$ rpki-client -vvvf rpki-rsync.idnic.net/repo/11828067-e7c1-4964-8428-599033d74296/0/34352e3132332e3134332e302f32342d3234203d3e20313532303233.roa File: 34352e3132332e3134332e302f32342d3234203d3e20313532303233.roa (raw, json) Hash identifier: UmukbUvgu47+VROMQmFwOLzV8yCwQtffXvXCSOTJ9GA= Subject key identifier: 5A:40:4A:2A:23:B1:5D:7F:5C:89:1B:E4:87:B0:07:23:07:1B:D8:20 Certificate issuer: /CN=73DBC921D8D2EE0A4ACCEA19DC9357F5DE4BE3E4 Certificate serial: 173BCD904282E9545127C8386B1C4C66B7BD16C9 Authority key identifier: 73:DB:C9:21:D8:D2:EE:0A:4A:CC:EA:19:DC:93:57:F5:DE:4B:E3:E4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/73DBC921D8D2EE0A4ACCEA19DC9357F5DE4BE3E4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/11828067-e7c1-4964-8428-599033d74296/0/34352e3132332e3134332e302f32342d3234203d3e20313532303233.roa Signing time: Thu 01 Oct 2026 03:26:37 +0000 ROA not before: Thu 01 Oct 2026 03:21:37 +0000 ROA not after: Thu 30 Sep 2027 03:26:37 +0000 asID: 152023 IP address blocks: 45.123.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/11828067-e7c1-4964-8428-599033d74296/0/73DBC921D8D2EE0A4ACCEA19DC9357F5DE4BE3E4.crl rsync://rpki-rsync.idnic.net/repo/11828067-e7c1-4964-8428-599033d74296/0/73DBC921D8D2EE0A4ACCEA19DC9357F5DE4BE3E4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/73DBC921D8D2EE0A4ACCEA19DC9357F5DE4BE3E4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Oct 2026 04:41:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:3b:cd:90:42:82:e9:54:51:27:c8:38:6b:1c:4c:66:b7:bd:16:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73DBC921D8D2EE0A4ACCEA19DC9357F5DE4BE3E4 Validity Not Before: Oct 1 03:21:37 2026 GMT Not After : Sep 30 03:26:37 2027 GMT Subject: CN=5A404A2A23B15D7F5C891BE487B00723071BD820 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:74:03:2c:16:fb:ce:9d:c8:ef:fb:7e:47:d3: 70:37:3a:d9:4a:f9:c1:d3:ee:9d:d9:84:1b:44:b6: 5f:5d:ce:25:12:0c:2d:9e:9f:03:2b:0f:ea:c0:4f: e2:b8:e2:eb:cf:53:30:c8:e0:15:08:26:cd:7c:22: 07:44:d1:9d:95:a1:a9:1f:b5:dc:8f:8e:e1:c8:ad: 66:32:eb:cc:88:b6:6a:31:e0:07:f4:0c:c8:d9:3f: fd:12:d8:bf:ef:75:32:85:af:6b:45:e9:1f:16:11: cd:b6:a8:6f:e9:36:4e:32:e9:98:65:8c:01:f4:4e: 64:51:b9:73:d0:be:8c:b1:ca:7a:ea:5a:6d:ff:55: a4:b8:59:37:46:6b:a6:d7:db:00:1c:51:c7:84:6e: 96:92:ec:25:ae:c5:c6:88:96:f1:97:4e:4b:61:1e: 88:cb:96:01:42:e7:e1:01:ca:5e:b2:17:8b:28:2f: e0:aa:35:d1:78:4a:d3:6d:b9:5d:9f:d4:90:88:68: b9:1d:d6:3b:0c:34:ba:7e:0e:a6:7e:91:1d:16:67: 12:35:e9:a6:71:ad:c4:bc:13:99:12:1b:96:ef:70: ce:71:cb:a4:25:28:59:16:d1:31:06:d5:e6:72:c7: eb:15:a1:a5:59:23:c8:a7:69:4b:be:e6:97:42:fe: bf:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:40:4A:2A:23:B1:5D:7F:5C:89:1B:E4:87:B0:07:23:07:1B:D8:20 X509v3 Authority Key Identifier: