$ rpki-client -vvf rpki-rsync.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/34332e3235322e3133362e302f32342d3234203d3e203538343034.roa File: 34332e3235322e3133362e302f32342d3234203d3e203538343034.roa (raw, json) Hash identifier: oJcDC3gbkkbl6CgR5ozKOicxGaK/b8KkIxtfAPuJSR4= Subject key identifier: 50:BC:73:20:BA:09:3F:81:29:7D:D7:80:3C:99:9A:6D:5A:39:75:83 Certificate issuer: /CN=9C58C1C6AFBB5B66C640694A98597306CC88DA0B Certificate serial: 239E738C1BF8E028354541A78917C3652CD42D2C Authority key identifier: 9C:58:C1:C6:AF:BB:5B:66:C6:40:69:4A:98:59:73:06:CC:88:DA:0B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9C58C1C6AFBB5B66C640694A98597306CC88DA0B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/34332e3235322e3133362e302f32342d3234203d3e203538343034.roa Signing time: Sun 03 May 2026 02:41:34 +0000 ROA not before: Sun 03 May 2026 02:36:34 +0000 ROA not after: Sun 02 May 2027 02:41:34 +0000 asID: 58404 IP address blocks: 43.252.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/9C58C1C6AFBB5B66C640694A98597306CC88DA0B.crl rsync://rpki-rsync.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/9C58C1C6AFBB5B66C640694A98597306CC88DA0B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9C58C1C6AFBB5B66C640694A98597306CC88DA0B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 10:27:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:9e:73:8c:1b:f8:e0:28:35:45:41:a7:89:17:c3:65:2c:d4:2d:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9C58C1C6AFBB5B66C640694A98597306CC88DA0B Validity Not Before: May 3 02:36:34 2026 GMT Not After : May 2 02:41:34 2027 GMT Subject: CN=50BC7320BA093F81297DD7803C999A6D5A397583 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:06:ff:df:cd:18:46:7a:f9:7a:58:b9:49:b4: 09:af:ff:ab:af:c8:e0:65:20:f7:08:97:42:01:63: 8f:ea:7f:0a:ee:97:f4:f3:2c:43:80:05:de:aa:c6: b1:36:96:b6:bd:9f:48:92:4a:f5:26:58:bd:40:78: 0e:b5:e9:e7:7b:12:ec:2d:6b:b0:7d:d1:c6:20:93: 21:67:0b:85:0a:d7:5a:e1:f5:c6:b2:fe:5d:35:24: c0:3e:90:30:6b:1c:cc:b7:fe:22:bf:a1:1a:1e:f7: 0d:87:72:48:b0:98:39:1b:7b:6d:3e:1c:9a:61:1f: d5:c8:17:ad:ba:2e:e7:42:57:3e:74:a1:41:be:c2: 44:60:84:ae:eb:9c:d1:c3:9d:9f:30:e3:05:fa:80: e5:fc:78:97:ea:d2:34:91:28:03:5e:f5:c5:12:a9: 46:f7:92:8f:04:5a:cb:3e:de:10:73:02:2f:02:89: af:dc:fb:20:ed:90:43:d7:67:fb:ac:93:10:cb:3e: bd:93:87:c2:29:36:0e:25:07:c9:51:ea:8d:7c:3f: c5:48:35:0a:79:51:d9:6b:24:dd:df:9b:76:a6:00: 72:63:42:9d:fb:0b:9f:4d:b4:51:31:86:d5:e1:c3: 5f:c2:26:e4:f0:a2:d1:12:eb:97:2e:5c:e7:90:79: d9:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:BC:73:20:BA:09:3F:81:29:7D:D7:80:3C:99:9A:6D:5A:39:75:83 X509v3 Authority Key Identifier: keyid:9C:58:C1:C6:AF:BB:5B:66:C6:40:69:4A:98:59:73:06:CC:88:DA:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/9C58C1C6AFBB5B66C640694A98597306CC88DA0B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9C58C1C6AFBB5B66C640694A98597306CC88DA0B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/34332e3235322e3133362e302f32342d3234203d3e203538343034.