$ rpki-client -vvf rpki-rsync.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/34332e3232352e3138342e302f32322d3234203d3e2039343232.roa File: 34332e3232352e3138342e302f32322d3234203d3e2039343232.roa (raw, json) Hash identifier: pwGyBzBOtEK35HSrAz+AVA7aiAsnsEM4hcBWRLigb/A= Subject key identifier: 23:5E:3C:EE:B3:AC:25:CD:FB:41:9E:C8:4E:7E:7F:9A:39:6C:EF:13 Certificate issuer: /CN=1661480FF274E46E5E74274531EDCB741CA1C734 Certificate serial: 4C5015F25ACB955D4214143FA47B9AC19999E2F6 Authority key identifier: 16:61:48:0F:F2:74:E4:6E:5E:74:27:45:31:ED:CB:74:1C:A1:C7:34 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1661480FF274E46E5E74274531EDCB741CA1C734.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/34332e3232352e3138342e302f32322d3234203d3e2039343232.roa Signing time: Sun 03 May 2026 02:16:25 +0000 ROA not before: Sun 03 May 2026 02:11:25 +0000 ROA not after: Sun 02 May 2027 02:16:25 +0000 asID: 9422 IP address blocks: 43.225.184.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/1661480FF274E46E5E74274531EDCB741CA1C734.crl rsync://rpki-rsync.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/1661480FF274E46E5E74274531EDCB741CA1C734.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1661480FF274E46E5E74274531EDCB741CA1C734.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 05 May 2026 16:31:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:50:15:f2:5a:cb:95:5d:42:14:14:3f:a4:7b:9a:c1:99:99:e2:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1661480FF274E46E5E74274531EDCB741CA1C734 Validity Not Before: May 3 02:11:25 2026 GMT Not After : May 2 02:16:25 2027 GMT Subject: CN=235E3CEEB3AC25CDFB419EC84E7E7F9A396CEF13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:d6:17:fe:85:b0:61:a8:93:02:87:6b:f1:3e: c9:be:99:c4:6a:d2:eb:7e:7f:73:50:b4:aa:e3:fe: 5c:04:c9:2e:25:57:04:9a:dd:a2:b5:13:b1:fc:3b: 5c:2f:04:67:71:54:b3:d8:ce:17:ba:02:e9:fa:a3: 16:4b:02:9f:64:11:db:97:c4:5c:7b:7c:3e:19:a3: 4e:71:40:a7:d0:66:f3:9a:4a:81:80:67:04:b7:a0: 1d:c5:3e:bc:9f:0c:f7:d8:e4:02:e1:39:fd:57:c3: b6:4d:1c:4f:87:13:84:16:7a:22:82:aa:16:74:57: 02:01:da:26:68:f1:e0:80:bc:18:3e:31:bb:ac:6e: 38:96:a0:48:8e:87:f3:d9:87:27:fb:d1:b1:0f:d8: 25:24:05:c4:ad:20:d7:41:92:20:9a:7c:5b:aa:8e: b3:9b:8e:39:49:72:84:15:b3:af:0d:13:24:bd:82: 6b:0b:c0:db:00:24:0d:e7:78:71:9e:1b:04:8b:d2: 8e:50:98:b6:09:58:26:db:8b:62:e3:df:36:3f:4f: a2:fa:55:92:65:36:32:e9:1d:3d:4e:dc:31:25:71: f6:85:ed:e0:1f:70:00:b3:d5:cc:9d:8a:b5:35:82: 11:28:f1:fb:d3:e1:4b:76:07:d2:25:95:36:2d:16: 77:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:5E:3C:EE:B3:AC:25:CD:FB:41:9E:C8:4E:7E:7F:9A:39:6C:EF:13 X509v3 Authority Key Identifier: keyid:16:61:48:0F:F2:74:E4:6E:5E:74:27:45:31:ED:CB:74:1C:A1:C7:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/1661480FF274E46E5E74274531EDCB741CA1C734.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1661480FF274E46E5E74274531EDCB741CA1C734.