$ rpki-client -vvf rpki-rsync.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/3132322e3132382e32332e302f32342d3234203d3e203436303435.roa File: 3132322e3132382e32332e302f32342d3234203d3e203436303435.roa (raw, json) Hash identifier: KEJHq843nvxE3v+1uF2PUpxNf5dPeN2bB+G+EF1vi9s= Subject key identifier: C4:7F:98:B9:5B:B5:1B:FF:1C:70:FC:62:D1:03:1B:E8:FB:CC:60:EB Certificate issuer: /CN=684DE34A64F3AFED44A02385FCB35882FB2E6AA5 Certificate serial: 6C947F6DBB77BD24CA6B0C2AD692B4AE585DCFE6 Authority key identifier: 68:4D:E3:4A:64:F3:AF:ED:44:A0:23:85:FC:B3:58:82:FB:2E:6A:A5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/684DE34A64F3AFED44A02385FCB35882FB2E6AA5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/3132322e3132382e32332e302f32342d3234203d3e203436303435.roa Signing time: Sun 03 May 2026 02:25:59 +0000 ROA not before: Sun 03 May 2026 02:20:59 +0000 ROA not after: Sun 02 May 2027 02:25:59 +0000 asID: 46045 IP address blocks: 122.128.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/684DE34A64F3AFED44A02385FCB35882FB2E6AA5.crl rsync://rpki-rsync.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/684DE34A64F3AFED44A02385FCB35882FB2E6AA5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/684DE34A64F3AFED44A02385FCB35882FB2E6AA5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 03:14:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:94:7f:6d:bb:77:bd:24:ca:6b:0c:2a:d6:92:b4:ae:58:5d:cf:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=684DE34A64F3AFED44A02385FCB35882FB2E6AA5 Validity Not Before: May 3 02:20:59 2026 GMT Not After : May 2 02:25:59 2027 GMT Subject: CN=C47F98B95BB51BFF1C70FC62D1031BE8FBCC60EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:6e:19:bd:45:b8:bf:ba:21:7e:ad:17:12:11: 1e:3b:f3:ca:05:63:88:0f:9e:42:f1:b8:86:ee:cd: e8:df:71:69:4e:67:63:5c:0f:0e:23:bd:42:62:da: f2:aa:eb:16:05:d7:e2:5c:65:91:d9:70:75:df:67: 29:5a:32:79:cb:51:90:3f:5f:ea:3b:4d:3f:8d:08: 8c:d8:e4:00:54:53:15:25:8e:a4:99:27:fd:56:68: bd:54:9d:e7:ae:d1:01:af:1e:ba:01:dc:48:a5:c6: 5a:28:e1:18:4a:16:a7:a3:09:aa:80:7d:a0:b9:e4: a9:8f:c9:22:e6:01:22:bf:8f:5e:9d:4e:1e:50:e2: 96:1a:60:ed:1d:75:63:c7:91:53:24:8d:51:dc:99: 74:8d:b1:8e:08:bc:68:da:cb:ab:6e:ad:20:b7:39: b3:1e:2f:23:25:b3:f0:60:4a:ad:7b:2a:96:0b:ff: 74:f0:54:c2:83:c0:41:23:68:e1:df:06:f4:18:85: 2c:46:3b:ef:09:24:ca:be:3a:27:bf:2f:13:d2:e2: 3f:29:e8:7e:8c:84:b1:51:23:27:86:f5:61:7b:02: 31:18:d2:85:c0:16:2e:c5:d4:fd:1e:fc:ac:30:6c: 27:fb:c0:f6:a0:88:ff:73:66:c6:52:ff:f3:95:e3: aa:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:7F:98:B9:5B:B5:1B:FF:1C:70:FC:62:D1:03:1B:E8:FB:CC:60:EB X509v3 Authority Key Identifier: keyid:68:4D:E3:4A:64:F3:AF:ED:44:A0:23:85:FC:B3:58:82:FB:2E:6A:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/684DE34A64F3AFED44A02385FCB35882FB2E6AA5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/684DE34A64F3AFED44A02385FCB35882FB2E6AA5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/3132322e3132382e32332e302f32342d3234203d3e203436303435.