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.252.136.0/24 Signature Algorithm: sha256WithRSAEncryption ae:fb:fa:e4:e6:af:bd:7e:06:e5:44:95:a1:b4:50:4b:46:95: 2d:dd:35:74:2a:70:cb:89:37:ad:80:8c:fa:c7:4e:79:6f:bd: 24:4d:2a:11:a0:25:ca:02:fc:2d:8e:2a:d1:4a:1a:5e:10:a4: 4d:c4:6b:06:90:4c:83:9d:91:bc:19:7e:90:53:38:32:c2:97: 48:39:6e:a5:e6:c1:89:7b:c9:55:3c:f3:65:3f:79:fc:06:5c: 38:77:03:c0:9b:a7:46:2a:c3:d7:29:b6:f4:61:0d:43:d8:0e: 4f:24:5a:ed:61:3a:f5:e0:2c:9e:7e:d8:04:5d:4b:39:dc:1c: 7e:72:fe:30:ac:30:db:5d:53:41:f6:9b:e4:ac:e4:e8:e6:1e: bb:6a:12:46:d2:c0:08:e6:9e:fe:45:57:a4:f3:ec:76:04:73: 0c:7f:3d:d2:c2:87:73:92:31:df:5e:ce:06:6e:d7:f3:c9:6e: 6a:b1:04:53:69:1a:1c:49:73:93:3e:1c:8d:cd:27:b4:f0:8f: 34:d3:e4:99:3f:54:06:be:1c:fd:45:a2:85:ed:92:b3:1f:82: 24:6f:53:41:65:83:c1:59:38:27:6a:45:09:e5:9e:18:78:96: 7b:5f:9b:9f:ab:e3:3b:f5:eb:ce:30:41:69:72:a3:46:0e:c6: 26:68:ec:f9 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUI55zjBv44Cg1RUGniRfDZSzULSwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUM1OEMxQzZBRkJCNUI2NkM2NDA2OTRBOTg1OTczMDZD Qzg4REEwQjAeFw0yNjA1MDMwMjM2MzRaFw0yNzA1MDIwMjQxMzRaMDMxMTAvBgNV BAMTKDUwQkM3MzIwQkEwOTNGODEyOTdERDc4MDNDOTk5QTZENUEzOTc1ODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQBv/fzRhGevl6WLlJtAmv/6uv yOBlIPcIl0IBY4/qfwrul/TzLEOABd6qxrE2lra9n0iSSvUmWL1AeA616ed7Euwt a7B90cYgkyFnC4UK11rh9cay/l01JMA+kDBrHMy3/iK/oRoe9w2HckiwmDkbe20+ HJphH9XIF626LudCVz50oUG+wkRghK7rnNHDnZ8w4wX6gOX8eJfq0jSRKANe9cUS qUb3ko8EWss+3hBzAi8Cia/c+yDtkEPXZ/uskxDLPr2Th8IpNg4lB8lR6o18P8VI NQp5UdlrJN3fm3amAHJjQp37C59NtFExhtXhw1/CJuTwotES65cuXOeQedkNAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUULxzILoJP4EpfdeAPJmabVo5dYMwHwYDVR0j BBgwFoAUnFjBxq+7W2bGQGlKmFlzBsyI2gswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmUwZjkxNjMtM2U1YS00ZWZhLThiZDktNGFjNGJjNjMwNDE0LzAvOUM1OEMxQzZB RkJCNUI2NkM2NDA2OTRBOTg1OTczMDZDQzg4REEwQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85QzU4QzFDNkFGQkI1QjY2QzY0MDY5NEE5ODU5NzMwNkNDODhE QTBCLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzZlMGY5MTYzLTNlNWEtNGVmYS04 YmQ5LTRhYzRiYzYzMDQxNC8wLzM0MzMyZTMyMzUzMjJlMzEzMzM2MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzUzODM0MzAzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEACv8iDANBgkqhkiG 9w0BAQsFAAOCAQEArvv65OavvX4G5USVobRQS0aVLd01dCpwy4k3rYCM+sdOeW+9 JE0qEaAlygL8LY4q0UoaXhCkTcRrBpBMg52RvBl+kFM4MsKXSDlupebBiXvJVTzz ZT95/AZcOHcDwJunRirD1ym29GENQ9gOTyRa7WE69eAsnn7YBF1LOdwcfnL+MKww 211TQfab5Kzk6OYeu2oSRtLACOae/kVXpPPsdgRzDH890sKHc5Ix317OBm7X88lu arEEU2kaHElzkz4cjc0ntPCPNNPkmT9UBr4c/UWihe2Ssx+CJG9TQWWDwVk4J2pF CeWeGHiWe1+bn6vjO/XrzjBBaXKjRg7GJmjs+Q== -----END CERTIFICATE-----Generated at Wed May 13 23:01:42 2026 by rpki-client