$ rpki-client -vvf rpki-rsync.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/3132322e3132382e31382e302f32342d3234203d3e203436303435.roa File: 3132322e3132382e31382e302f32342d3234203d3e203436303435.roa (raw, json) Hash identifier: gwwfNJ3TqgMMt80Y8lGgjD5cKLvhjKTSdlvsB5BPRvM= Subject key identifier: EE:6A:69:CF:3B:58:56:2F:13:63:2B:15:5C:05:E9:21:74:DF:BD:32 Certificate issuer: /CN=684DE34A64F3AFED44A02385FCB35882FB2E6AA5 Certificate serial: 2A9EE1B737123875416FBAFA384EE7037B992113 Authority key identifier: 68:4D:E3:4A:64:F3:AF:ED:44:A0:23:85:FC:B3:58:82:FB:2E:6A:A5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/684DE34A64F3AFED44A02385FCB35882FB2E6AA5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/3132322e3132382e31382e302f32342d3234203d3e203436303435.roa Signing time: Sun 03 May 2026 02:25:59 +0000 ROA not before: Sun 03 May 2026 02:20:59 +0000 ROA not after: Sun 02 May 2027 02:25:59 +0000 asID: 46045 IP address blocks: 122.128.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/684DE34A64F3AFED44A02385FCB35882FB2E6AA5.crl rsync://rpki-rsync.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/684DE34A64F3AFED44A02385FCB35882FB2E6AA5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/684DE34A64F3AFED44A02385FCB35882FB2E6AA5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 03:14:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:9e:e1:b7:37:12:38:75:41:6f:ba:fa:38:4e:e7:03:7b:99:21:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=684DE34A64F3AFED44A02385FCB35882FB2E6AA5 Validity Not Before: May 3 02:20:59 2026 GMT Not After : May 2 02:25:59 2027 GMT Subject: CN=EE6A69CF3B58562F13632B155C05E92174DFBD32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:c9:b3:66:b9:b6:2d:31:e7:52:91:9b:aa:23: bc:59:da:b7:06:0f:9a:54:7e:16:fe:eb:f2:6b:59: 46:61:46:a7:3a:80:13:bb:f3:a9:6a:80:9a:77:56: 39:f6:c8:81:86:0a:e4:a9:16:09:13:fb:96:42:52: 42:b8:30:ae:00:fe:2f:ea:f9:1b:6f:21:cf:e3:9a: cf:6f:fc:54:e6:86:51:e2:90:fb:fc:fe:de:c9:27: 8f:d9:89:74:22:d1:11:11:bf:3d:5e:bf:fe:0d:0f: cd:ae:35:7a:d0:b4:26:80:5c:99:6f:e8:62:11:c1: 3c:aa:84:07:08:fc:b6:dc:4f:24:f4:2f:ba:6f:c0: e4:9b:16:07:d7:96:2b:ee:6d:f3:97:cc:7f:4a:ce: 0a:a1:da:58:3d:57:8a:2a:91:ed:f9:79:98:05:cb: bc:8c:13:72:eb:8d:6b:a4:de:e8:09:b2:e2:6f:c3: 0d:93:7b:0d:28:95:d6:d0:8b:c2:93:db:68:c3:09: 3e:56:a4:56:5f:1f:68:4b:78:22:b4:15:5c:b7:bf: 74:48:3c:cc:0b:42:4b:16:c3:9d:64:22:e9:6c:05: 7c:9a:a0:04:ff:11:d4:44:0a:83:58:01:10:09:61: 3d:93:2f:0a:a6:bf:19:0a:41:12:fe:89:a0:78:2a: 42:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:6A:69:CF:3B:58:56:2F:13:63:2B:15:5C:05:E9:21:74:DF:BD:32 X509v3 Authority Key Identifier: keyid:68:4D:E3:4A:64:F3:AF:ED:44:A0:23:85:FC:B3:58:82:FB:2E:6A:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/684DE34A64F3AFED44A02385FCB35882FB2E6AA5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/684DE34A64F3AFED44A02385FCB35882FB2E6AA5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/3132322e3132382e31382e302f32342d3234203d3e203436303435.