$ rpki-client -vvf rpki-rsync.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/3131392e31302e3137362e302f32312d3234203d3e203234353330.roa File: 3131392e31302e3137362e302f32312d3234203d3e203234353330.roa (raw, json) Hash identifier: CprlVpIAhuZZ+TvberfWR+fBEc8FklJHg5e3Yj9s2YM= Subject key identifier: CB:1C:E8:BD:DE:78:27:2B:5A:1F:32:2C:D0:CA:EF:E1:D4:FF:AE:77 Certificate issuer: /CN=108BD2ED0D3114613C2725256398C38B9DBAD520 Certificate serial: 2B0C08A86D7AC5349A1F2D603DA5EF8B3BBA6959 Authority key identifier: 10:8B:D2:ED:0D:31:14:61:3C:27:25:25:63:98:C3:8B:9D:BA:D5:20 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/108BD2ED0D3114613C2725256398C38B9DBAD520.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/3131392e31302e3137362e302f32312d3234203d3e203234353330.roa Signing time: Sun 03 May 2026 02:10:46 +0000 ROA not before: Sun 03 May 2026 02:05:46 +0000 ROA not after: Sun 02 May 2027 02:10:46 +0000 asID: 24530 IP address blocks: 119.10.176.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/108BD2ED0D3114613C2725256398C38B9DBAD520.crl rsync://rpki-rsync.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/108BD2ED0D3114613C2725256398C38B9DBAD520.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/108BD2ED0D3114613C2725256398C38B9DBAD520.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 08:08:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:0c:08:a8:6d:7a:c5:34:9a:1f:2d:60:3d:a5:ef:8b:3b:ba:69:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=108BD2ED0D3114613C2725256398C38B9DBAD520 Validity Not Before: May 3 02:05:46 2026 GMT Not After : May 2 02:10:46 2027 GMT Subject: CN=CB1CE8BDDE78272B5A1F322CD0CAEFE1D4FFAE77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:a1:79:2c:5b:45:99:ca:f8:93:4a:9f:a9:8d: a4:cb:aa:76:a3:9f:9b:1e:39:56:f1:ab:0c:31:55: eb:01:4c:18:8e:e0:0a:75:2a:bd:ae:da:38:1b:01: 56:70:db:b7:44:5f:a8:73:ae:52:2f:aa:05:ba:a6: a9:28:cb:da:ac:07:1e:85:13:08:c6:94:5a:d3:b0: 00:df:38:24:07:2d:22:9a:39:e0:f1:0a:6f:5b:35: 0b:0a:c5:b3:7c:57:84:1e:8c:8d:8d:31:76:bd:72: c6:be:8c:2c:61:51:39:5c:16:8d:4f:f0:32:9e:60: d3:02:3d:0e:92:4a:e8:00:98:5f:2d:91:6a:42:8f: 2c:a5:a3:ff:95:12:24:25:46:b7:df:01:6c:65:93: c8:a3:2e:60:8a:4c:92:95:9b:62:37:05:9a:fc:73: d1:52:5b:aa:75:e4:41:bf:e4:61:ad:af:ba:b3:ef: df:f7:56:1f:c7:5e:f9:3c:07:7b:a6:e5:d7:e8:fb: 46:f3:94:18:d3:9a:34:eb:f6:5d:11:44:11:a5:44: 2a:52:3b:61:80:04:09:f1:38:45:42:47:64:7b:9d: 68:56:35:72:22:55:bd:5f:7c:47:3b:5c:37:3d:14: 81:fc:18:ee:89:bb:d4:41:81:59:94:ef:19:70:cb: c5:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:1C:E8:BD:DE:78:27:2B:5A:1F:32:2C:D0:CA:EF:E1:D4:FF:AE:77 X509v3 Authority Key Identifier: keyid:10:8B:D2:ED:0D:31:14:61:3C:27:25:25:63:98:C3:8B:9D:BA:D5:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/108BD2ED0D3114613C2725256398C38B9DBAD520.