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 122.128.23.0/24 Signature Algorithm: sha256WithRSAEncryption 13:06:87:e3:2a:8c:2b:b2:fb:6a:98:a8:08:1b:54:46:c5:f4: fb:ca:45:21:88:ee:96:ed:eb:cd:22:69:8e:7a:3d:47:ce:38: 8c:ae:90:39:e6:ab:e0:e5:68:64:91:55:e8:fe:15:bb:82:d5: 1c:58:d1:42:06:15:28:26:af:05:98:1b:ec:04:e7:ab:b0:dc: 7b:0b:68:ea:3f:80:81:ff:c3:d3:fc:c4:e2:2b:c6:aa:6c:d7: 67:77:5f:9d:f6:8b:0f:25:f3:70:87:b9:3e:0a:ba:c4:2a:78: 21:f8:cc:66:50:4d:7e:7f:12:46:ba:f1:5f:1c:fb:45:ff:b5: 27:78:86:89:49:5d:4c:45:72:ac:41:a6:28:1f:82:21:6a:f8: 2f:e7:83:e6:da:e2:7b:75:65:d1:52:05:31:43:a8:c4:ab:14: b8:9f:39:f5:8a:8d:fd:1e:16:63:f7:12:73:68:60:bd:19:9b: 9c:c0:76:dc:4a:69:6f:78:f3:cc:ab:e0:84:e4:98:70:b8:8d: 14:46:aa:c5:d5:5b:82:02:cc:94:b8:1b:0c:46:65:da:47:90: be:3e:27:9c:13:4a:8f:2f:a6:3b:75:54:cb:5f:d9:83:93:c4: 56:a3:49:cb:83:c9:1f:74:a7:25:43:cd:c8:17:d7:d3:e7:9a: d0:10:a4:00 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUbJR/bbt3vSTKawwq1pK0rlhdz+YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjg0REUzNEE2NEYzQUZFRDQ0QTAyMzg1RkNCMzU4ODJG QjJFNkFBNTAeFw0yNjA1MDMwMjIwNTlaFw0yNzA1MDIwMjI1NTlaMDMxMTAvBgNV BAMTKEM0N0Y5OEI5NUJCNTFCRkYxQzcwRkM2MkQxMDMxQkU4RkJDQzYwRUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtbhm9Rbi/uiF+rRcSER4788oF Y4gPnkLxuIbuzejfcWlOZ2NcDw4jvUJi2vKq6xYF1+JcZZHZcHXfZylaMnnLUZA/ X+o7TT+NCIzY5ABUUxUljqSZJ/1WaL1Uneeu0QGvHroB3Eilxloo4RhKFqejCaqA faC55KmPySLmASK/j16dTh5Q4pYaYO0ddWPHkVMkjVHcmXSNsY4IvGjay6turSC3 ObMeLyMls/BgSq17KpYL/3TwVMKDwEEjaOHfBvQYhSxGO+8JJMq+Oie/LxPS4j8p 6H6MhLFRIyeG9WF7AjEY0oXAFi7F1P0e/KwwbCf7wPagiP9zZsZS//OV46olAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUxH+YuVu1G/8ccPxi0QMb6PvMYOswHwYDVR0j BBgwFoAUaE3jSmTzr+1EoCOF/LNYgvsuaqUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Mzg1M2YyMjgtMzdmMi00N2Q5LWI5ZmUtNDc2YmFkZTEzMzkzLzAvNjg0REUzNEE2 NEYzQUZFRDQ0QTAyMzg1RkNCMzU4ODJGQjJFNkFBNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82ODRERTM0QTY0RjNBRkVENDRBMDIzODVGQ0IzNTg4MkZCMkU2 QUE1LmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzM4NTNmMjI4LTM3ZjItNDdkOS1i OWZlLTQ3NmJhZGUxMzM5My8wLzMxMzIzMjJlMzEzMjM4MmUzMjMzMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzQzNjMwMzQzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHqAFzANBgkqhkiG 9w0BAQsFAAOCAQEAEwaH4yqMK7L7apioCBtURsX0+8pFIYjulu3rzSJpjno9R844 jK6QOear4OVoZJFV6P4Vu4LVHFjRQgYVKCavBZgb7ATnq7Dcewto6j+Agf/D0/zE 4ivGqmzXZ3dfnfaLDyXzcIe5Pgq6xCp4IfjMZlBNfn8SRrrxXxz7Rf+1J3iGiUld TEVyrEGmKB+CIWr4L+eD5trie3Vl0VIFMUOoxKsUuJ859YqN/R4WY/cSc2hgvRmb nMB23Eppb3jzzKvghOSYcLiNFEaqxdVbggLMlLgbDEZl2keQvj4nnBNKjy+mO3VU y1/Zg5PEVqNJy4PJH3SnJUPNyBfX0+ea0BCkAA== -----END CERTIFICATE-----Generated at Sun May 3 20:01:29 2026 by rpki-client