$ rpki-client -vvf rpki-rsync.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/3232332e32352e3131302e302f32342d3234203d3e20313336383733.roa File: 3232332e32352e3131302e302f32342d3234203d3e20313336383733.roa (raw, json) Hash identifier: d26NLF/sKVXadNSIsUNq9koHjOM/iTFNcX1v1zkyxRU= Subject key identifier: 2E:4F:B0:6C:CE:0C:EF:72:30:CA:FB:4E:2C:A4:13:43:3B:A9:00:C3 Certificate issuer: /CN=DE4E99EA030AF8AEBFB7B6A7A0E91674DDB29AC3 Certificate serial: 68067F0ABC878225C52423D3D72A755D67B8E09B Authority key identifier: DE:4E:99:EA:03:0A:F8:AE:BF:B7:B6:A7:A0:E9:16:74:DD:B2:9A:C3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DE4E99EA030AF8AEBFB7B6A7A0E91674DDB29AC3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/3232332e32352e3131302e302f32342d3234203d3e20313336383733.roa Signing time: Sun 03 May 2026 02:50:49 +0000 ROA not before: Sun 03 May 2026 02:45:49 +0000 ROA not after: Sun 02 May 2027 02:50:49 +0000 asID: 136873 IP address blocks: 223.25.110.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/DE4E99EA030AF8AEBFB7B6A7A0E91674DDB29AC3.crl rsync://rpki-rsync.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/DE4E99EA030AF8AEBFB7B6A7A0E91674DDB29AC3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DE4E99EA030AF8AEBFB7B6A7A0E91674DDB29AC3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 May 2026 10:15:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:06:7f:0a:bc:87:82:25:c5:24:23:d3:d7:2a:75:5d:67:b8:e0:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE4E99EA030AF8AEBFB7B6A7A0E91674DDB29AC3 Validity Not Before: May 3 02:45:49 2026 GMT Not After : May 2 02:50:49 2027 GMT Subject: CN=2E4FB06CCE0CEF7230CAFB4E2CA413433BA900C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:2a:0d:1d:e4:00:8c:d4:c6:53:dc:b3:79:db: d7:04:6a:59:b1:47:e4:83:60:88:06:49:19:1d:37: dc:7a:29:e4:73:f5:df:ac:57:11:83:4f:b4:d5:d9: 24:60:1f:7c:4f:a2:36:1b:89:44:6b:16:ac:7b:d9: 7a:db:cb:5e:a5:28:25:e0:e2:c5:8f:02:03:eb:f1: db:b8:d8:33:18:6f:bd:78:c3:ea:ea:76:26:61:ac: ac:0e:aa:5e:a3:f6:af:54:ed:9c:5b:b9:8f:2c:02: e5:2f:c7:05:8a:80:5b:c8:15:bf:00:d4:8e:a6:d4: af:5a:3a:6e:f7:9c:74:69:46:bc:46:1f:8b:54:f8: f7:57:c6:cd:49:ee:dd:32:d9:e5:e8:c6:1e:92:94: 47:e2:ff:cb:38:41:22:0c:2a:bf:2d:7c:6f:15:fb: 1b:e5:8d:be:89:5b:d0:10:cf:25:96:3d:e3:15:47: c1:dd:93:fe:cb:1d:dd:48:f0:f3:c9:26:c6:0a:06: a1:5c:c0:e2:38:a4:b6:8a:0c:f6:d9:bb:29:28:5e: 85:c2:b6:56:17:96:2f:4f:9d:c1:2e:cf:6a:f9:4e: b8:60:cc:9e:41:27:5c:66:5c:f7:d9:66:ac:3b:f9: e7:2d:00:a5:57:3c:0e:6c:ea:56:62:95:2e:eb:52: 7b:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:4F:B0:6C:CE:0C:EF:72:30:CA:FB:4E:2C:A4:13:43:3B:A9:00:C3 X509v3 Authority Key Identifier: keyid:DE:4E:99:EA:03:0A:F8:AE:BF:B7:B6:A7:A0:E9:16:74:DD:B2:9A:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/DE4E99EA030AF8AEBFB7B6A7A0E91674DDB29AC3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DE4E99EA030AF8AEBFB7B6A7A0E91674DDB29AC3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/3232332e32352e3131302e302f32342d3234203d3e20313336383733.