$ rpki-client -vvf rpki-rsync.idnic.net/repo/3305177a-a500-4996-b3ff-70c144edfece/0/34332e3234382e3231322e302f32342d3234203d3e203538343734.roa File: 34332e3234382e3231322e302f32342d3234203d3e203538343734.roa (raw, json) Hash identifier: 5F2W8Z4P5PEheYcmRC6qYhg/elm2GoPMJ5sZG45K31I= Subject key identifier: A3:22:B0:E5:00:9A:E9:AE:42:22:CE:E9:ED:D6:39:D0:AD:D8:95:C5 Certificate issuer: /CN=8B18B819BC010B4A4EC66777543486E34AF52ED4 Certificate serial: 5CDD8507EF1BD70830568ED3DA3823BC9F33758D Authority key identifier: 8B:18:B8:19:BC:01:0B:4A:4E:C6:67:77:54:34:86:E3:4A:F5:2E:D4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8B18B819BC010B4A4EC66777543486E34AF52ED4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3305177a-a500-4996-b3ff-70c144edfece/0/34332e3234382e3231322e302f32342d3234203d3e203538343734.roa Signing time: Sun 03 May 2026 02:24:24 +0000 ROA not before: Sun 03 May 2026 02:19:24 +0000 ROA not after: Sun 02 May 2027 02:24:24 +0000 asID: 58474 IP address blocks: 43.248.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3305177a-a500-4996-b3ff-70c144edfece/0/8B18B819BC010B4A4EC66777543486E34AF52ED4.crl rsync://rpki-rsync.idnic.net/repo/3305177a-a500-4996-b3ff-70c144edfece/0/8B18B819BC010B4A4EC66777543486E34AF52ED4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8B18B819BC010B4A4EC66777543486E34AF52ED4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 21:51:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:dd:85:07:ef:1b:d7:08:30:56:8e:d3:da:38:23:bc:9f:33:75:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B18B819BC010B4A4EC66777543486E34AF52ED4 Validity Not Before: May 3 02:19:24 2026 GMT Not After : May 2 02:24:24 2027 GMT Subject: CN=A322B0E5009AE9AE4222CEE9EDD639D0ADD895C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:33:14:b6:2a:6f:4a:b8:45:bf:98:a3:1d:c1: d7:39:cf:ad:44:41:ed:be:51:f6:5a:70:32:dd:10: d4:88:fa:14:cf:bb:33:20:1b:64:60:37:cf:40:7f: 96:e3:57:89:08:ad:2b:9d:31:ae:45:e8:9f:bf:43: c0:75:0b:86:29:c8:9f:8a:e4:7e:3b:9e:05:77:32: 61:c6:4c:42:f1:fa:97:27:98:92:f7:44:89:b1:4b: 21:4f:40:91:b0:51:1d:07:75:b7:d7:0b:4c:e9:d3: 78:f3:a0:08:8e:7d:ee:d1:cc:1e:4a:21:5a:35:90: 23:f4:00:3a:e2:85:19:f1:e7:cc:ef:1a:25:ab:03: 7c:74:97:f4:3e:0b:22:71:5d:05:b9:2d:9b:f9:f5: 7c:c9:2f:c9:c1:32:34:55:5f:3a:88:8b:05:95:9a: 65:7f:50:d1:ff:37:0b:2f:9b:b5:43:10:51:f6:48: c4:c7:40:06:d9:95:d0:aa:8c:83:f3:a1:3d:9c:43: dd:cc:a6:18:63:c7:9d:0b:11:ae:26:b3:5e:38:ea: c0:f9:c4:eb:ae:d5:5f:b3:b4:91:ca:c8:6a:1a:3c: 74:c7:18:58:12:51:8f:a5:66:15:98:d9:5d:58:85: d3:67:da:52:66:a2:dc:f4:65:c6:df:ed:e7:db:46: 5d:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:22:B0:E5:00:9A:E9:AE:42:22:CE:E9:ED:D6:39:D0:AD:D8:95:C5 X509v3 Authority Key Identifier: keyid:8B:18:B8:19:BC:01:0B:4A:4E:C6:67:77:54:34:86:E3:4A:F5:2E:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3305177a-a500-4996-b3ff-70c144edfece/0/8B18B819BC010B4A4EC66777543486E34AF52ED4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8B18B819BC010B4A4EC66777543486E34AF52ED4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3305177a-a500-4996-b3ff-70c144edfece/0/34332e3234382e3231322e302f32342d3234203d3e203538343734.