$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/3132332e3235332e3233342e302f32342d3234203d3e20313339343038.roa File: 3132332e3235332e3233342e302f32342d3234203d3e20313339343038.roa (raw, json) Hash identifier: a0sEneyWlTI1N7Z4shCuneNVkj2APTOIODY1SwNV7Uw= Subject key identifier: CF:DB:3F:0E:01:90:81:31:91:3C:88:84:0C:38:0C:96:47:42:DB:D2 Certificate issuer: /CN=70562FBF0E190EE7E1BA063D6E46853A67FFEFAA Certificate serial: 499FA9043C586BF1A818E293A542ED089160AF1D Authority key identifier: 70:56:2F:BF:0E:19:0E:E7:E1:BA:06:3D:6E:46:85:3A:67:FF:EF:AA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/70562FBF0E190EE7E1BA063D6E46853A67FFEFAA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/3132332e3235332e3233342e302f32342d3234203d3e20313339343038.roa Signing time: Fri 23 Oct 2026 03:33:58 +0000 ROA not before: Fri 23 Oct 2026 03:28:58 +0000 ROA not after: Fri 22 Oct 2027 03:33:58 +0000 asID: 139408 IP address blocks: 123.253.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/70562FBF0E190EE7E1BA063D6E46853A67FFEFAA.crl rsync://rpki-rsync.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/70562FBF0E190EE7E1BA063D6E46853A67FFEFAA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/70562FBF0E190EE7E1BA063D6E46853A67FFEFAA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 12:43:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:9f:a9:04:3c:58:6b:f1:a8:18:e2:93:a5:42:ed:08:91:60:af:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70562FBF0E190EE7E1BA063D6E46853A67FFEFAA Validity Not Before: Oct 23 03:28:58 2026 GMT Not After : Oct 22 03:33:58 2027 GMT Subject: CN=CFDB3F0E01908131913C88840C380C964742DBD2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:72:ac:ec:90:4c:5c:3f:d2:d9:ec:83:2d:e8: f8:21:88:1b:24:03:40:a4:90:70:4f:d9:49:8d:f9: 97:3b:1b:8e:30:11:81:16:00:9c:cc:c3:84:b7:aa: e4:4e:43:67:a8:a0:90:f4:39:8f:f6:a5:d3:fb:39: d8:6a:78:55:d1:f9:97:58:61:30:91:bc:35:ad:a5: 36:62:50:3c:c5:2a:b0:ad:10:d6:3b:ae:30:37:31: 65:b0:d0:d2:be:b6:36:0c:be:d0:fb:08:e1:61:2e: b0:63:04:b1:c7:89:1d:2e:b3:d0:07:f0:c5:7e:77: 39:be:c3:59:11:cd:c4:c3:20:86:b6:be:78:15:71: 39:ad:bf:71:f9:cd:7c:d7:91:23:2c:71:bc:b0:00: 4d:20:48:8e:af:ed:9e:37:3f:fd:41:a3:6c:f2:f6: ae:87:65:eb:b9:e0:7c:a8:2f:18:02:44:79:89:5d: 66:99:eb:1c:17:27:16:b5:ac:40:c8:f3:c2:cc:2e: 45:62:e0:a4:29:7f:7e:fe:65:df:0e:9a:c7:c0:7d: 12:f6:77:1d:d8:01:f7:11:bf:2d:bc:70:91:28:f0: 47:0d:a1:1d:ee:9d:37:db:a6:03:49:66:6b:5d:71: 24:80:e3:c7:6a:0e:62:bf:d0:3e:02:54:b8:a2:29: 70:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:DB:3F:0E:01:90:81:31:91:3C:88:84:0C:38:0C:96:47:42:DB:D2 X509v3 Authority Key Identifier: keyid:70:56:2F:BF:0E:19:0E:E7:E1:BA:06:3D:6E:46:85:3A:67:FF:EF:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/70562FBF0E190EE7E1BA063D6E46853A67FFEFAA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/70562FBF0E190EE7E1BA063D6E46853A67FFEFAA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/3132332e3235332e3233342e302f32342d3234203d3e20313339343038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 