keyid:73:DB:C9:21:D8:D2:EE:0A:4A:CC:EA:19:DC:93:57:F5:DE:4B:E3:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/11828067-e7c1-4964-8428-599033d74296/0/73DBC921D8D2EE0A4ACCEA19DC9357F5DE4BE3E4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/73DBC921D8D2EE0A4ACCEA19DC9357F5DE4BE3E4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/11828067-e7c1-4964-8428-599033d74296/0/34352e3132332e3134332e302f32342d3234203d3e20313532303233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.123.143.0/24 Signature Algorithm: sha256WithRSAEncryption 61:91:a8:d8:45:2e:f3:6e:82:c2:bf:63:7b:9d:78:d8:03:6c: 27:e9:31:b6:c5:c2:bd:e0:f1:f1:f4:c0:59:4d:bc:fb:32:ba: 72:6b:6c:71:3e:ef:6b:f4:ec:54:db:b2:ec:c4:88:56:09:33: 89:74:96:b3:ae:00:bc:05:34:4c:c9:e6:f6:4d:fe:d2:c8:44: fa:3c:db:71:88:04:1f:ca:1a:23:e5:58:55:25:e0:45:59:7f: 6c:44:1d:5d:51:2f:15:9b:0c:00:70:08:69:fa:9d:a0:65:0b: b8:92:08:64:f3:a8:69:29:ba:44:9a:a4:6c:3f:a5:08:57:d6: fd:04:ff:1f:8e:0d:df:0c:3c:ce:36:b7:9d:b9:82:a7:d3:9f: ae:b0:e2:b5:4b:78:04:c5:c4:fe:24:e2:c0:4f:9a:22:5a:64: d6:00:ca:34:94:be:17:a7:40:06:3f:66:69:41:1b:be:1f:b3: ef:a8:60:b7:9b:18:69:c9:01:25:98:55:eb:88:85:15:93:c7: 00:ff:e7:db:81:50:9b:48:c9:34:6e:f4:52:1d:1b:8f:7e:05: bd:5d:30:df:e3:f1:1d:3a:09:c3:70:0c:e9:85:a5:d8:0b:99: 93:21:53:f0:cf:2c:81:c0:3d:2c:bd:0d:8b:9e:42:20:2a:45: 42:8d:24:77 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUFzvNkEKC6VRRJ8g4axxMZre9FskwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzNEQkM5MjFEOEQyRUUwQTRBQ0NFQTE5REM5MzU3RjVE RTRCRTNFNDAeFw0yNjEwMDEwMzIxMzdaFw0yNzA5MzAwMzI2MzdaMDMxMTAvBgNV BAMTKDVBNDA0QTJBMjNCMTVEN0Y1Qzg5MUJFNDg3QjAwNzIzMDcxQkQ4MjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/dAMsFvvOncjv+35H03A3OtlK +cHT7p3ZhBtEtl9dziUSDC2enwMrD+rAT+K44uvPUzDI4BUIJs18IgdE0Z2Voakf tdyPjuHIrWYy68yItmox4Af0DMjZP/0S2L/vdTKFr2tF6R8WEc22qG/pNk4y6Zhl jAH0TmRRuXPQvoyxynrqWm3/VaS4WTdGa6bX2wAcUceEbpaS7CWuxcaIlvGXTkth HojLlgFC5+EByl6yF4soL+CqNdF4StNtuV2f1JCIaLkd1jsMNLp+DqZ+kR0WZxI1 6aZxrcS8E5kSG5bvcM5xy6QlKFkW0TEG1eZyx+sVoaVZI8inaUu+5pdC/r9dAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUWkBKKiOxXX9ciRvkh7AHIwcb2CAwHwYDVR0j BBgwFoAUc9vJIdjS7gpKzOoZ3JNX9d5L4+QwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTE4MjgwNjctZTdjMS00OTY0LTg0MjgtNTk5MDMzZDc0Mjk2LzAvNzNEQkM5MjFE OEQyRUUwQTRBQ0NFQTE5REM5MzU3RjVERTRCRTNFNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83M0RCQzkyMUQ4RDJFRTBBNEFDQ0VBMTlEQzkzNTdGNURFNEJF M0U0LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzExODI4MDY3LWU3YzEtNDk2NC04 NDI4LTU5OTAzM2Q3NDI5Ni8wLzM0MzUyZTMxMzIzMzJlMzEzNDMzMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNTMyMzAzMjMzLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALXuPMA0GCSqG SIb3DQEBCwUAA4IBAQBhkajYRS7zboLCv2N7nXjYA2wn6TG2xcK94PHx9MBZTbz7 Mrpya2xxPu9r9OxU27LsxIhWCTOJdJazrgC8BTRMyeb2Tf7SyET6PNtxiAQfyhoj 5VhVJeBFWX9sRB1dUS8VmwwAcAhp+p2gZQu4kghk86hpKbpEmqRsP6UIV9b9BP8f jg3fDDzONreduYKn05+usOK1S3gExcT+JOLAT5oiWmTWAMo0lL4Xp0AGP2ZpQRu+ H7PvqGC3mxhpyQElmFXriIUVk8cA/+fbgVCbSMk0bvRSHRuPfgW9XTDf4/EdOgnD cAzphaXYC5mTIVPwzyyBwD0svQ2LnkIgKkVCjSR3 -----END CERTIFICATE-----Generated at Mon Oct 26 19:39:06 2026 by rpki-client