$ rpki-client -vvf rpki-rsync.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/3132322e3132382e31362e302f32342d3234203d3e203436303435.roa File: 3132322e3132382e31362e302f32342d3234203d3e203436303435.roa (raw, json) Hash identifier: 0/QfoiXNfL7+6Rn9uHai+/eg6bnR/TAMxEM4trzBDyY= Subject key identifier: 95:81:E4:25:98:CD:62:93:79:C6:AF:98:D5:71:5C:80:3D:46:65:9D Certificate issuer: /CN=684DE34A64F3AFED44A02385FCB35882FB2E6AA5 Certificate serial: 7E267B121F450B5E9248D82D976DE9DC8529A05A Authority key identifier: 68:4D:E3:4A:64:F3:AF:ED:44:A0:23:85:FC:B3:58:82:FB:2E:6A:A5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/684DE34A64F3AFED44A02385FCB35882FB2E6AA5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/3132322e3132382e31362e302f32342d3234203d3e203436303435.roa Signing time: Sun 03 May 2026 02:25:56 +0000 ROA not before: Sun 03 May 2026 02:20:56 +0000 ROA not after: Sun 02 May 2027 02:25:56 +0000 asID: 46045 IP address blocks: 122.128.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/684DE34A64F3AFED44A02385FCB35882FB2E6AA5.crl rsync://rpki-rsync.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/684DE34A64F3AFED44A02385FCB35882FB2E6AA5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/684DE34A64F3AFED44A02385FCB35882FB2E6AA5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 03:14:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:26:7b:12:1f:45:0b:5e:92:48:d8:2d:97:6d:e9:dc:85:29:a0:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=684DE34A64F3AFED44A02385FCB35882FB2E6AA5 Validity Not Before: May 3 02:20:56 2026 GMT Not After : May 2 02:25:56 2027 GMT Subject: CN=9581E42598CD629379C6AF98D5715C803D46659D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:01:a3:f7:1f:bc:12:d0:64:2f:37:4f:24:c3: 30:d9:2b:aa:ca:54:96:5a:51:f0:5f:75:20:bc:57: 9d:3d:d7:35:e9:1b:78:ad:fb:f8:73:50:9e:87:fe: e3:17:5b:06:07:b8:24:c1:97:1f:15:ba:2f:e9:fc: 02:aa:d5:df:7a:2a:42:eb:89:b2:6f:47:50:2d:9b: d6:5c:b8:83:2c:b0:58:87:90:69:73:ab:e7:61:08: e8:71:e3:b7:e6:91:86:25:8d:04:20:dd:2a:8a:72: 22:83:58:70:80:d0:e2:e1:06:0a:2a:b5:06:cb:c8: e6:3a:be:aa:8f:04:18:c6:69:3a:4e:ee:87:87:fa: 56:78:85:46:9b:52:3d:38:00:18:e5:b8:68:82:bc: 1d:8b:4d:9e:4f:a2:13:8c:f8:02:88:8a:dc:18:cd: c8:45:8f:b1:13:f4:77:4f:73:24:48:d7:df:12:24: f6:c6:96:25:9c:5f:6a:4d:bc:84:9a:a5:b5:1f:cc: d1:59:f5:33:4a:c8:8a:7b:d7:61:bb:2d:c5:84:15: eb:b4:ac:b7:b7:70:6b:8a:e9:2f:b8:47:0a:20:df: 55:96:ea:6a:39:76:21:35:24:09:b6:de:f7:5f:bc: 1d:80:5c:55:7b:73:0c:b3:ef:d2:6a:4f:b4:da:43: 21:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:81:E4:25:98:CD:62:93:79:C6:AF:98:D5:71:5C:80:3D:46:65:9D X509v3 Authority Key Identifier: keyid:68:4D:E3:4A:64:F3:AF:ED:44:A0:23:85:FC:B3:58:82:FB:2E:6A:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/684DE34A64F3AFED44A02385FCB35882FB2E6AA5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/684DE34A64F3AFED44A02385FCB35882FB2E6AA5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/3132322e3132382e31362e302f32342d3234203d3e203436303435.