$ rpki-client -vvf rpki-rsync.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/3131392e31302e3137362e302f32342d3234203d3e203234353330.roa File: 3131392e31302e3137362e302f32342d3234203d3e203234353330.roa (raw, json) Hash identifier: jhVYi1rtAR5MxAuCXQ51AbZzQNRaKl8p9WMw+ffrY1g= Subject key identifier: 8E:C2:5C:D1:FE:0D:4D:B8:88:D2:6E:2E:32:08:26:41:FF:F5:C9:99 Certificate issuer: /CN=108BD2ED0D3114613C2725256398C38B9DBAD520 Certificate serial: 7B97502ABF1CA903E2DDC9120FFDA1E788F661F5 Authority key identifier: 10:8B:D2:ED:0D:31:14:61:3C:27:25:25:63:98:C3:8B:9D:BA:D5:20 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/108BD2ED0D3114613C2725256398C38B9DBAD520.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/3131392e31302e3137362e302f32342d3234203d3e203234353330.roa Signing time: Sun 03 May 2026 02:10:44 +0000 ROA not before: Sun 03 May 2026 02:05:44 +0000 ROA not after: Sun 02 May 2027 02:10:44 +0000 asID: 24530 IP address blocks: 119.10.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/108BD2ED0D3114613C2725256398C38B9DBAD520.crl rsync://rpki-rsync.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/108BD2ED0D3114613C2725256398C38B9DBAD520.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/108BD2ED0D3114613C2725256398C38B9DBAD520.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 08:08:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:97:50:2a:bf:1c:a9:03:e2:dd:c9:12:0f:fd:a1:e7:88:f6:61:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=108BD2ED0D3114613C2725256398C38B9DBAD520 Validity Not Before: May 3 02:05:44 2026 GMT Not After : May 2 02:10:44 2027 GMT Subject: CN=8EC25CD1FE0D4DB888D26E2E32082641FFF5C999 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:b4:a8:74:9d:5b:86:86:d7:d7:cf:b4:8e:54: 35:5e:77:db:03:32:fe:86:9d:8e:12:ee:89:39:62: 86:75:c6:3f:9f:30:8e:a0:d2:25:c3:94:cc:d9:08: d8:2e:eb:84:62:80:10:96:d0:89:1a:0f:3c:69:1c: 5d:a0:70:10:e1:e0:ac:24:f7:19:bd:ef:a1:9b:b4: b3:39:e6:52:d2:3f:14:92:c0:6b:7b:09:13:b6:3c: de:bc:54:1a:98:10:46:cc:55:b3:9a:fc:cd:3f:3c: cf:d0:24:ba:07:e8:ec:40:56:b7:c4:32:25:03:cc: 22:4a:81:c3:6e:63:19:e3:89:66:71:56:e8:6b:13: e6:7a:9f:f5:da:7d:fe:e8:27:f6:89:f4:98:8c:e3: f7:95:fc:bf:0c:b9:58:e4:62:55:48:5e:05:29:21: a8:b2:49:0d:31:ff:c2:64:24:95:94:5d:9f:5e:77: a4:62:cd:83:12:e9:de:c0:0c:ad:d7:98:a2:ab:e4: bc:d6:b7:d1:d5:31:4d:fe:fc:71:64:8c:e0:43:f1: 37:29:62:c4:87:4f:62:b4:3d:8f:d0:51:17:00:5d: 6a:71:e4:ca:60:9d:12:d8:b4:90:2d:99:48:98:18: 17:02:5d:b3:41:2d:b1:94:2f:09:a0:ff:1c:3b:32: 96:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:C2:5C:D1:FE:0D:4D:B8:88:D2:6E:2E:32:08:26:41:FF:F5:C9:99 X509v3 Authority Key Identifier: keyid:10:8B:D2:ED:0D:31:14:61:3C:27:25:25:63:98:C3:8B:9D:BA:D5:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/108BD2ED0D3114613C2725256398C38B9DBAD520.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/108BD2ED0D3114613C2725256398C38B9DBAD520.