$ rpki-client -vvf rpki-rsync.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/34332e3235322e3133372e302f32342d3234203d3e203538343034.roa File: 34332e3235322e3133372e302f32342d3234203d3e203538343034.roa (raw, json) Hash identifier: yzlUlkzhlS0Tkdbt12yLVL6Icb64xveQ3bA5i4msJ2M= Subject key identifier: 7E:BE:50:9B:2B:73:4B:B4:54:54:14:48:96:E8:AB:FC:DE:E5:4D:EC Certificate issuer: /CN=9C58C1C6AFBB5B66C640694A98597306CC88DA0B Certificate serial: 7DACE46011333B57639A2052B8BB6B37664E373F Authority key identifier: 9C:58:C1:C6:AF:BB:5B:66:C6:40:69:4A:98:59:73:06:CC:88:DA:0B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9C58C1C6AFBB5B66C640694A98597306CC88DA0B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/34332e3235322e3133372e302f32342d3234203d3e203538343034.roa Signing time: Sun 03 May 2026 02:41:36 +0000 ROA not before: Sun 03 May 2026 02:36:36 +0000 ROA not after: Sun 02 May 2027 02:41:36 +0000 asID: 58404 IP address blocks: 43.252.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/9C58C1C6AFBB5B66C640694A98597306CC88DA0B.crl rsync://rpki-rsync.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/9C58C1C6AFBB5B66C640694A98597306CC88DA0B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9C58C1C6AFBB5B66C640694A98597306CC88DA0B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 10:27:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:ac:e4:60:11:33:3b:57:63:9a:20:52:b8:bb:6b:37:66:4e:37:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9C58C1C6AFBB5B66C640694A98597306CC88DA0B Validity Not Before: May 3 02:36:36 2026 GMT Not After : May 2 02:41:36 2027 GMT Subject: CN=7EBE509B2B734BB45454144896E8ABFCDEE54DEC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:1e:58:57:a2:88:93:3a:84:72:51:73:ba:2e: 13:2b:32:f1:bd:ff:54:5e:2c:b0:ab:8f:1c:4b:f7: 53:7b:38:4c:ca:7d:36:73:b1:8f:4c:cd:2e:b1:1a: e1:27:73:4a:b1:1d:a0:2d:0a:90:f5:9e:c9:a8:25: 63:e3:bf:ba:01:54:17:63:10:a1:31:db:37:99:e5: 17:47:a8:66:b0:16:64:3d:20:34:04:e6:25:1b:a1: c3:9d:be:47:00:e4:af:9c:87:b5:50:4d:4d:21:ff: ec:bf:c3:7d:c0:a0:46:2d:c3:76:3f:11:43:dd:71: 49:d9:fd:26:10:17:36:7d:6f:3b:47:fc:c4:44:ce: 6c:23:26:89:51:79:fe:6f:d3:fd:70:97:af:66:fa: 1f:7d:fc:6a:f2:50:47:80:de:7f:0d:6e:c6:15:ae: 97:d8:a9:9a:f5:ec:05:cf:5d:69:29:77:ab:72:ce: 38:cd:37:81:80:a2:08:35:16:e3:43:31:00:ef:d0: 42:81:ec:f7:60:cc:8a:74:cc:60:6f:54:11:bd:91: 77:70:9a:58:91:a5:4c:ab:6a:23:7c:55:02:e4:00: 2c:6b:7d:8b:01:06:78:65:84:48:54:62:e7:b2:af: 51:86:2c:b6:3b:d7:26:7e:ba:64:92:5c:04:7f:01: aa:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:BE:50:9B:2B:73:4B:B4:54:54:14:48:96:E8:AB:FC:DE:E5:4D:EC X509v3 Authority Key Identifier: keyid:9C:58:C1:C6:AF:BB:5B:66:C6:40:69:4A:98:59:73:06:CC:88:DA:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/9C58C1C6AFBB5B66C640694A98597306CC88DA0B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9C58C1C6AFBB5B66C640694A98597306CC88DA0B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/34332e3235322e3133372e302f32342d3234203d3e203538343034.