$ rpki-client -vvf rpki-rsync.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/3131392e31302e3137362e302f32312d3231203d3e203234353330.roa File: 3131392e31302e3137362e302f32312d3231203d3e203234353330.roa (raw, json) Hash identifier: M2e4yYR/RlmXdndzlSbI4SF0SK1f8bM5s0bETw7ewlU= Subject key identifier: 6D:59:A1:B4:28:92:C5:FE:9F:64:2F:2F:B6:C3:7D:C3:D0:40:BB:10 Certificate issuer: /CN=108BD2ED0D3114613C2725256398C38B9DBAD520 Certificate serial: 302140CDFFDD6654751812E407E250FC3CEA1F82 Authority key identifier: 10:8B:D2:ED:0D:31:14:61:3C:27:25:25:63:98:C3:8B:9D:BA:D5:20 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/108BD2ED0D3114613C2725256398C38B9DBAD520.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/3131392e31302e3137362e302f32312d3231203d3e203234353330.roa Signing time: Sun 03 May 2026 02:10:44 +0000 ROA not before: Sun 03 May 2026 02:05:44 +0000 ROA not after: Sun 02 May 2027 02:10:44 +0000 asID: 24530 IP address blocks: 119.10.176.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/108BD2ED0D3114613C2725256398C38B9DBAD520.crl rsync://rpki-rsync.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/108BD2ED0D3114613C2725256398C38B9DBAD520.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/108BD2ED0D3114613C2725256398C38B9DBAD520.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 08:08:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:21:40:cd:ff:dd:66:54:75:18:12:e4:07:e2:50:fc:3c:ea:1f:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=108BD2ED0D3114613C2725256398C38B9DBAD520 Validity Not Before: May 3 02:05:44 2026 GMT Not After : May 2 02:10:44 2027 GMT Subject: CN=6D59A1B42892C5FE9F642F2FB6C37DC3D040BB10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:b5:47:1c:a4:17:c3:8f:10:13:53:89:c4:69: 07:65:65:22:5c:33:7e:bf:77:dc:bf:53:4b:f5:1a: 06:40:0c:87:7f:29:33:84:fd:86:ea:4c:15:46:d0: aa:65:76:60:96:1b:15:37:1c:46:5e:e6:6a:d3:6b: 1e:39:d5:9b:d6:29:2f:59:a2:41:ae:80:61:71:e9: 27:14:19:42:76:01:12:e0:3d:02:73:f0:2e:0b:ba: b7:0d:4b:df:d7:2f:41:b3:87:df:78:7f:13:a6:8c: 71:e7:a3:91:0b:d6:6d:34:d1:93:dd:70:06:c3:b9: 3c:d0:d1:85:bc:0c:dc:88:81:d5:bb:e2:09:65:e1: 3b:e5:d3:f9:05:1f:79:cf:38:74:df:ba:d0:df:a9: df:aa:b8:b2:70:3d:fc:20:af:c3:37:ce:48:1e:e2: 15:f4:19:9d:ce:c7:97:8c:45:0a:86:69:5a:f8:42: 6a:34:14:fc:18:e5:8d:f4:a4:d8:43:4f:3c:3d:77: c2:ed:68:63:ae:77:7f:57:12:78:a5:f4:1c:70:85: 17:ec:6d:ef:b8:09:e3:cf:93:07:b4:c2:06:25:8f: 4c:57:90:bc:ee:3e:e3:e2:e4:50:a2:2c:82:e9:c0: d9:3f:4b:d1:a6:e0:e8:27:a6:f1:06:83:9d:cd:3e: 5c:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:59:A1:B4:28:92:C5:FE:9F:64:2F:2F:B6:C3:7D:C3:D0:40:BB:10 X509v3 Authority Key Identifier: keyid:10:8B:D2:ED:0D:31:14:61:3C:27:25:25:63:98:C3:8B:9D:BA:D5:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/108BD2ED0D3114613C2725256398C38B9DBAD520.