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/108BD2ED0D3114613C2725256398C38B9DBAD520.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/3131392e31302e3137362e302f32312d3234203d3e203234353330.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 119.10.176.0/21 Signature Algorithm: sha256WithRSAEncryption 3a:81:f0:35:cc:96:9c:c4:00:4a:54:e3:1e:73:b5:52:a5:59: c4:47:e1:fc:40:ac:b6:a8:73:63:0d:51:e4:8c:d2:ca:de:92: 6f:f4:31:c8:16:ab:97:44:61:1c:55:27:57:e9:21:41:d2:f4: d7:fa:ef:53:c8:d4:73:19:87:5d:b0:55:15:f9:7c:b1:0d:fe: 8d:57:fa:97:84:c8:96:4b:3b:af:98:68:9e:03:93:d1:e3:57: 54:3c:f6:ba:7d:06:59:f3:bd:08:6b:58:3e:4e:17:27:26:71: ea:3b:08:ef:2c:c3:09:9c:bc:67:7c:0b:0e:9c:2a:c0:08:09: 57:c0:3a:9f:68:71:b8:e0:ce:92:15:82:ec:7d:21:45:e7:68: c6:0c:5a:5f:7d:67:62:52:e1:dc:24:8d:26:0e:b7:9a:a5:7d: 53:7d:95:3f:74:e0:1f:aa:8c:00:12:88:68:15:6c:76:52:42: 2b:77:c1:f0:a4:af:8d:19:06:15:0b:eb:28:6e:25:56:52:00: bf:88:29:12:06:fa:3b:96:fa:87:d6:52:00:a8:a5:c5:7c:c8: b2:bf:73:e3:50:1e:76:ca:8a:67:bd:2e:a0:38:75:31:d1:56: bf:65:b7:64:d0:09:9d:75:db:88:ff:c7:5f:51:d2:35:38:f6: 72:89:03:1d -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUKwwIqG16xTSaHy1gPaXvizu6aVkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTA4QkQyRUQwRDMxMTQ2MTNDMjcyNTI1NjM5OEMzOEI5 REJBRDUyMDAeFw0yNjA1MDMwMjA1NDZaFw0yNzA1MDIwMjEwNDZaMDMxMTAvBgNV BAMTKENCMUNFOEJEREU3ODI3MkI1QTFGMzIyQ0QwQ0FFRkUxRDRGRkFFNzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChoXksW0WZyviTSp+pjaTLqnaj n5seOVbxqwwxVesBTBiO4Ap1Kr2u2jgbAVZw27dEX6hzrlIvqgW6pqkoy9qsBx6F EwjGlFrTsADfOCQHLSKaOeDxCm9bNQsKxbN8V4QejI2NMXa9csa+jCxhUTlcFo1P 8DKeYNMCPQ6SSugAmF8tkWpCjyylo/+VEiQlRrffAWxlk8ijLmCKTJKVm2I3BZr8 c9FSW6p15EG/5GGtr7qz79/3Vh/HXvk8B3um5dfo+0bzlBjTmjTr9l0RRBGlRCpS O2GABAnxOEVCR2R7nWhWNXIiVb1ffEc7XDc9FIH8GO6Ju9RBgVmU7xlwy8WtAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUyxzovd54JytaHzIs0Mrv4dT/rncwHwYDVR0j BBgwFoAUEIvS7Q0xFGE8JyUlY5jDi5261SAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDQyMzQ0YmUtZjlmYi00NjM0LTkyZDYtODk0ZGQ1MzhjYWRmLzAvMTA4QkQyRUQw RDMxMTQ2MTNDMjcyNTI1NjM5OEMzOEI5REJBRDUyMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xMDhCRDJFRDBEMzExNDYxM0MyNzI1MjU2Mzk4QzM4QjlEQkFE NTIwLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzA0MjM0NGJlLWY5ZmItNDYzNC05 MmQ2LTg5NGRkNTM4Y2FkZi8wLzMxMzEzOTJlMzEzMDJlMzEzNzM2MmUzMDJmMzIz MTJkMzIzNDIwM2QzZTIwMzIzNDM1MzMzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA3cKsDANBgkqhkiG 9w0BAQsFAAOCAQEAOoHwNcyWnMQASlTjHnO1UqVZxEfh/ECstqhzYw1R5IzSyt6S b/QxyBarl0RhHFUnV+khQdL01/rvU8jUcxmHXbBVFfl8sQ3+jVf6l4TIlks7r5ho ngOT0eNXVDz2un0GWfO9CGtYPk4XJyZx6jsI7yzDCZy8Z3wLDpwqwAgJV8A6n2hx uODOkhWC7H0hRedoxgxaX31nYlLh3CSNJg63mqV9U32VP3TgH6qMABKIaBVsdlJC K3fB8KSvjRkGFQvrKG4lVlIAv4gpEgb6O5b6h9ZSAKilxXzIsr9z41AedsqKZ70u oDh1MdFWv2W3ZNAJnXXbiP/HX1HSNTj2cokDHQ== -----END CERTIFICATE-----Generated at Wed May 13 14:57:16 2026 by rpki-client