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/3131392e31302e3137362e302f32342d3234203d3e203234353330.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 119.10.176.0/24 Signature Algorithm: sha256WithRSAEncryption a8:f8:d2:96:20:c5:fa:f3:32:73:9c:d9:0b:1a:09:b9:38:0b: 7a:45:aa:3e:87:08:b2:15:85:c5:82:6e:3f:1f:4f:a0:3e:41: 39:3e:ab:7d:bd:d5:6c:3d:d2:86:55:bc:bd:41:ee:2f:0e:7d: 88:84:4e:67:fd:ec:f5:e7:ce:d9:47:99:44:9d:82:c5:32:19: b5:96:12:83:2e:7d:d8:1a:bb:85:5b:b4:ea:7f:e8:5c:08:c1: 31:b6:b8:00:60:0a:c9:67:3f:4f:6b:96:24:87:0a:f1:6c:5c: f1:ea:0f:27:a7:b4:37:b2:39:eb:07:34:14:f5:d9:08:ed:e9: e5:45:46:d0:5b:f1:b8:28:9e:e5:c2:ee:3b:dd:d4:81:b3:04: 68:39:56:27:4a:4d:32:9e:17:e4:b0:8e:dd:05:c5:b0:9f:4a: 01:bb:28:7e:ca:64:aa:f0:1c:ba:19:84:01:e7:24:04:27:d8: 72:06:73:33:1f:a5:66:09:36:db:ee:13:78:67:c9:e2:e3:5f: c7:10:e8:0b:ec:06:31:d1:32:05:b0:8c:67:8f:3d:91:fd:68: 06:e9:73:1c:6e:56:41:3d:8a:18:b9:59:d1:3a:ed:3e:d2:a0: 5a:18:f3:ec:38:45:cc:2f:d5:57:2c:5f:4f:9d:7c:a5:63:0f: 87:95:92:3f -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUe5dQKr8cqQPi3ckSD/2h54j2YfUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTA4QkQyRUQwRDMxMTQ2MTNDMjcyNTI1NjM5OEMzOEI5 REJBRDUyMDAeFw0yNjA1MDMwMjA1NDRaFw0yNzA1MDIwMjEwNDRaMDMxMTAvBgNV BAMTKDhFQzI1Q0QxRkUwRDREQjg4OEQyNkUyRTMyMDgyNjQxRkZGNUM5OTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCltKh0nVuGhtfXz7SOVDVed9sD Mv6GnY4S7ok5YoZ1xj+fMI6g0iXDlMzZCNgu64RigBCW0IkaDzxpHF2gcBDh4Kwk 9xm976GbtLM55lLSPxSSwGt7CRO2PN68VBqYEEbMVbOa/M0/PM/QJLoH6OxAVrfE MiUDzCJKgcNuYxnjiWZxVuhrE+Z6n/Xaff7oJ/aJ9JiM4/eV/L8MuVjkYlVIXgUp IaiySQ0x/8JkJJWUXZ9ed6RizYMS6d7ADK3XmKKr5LzWt9HVMU3+/HFkjOBD8Tcp YsSHT2K0PY/QURcAXWpx5MpgnRLYtJAtmUiYGBcCXbNBLbGULwmg/xw7MpZZAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUjsJc0f4NTbiI0m4uMggmQf/1yZkwHwYDVR0j BBgwFoAUEIvS7Q0xFGE8JyUlY5jDi5261SAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDQyMzQ0YmUtZjlmYi00NjM0LTkyZDYtODk0ZGQ1MzhjYWRmLzAvMTA4QkQyRUQw RDMxMTQ2MTNDMjcyNTI1NjM5OEMzOEI5REJBRDUyMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xMDhCRDJFRDBEMzExNDYxM0MyNzI1MjU2Mzk4QzM4QjlEQkFE NTIwLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzA0MjM0NGJlLWY5ZmItNDYzNC05 MmQ2LTg5NGRkNTM4Y2FkZi8wLzMxMzEzOTJlMzEzMDJlMzEzNzM2MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzIzNDM1MzMzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHcKsDANBgkqhkiG 9w0BAQsFAAOCAQEAqPjSliDF+vMyc5zZCxoJuTgLekWqPocIshWFxYJuPx9PoD5B OT6rfb3VbD3ShlW8vUHuLw59iIROZ/3s9efO2UeZRJ2CxTIZtZYSgy592Bq7hVu0 6n/oXAjBMba4AGAKyWc/T2uWJIcK8Wxc8eoPJ6e0N7I56wc0FPXZCO3p5UVG0Fvx uCie5cLuO93UgbMEaDlWJ0pNMp4X5LCO3QXFsJ9KAbsofspkqvAcuhmEAeckBCfY cgZzMx+lZgk22+4TeGfJ4uNfxxDoC+wGMdEyBbCMZ489kf1oBulzHG5WQT2KGLlZ 0TrtPtKgWhjz7DhFzC/VVyxfT518pWMPh5WSPw== -----END CERTIFICATE-----Generated at Wed May 13 13:24:20 2026 by rpki-client