$ rpki-client -vvf rpki-rsync.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/3132322e3132382e31362e302f32342d3234203d3e203531323032.roa File: 3132322e3132382e31362e302f32342d3234203d3e203531323032.roa (raw, json) Hash identifier: Bv30QUp2YXB4ZkzrwlFua6Ycz6SNktruBYqYMaGWd0g= Subject key identifier: 32:79:EC:3C:8A:BE:93:3E:23:CF:9C:01:00:7A:B7:4F:14:09:AE:CF Certificate issuer: /CN=684DE34A64F3AFED44A02385FCB35882FB2E6AA5 Certificate serial: 0354362406C5728BA2704EF2F76FF605C8354286 Authority key identifier: 68:4D:E3:4A:64:F3:AF:ED:44:A0:23:85:FC:B3:58:82:FB:2E:6A:A5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/684DE34A64F3AFED44A02385FCB35882FB2E6AA5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/3132322e3132382e31362e302f32342d3234203d3e203531323032.roa Signing time: Sun 03 May 2026 02:25:57 +0000 ROA not before: Sun 03 May 2026 02:20:57 +0000 ROA not after: Sun 02 May 2027 02:25:57 +0000 asID: 51202 IP address blocks: 122.128.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/684DE34A64F3AFED44A02385FCB35882FB2E6AA5.crl rsync://rpki-rsync.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/684DE34A64F3AFED44A02385FCB35882FB2E6AA5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/684DE34A64F3AFED44A02385FCB35882FB2E6AA5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 03:14:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:54:36:24:06:c5:72:8b:a2:70:4e:f2:f7:6f:f6:05:c8:35:42:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=684DE34A64F3AFED44A02385FCB35882FB2E6AA5 Validity Not Before: May 3 02:20:57 2026 GMT Not After : May 2 02:25:57 2027 GMT Subject: CN=3279EC3C8ABE933E23CF9C01007AB74F1409AECF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:4c:31:93:48:d1:13:3c:07:22:e0:29:26:54: 5b:0a:41:99:3d:f3:fc:19:dd:1d:cf:a5:74:a0:3c: 45:d6:78:52:79:07:7f:93:b3:03:85:8a:78:f6:88: 36:f2:e1:dc:58:b9:63:10:e4:47:4a:2d:3e:26:03: d3:74:77:e6:f5:23:43:98:88:0e:d0:b8:8b:0a:bb: 03:96:08:bb:ca:93:a1:8d:ec:43:30:50:f1:86:4c: b7:fa:d3:43:a2:08:c2:3e:a8:9f:12:66:4f:81:6f: ff:62:88:61:2e:35:71:d4:42:47:54:fd:ca:7d:27: 8e:9d:4a:cb:84:7e:a9:9f:7d:af:5b:c6:31:95:3e: 45:f7:60:83:f1:ad:a4:6f:b5:e9:cf:b7:17:44:09: b4:b7:dc:59:88:cb:e3:8c:ad:83:98:42:7e:ff:ac: 47:36:83:70:d3:ea:f0:6d:de:24:77:1e:ee:f7:4c: a6:5a:92:10:3a:ef:17:31:91:dd:32:dd:fa:93:6a: 7e:29:49:86:f2:37:9f:03:e7:ed:43:cd:a5:a3:32: 97:87:68:9c:b3:51:b5:a2:42:9e:ce:d5:15:da:f6: 62:49:b4:35:9b:23:ac:6a:e6:14:05:42:3b:cf:e2: b1:87:e5:34:f7:99:a8:7c:a4:0a:87:db:d4:cf:06: 2b:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:79:EC:3C:8A:BE:93:3E:23:CF:9C:01:00:7A:B7:4F:14:09:AE:CF X509v3 Authority Key Identifier: keyid:68:4D:E3:4A:64:F3:AF:ED:44:A0:23:85:FC:B3:58:82:FB:2E:6A:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/684DE34A64F3AFED44A02385FCB35882FB2E6AA5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/684DE34A64F3AFED44A02385FCB35882FB2E6AA5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/3132322e3132382e31362e302f32342d3234203d3e203531323032.