$ rpki-client -vvf rpki-rsync.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/3131392e31302e3137362e302f32322d3232203d3e203234353330.roa File: 3131392e31302e3137362e302f32322d3232203d3e203234353330.roa (raw, json) Hash identifier: lhKQdAX20mlvRL5BGbA0faxy+2IyoM1d90NTGWc0wAA= Subject key identifier: 62:9E:9D:7B:6C:5C:35:3C:0C:9B:9E:C8:FF:1D:7E:13:8E:F3:0E:36 Certificate issuer: /CN=108BD2ED0D3114613C2725256398C38B9DBAD520 Certificate serial: 3A3351E319782F773389C8AE71B6ACC6A92389A0 Authority key identifier: 10:8B:D2:ED:0D:31:14:61:3C:27:25:25:63:98:C3:8B:9D:BA:D5:20 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/108BD2ED0D3114613C2725256398C38B9DBAD520.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/3131392e31302e3137362e302f32322d3232203d3e203234353330.roa Signing time: Sun 03 May 2026 02:10:42 +0000 ROA not before: Sun 03 May 2026 02:05:42 +0000 ROA not after: Sun 02 May 2027 02:10:42 +0000 asID: 24530 IP address blocks: 119.10.176.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/108BD2ED0D3114613C2725256398C38B9DBAD520.crl rsync://rpki-rsync.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/108BD2ED0D3114613C2725256398C38B9DBAD520.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/108BD2ED0D3114613C2725256398C38B9DBAD520.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 08:08:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:33:51:e3:19:78:2f:77:33:89:c8:ae:71:b6:ac:c6:a9:23:89:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=108BD2ED0D3114613C2725256398C38B9DBAD520 Validity Not Before: May 3 02:05:42 2026 GMT Not After : May 2 02:10:42 2027 GMT Subject: CN=629E9D7B6C5C353C0C9B9EC8FF1D7E138EF30E36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:7f:47:08:c8:dc:f4:19:2f:a7:f3:ba:a4:42: b8:94:29:e0:fa:a3:52:ee:37:c7:78:48:7f:13:1a: 02:e2:b9:04:81:0d:79:e4:ac:d8:42:4e:19:05:99: e9:7b:52:bc:63:5d:8e:41:54:e5:ce:4a:16:a0:6e: 2c:cd:db:06:d5:cd:11:25:5c:57:62:59:15:32:1a: cd:17:56:2d:03:08:cf:85:35:35:3d:cb:10:e1:6f: 2f:6e:00:93:49:0c:08:03:57:83:28:e9:11:f8:bd: 8c:d7:a9:11:f3:e8:f3:1c:be:d8:46:55:70:51:b4: 8c:ac:35:77:d8:ed:8c:85:1b:e9:1b:12:b1:d2:b2: 57:7f:c0:30:4f:fb:42:4b:ae:cb:cc:1e:b7:58:f9: a2:25:dc:39:ea:bd:60:cb:af:36:7f:b7:5d:a8:22: 8d:46:18:7d:23:7f:fa:73:c6:39:2d:d4:ad:33:f8: f4:9e:8d:14:05:f3:3f:38:f4:23:e3:0f:b8:f3:2b: 77:3b:38:1c:a0:e1:45:c9:e5:90:e7:44:62:84:13: 49:33:1f:4d:a9:6c:3f:ec:69:45:b6:07:5e:cd:f6: 3d:b9:bb:95:9e:a1:2a:68:ee:92:13:18:a6:42:16: be:ce:54:71:f3:f0:e5:f7:63:01:56:c0:08:b7:a9: 43:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:9E:9D:7B:6C:5C:35:3C:0C:9B:9E:C8:FF:1D:7E:13:8E:F3:0E:36 X509v3 Authority Key Identifier: keyid:10:8B:D2:ED:0D:31:14:61:3C:27:25:25:63:98:C3:8B:9D:BA:D5:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/108BD2ED0D3114613C2725256398C38B9DBAD520.