$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/3132332e3235332e3233352e302f32342d3234203d3e203137363730.roa File: 3132332e3235332e3233352e302f32342d3234203d3e203137363730.roa (raw, json) Hash identifier: yikJb7rqENDrSWYcBrdRV/I5pxUbP3osYLhvy9m38sE= Subject key identifier: 2A:BD:35:7F:6B:06:71:D1:35:BB:28:7A:55:D1:82:01:10:8D:D1:62 Certificate issuer: /CN=70562FBF0E190EE7E1BA063D6E46853A67FFEFAA Certificate serial: 22D72A781811F62F997BE0FB1EA058862CF207A9 Authority key identifier: 70:56:2F:BF:0E:19:0E:E7:E1:BA:06:3D:6E:46:85:3A:67:FF:EF:AA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/70562FBF0E190EE7E1BA063D6E46853A67FFEFAA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/3132332e3235332e3233352e302f32342d3234203d3e203137363730.roa Signing time: Tue 08 Sep 2026 06:39:15 +0000 ROA not before: Tue 08 Sep 2026 06:34:15 +0000 ROA not after: Tue 07 Sep 2027 06:39:15 +0000 asID: 17670 IP address blocks: 123.253.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/70562FBF0E190EE7E1BA063D6E46853A67FFEFAA.crl rsync://rpki-rsync.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/70562FBF0E190EE7E1BA063D6E46853A67FFEFAA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/70562FBF0E190EE7E1BA063D6E46853A67FFEFAA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 08:55:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:d7:2a:78:18:11:f6:2f:99:7b:e0:fb:1e:a0:58:86:2c:f2:07:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70562FBF0E190EE7E1BA063D6E46853A67FFEFAA Validity Not Before: Sep 8 06:34:15 2026 GMT Not After : Sep 7 06:39:15 2027 GMT Subject: CN=2ABD357F6B0671D135BB287A55D18201108DD162 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:c3:af:4d:57:28:ec:f8:8f:6f:04:c4:c7:5c: ae:4a:c3:2b:35:3b:e4:8a:cc:ec:22:57:28:38:ca: a4:14:6a:d5:73:c2:d9:f8:1b:b1:3d:ec:f1:32:38: 1a:87:95:d2:e5:9a:1f:80:b5:a2:a2:1e:da:53:9e: bd:bb:34:ff:60:6a:0a:20:c4:b0:a4:ed:a8:4b:85: 18:bb:43:ca:c4:3d:95:72:5f:7b:97:70:ea:64:4b: db:5a:7e:5b:f2:9a:50:28:3b:ea:bf:33:9a:a6:14: 61:58:e2:e8:9f:2d:ad:f7:25:d0:65:01:18:7a:27: 04:1d:d0:5e:0f:a0:c3:1d:56:b6:b9:9f:fe:ff:a1: a1:78:b1:bc:81:6a:4b:90:0e:92:5c:14:74:8c:04: d0:c9:4e:08:f5:3a:63:0c:09:c4:a4:13:11:e3:04: bd:89:2a:41:52:79:71:4a:4d:ac:4d:99:4b:c9:4e: 97:5c:0f:19:f8:b1:b2:d0:9d:39:12:78:c8:88:95: cc:27:1e:9b:5b:b3:bb:57:37:af:d3:d4:71:dd:1f: 91:f1:08:b4:c8:d9:ca:7c:9d:a3:e9:f1:20:10:43: 95:a2:f5:e8:1c:da:9d:fe:df:d7:0b:84:25:66:9a: 4e:f4:87:7d:8e:bc:c2:7b:27:0b:32:b0:51:18:a9: 7c:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:BD:35:7F:6B:06:71:D1:35:BB:28:7A:55:D1:82:01:10:8D:D1:62 X509v3 Authority Key Identifier: keyid:70:56:2F:BF:0E:19:0E:E7:E1:BA:06:3D:6E:46:85:3A:67:FF:EF:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/70562FBF0E190EE7E1BA063D6E46853A67FFEFAA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/70562FBF0E190EE7E1BA063D6E46853A67FFEFAA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/3132332e3235332e3233352e302f32342d3234203d3e203137363730.