$ rpki-client -vvf rpki-rsync.idnic.net/repo/fc6f832b-5a9e-4caa-bdd4-2634727a9ed4/0/34332e3234352e3234392e302f32342d3234203d3e20313331373430.roa File: 34332e3234352e3234392e302f32342d3234203d3e20313331373430.roa (raw, json) Hash identifier: oAmiFNqM3oX4aTDAmFzq05nIHAcLXlnLDdNWSaF00HQ= Subject key identifier: 1F:98:AF:D5:92:FC:EF:7B:C8:1E:96:35:99:FB:83:7D:B0:DD:CA:FF Certificate issuer: /CN=EEEEDDCDA44B0713B397D27040721EEC4848E5DC Certificate serial: 0AFE6DD2C37B5D9B96140F2510335226344D6262 Authority key identifier: EE:EE:DD:CD:A4:4B:07:13:B3:97:D2:70:40:72:1E:EC:48:48:E5:DC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EEEEDDCDA44B0713B397D27040721EEC4848E5DC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/fc6f832b-5a9e-4caa-bdd4-2634727a9ed4/0/34332e3234352e3234392e302f32342d3234203d3e20313331373430.roa Signing time: Sun 03 May 2026 03:19:17 +0000 ROA not before: Sun 03 May 2026 03:14:17 +0000 ROA not after: Sun 02 May 2027 03:19:17 +0000 asID: 131740 IP address blocks: 43.245.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/fc6f832b-5a9e-4caa-bdd4-2634727a9ed4/0/EEEEDDCDA44B0713B397D27040721EEC4848E5DC.crl rsync://rpki-rsync.idnic.net/repo/fc6f832b-5a9e-4caa-bdd4-2634727a9ed4/0/EEEEDDCDA44B0713B397D27040721EEC4848E5DC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EEEEDDCDA44B0713B397D27040721EEC4848E5DC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 22:31:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:fe:6d:d2:c3:7b:5d:9b:96:14:0f:25:10:33:52:26:34:4d:62:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EEEEDDCDA44B0713B397D27040721EEC4848E5DC Validity Not Before: May 3 03:14:17 2026 GMT Not After : May 2 03:19:17 2027 GMT Subject: CN=1F98AFD592FCEF7BC81E963599FB837DB0DDCAFF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:64:7d:07:06:da:08:d1:f1:93:aa:b3:f7:bb: 7e:94:88:91:08:25:36:2c:76:5e:45:0c:ab:d5:04: 20:41:87:03:98:7f:92:7b:db:7a:29:0f:ff:26:4e: f7:6c:37:cd:02:ae:1e:7a:4e:17:17:37:96:4d:f8: 93:61:c3:39:67:c2:aa:ec:b9:5e:56:ba:bd:13:11: f2:c1:9a:a7:c9:0a:3a:e0:ea:0f:b3:ab:86:98:d1: 55:36:c6:84:bf:b4:cd:1d:3b:50:1f:99:be:04:f6: 9d:26:ee:e8:68:27:dd:56:d4:85:8c:c9:7a:5a:d4: e1:ab:c2:e5:dd:ab:54:8e:41:b8:f2:72:f3:d3:2a: 83:46:43:61:ad:3a:11:54:e0:1d:da:49:08:bf:8b: ca:e0:c7:1e:11:b5:27:e0:70:a2:fb:7b:df:59:91: dd:75:5f:69:46:ff:cf:0d:8e:b9:07:44:53:68:ac: cc:14:76:48:e1:3d:8d:24:19:71:3a:23:20:85:56: 2b:f8:10:7f:36:a0:f6:46:a2:79:d6:98:e8:53:8e: bd:1d:64:aa:b1:b5:c8:7f:c9:c4:a1:ff:93:4e:5e: 56:e1:4c:9c:18:51:46:4a:96:af:3d:7a:94:04:29: ee:fd:a2:15:2b:7d:da:65:da:1d:e9:00:28:05:45: 7f:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:98:AF:D5:92:FC:EF:7B:C8:1E:96:35:99:FB:83:7D:B0:DD:CA:FF X509v3 Authority Key Identifier: keyid:EE:EE:DD:CD:A4:4B:07:13:B3:97:D2:70:40:72:1E:EC:48:48:E5:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/fc6f832b-5a9e-4caa-bdd4-2634727a9ed4/0/EEEEDDCDA44B0713B397D27040721EEC4848E5DC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EEEEDDCDA44B0713B397D27040721EEC4848E5DC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fc6f832b-5a9e-4caa-bdd4-2634727a9ed4/0/34332e3234352e3234392e302f32342d3234203d3e20313331373430.