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 122.128.16.0/24 Signature Algorithm: sha256WithRSAEncryption 29:bf:1f:f6:23:b8:97:36:93:d6:bd:23:73:9f:8c:35:9e:87: 15:c8:d8:cc:42:b1:3a:00:02:7c:ec:a7:05:a8:2d:07:77:43: 85:bd:18:08:48:b1:9a:e0:78:42:9e:4b:87:1b:11:8f:f1:da: c7:76:e5:8e:b0:c4:4f:f2:0c:f3:37:00:47:21:39:8d:62:7b: 3a:44:b5:3c:68:03:16:87:e4:3a:c7:79:f4:1b:b0:3d:b5:9c: 76:0f:3f:4a:81:e6:67:80:e5:88:79:74:47:a3:ec:1e:63:bb: 38:84:51:f6:53:e9:55:3c:97:cd:3a:25:59:ea:cd:4a:71:be: cb:35:90:5d:ca:c3:79:95:69:c3:f4:79:fd:ec:e2:f7:4b:04: cd:4b:37:15:45:ff:c2:a4:03:68:91:9f:e2:70:a2:7d:d0:4b: 95:32:df:0c:d7:c2:f3:02:5e:87:31:b5:24:46:5b:e9:58:fc: 9f:8d:28:c7:06:93:64:c1:7d:42:ec:aa:fb:72:ea:d7:5f:78: 32:0b:81:23:f8:cd:d8:57:8c:0f:2b:24:d6:d6:35:c5:12:e0: c1:5b:ee:3b:e3:1d:f0:40:8d:8a:c0:f7:2c:36:59:5a:ab:4e: f8:86:47:8a:d4:bf:46:6e:55:be:0d:b8:ee:05:bd:c7:d9:79: 62:cf:1b:1e -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUA1Q2JAbFcouicE7y92/2Bcg1QoYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjg0REUzNEE2NEYzQUZFRDQ0QTAyMzg1RkNCMzU4ODJG QjJFNkFBNTAeFw0yNjA1MDMwMjIwNTdaFw0yNzA1MDIwMjI1NTdaMDMxMTAvBgNV BAMTKDMyNzlFQzNDOEFCRTkzM0UyM0NGOUMwMTAwN0FCNzRGMTQwOUFFQ0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7TDGTSNETPAci4CkmVFsKQZk9 8/wZ3R3PpXSgPEXWeFJ5B3+TswOFinj2iDby4dxYuWMQ5EdKLT4mA9N0d+b1I0OY iA7QuIsKuwOWCLvKk6GN7EMwUPGGTLf600OiCMI+qJ8SZk+Bb/9iiGEuNXHUQkdU /cp9J46dSsuEfqmffa9bxjGVPkX3YIPxraRvtenPtxdECbS33FmIy+OMrYOYQn7/ rEc2g3DT6vBt3iR3Hu73TKZakhA67xcxkd0y3fqTan4pSYbyN58D5+1DzaWjMpeH aJyzUbWiQp7O1RXa9mJJtDWbI6xq5hQFQjvP4rGH5TT3mah8pAqH29TPBitbAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUMnnsPIq+kz4jz5wBAHq3TxQJrs8wHwYDVR0j BBgwFoAUaE3jSmTzr+1EoCOF/LNYgvsuaqUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Mzg1M2YyMjgtMzdmMi00N2Q5LWI5ZmUtNDc2YmFkZTEzMzkzLzAvNjg0REUzNEE2 NEYzQUZFRDQ0QTAyMzg1RkNCMzU4ODJGQjJFNkFBNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82ODRERTM0QTY0RjNBRkVENDRBMDIzODVGQ0IzNTg4MkZCMkU2 QUE1LmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzM4NTNmMjI4LTM3ZjItNDdkOS1i OWZlLTQ3NmJhZGUxMzM5My8wLzMxMzIzMjJlMzEzMjM4MmUzMTM2MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzUzMTMyMzAzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHqAEDANBgkqhkiG 9w0BAQsFAAOCAQEAKb8f9iO4lzaT1r0jc5+MNZ6HFcjYzEKxOgACfOynBagtB3dD hb0YCEixmuB4Qp5LhxsRj/Hax3bljrDET/IM8zcARyE5jWJ7OkS1PGgDFofkOsd5 9BuwPbWcdg8/SoHmZ4DliHl0R6PsHmO7OIRR9lPpVTyXzTolWerNSnG+yzWQXcrD eZVpw/R5/ezi90sEzUs3FUX/wqQDaJGf4nCifdBLlTLfDNfC8wJehzG1JEZb6Vj8 n40oxwaTZMF9Quyq+3Lq1194MguBI/jN2FeMDysk1tY1xRLgwVvuO+Md8ECNisD3 LDZZWqtO+IZHitS/Rm5Vvg247gW9x9l5Ys8bHg== -----END CERTIFICATE-----Generated at Sun May 3 20:01:29 2026 by rpki-client