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.252.137.0/24 Signature Algorithm: sha256WithRSAEncryption b1:fe:cd:86:c3:5a:01:e6:5b:b8:4a:9e:88:7b:8b:67:4d:aa: eb:69:73:5a:14:60:11:64:c9:09:11:a4:6a:0c:67:47:c6:21: fc:a0:6a:28:e7:a4:5a:e6:1c:25:b2:89:ff:db:77:34:80:fa: 97:a1:6b:a6:92:9c:7d:9c:41:a7:13:b1:7a:0f:a8:fd:c5:2e: 8c:98:f2:cd:a9:22:2e:d8:a0:ab:ea:66:c1:15:02:4f:bf:72: bd:2e:e1:6b:50:60:d1:9b:36:d8:16:63:71:ae:13:6c:05:2d: e5:4a:08:58:47:9b:51:0a:3c:d9:72:70:53:99:cc:8e:ec:19: 5c:83:99:87:80:a5:68:6d:a9:7b:00:ff:9e:e7:53:37:64:fc: ac:46:4e:8f:f9:2c:cf:85:c9:45:34:dd:22:a0:fe:4d:03:72: 5d:bd:f7:dc:9b:64:ad:98:15:b2:04:fb:58:15:9a:81:5d:97: 18:34:a2:ab:2b:6e:fe:f7:fd:ea:7b:55:9f:70:08:ef:88:99: 21:ff:6e:c6:99:46:65:6e:02:31:b2:50:52:29:67:84:90:8f: 12:cf:e7:b4:43:fa:10:ec:98:04:31:6f:ec:2a:4f:ba:1f:7d: b6:d1:e6:dc:44:37:91:f7:03:08:e9:4e:5d:60:fb:16:3c:50: 2a:40:5b:56 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUfazkYBEzO1djmiBSuLtrN2ZONz8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUM1OEMxQzZBRkJCNUI2NkM2NDA2OTRBOTg1OTczMDZD Qzg4REEwQjAeFw0yNjA1MDMwMjM2MzZaFw0yNzA1MDIwMjQxMzZaMDMxMTAvBgNV BAMTKDdFQkU1MDlCMkI3MzRCQjQ1NDU0MTQ0ODk2RThBQkZDREVFNTRERUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXHlhXooiTOoRyUXO6LhMrMvG9 /1ReLLCrjxxL91N7OEzKfTZzsY9MzS6xGuEnc0qxHaAtCpD1nsmoJWPjv7oBVBdj EKEx2zeZ5RdHqGawFmQ9IDQE5iUbocOdvkcA5K+ch7VQTU0h/+y/w33AoEYtw3Y/ EUPdcUnZ/SYQFzZ9bztH/MREzmwjJolRef5v0/1wl69m+h99/GryUEeA3n8NbsYV rpfYqZr17AXPXWkpd6tyzjjNN4GAogg1FuNDMQDv0EKB7PdgzIp0zGBvVBG9kXdw mliRpUyraiN8VQLkACxrfYsBBnhlhEhUYueyr1GGLLY71yZ+umSSXAR/Aar7AgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUfr5QmytzS7RUVBRIluir/N7lTewwHwYDVR0j BBgwFoAUnFjBxq+7W2bGQGlKmFlzBsyI2gswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmUwZjkxNjMtM2U1YS00ZWZhLThiZDktNGFjNGJjNjMwNDE0LzAvOUM1OEMxQzZB RkJCNUI2NkM2NDA2OTRBOTg1OTczMDZDQzg4REEwQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85QzU4QzFDNkFGQkI1QjY2QzY0MDY5NEE5ODU5NzMwNkNDODhE QTBCLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzZlMGY5MTYzLTNlNWEtNGVmYS04 YmQ5LTRhYzRiYzYzMDQxNC8wLzM0MzMyZTMyMzUzMjJlMzEzMzM3MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzUzODM0MzAzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEACv8iTANBgkqhkiG 9w0BAQsFAAOCAQEAsf7NhsNaAeZbuEqeiHuLZ02q62lzWhRgEWTJCRGkagxnR8Yh /KBqKOekWuYcJbKJ/9t3NID6l6FrppKcfZxBpxOxeg+o/cUujJjyzakiLtigq+pm wRUCT79yvS7ha1Bg0Zs22BZjca4TbAUt5UoIWEebUQo82XJwU5nMjuwZXIOZh4Cl aG2pewD/nudTN2T8rEZOj/ksz4XJRTTdIqD+TQNyXb333JtkrZgVsgT7WBWagV2X GDSiqytu/vf96ntVn3AI74iZIf9uxplGZW4CMbJQUilnhJCPEs/ntEP6EOyYBDFv 7CpPuh99ttHm3EQ3kfcDCOlOXWD7FjxQKkBbVg== -----END CERTIFICATE-----Generated at Wed May 13 23:01:42 2026 by rpki-client