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/108BD2ED0D3114613C2725256398C38B9DBAD520.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/3131392e31302e3137362e302f32322d3232203d3e203234353330.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 119.10.176.0/22 Signature Algorithm: sha256WithRSAEncryption 7d:f2:bd:4c:52:7a:bf:8e:13:1e:51:e4:d7:3f:47:81:f2:e9: ba:f3:25:14:47:78:c0:6c:18:83:5b:71:90:4f:f4:f6:5a:c1: c6:77:3c:eb:26:1b:66:59:b1:98:b0:2c:c8:3b:22:9f:94:99: 1f:85:25:0c:d6:e7:e6:9e:6b:7d:60:c1:1c:54:73:98:80:ba: 6d:6c:65:26:bc:0e:0b:e3:a7:0c:a2:55:e3:2c:39:9b:5b:8f: 31:e7:5d:a5:33:ec:22:09:7f:8e:54:fa:1b:d7:37:f8:73:53: 89:92:63:30:a9:aa:a7:52:30:46:72:69:99:e0:fc:38:36:87: d9:62:55:7e:bd:84:5f:8d:d3:ee:f9:42:01:03:a0:40:a6:a7: ff:20:14:88:4a:13:ff:4f:55:f7:f6:ac:b2:76:fe:c5:28:12: ef:22:ee:71:bc:95:ce:b7:a5:7e:e2:0d:e0:6d:60:9d:f7:34: 63:ab:7e:38:82:1e:c6:88:3a:9b:ad:ca:4d:51:7c:65:fc:2f: c6:17:24:89:8a:47:cf:d3:6b:ad:13:fc:9f:60:f1:5f:e4:e5: 8d:93:b1:01:81:5a:d7:9f:f8:86:15:57:16:0e:f7:e5:49:ea: f3:a2:db:57:22:23:49:dd:1d:2d:08:18:10:9f:93:c6:b1:2a: 81:69:43:18 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUOjNR4xl4L3cziciucbasxqkjiaAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTA4QkQyRUQwRDMxMTQ2MTNDMjcyNTI1NjM5OEMzOEI5 REJBRDUyMDAeFw0yNjA1MDMwMjA1NDJaFw0yNzA1MDIwMjEwNDJaMDMxMTAvBgNV BAMTKDYyOUU5RDdCNkM1QzM1M0MwQzlCOUVDOEZGMUQ3RTEzOEVGMzBFMzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRf0cIyNz0GS+n87qkQriUKeD6 o1LuN8d4SH8TGgLiuQSBDXnkrNhCThkFmel7UrxjXY5BVOXOShagbizN2wbVzREl XFdiWRUyGs0XVi0DCM+FNTU9yxDhby9uAJNJDAgDV4Mo6RH4vYzXqRHz6PMcvthG VXBRtIysNXfY7YyFG+kbErHSsld/wDBP+0JLrsvMHrdY+aIl3DnqvWDLrzZ/t12o Io1GGH0jf/pzxjkt1K0z+PSejRQF8z849CPjD7jzK3c7OByg4UXJ5ZDnRGKEE0kz H02pbD/saUW2B17N9j25u5WeoSpo7pITGKZCFr7OVHHz8OX3YwFWwAi3qUNzAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUYp6de2xcNTwMm57I/x1+E47zDjYwHwYDVR0j BBgwFoAUEIvS7Q0xFGE8JyUlY5jDi5261SAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDQyMzQ0YmUtZjlmYi00NjM0LTkyZDYtODk0ZGQ1MzhjYWRmLzAvMTA4QkQyRUQw RDMxMTQ2MTNDMjcyNTI1NjM5OEMzOEI5REJBRDUyMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xMDhCRDJFRDBEMzExNDYxM0MyNzI1MjU2Mzk4QzM4QjlEQkFE NTIwLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzA0MjM0NGJlLWY5ZmItNDYzNC05 MmQ2LTg5NGRkNTM4Y2FkZi8wLzMxMzEzOTJlMzEzMDJlMzEzNzM2MmUzMDJmMzIz MjJkMzIzMjIwM2QzZTIwMzIzNDM1MzMzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAncKsDANBgkqhkiG 9w0BAQsFAAOCAQEAffK9TFJ6v44THlHk1z9HgfLpuvMlFEd4wGwYg1txkE/09lrB xnc86yYbZlmxmLAsyDsin5SZH4UlDNbn5p5rfWDBHFRzmIC6bWxlJrwOC+OnDKJV 4yw5m1uPMeddpTPsIgl/jlT6G9c3+HNTiZJjMKmqp1IwRnJpmeD8ODaH2WJVfr2E X43T7vlCAQOgQKan/yAUiEoT/09V9/assnb+xSgS7yLucbyVzrelfuIN4G1gnfc0 Y6t+OIIexog6m63KTVF8ZfwvxhckiYpHz9NrrRP8n2DxX+TljZOxAYFa15/4hhVX Fg735Unq86LbVyIjSd0dLQgYEJ+TxrEqgWlDGA== -----END CERTIFICATE-----Generated at Wed May 13 14:47:24 2026 by rpki-client