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.245.249.0/24 Signature Algorithm: sha256WithRSAEncryption 1a:f5:29:d2:74:7a:6e:55:08:d3:9d:5e:4f:90:e8:aa:a6:01: 72:22:89:01:59:01:fe:89:06:60:68:5e:0e:59:57:87:96:c4: 5f:8f:4a:fa:e8:f3:13:84:39:5c:9f:ed:65:67:38:4d:7e:75: 1f:3e:e7:99:71:a1:31:7e:8f:bc:6f:32:5d:44:65:56:00:68: ac:6f:82:26:d8:61:60:c4:88:1c:14:6e:44:9a:7f:46:0d:f4: df:81:d6:a9:31:28:31:6d:7f:fd:02:60:b3:ab:7d:96:78:41: 46:fb:4f:09:e0:6f:8c:70:c2:a4:b3:8c:f5:1a:e6:29:4e:33: f3:f4:4c:e0:be:a3:40:5e:6f:45:5d:eb:f0:55:d3:cd:53:4f: 50:0c:7a:88:a6:e1:52:09:5f:71:34:1e:65:d9:15:93:82:f3: e6:55:22:80:49:91:bc:ae:4c:d5:43:61:18:71:31:09:a6:4d: f5:8f:c6:64:8d:25:9b:e2:76:08:77:a6:b9:b6:c8:c9:4b:28: 54:00:50:3c:54:ed:36:89:ac:33:61:2a:c4:fb:b3:7b:94:49: ec:96:46:40:e6:d7:18:94:c9:e1:3f:51:41:87:b4:a3:7a:36: ed:44:4c:ca:7f:3d:7d:e9:b8:8c:68:3b:2c:9d:a3:ba:0d:12: 04:fa:8a:15 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUCv5t0sN7XZuWFA8lEDNSJjRNYmIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUVFRUREQ0RBNDRCMDcxM0IzOTdEMjcwNDA3MjFFRUM0 ODQ4RTVEQzAeFw0yNjA1MDMwMzE0MTdaFw0yNzA1MDIwMzE5MTdaMDMxMTAvBgNV BAMTKDFGOThBRkQ1OTJGQ0VGN0JDODFFOTYzNTk5RkI4MzdEQjBERENBRkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsZH0HBtoI0fGTqrP3u36UiJEI JTYsdl5FDKvVBCBBhwOYf5J723opD/8mTvdsN80Crh56ThcXN5ZN+JNhwzlnwqrs uV5Wur0TEfLBmqfJCjrg6g+zq4aY0VU2xoS/tM0dO1Afmb4E9p0m7uhoJ91W1IWM yXpa1OGrwuXdq1SOQbjycvPTKoNGQ2GtOhFU4B3aSQi/i8rgxx4RtSfgcKL7e99Z kd11X2lG/88NjrkHRFNorMwUdkjhPY0kGXE6IyCFViv4EH82oPZGonnWmOhTjr0d ZKqxtch/ycSh/5NOXlbhTJwYUUZKlq89epQEKe79ohUrfdpl2h3pACgFRX/3AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUH5iv1ZL873vIHpY1mfuDfbDdyv8wHwYDVR0j BBgwFoAU7u7dzaRLBxOzl9JwQHIe7EhI5dwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmM2ZjgzMmItNWE5ZS00Y2FhLWJkZDQtMjYzNDcyN2E5ZWQ0LzAvRUVFRUREQ0RB NDRCMDcxM0IzOTdEMjcwNDA3MjFFRUM0ODQ4RTVEQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FRUVFRERDREE0NEIwNzEzQjM5N0QyNzA0MDcyMUVFQzQ4NDhF NURDLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2ZjNmY4MzJiLTVhOWUtNGNhYS1i ZGQ0LTI2MzQ3MjdhOWVkNC8wLzM0MzMyZTMyMzQzNTJlMzIzNDM5MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzMxMzczNDMwLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAK/X5MA0GCSqG SIb3DQEBCwUAA4IBAQAa9SnSdHpuVQjTnV5PkOiqpgFyIokBWQH+iQZgaF4OWVeH lsRfj0r66PMThDlcn+1lZzhNfnUfPueZcaExfo+8bzJdRGVWAGisb4Im2GFgxIgc FG5Emn9GDfTfgdapMSgxbX/9AmCzq32WeEFG+08J4G+McMKks4z1GuYpTjPz9Ezg vqNAXm9FXevwVdPNU09QDHqIpuFSCV9xNB5l2RWTgvPmVSKASZG8rkzVQ2EYcTEJ pk31j8ZkjSWb4nYId6a5tsjJSyhUAFA8VO02iawzYSrE+7N7lEnslkZA5tcYlMnh P1FBh7SjejbtREzKfz196biMaDssnaO6DRIE+ooV -----END CERTIFICATE-----Generated at Wed May 13 08:10:32 2026 by rpki-client