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/108BD2ED0D3114613C2725256398C38B9DBAD520.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/3131392e31302e3137362e302f32312d3231203d3e203234353330.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 119.10.176.0/21 Signature Algorithm: sha256WithRSAEncryption 5e:43:5e:82:c4:4f:70:73:c2:7e:d3:44:8e:2f:da:d4:86:5c: 76:f2:68:62:72:38:30:73:3e:6d:11:03:44:11:89:0b:86:cd: cd:6f:77:11:3c:d1:0e:28:59:35:d7:d9:32:5a:3f:9a:c6:77: eb:06:be:a6:a9:0c:97:e3:ae:a6:16:7a:c3:cb:6f:a2:e9:c5: dc:1b:b6:d9:28:9b:10:df:68:58:0a:61:99:9f:cd:4e:35:49: bc:4d:71:fe:61:29:12:8d:36:89:29:38:43:43:4d:82:29:2b: 5f:ef:04:14:8e:57:33:1f:2e:27:43:5e:4a:6a:8e:c4:65:3a: ee:ec:ad:a7:de:76:c5:48:67:1f:41:71:7e:36:5d:1c:c7:e8: 6c:80:0a:36:ed:60:3a:9a:53:da:54:e4:32:3a:98:ba:94:52: c5:34:73:eb:9d:2d:8a:65:cf:5d:18:a6:a2:e7:15:c9:42:59: ba:70:c3:d7:7f:0b:9b:cb:32:c2:1c:22:c1:73:d5:95:92:86: 94:92:3a:8c:70:38:7a:0e:dd:4c:2e:ae:85:ba:2c:b9:49:19: f6:6d:79:5b:4b:a7:d9:ae:7c:f5:c7:ed:79:53:a8:6c:4e:6a: 6f:20:ca:d8:c0:2e:c8:d9:00:16:46:a0:70:82:b1:d5:dd:7b: 30:d3:37:fe -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUMCFAzf/dZlR1GBLkB+JQ/DzqH4IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTA4QkQyRUQwRDMxMTQ2MTNDMjcyNTI1NjM5OEMzOEI5 REJBRDUyMDAeFw0yNjA1MDMwMjA1NDRaFw0yNzA1MDIwMjEwNDRaMDMxMTAvBgNV BAMTKDZENTlBMUI0Mjg5MkM1RkU5RjY0MkYyRkI2QzM3REMzRDA0MEJCMTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD3tUccpBfDjxATU4nEaQdlZSJc M36/d9y/U0v1GgZADId/KTOE/YbqTBVG0KpldmCWGxU3HEZe5mrTax451ZvWKS9Z okGugGFx6ScUGUJ2ARLgPQJz8C4LurcNS9/XL0Gzh994fxOmjHHno5EL1m000ZPd cAbDuTzQ0YW8DNyIgdW74gll4Tvl0/kFH3nPOHTfutDfqd+quLJwPfwgr8M3zkge 4hX0GZ3Ox5eMRQqGaVr4Qmo0FPwY5Y30pNhDTzw9d8LtaGOud39XEnil9BxwhRfs be+4CePPkwe0wgYlj0xXkLzuPuPi5FCiLILpwNk/S9Gm4OgnpvEGg53NPlyrAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUbVmhtCiSxf6fZC8vtsN9w9BAuxAwHwYDVR0j BBgwFoAUEIvS7Q0xFGE8JyUlY5jDi5261SAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDQyMzQ0YmUtZjlmYi00NjM0LTkyZDYtODk0ZGQ1MzhjYWRmLzAvMTA4QkQyRUQw RDMxMTQ2MTNDMjcyNTI1NjM5OEMzOEI5REJBRDUyMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xMDhCRDJFRDBEMzExNDYxM0MyNzI1MjU2Mzk4QzM4QjlEQkFE NTIwLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzA0MjM0NGJlLWY5ZmItNDYzNC05 MmQ2LTg5NGRkNTM4Y2FkZi8wLzMxMzEzOTJlMzEzMDJlMzEzNzM2MmUzMDJmMzIz MTJkMzIzMTIwM2QzZTIwMzIzNDM1MzMzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA3cKsDANBgkqhkiG 9w0BAQsFAAOCAQEAXkNegsRPcHPCftNEji/a1IZcdvJoYnI4MHM+bREDRBGJC4bN zW93ETzRDihZNdfZMlo/msZ36wa+pqkMl+OuphZ6w8tvounF3Bu22SibEN9oWAph mZ/NTjVJvE1x/mEpEo02iSk4Q0NNgikrX+8EFI5XMx8uJ0NeSmqOxGU67uytp952 xUhnH0FxfjZdHMfobIAKNu1gOppT2lTkMjqYupRSxTRz650timXPXRimoucVyUJZ unDD138Lm8sywhwiwXPVlZKGlJI6jHA4eg7dTC6uhbosuUkZ9m15W0un2a589cft eVOobE5qbyDK2MAuyNkAFkagcIKx1d17MNM3/g== -----END CERTIFICATE-----Generated at Wed May 13 14:53:30 2026 by rpki-client