$ rpki-client -vvf rpki-rsync.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/3131392e31302e3137382e302f32342d3234203d3e203234353330.roa File: 3131392e31302e3137382e302f32342d3234203d3e203234353330.roa (raw, json) Hash identifier: GxTOWueUzacQJLW8/Lw/u7dSqU8jy6t+nHDrIvlJlj4= Subject key identifier: 60:D7:97:41:97:75:5E:4E:AA:3B:BE:3F:73:B9:14:B4:12:3D:44:11 Certificate issuer: /CN=108BD2ED0D3114613C2725256398C38B9DBAD520 Certificate serial: 361761A0F1485ED6CA1CA957628274CB8CB3A5F6 Authority key identifier: 10:8B:D2:ED:0D:31:14:61:3C:27:25:25:63:98:C3:8B:9D:BA:D5:20 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/108BD2ED0D3114613C2725256398C38B9DBAD520.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/3131392e31302e3137382e302f32342d3234203d3e203234353330.roa Signing time: Sun 03 May 2026 02:10:47 +0000 ROA not before: Sun 03 May 2026 02:05:47 +0000 ROA not after: Sun 02 May 2027 02:10:47 +0000 asID: 24530 IP address blocks: 119.10.178.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/108BD2ED0D3114613C2725256398C38B9DBAD520.crl rsync://rpki-rsync.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/108BD2ED0D3114613C2725256398C38B9DBAD520.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/108BD2ED0D3114613C2725256398C38B9DBAD520.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 08:08:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:17:61:a0:f1:48:5e:d6:ca:1c:a9:57:62:82:74:cb:8c:b3:a5:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=108BD2ED0D3114613C2725256398C38B9DBAD520 Validity Not Before: May 3 02:05:47 2026 GMT Not After : May 2 02:10:47 2027 GMT Subject: CN=60D7974197755E4EAA3BBE3F73B914B4123D4411 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:a6:42:11:9b:5e:b4:77:08:d7:91:2b:5b:30: 24:bd:a2:30:26:45:dc:8c:2f:5b:24:21:71:3c:e0: 33:26:41:5d:7c:6a:3c:e8:87:33:48:15:bb:df:bc: 41:06:f9:e1:d8:45:0a:58:37:29:1e:d8:f9:55:df: df:94:78:05:6a:72:bc:02:36:a8:07:2e:25:83:71: 55:f7:fe:62:b0:a3:dc:8e:da:c0:12:b5:11:52:c6: 4a:dd:6a:cc:38:db:22:b2:bc:f9:2e:7e:4d:11:a2: 50:4e:1c:e5:00:94:49:cf:ad:19:65:86:fd:69:e0: 0f:e4:43:f9:45:4f:7f:82:3e:bc:0b:9f:c9:1d:20: db:24:ba:ff:f9:df:87:07:33:1f:a5:26:04:5b:2e: 3f:bb:58:75:0a:9a:8b:70:c8:50:fa:79:cf:59:ca: a9:be:81:a1:c1:c9:bc:52:47:33:7d:07:e1:d8:d5: c5:55:90:08:85:cd:d2:84:9f:ac:18:c8:fb:14:a2: 0d:66:93:3b:ba:4a:71:4f:cf:fb:b5:b4:71:50:3e: be:4c:0f:e3:6f:52:2d:f5:80:6e:72:49:8a:d7:d8: 1e:33:87:b2:dc:c3:d2:41:6c:5f:4d:ae:5c:1a:53: 37:0c:72:89:2d:00:63:7d:c4:82:dd:78:6a:b8:f6: e6:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:D7:97:41:97:75:5E:4E:AA:3B:BE:3F:73:B9:14:B4:12:3D:44:11 X509v3 Authority Key Identifier: keyid:10:8B:D2:ED:0D:31:14:61:3C:27:25:25:63:98:C3:8B:9D:BA:D5:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/108BD2ED0D3114613C2725256398C38B9DBAD520.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/108BD2ED0D3114613C2725256398C38B9DBAD520.