123.253.234.0/24 Signature Algorithm: sha256WithRSAEncryption 6d:c0:84:0d:2b:37:71:47:6d:98:ee:08:0f:64:41:54:f7:25: d0:e9:92:40:96:29:a9:51:c1:61:fb:80:53:78:29:f4:6f:bf: c2:f4:9a:c3:4f:9a:ff:13:b7:e3:cd:ea:61:f4:84:94:d8:6b: b3:d2:c1:db:32:f0:c9:41:ee:63:06:e4:cb:de:68:b1:8e:aa: f2:20:d2:76:27:b6:c5:12:8c:48:8e:c1:a5:a8:ec:5c:09:e2: 2f:1e:df:e1:9b:51:36:26:fa:ec:91:99:28:df:25:1b:7d:fa: 0e:c5:62:b9:b5:ac:1b:95:b4:9d:57:17:9e:f9:6e:1b:37:35: 84:98:a2:8e:aa:e4:92:5e:1d:52:89:95:38:15:c6:1e:3f:6f: 9f:e7:51:27:11:34:3b:b4:35:09:c6:80:0d:7e:b8:c1:de:34: 98:5e:6e:61:71:28:63:6c:e6:16:e8:18:f0:f1:a4:64:02:8f: d0:28:24:67:8b:97:f5:fd:be:b7:d9:64:08:fd:d3:c5:c0:a4: b6:57:72:d1:c1:91:53:99:d8:ef:fc:c4:7d:67:9a:7a:f4:09: 48:a8:ae:b3:39:8d:48:62:eb:f7:0a:30:05:4b:f4:40:30:8e: 8c:a3:4e:b9:c6:37:c1:a8:80:b4:1c:a8:a5:90:3a:00:30:22: b5:e0:4b:75 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUSZ+pBDxYa/GoGOKTpULtCJFgrx0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzA1NjJGQkYwRTE5MEVFN0UxQkEwNjNENkU0Njg1M0E2 N0ZGRUZBQTAeFw0yNjEwMjMwMzI4NThaFw0yNzEwMjIwMzMzNThaMDMxMTAvBgNV BAMTKENGREIzRjBFMDE5MDgxMzE5MTNDODg4NDBDMzgwQzk2NDc0MkRCRDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHcqzskExcP9LZ7IMt6PghiBsk A0CkkHBP2UmN+Zc7G44wEYEWAJzMw4S3quROQ2eooJD0OY/2pdP7OdhqeFXR+ZdY YTCRvDWtpTZiUDzFKrCtENY7rjA3MWWw0NK+tjYMvtD7COFhLrBjBLHHiR0us9AH 8MV+dzm+w1kRzcTDIIa2vngVcTmtv3H5zXzXkSMscbywAE0gSI6v7Z43P/1Bo2zy 9q6HZeu54HyoLxgCRHmJXWaZ6xwXJxa1rEDI88LMLkVi4KQpf37+Zd8OmsfAfRL2 dx3YAfcRvy28cJEo8EcNoR3unTfbpgNJZmtdcSSA48dqDmK/0D4CVLiiKXBxAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUz9s/DgGQgTGRPIiEDDgMlkdC29IwHwYDVR0j BBgwFoAUcFYvvw4ZDufhugY9bkaFOmf/76owDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWZiMWM4MGMtNGQ2Yy00NDA4LTg5NDctZmJhNmU3YzRiZTdjLzAvNzA1NjJGQkYw RTE5MEVFN0UxQkEwNjNENkU0Njg1M0E2N0ZGRUZBQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83MDU2MkZCRjBFMTkwRUU3RTFCQTA2M0Q2RTQ2ODUzQTY3RkZF RkFBLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzVmYjFjODBjLTRkNmMtNDQwOC04 OTQ3LWZiYTZlN2M0YmU3Yy8wLzMxMzIzMzJlMzIzNTMzMmUzMjMzMzQyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzkzNDMwMzgucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAB7/eowDQYJ KoZIhvcNAQELBQADggEBAG3AhA0rN3FHbZjuCA9kQVT3JdDpkkCWKalRwWH7gFN4 KfRvv8L0msNPmv8Tt+PN6mH0hJTYa7PSwdsy8MlB7mMG5MveaLGOqvIg0nYntsUS jEiOwaWo7FwJ4i8e3+GbUTYm+uyRmSjfJRt9+g7FYrm1rBuVtJ1XF575bhs3NYSY oo6q5JJeHVKJlTgVxh4/b5/nUScRNDu0NQnGgA1+uMHeNJhebmFxKGNs5hboGPDx pGQCj9AoJGeLl/X9vrfZZAj908XApLZXctHBkVOZ2O/8xH1nmnr0CUiorrM5jUhi 6/cKMAVL9EAwjoyjTrnGN8GogLQcqKWQOgAwIrXgS3U= -----END CERTIFICATE-----Generated at Mon Nov 2 22:08:46 2026 by rpki-client