edoMBli9FlteASR85gx9SJ9L7LlBTCbxcrDtTuoCDl3PnzJY0GPaWlXukl1ZP 5JfE+T8CwY84P9R+i5z4Ah0U1mf4Yl3YODBdYlTXXEk38C6h7XImJg+wdZlpAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUAOteRql6EQYD5eZmM9GsUeS3VTkwHwYDVR0j BBgwFoAU01li6Pg5Rg3FKDxHLYGtuHu9OZIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGYyZTdmZDYtZWI1ZS00ODBhLThlOTctYzU1ZjY4ZTA1ODlhLzAvRDM1OTYyRThG ODM5NDYwREM1MjgzQzQ3MkQ4MUFEQjg3QkJEMzk5Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EMzU5NjJFOEY4Mzk0NjBEQzUyODNDNDcyRDgxQURCODdCQkQz OTkyLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2RmMmU3ZmQ2LWViNWUtNDgwYS04 ZTk3LWM1NWY2OGUwNTg5YS8wLzMxMzIzMjJlMzIzNDM4MmUzNDM0MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNDMxMzEzNDMyLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAevgsMA0GCSqG SIb3DQEBCwUAA4IBAQAIHphmL/F7u7zeOWRRgOHKuTRDmjUXDvn6uqrMBCQloLve RfC2H4CLFA/mdQtudII/m8LAEnajDyv/z8j7AUn/rDxsvGgk5KVzthnyRIQ1ZOYw Qcg/1cXFwl7NHB7qCOna5UY8TMemevEp1xtV2vEAexyDtR8e26Nm/Di/dxBAG269 6TmGzJaekmDbVyP8zm+4S+G+w6veXgUlN9NkGm9+yYziv08ZyDXJrCuiRn6HZF19 26qPw9ngT6CkgGdoyTaoOPZwki4fFbbLvQmXDnLXcvIB0zp0Dnh13sJjMwXbHzRo fSXrippOt3gVder8M1hg+YHzu23uiHAb0/sxXnYe -----END CERTIFICATE-----Generated at Wed May 13 03:16:38 2026 by rpki-client