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/3131392e31302e3137382e302f32342d3234203d3e203234353330.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 119.10.178.0/24 Signature Algorithm: sha256WithRSAEncryption 40:08:9e:14:f7:c7:9b:dc:79:9a:fc:7c:e1:5c:fa:97:96:39: 17:f5:2b:ea:4a:7e:53:db:74:eb:28:a0:da:c2:da:df:2b:9c: b9:e6:c1:7c:9e:21:74:e3:ee:25:ac:a3:18:ad:17:70:da:da: 65:a1:7e:88:a7:26:a1:f9:ca:c9:78:23:5d:a7:79:69:dd:17: 0e:ed:53:7b:35:d3:ec:ad:98:24:4b:44:af:7c:9e:92:ac:e9: 49:36:f0:29:8f:3a:55:c4:1b:bd:88:8e:bb:c8:5a:ab:f5:e1: 02:54:50:33:b3:85:21:7a:a9:9f:c7:50:cb:9a:a2:31:9d:90: 14:e7:bc:a0:19:50:23:da:23:0f:55:9f:16:66:f7:49:fb:80: b0:ff:d8:ab:63:98:78:00:80:e8:c9:a0:7d:1d:fa:7a:93:43: 42:b6:96:6f:c8:6e:87:25:37:aa:c1:fa:35:3e:74:c8:47:ea: 39:aa:1c:38:2a:4a:a8:11:15:be:95:4c:51:a1:d1:ac:13:b8: 23:e5:06:44:21:0d:1a:f3:9b:ab:4d:00:93:d2:d7:0d:64:87: cd:8c:9f:7e:2a:5e:0f:b7:e8:97:8d:df:56:b0:ce:e0:7f:71: bd:3e:49:79:70:13:2f:f2:cc:83:db:1a:68:07:4a:47:de:f4: a1:dd:fb:93 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUNhdhoPFIXtbKHKlXYoJ0y4yzpfYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTA4QkQyRUQwRDMxMTQ2MTNDMjcyNTI1NjM5OEMzOEI5 REJBRDUyMDAeFw0yNjA1MDMwMjA1NDdaFw0yNzA1MDIwMjEwNDdaMDMxMTAvBgNV BAMTKDYwRDc5NzQxOTc3NTVFNEVBQTNCQkUzRjczQjkxNEI0MTIzRDQ0MTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSpkIRm160dwjXkStbMCS9ojAm RdyML1skIXE84DMmQV18ajzohzNIFbvfvEEG+eHYRQpYNyke2PlV39+UeAVqcrwC NqgHLiWDcVX3/mKwo9yO2sAStRFSxkrdasw42yKyvPkufk0RolBOHOUAlEnPrRll hv1p4A/kQ/lFT3+CPrwLn8kdINskuv/534cHMx+lJgRbLj+7WHUKmotwyFD6ec9Z yqm+gaHBybxSRzN9B+HY1cVVkAiFzdKEn6wYyPsUog1mkzu6SnFPz/u1tHFQPr5M D+NvUi31gG5ySYrX2B4zh7Lcw9JBbF9NrlwaUzcMcoktAGN9xILdeGq49ublAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUYNeXQZd1Xk6qO74/c7kUtBI9RBEwHwYDVR0j BBgwFoAUEIvS7Q0xFGE8JyUlY5jDi5261SAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDQyMzQ0YmUtZjlmYi00NjM0LTkyZDYtODk0ZGQ1MzhjYWRmLzAvMTA4QkQyRUQw RDMxMTQ2MTNDMjcyNTI1NjM5OEMzOEI5REJBRDUyMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xMDhCRDJFRDBEMzExNDYxM0MyNzI1MjU2Mzk4QzM4QjlEQkFE NTIwLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzA0MjM0NGJlLWY5ZmItNDYzNC05 MmQ2LTg5NGRkNTM4Y2FkZi8wLzMxMzEzOTJlMzEzMDJlMzEzNzM4MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzIzNDM1MzMzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHcKsjANBgkqhkiG 9w0BAQsFAAOCAQEAQAieFPfHm9x5mvx84Vz6l5Y5F/Ur6kp+U9t06yig2sLa3yuc uebBfJ4hdOPuJayjGK0XcNraZaF+iKcmofnKyXgjXad5ad0XDu1TezXT7K2YJEtE r3yekqzpSTbwKY86VcQbvYiOu8haq/XhAlRQM7OFIXqpn8dQy5qiMZ2QFOe8oBlQ I9ojD1WfFmb3SfuAsP/Yq2OYeACA6MmgfR36epNDQraWb8huhyU3qsH6NT50yEfq OaocOCpKqBEVvpVMUaHRrBO4I+UGRCENGvObq00Ak9LXDWSHzYyffipeD7fol43f VrDO4H9xvT5JeXATL/LMg9saaAdKR970od37kw== -----END CERTIFICATE-----Generated at Wed May 13 13:42:29 2026 by rpki-client