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 123.253.235.0/24 Signature Algorithm: sha256WithRSAEncryption a7:9d:92:b6:bd:e1:3a:a1:90:79:16:13:90:9e:8e:ce:49:bb: 6b:00:98:41:c3:88:97:8a:54:15:81:12:71:b5:56:bd:f0:7f: 89:49:c2:29:45:2c:47:d6:3e:73:6f:66:a0:93:1c:f8:24:ef: 8a:c4:f5:ec:5e:a0:ed:3e:78:2b:25:c1:48:75:3c:39:6d:1d: 49:ec:22:1b:e4:a0:6e:f7:9c:4e:00:5c:19:1a:8b:a7:f5:a8: 90:b7:29:23:60:bf:ab:f6:39:35:bc:f8:f1:bf:31:c0:b9:1c: f3:29:9b:ab:c4:e0:9b:f4:4d:ac:ca:df:a2:22:bb:65:9d:0e: 05:e5:15:82:2d:93:f3:40:00:1f:dc:6f:57:d4:62:a7:79:55: 87:06:10:09:6d:86:1a:d5:ff:ca:87:82:2b:6a:b0:91:b9:67: 24:29:0d:81:e8:7e:dd:1c:c4:ee:11:6b:8d:f4:29:89:ee:2c: 49:51:ef:c1:9d:f3:46:30:f2:2f:21:f0:0a:2c:d4:00:63:45: 36:76:ea:ac:54:1b:d0:ed:46:a3:6c:fa:79:ea:d5:f1:f6:4b: 0a:e9:72:68:d4:41:b5:e7:0a:13:b9:29:5a:06:f2:e4:16:71: b2:67:43:df:b8:55:f6:3a:9d:93:21:84:dc:6b:b3:68:34:69: f0:fb:cd:dd -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUItcqeBgR9i+Ze+D7HqBYhizyB6kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzA1NjJGQkYwRTE5MEVFN0UxQkEwNjNENkU0Njg1M0E2 N0ZGRUZBQTAeFw0yNjA5MDgwNjM0MTVaFw0yNzA5MDcwNjM5MTVaMDMxMTAvBgNV BAMTKDJBQkQzNTdGNkIwNjcxRDEzNUJCMjg3QTU1RDE4MjAxMTA4REQxNjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuw69NVyjs+I9vBMTHXK5Kwys1 O+SKzOwiVyg4yqQUatVzwtn4G7E97PEyOBqHldLlmh+AtaKiHtpTnr27NP9gagog xLCk7ahLhRi7Q8rEPZVyX3uXcOpkS9taflvymlAoO+q/M5qmFGFY4uifLa33JdBl ARh6JwQd0F4PoMMdVra5n/7/oaF4sbyBakuQDpJcFHSMBNDJTgj1OmMMCcSkExHj BL2JKkFSeXFKTaxNmUvJTpdcDxn4sbLQnTkSeMiIlcwnHptbs7tXN6/T1HHdH5Hx CLTI2cp8naPp8SAQQ5Wi9egc2p3+39cLhCVmmk70h32OvMJ7JwsysFEYqXyhAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUKr01f2sGcdE1uyh6VdGCARCN0WIwHwYDVR0j BBgwFoAUcFYvvw4ZDufhugY9bkaFOmf/76owDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWZiMWM4MGMtNGQ2Yy00NDA4LTg5NDctZmJhNmU3YzRiZTdjLzAvNzA1NjJGQkYw RTE5MEVFN0UxQkEwNjNENkU0Njg1M0E2N0ZGRUZBQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83MDU2MkZCRjBFMTkwRUU3RTFCQTA2M0Q2RTQ2ODUzQTY3RkZF RkFBLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzVmYjFjODBjLTRkNmMtNDQwOC04 OTQ3LWZiYTZlN2M0YmU3Yy8wLzMxMzIzMzJlMzIzNTMzMmUzMjMzMzUyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM3MzYzNzMwLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAe/3rMA0GCSqG SIb3DQEBCwUAA4IBAQCnnZK2veE6oZB5FhOQno7OSbtrAJhBw4iXilQVgRJxtVa9 8H+JScIpRSxH1j5zb2agkxz4JO+KxPXsXqDtPngrJcFIdTw5bR1J7CIb5KBu95xO AFwZGoun9aiQtykjYL+r9jk1vPjxvzHAuRzzKZurxOCb9E2syt+iIrtlnQ4F5RWC LZPzQAAf3G9X1GKneVWHBhAJbYYa1f/Kh4IrarCRuWckKQ2B6H7dHMTuEWuN9CmJ 7ixJUe/BnfNGMPIvIfAKLNQAY0U2duqsVBvQ7UajbPp56tXx9ksK6XJo1EG15woT uSlaBvLkFnGyZ0PfuFX2Op2TIYTca7NoNGnw+83d -----END CERTIFICATE-----Generated at Mon Oct 12 20:42:41 2026 by rpki-client