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/34332e3232352e3138342e302f32322d3234203d3e2039343232.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.225.184.0/22 Signature Algorithm: sha256WithRSAEncryption a5:b8:83:cb:b7:8d:c8:03:a1:b8:f0:56:12:59:55:27:ab:a1: 72:60:dc:4d:e4:ce:e8:5f:d6:c2:96:13:ca:bb:bb:47:0e:54: 67:fd:9e:4f:cf:4d:8d:10:ee:35:89:d6:7a:e9:49:1b:cf:48: 00:a9:be:e4:79:eb:f8:ba:63:ef:6f:bd:3b:ed:12:1a:40:51: 36:ff:08:ad:e8:72:64:fd:fd:bf:32:17:fc:9c:62:48:2c:aa: 21:18:c7:a9:ff:f4:ef:b0:66:22:3d:6f:69:97:3c:a7:e3:14: 29:b2:ca:9d:98:95:d6:a3:84:9e:e0:ec:18:93:e1:91:be:d4: f1:1b:3e:2e:c0:a5:5f:ad:ec:58:91:2c:6d:37:c6:8a:28:86: 4e:fa:b0:e4:f5:c5:53:13:f7:80:f3:4b:60:b6:00:14:8e:5a: 03:c8:cc:8b:61:51:95:93:f6:12:06:b0:f3:94:9c:ed:67:f3: 1b:16:01:6e:5b:ad:3b:71:7c:45:a2:3b:e8:24:9a:6c:4b:0a: 02:40:a5:77:92:ec:47:82:1f:48:10:33:67:37:1d:8e:1d:a2: ae:cd:17:e4:d4:fa:9c:76:7a:6a:ec:0c:02:82:0b:65:39:07: e0:f5:f5:0c:a9:9e:57:df:0c:15:78:c8:a8:13:ab:2c:aa:c6: 87:84:c5:d8 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUTFAV8lrLlV1CFBQ/pHuawZmZ4vYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTY2MTQ4MEZGMjc0RTQ2RTVFNzQyNzQ1MzFFRENCNzQx Q0ExQzczNDAeFw0yNjA1MDMwMjExMjVaFw0yNzA1MDIwMjE2MjVaMDMxMTAvBgNV BAMTKDIzNUUzQ0VFQjNBQzI1Q0RGQjQxOUVDODRFN0U3RjlBMzk2Q0VGMTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE1hf+hbBhqJMCh2vxPsm+mcRq 0ut+f3NQtKrj/lwEyS4lVwSa3aK1E7H8O1wvBGdxVLPYzhe6Aun6oxZLAp9kEduX xFx7fD4Zo05xQKfQZvOaSoGAZwS3oB3FPryfDPfY5ALhOf1Xw7ZNHE+HE4QWeiKC qhZ0VwIB2iZo8eCAvBg+MbusbjiWoEiOh/PZhyf70bEP2CUkBcStINdBkiCafFuq jrObjjlJcoQVs68NEyS9gmsLwNsAJA3neHGeGwSL0o5QmLYJWCbbi2Lj3zY/T6L6 VZJlNjLpHT1O3DElcfaF7eAfcACz1cydirU1ghEo8fvT4Ut2B9IllTYtFnehAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUI1487rOsJc37QZ7ITn5/mjls7xMwHwYDVR0j BBgwFoAUFmFID/J05G5edCdFMe3LdByhxzQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTg3ZDc5YmEtZmI1NS00OWE1LTk2N2ItMWVkYzc0OWQwMTI4LzAvMTY2MTQ4MEZG Mjc0RTQ2RTVFNzQyNzQ1MzFFRENCNzQxQ0ExQzczNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xNjYxNDgwRkYyNzRFNDZFNUU3NDI3NDUzMUVEQ0I3NDFDQTFD NzM0LmNlcjCBoQYIKwYBBQUHAQsEgZQwgZEwgY4GCCsGAQUFBzALhoGBcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzE4N2Q3OWJhLWZiNTUtNDlhNS05 NjdiLTFlZGM3NDlkMDEyOC8wLzM0MzMyZTMyMzIzNTJlMzEzODM0MmUzMDJmMzIz MjJkMzIzNDIwM2QzZTIwMzkzNDMyMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIr4bgwDQYJKoZIhvcN AQELBQADggEBAKW4g8u3jcgDobjwVhJZVSeroXJg3E3kzuhf1sKWE8q7u0cOVGf9 nk/PTY0Q7jWJ1nrpSRvPSACpvuR56/i6Y+9vvTvtEhpAUTb/CK3ocmT9/b8yF/yc YkgsqiEYx6n/9O+wZiI9b2mXPKfjFCmyyp2YldajhJ7g7BiT4ZG+1PEbPi7ApV+t 7FiRLG03xooohk76sOT1xVMT94DzS2C2ABSOWgPIzIthUZWT9hIGsPOUnO1n8xsW AW5brTtxfEWiO+gkmmxLCgJApXeS7EeCH0gQM2c3HY4doq7NF+TU+px2emrsDAKC C2U5B+D19QypnlffDBV4yKgTqyyqxoeExdg= -----END CERTIFICATE-----Generated at Mon May 4 20:06:15 2026 by rpki-client