$ rpki-client -vvf rpki-rsync.idnic.net/repo/f7f49068-c0ca-4a21-9a8a-eed26fcdd1aa/0/34332e3234322e3133332e302f32342d3234203d3e203538343736.roa File: 34332e3234322e3133332e302f32342d3234203d3e203538343736.roa (raw, json) Hash identifier: A8Rj4cqXdcnsq+FLejpEUcmUwRFqYq1jFxwy+Q4EccA= Subject key identifier: EE:E3:F0:96:E1:E5:F5:A1:D0:F9:BD:CA:84:52:24:15:7A:DA:AE:09 Certificate issuer: /CN=B19C65682D11784D7D2ABD8D4BEBC7C45EED88D1 Certificate serial: 7931A762B98C9126323B35DC4E10E707DFBA5581 Authority key identifier: B1:9C:65:68:2D:11:78:4D:7D:2A:BD:8D:4B:EB:C7:C4:5E:ED:88:D1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B19C65682D11784D7D2ABD8D4BEBC7C45EED88D1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f7f49068-c0ca-4a21-9a8a-eed26fcdd1aa/0/34332e3234322e3133332e302f32342d3234203d3e203538343736.roa Signing time: Sun 03 May 2026 03:18:23 +0000 ROA not before: Sun 03 May 2026 03:13:23 +0000 ROA not after: Sun 02 May 2027 03:18:23 +0000 asID: 58476 IP address blocks: 43.242.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f7f49068-c0ca-4a21-9a8a-eed26fcdd1aa/0/B19C65682D11784D7D2ABD8D4BEBC7C45EED88D1.crl rsync://rpki-rsync.idnic.net/repo/f7f49068-c0ca-4a21-9a8a-eed26fcdd1aa/0/B19C65682D11784D7D2ABD8D4BEBC7C45EED88D1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B19C65682D11784D7D2ABD8D4BEBC7C45EED88D1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 01:58:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:31:a7:62:b9:8c:91:26:32:3b:35:dc:4e:10:e7:07:df:ba:55:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B19C65682D11784D7D2ABD8D4BEBC7C45EED88D1 Validity Not Before: May 3 03:13:23 2026 GMT Not After : May 2 03:18:23 2027 GMT Subject: CN=EEE3F096E1E5F5A1D0F9BDCA845224157ADAAE09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:b4:43:71:b7:47:76:95:52:40:96:0f:68:37: 3d:ea:6f:f4:a1:2d:4e:5e:ad:9e:4d:8d:25:f8:c7: fc:b4:e0:01:73:17:6a:4d:2c:77:e6:b9:e3:5a:c3: ca:8e:25:3b:52:f9:f6:79:82:fd:1e:dd:52:86:a1: 2e:84:43:90:11:c0:75:23:5c:44:bc:83:37:bc:0d: cb:25:36:f3:5a:2e:74:db:3f:7b:1c:45:5d:78:d4: 19:cf:3b:d0:ee:74:6e:e9:51:37:ce:2d:ab:b6:97: 93:53:70:e8:32:c7:82:f2:b8:18:fb:17:ef:af:d3: 5e:49:46:2f:a9:5e:48:48:6c:2b:59:19:a4:03:e4: 88:50:bc:24:f7:9b:c9:4e:80:80:61:4d:d0:ea:ac: 78:61:1a:65:a7:dc:06:f2:21:e0:3a:c3:3c:67:f5: 1f:70:bc:b1:1f:3d:a5:c2:82:47:8c:9c:04:ee:87: 83:06:6b:aa:74:92:5b:c6:1b:a6:c6:2b:c3:ff:4a: fb:28:b3:a3:d4:45:b8:b7:34:69:d5:c7:a5:e8:26: df:3e:b1:29:ed:a1:cc:6e:ad:a4:a0:2b:ae:3e:ff: a8:ab:73:2c:40:ec:23:20:d9:3a:8e:86:62:a3:9f: 43:3d:43:f5:6e:a2:fc:61:07:c0:9b:28:02:34:9a: d9:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:E3:F0:96:E1:E5:F5:A1:D0:F9:BD:CA:84:52:24:15:7A:DA:AE:09 X509v3 Authority Key Identifier: keyid:B1:9C:65:68:2D:11:78:4D:7D:2A:BD:8D:4B:EB:C7:C4:5E:ED:88:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f7f49068-c0ca-4a21-9a8a-eed26fcdd1aa/0/B19C65682D11784D7D2ABD8D4BEBC7C45EED88D1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B19C65682D11784D7D2ABD8D4BEBC7C45EED88D1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f7f49068-c0ca-4a21-9a8a-eed26fcdd1aa/0/34332e3234322e3133332e302f32342d3234203d3e203538343736.