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.248.212.0/24 Signature Algorithm: sha256WithRSAEncryption b0:1d:55:5f:cd:aa:c9:8e:f0:dd:0d:1c:8a:3b:9f:f4:ce:2b: 61:6c:0d:06:c0:27:0b:c4:88:53:8a:79:c7:79:03:5c:32:e5: a8:12:cc:29:eb:8d:7d:33:f5:92:7c:26:41:b3:d9:91:87:d7: 89:c6:a8:3c:0c:1c:19:22:e6:54:c9:66:ad:48:b3:13:52:d5: b9:80:76:df:46:c3:35:3a:9f:e2:a6:b7:ff:61:32:97:76:a3: af:54:bd:61:c6:bd:c9:8c:34:6d:37:7f:16:35:0c:a3:b9:c4: 1e:b9:23:4f:5f:cc:ee:30:06:b3:df:6c:fe:f3:57:ee:2a:7b: f8:b7:a9:0f:f4:55:4b:bf:dd:13:32:3b:f9:00:b6:33:10:4d: 81:e6:3b:ac:34:5b:de:dc:d7:72:ab:bb:a6:fe:da:48:4f:30: 48:18:d9:47:63:ab:a3:15:5a:21:22:23:35:0c:4d:9f:9b:7d: e7:9c:9f:23:21:d0:35:af:a2:43:c3:ba:ad:88:20:b0:6f:6c: 6a:cb:ce:f3:4a:9f:94:1d:fd:b6:8a:99:ac:04:44:b2:86:93: 1c:be:fe:1a:a4:12:2c:0a:15:cf:af:fc:a0:c4:a5:65:fa:1a: 35:36:a6:1b:8e:02:03:a4:ca:62:82:07:e3:8f:25:2b:e7:ea: 3a:c1:6c:a3 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUXN2FB+8b1wgwVo7T2jgjvJ8zdY0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEIxOEI4MTlCQzAxMEI0QTRFQzY2Nzc3NTQzNDg2RTM0 QUY1MkVENDAeFw0yNjA1MDMwMjE5MjRaFw0yNzA1MDIwMjI0MjRaMDMxMTAvBgNV BAMTKEEzMjJCMEU1MDA5QUU5QUU0MjIyQ0VFOUVERDYzOUQwQUREODk1QzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoMxS2Km9KuEW/mKMdwdc5z61E Qe2+UfZacDLdENSI+hTPuzMgG2RgN89Af5bjV4kIrSudMa5F6J+/Q8B1C4YpyJ+K 5H47ngV3MmHGTELx+pcnmJL3RImxSyFPQJGwUR0HdbfXC0zp03jzoAiOfe7RzB5K IVo1kCP0ADrihRnx58zvGiWrA3x0l/Q+CyJxXQW5LZv59XzJL8nBMjRVXzqIiwWV mmV/UNH/Nwsvm7VDEFH2SMTHQAbZldCqjIPzoT2cQ93Mphhjx50LEa4ms1446sD5 xOuu1V+ztJHKyGoaPHTHGFgSUY+lZhWY2V1YhdNn2lJmotz0Zcbf7efbRl3vAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUoyKw5QCa6a5CIs7p7dY50K3YlcUwHwYDVR0j BBgwFoAUixi4GbwBC0pOxmd3VDSG40r1LtQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzMwNTE3N2EtYTUwMC00OTk2LWIzZmYtNzBjMTQ0ZWRmZWNlLzAvOEIxOEI4MTlC QzAxMEI0QTRFQzY2Nzc3NTQzNDg2RTM0QUY1MkVENC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84QjE4QjgxOUJDMDEwQjRBNEVDNjY3Nzc1NDM0ODZFMzRBRjUy RUQ0LmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzMzMDUxNzdhLWE1MDAtNDk5Ni1i M2ZmLTcwYzE0NGVkZmVjZS8wLzM0MzMyZTMyMzQzODJlMzIzMTMyMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzUzODM0MzczNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEACv41DANBgkqhkiG 9w0BAQsFAAOCAQEAsB1VX82qyY7w3Q0cijuf9M4rYWwNBsAnC8SIU4p5x3kDXDLl qBLMKeuNfTP1knwmQbPZkYfXicaoPAwcGSLmVMlmrUizE1LVuYB230bDNTqf4qa3 /2Eyl3ajr1S9Yca9yYw0bTd/FjUMo7nEHrkjT1/M7jAGs99s/vNX7ip7+LepD/RV S7/dEzI7+QC2MxBNgeY7rDRb3tzXcqu7pv7aSE8wSBjZR2OroxVaISIjNQxNn5t9 55yfIyHQNa+iQ8O6rYggsG9sasvO80qflB39toqZrAREsoaTHL7+GqQSLAoVz6/8 oMSlZfoaNTamG44CA6TKYoIH448lK+fqOsFsow== -----END CERTIFICATE-----Generated at Mon May 4 13:04:57 2026 by rpki-client