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 223.25.110.0/24 Signature Algorithm: sha256WithRSAEncryption 1f:2f:b2:f6:58:c8:59:e2:12:8d:aa:cb:21:cd:70:cd:51:be: 9f:e1:3d:72:4d:79:b7:34:66:f0:b3:dc:16:13:32:ce:15:c2: 55:ea:51:1f:00:93:09:0c:f5:fa:9f:5a:6f:1f:b4:4a:10:17: 7f:19:61:9e:58:05:2c:b7:5f:d1:33:e1:02:2e:6d:f0:63:8f: 79:f4:c7:b4:77:84:c9:9e:30:5a:8f:1b:19:84:e8:e8:f1:5e: d1:85:3c:8d:03:7c:8f:18:31:f2:6f:a6:c5:03:4e:20:64:7e: 55:74:49:b1:cf:3a:ce:f6:ca:e9:fe:47:9a:07:f4:96:6c:73: 4b:61:f1:77:f1:c2:5b:f6:b5:d3:f0:3a:b6:a7:2c:21:6d:d8: 29:d5:a8:1b:c5:1a:5a:2c:19:66:44:21:3e:6d:77:5e:ae:70: bf:d2:fa:18:8c:d6:30:21:98:b3:e3:78:7e:66:f0:ae:4f:1c: 98:71:01:86:70:da:81:88:5b:ee:2a:98:fa:77:cb:9f:28:6c: 87:b2:91:47:e3:69:23:46:05:e6:4b:cf:b2:ba:87:b2:c1:40: f6:39:d6:bc:b1:61:54:ab:d4:18:c2:68:ff:d2:64:73:18:27: 41:1b:3c:96:5a:06:3b:ce:9b:74:a0:43:0f:ee:76:09:49:fb: c0:7a:84:32 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUaAZ/CryHgiXFJCPT1yp1XWe44JswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREU0RTk5RUEwMzBBRjhBRUJGQjdCNkE3QTBFOTE2NzRE REIyOUFDMzAeFw0yNjA1MDMwMjQ1NDlaFw0yNzA1MDIwMjUwNDlaMDMxMTAvBgNV BAMTKDJFNEZCMDZDQ0UwQ0VGNzIzMENBRkI0RTJDQTQxMzQzM0JBOTAwQzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUKg0d5ACM1MZT3LN529cEalmx R+SDYIgGSRkdN9x6KeRz9d+sVxGDT7TV2SRgH3xPojYbiURrFqx72Xrby16lKCXg 4sWPAgPr8du42DMYb714w+rqdiZhrKwOql6j9q9U7ZxbuY8sAuUvxwWKgFvIFb8A 1I6m1K9aOm73nHRpRrxGH4tU+PdXxs1J7t0y2eXoxh6SlEfi/8s4QSIMKr8tfG8V +xvljb6JW9AQzyWWPeMVR8Hdk/7LHd1I8PPJJsYKBqFcwOI4pLaKDPbZuykoXoXC tlYXli9PncEuz2r5TrhgzJ5BJ1xmXPfZZqw7+ectAKVXPA5s6lZilS7rUntlAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQULk+wbM4M73IwyvtOLKQTQzupAMMwHwYDVR0j BBgwFoAU3k6Z6gMK+K6/t7anoOkWdN2ymsMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGQyNTQ0MTktNTNiZS00YWQ0LWJmN2YtMjlmODkxMjUyM2QwLzAvREU0RTk5RUEw MzBBRjhBRUJGQjdCNkE3QTBFOTE2NzREREIyOUFDMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ERTRFOTlFQTAzMEFGOEFFQkZCN0I2QTdBMEU5MTY3NEREQjI5 QUMzLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzhkMjU0NDE5LTUzYmUtNGFkNC1i ZjdmLTI5Zjg5MTI1MjNkMC8wLzMyMzIzMzJlMzIzNTJlMzEzMTMwMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzM2MzgzNzMzLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA3xluMA0GCSqG SIb3DQEBCwUAA4IBAQAfL7L2WMhZ4hKNqsshzXDNUb6f4T1yTXm3NGbws9wWEzLO FcJV6lEfAJMJDPX6n1pvH7RKEBd/GWGeWAUst1/RM+ECLm3wY4959Me0d4TJnjBa jxsZhOjo8V7RhTyNA3yPGDHyb6bFA04gZH5VdEmxzzrO9srp/keaB/SWbHNLYfF3 8cJb9rXT8Dq2pywhbdgp1agbxRpaLBlmRCE+bXdernC/0voYjNYwIZiz43h+ZvCu TxyYcQGGcNqBiFvuKpj6d8ufKGyHspFH42kjRgXmS8+yuoeywUD2Oda8sWFUq9QY wmj/0mRzGCdBGzyWWgY7zpt0oEMP7nYJSfvAeoQy -----END CERTIFICATE-----Generated at Tue May 5 11:53:33 2026 by rpki-client