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 122.128.16.0/24 Signature Algorithm: sha256WithRSAEncryption 0d:d9:1c:31:2a:8a:e7:e5:de:c5:08:b9:ca:01:59:70:69:7e: c9:06:d3:27:27:2e:93:15:b9:5d:22:e6:23:08:db:bb:bd:3e: 76:49:bd:d6:29:e4:d2:3a:ec:24:fb:c3:d8:46:32:af:3c:0b: 5b:4b:15:15:8a:b2:97:5a:1d:b5:de:30:76:35:64:48:2b:56: f2:52:70:75:90:dd:66:82:c8:99:25:70:43:4c:3b:7b:67:a0: 7f:1c:32:32:c5:9d:02:28:98:63:d0:14:b7:89:9a:ba:c3:f2: 4c:fc:34:67:20:d4:72:7a:96:75:8d:63:6f:de:70:c5:e1:e9: a1:a5:1a:f0:8d:35:28:95:97:ef:5c:af:67:3b:81:43:2e:43: c6:54:5d:d7:60:db:e7:53:6a:50:44:c6:c8:ec:80:cb:fd:ee: 4b:13:72:80:79:80:33:1f:eb:9c:f0:d4:13:d3:f3:70:3a:15: c0:6f:13:2f:13:d4:4a:6b:81:1e:09:78:b6:fc:f0:30:9b:de: ec:db:bd:1f:f4:6b:0a:71:1a:69:e2:95:6f:54:72:46:62:84: 7d:60:13:c6:a3:bd:be:17:9c:96:12:01:ec:bd:de:44:f2:be: 92:9f:b0:65:b0:a2:d1:c7:69:60:99:2d:7e:a2:6f:0c:b4:a7: 66:dd:cb:02 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUfiZ7Eh9FC16SSNgtl23p3IUpoFowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjg0REUzNEE2NEYzQUZFRDQ0QTAyMzg1RkNCMzU4ODJG QjJFNkFBNTAeFw0yNjA1MDMwMjIwNTZaFw0yNzA1MDIwMjI1NTZaMDMxMTAvBgNV BAMTKDk1ODFFNDI1OThDRDYyOTM3OUM2QUY5OEQ1NzE1QzgwM0Q0NjY1OUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSAaP3H7wS0GQvN08kwzDZK6rK VJZaUfBfdSC8V5091zXpG3it+/hzUJ6H/uMXWwYHuCTBlx8Vui/p/AKq1d96KkLr ibJvR1Atm9ZcuIMssFiHkGlzq+dhCOhx47fmkYYljQQg3SqKciKDWHCA0OLhBgoq tQbLyOY6vqqPBBjGaTpO7oeH+lZ4hUabUj04ABjluGiCvB2LTZ5PohOM+AKIitwY zchFj7ET9HdPcyRI198SJPbGliWcX2pNvISapbUfzNFZ9TNKyIp712G7LcWEFeu0 rLe3cGuK6S+4Rwog31WW6mo5diE1JAm23vdfvB2AXFV7cwyz79JqT7TaQyGNAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUlYHkJZjNYpN5xq+Y1XFcgD1GZZ0wHwYDVR0j BBgwFoAUaE3jSmTzr+1EoCOF/LNYgvsuaqUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Mzg1M2YyMjgtMzdmMi00N2Q5LWI5ZmUtNDc2YmFkZTEzMzkzLzAvNjg0REUzNEE2 NEYzQUZFRDQ0QTAyMzg1RkNCMzU4ODJGQjJFNkFBNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82ODRERTM0QTY0RjNBRkVENDRBMDIzODVGQ0IzNTg4MkZCMkU2 QUE1LmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzM4NTNmMjI4LTM3ZjItNDdkOS1i OWZlLTQ3NmJhZGUxMzM5My8wLzMxMzIzMjJlMzEzMjM4MmUzMTM2MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzQzNjMwMzQzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHqAEDANBgkqhkiG 9w0BAQsFAAOCAQEADdkcMSqK5+XexQi5ygFZcGl+yQbTJycukxW5XSLmIwjbu70+ dkm91ink0jrsJPvD2EYyrzwLW0sVFYqyl1odtd4wdjVkSCtW8lJwdZDdZoLImSVw Q0w7e2egfxwyMsWdAiiYY9AUt4mausPyTPw0ZyDUcnqWdY1jb95wxeHpoaUa8I01 KJWX71yvZzuBQy5DxlRd12Db51NqUETGyOyAy/3uSxNygHmAMx/rnPDUE9PzcDoV wG8TLxPUSmuBHgl4tvzwMJve7Nu9H/RrCnEaaeKVb1RyRmKEfWATxqO9vheclhIB 7L3eRPK+kp+wZbCi0cdpYJktfqJvDLSnZt3LAg== -----END CERTIFICATE-----Generated at Sun May 3 20:01:28 2026 by rpki-client