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.242.133.0/24 Signature Algorithm: sha256WithRSAEncryption 1c:0e:af:dd:b3:94:4d:54:cf:e8:33:30:33:dd:9c:fc:24:3b: bf:ba:d1:c2:80:44:e6:ca:82:02:04:8e:d7:93:ef:b9:53:9c: 6d:41:96:5c:3f:e8:02:5c:e9:43:a5:fe:4f:bd:d1:c8:04:ef: 68:d5:dc:24:3a:95:ac:3b:48:02:26:a8:e0:41:51:0f:90:ba: f2:c9:fa:3b:f9:40:65:ce:b7:30:14:ed:6c:55:14:5e:7c:28: 0c:d4:a8:26:bc:19:ba:c2:79:86:84:47:b5:1e:9a:ec:df:a4: de:a0:ec:ab:64:75:dd:2f:a8:44:6a:7f:91:e0:89:ca:30:0b: 27:a2:6d:3d:be:b8:07:a2:ba:08:b7:e0:a9:72:54:14:0c:2f: 50:21:81:60:35:b2:b6:18:eb:86:e5:ca:30:0d:ef:6d:61:7f: cb:e1:c2:d2:f2:52:86:dd:ae:84:b8:47:0b:d0:b6:e2:c8:8f: 17:e7:25:b6:e2:d2:67:a0:68:02:2e:76:a2:44:18:fa:39:c1: d8:52:df:f4:aa:18:72:d2:c6:45:69:53:53:9c:93:9e:42:f7: c9:95:c8:cd:0d:7e:fd:a4:ca:1f:49:33:9b:ca:5f:f8:52:d2: 0f:e5:6c:71:5d:49:f5:5f:3e:b0:42:e9:4e:76:c4:b5:47:05: 99:2b:96:29 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUeTGnYrmMkSYyOzXcThDnB9+6VYEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjE5QzY1NjgyRDExNzg0RDdEMkFCRDhENEJFQkM3QzQ1 RUVEODhEMTAeFw0yNjA1MDMwMzEzMjNaFw0yNzA1MDIwMzE4MjNaMDMxMTAvBgNV BAMTKEVFRTNGMDk2RTFFNUY1QTFEMEY5QkRDQTg0NTIyNDE1N0FEQUFFMDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCetENxt0d2lVJAlg9oNz3qb/Sh LU5erZ5NjSX4x/y04AFzF2pNLHfmueNaw8qOJTtS+fZ5gv0e3VKGoS6EQ5ARwHUj XES8gze8DcslNvNaLnTbP3scRV141BnPO9DudG7pUTfOLau2l5NTcOgyx4LyuBj7 F++v015JRi+pXkhIbCtZGaQD5IhQvCT3m8lOgIBhTdDqrHhhGmWn3AbyIeA6wzxn 9R9wvLEfPaXCgkeMnATuh4MGa6p0klvGG6bGK8P/Svsos6PURbi3NGnVx6XoJt8+ sSntocxuraSgK64+/6ircyxA7CMg2TqOhmKjn0M9Q/VuovxhB8CbKAI0mtlZAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQU7uPwluHl9aHQ+b3KhFIkFXrargkwHwYDVR0j BBgwFoAUsZxlaC0ReE19Kr2NS+vHxF7tiNEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjdmNDkwNjgtYzBjYS00YTIxLTlhOGEtZWVkMjZmY2RkMWFhLzAvQjE5QzY1Njgy RDExNzg0RDdEMkFCRDhENEJFQkM3QzQ1RUVEODhEMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CMTlDNjU2ODJEMTE3ODREN0QyQUJEOEQ0QkVCQzdDNDVFRUQ4 OEQxLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2Y3ZjQ5MDY4LWMwY2EtNGEyMS05 YThhLWVlZDI2ZmNkZDFhYS8wLzM0MzMyZTMyMzQzMjJlMzEzMzMzMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzUzODM0MzczNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEACvyhTANBgkqhkiG 9w0BAQsFAAOCAQEAHA6v3bOUTVTP6DMwM92c/CQ7v7rRwoBE5sqCAgSO15PvuVOc bUGWXD/oAlzpQ6X+T73RyATvaNXcJDqVrDtIAiao4EFRD5C68sn6O/lAZc63MBTt bFUUXnwoDNSoJrwZusJ5hoRHtR6a7N+k3qDsq2R13S+oRGp/keCJyjALJ6JtPb64 B6K6CLfgqXJUFAwvUCGBYDWythjrhuXKMA3vbWF/y+HC0vJSht2uhLhHC9C24siP F+cltuLSZ6BoAi52okQY+jnB2FLf9KoYctLGRWlTU5yTnkL3yZXIzQ1+/aTKH0kz m8pf+FLSD+VscV1J9V8+sELpTnbEtUcFmSuWKQ== -----END CERTIFICATE-----Generated at Wed May 13 04:19:23 2026 by rpki-client