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 122.128.18.0/24 Signature Algorithm: sha256WithRSAEncryption 82:30:51:95:20:fc:18:a8:e8:6f:b6:19:b2:73:f6:95:b8:43: c4:8d:66:25:90:a7:7d:7e:ad:15:a4:9b:b8:5f:8d:0f:63:81: bc:cf:7c:de:75:58:03:0c:1b:4f:9c:e5:5b:f7:7d:e5:94:af: 88:4b:fe:73:4c:a5:ea:b3:40:a2:52:f0:48:17:ea:3b:db:c8: 78:95:a7:17:5b:3d:d2:38:73:96:52:8f:63:b3:df:25:2c:e0: 68:75:84:6a:b1:87:76:2b:79:45:28:30:3c:da:6b:1b:90:8c: 4c:db:b3:2a:70:8a:3b:ee:3c:7b:5d:c0:6d:5d:90:26:85:52: 9e:93:c7:24:5d:d3:7b:96:52:9b:ab:67:65:68:59:96:ec:75: f2:be:de:fa:88:31:64:e7:1b:d4:8b:a8:3d:b9:11:32:4a:76: c9:79:d1:55:4b:93:08:9e:a4:d8:b0:8d:c3:0f:4c:e9:00:77: 5b:d0:cc:29:62:9f:24:c3:43:60:e9:92:aa:48:c3:fe:df:d2: ec:0e:d6:67:b7:f8:b2:1a:dd:92:4c:d9:73:5e:48:5d:8a:fc: e7:94:2f:3d:fe:a3:61:f2:9e:a6:0b:10:b4:86:bf:76:18:0e: be:6a:3a:b5:8f:5f:83:66:93:33:c8:1b:67:23:66:d8:dc:e7: 8f:f6:7a:99 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUKp7htzcSOHVBb7r6OE7nA3uZIRMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjg0REUzNEE2NEYzQUZFRDQ0QTAyMzg1RkNCMzU4ODJG QjJFNkFBNTAeFw0yNjA1MDMwMjIwNTlaFw0yNzA1MDIwMjI1NTlaMDMxMTAvBgNV BAMTKEVFNkE2OUNGM0I1ODU2MkYxMzYzMkIxNTVDMDVFOTIxNzRERkJEMzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaybNmubYtMedSkZuqI7xZ2rcG D5pUfhb+6/JrWUZhRqc6gBO786lqgJp3Vjn2yIGGCuSpFgkT+5ZCUkK4MK4A/i/q +RtvIc/jms9v/FTmhlHikPv8/t7JJ4/ZiXQi0RERvz1ev/4ND82uNXrQtCaAXJlv 6GIRwTyqhAcI/LbcTyT0L7pvwOSbFgfXlivubfOXzH9Kzgqh2lg9V4oqke35eZgF y7yME3LrjWuk3ugJsuJvww2Tew0oldbQi8KT22jDCT5WpFZfH2hLeCK0FVy3v3RI PMwLQksWw51kIulsBXyaoAT/EdRECoNYARAJYT2TLwqmvxkKQRL+iaB4KkL5AgMB AAGjggIyMIICLjAdBgNVHQ4EFgQU7mppzztYVi8TYysVXAXpIXTfvTIwHwYDVR0j BBgwFoAUaE3jSmTzr+1EoCOF/LNYgvsuaqUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Mzg1M2YyMjgtMzdmMi00N2Q5LWI5ZmUtNDc2YmFkZTEzMzkzLzAvNjg0REUzNEE2 NEYzQUZFRDQ0QTAyMzg1RkNCMzU4ODJGQjJFNkFBNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82ODRERTM0QTY0RjNBRkVENDRBMDIzODVGQ0IzNTg4MkZCMkU2 QUE1LmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzM4NTNmMjI4LTM3ZjItNDdkOS1i OWZlLTQ3NmJhZGUxMzM5My8wLzMxMzIzMjJlMzEzMjM4MmUzMTM4MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzQzNjMwMzQzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHqAEjANBgkqhkiG 9w0BAQsFAAOCAQEAgjBRlSD8GKjob7YZsnP2lbhDxI1mJZCnfX6tFaSbuF+ND2OB vM983nVYAwwbT5zlW/d95ZSviEv+c0yl6rNAolLwSBfqO9vIeJWnF1s90jhzllKP Y7PfJSzgaHWEarGHdit5RSgwPNprG5CMTNuzKnCKO+48e13AbV2QJoVSnpPHJF3T e5ZSm6tnZWhZlux18r7e+ogxZOcb1IuoPbkRMkp2yXnRVUuTCJ6k2LCNww9M6QB3 W9DMKWKfJMNDYOmSqkjD/t/S7A7WZ7f4shrdkkzZc15IXYr855QvPf6jYfKepgsQ tIa/dhgOvmo6tY9fg2aTM8gbZyNm2Nznj/Z6mQ== -----END CERTIFICATE-----Generated at Sun May 3 20:01:22 2026 by rpki-client