$ rpki-client -vvf rpki-rsync.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/3131392e31302e3137392e302f32342d3234203d3e203234353330.roa File: 3131392e31302e3137392e302f32342d3234203d3e203234353330.roa (raw, json) Hash identifier: 4xOrTa7LOQthmjAbRy6Dje8YDXSs3QUpwJ2MSJFD6BE= Subject key identifier: 36:A0:2D:D4:6C:2C:1B:49:43:07:F8:91:5F:25:4D:0B:2B:03:DE:89 Certificate issuer: /CN=108BD2ED0D3114613C2725256398C38B9DBAD520 Certificate serial: 753003115DB64DFD43C5A4BE9F76A6630D01FAB9 Authority key identifier: 10:8B:D2:ED:0D:31:14:61:3C:27:25:25:63:98:C3:8B:9D:BA:D5:20 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/108BD2ED0D3114613C2725256398C38B9DBAD520.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/3131392e31302e3137392e302f32342d3234203d3e203234353330.roa Signing time: Sun 03 May 2026 02:10:44 +0000 ROA not before: Sun 03 May 2026 02:05:44 +0000 ROA not after: Sun 02 May 2027 02:10:44 +0000 asID: 24530 IP address blocks: 119.10.179.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/108BD2ED0D3114613C2725256398C38B9DBAD520.crl rsync://rpki-rsync.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/108BD2ED0D3114613C2725256398C38B9DBAD520.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/108BD2ED0D3114613C2725256398C38B9DBAD520.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 08:08:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:30:03:11:5d:b6:4d:fd:43:c5:a4:be:9f:76:a6:63:0d:01:fa:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=108BD2ED0D3114613C2725256398C38B9DBAD520 Validity Not Before: May 3 02:05:44 2026 GMT Not After : May 2 02:10:44 2027 GMT Subject: CN=36A02DD46C2C1B494307F8915F254D0B2B03DE89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:85:3f:45:f9:fd:cf:c6:77:10:37:fb:66:90: ed:d3:2c:4e:62:90:75:ff:0f:68:7d:ca:e6:57:44: 8a:c0:aa:67:ea:ad:f3:55:55:a7:0e:4a:c7:7e:05: 96:fb:3f:b1:08:51:ef:ae:55:7b:a7:81:a6:03:9d: ae:f2:d0:1e:8a:05:9d:37:53:58:11:b7:75:ae:d8: 4e:27:0c:bc:8a:1d:ef:59:8c:e3:51:da:aa:42:f6: cc:10:4b:2a:c4:36:4b:45:61:d5:1c:a7:82:60:e8: b7:d9:7a:ab:cf:f1:37:01:0e:f1:7d:ed:c9:6d:ea: 31:98:db:52:bc:0c:71:0b:04:70:cd:0d:a8:b5:23: 27:76:28:c9:55:09:87:b2:9e:7f:05:7a:be:b3:c9: 31:97:02:db:e0:d4:72:10:0b:cb:00:56:df:df:2b: 14:dd:a5:c0:4f:99:f4:1d:bd:4f:36:d1:03:22:cd: 89:49:e8:08:7f:9d:46:66:da:72:e2:38:e3:bd:db: 2f:23:5b:c0:18:27:e4:c6:0c:5e:1d:88:88:54:02: 60:af:d1:bf:66:c2:4a:c9:19:cb:49:e3:1d:bf:ec: 3d:eb:0b:9f:48:0b:ce:9c:fc:b5:6c:70:09:7c:ec: e9:37:b2:7a:87:0c:32:fa:1f:a1:bd:17:62:e2:80: 9b:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:A0:2D:D4:6C:2C:1B:49:43:07:F8:91:5F:25:4D:0B:2B:03:DE:89 X509v3 Authority Key Identifier: keyid:10:8B:D2:ED:0D:31:14:61:3C:27:25:25:63:98:C3:8B:9D:BA:D5:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/108BD2ED0D3114613C2725256398C38B9DBAD520.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/108BD2ED0D3114613C2725256398C38B9DBAD520.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/3131392e31302e3137392e302f32342d3234203d3e203234353330.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 119.10.179.0/24 Signature Algorithm: sha256WithRSAEncryption b7:d4:06:f5:c5:89:5e:a7:14:fa:88:45:66:da:92:63:6a:03: 1a:99:51:55:b8:5b:33:24:1e:d7:2e:ca:e3:6e:25:48:34:54: 85:c4:9a:47:96:63:bf:44:76:61:e6:1b:73:a8:11:e3:71:80: 76:b7:31:c0:f3:ca:56:c0:c1:2b:0b:93:9c:52:f1:e4:52:73: d8:23:a3:fb:fa:65:80:88:b6:15:38:59:5a:cf:6c:99:03:82: 38:27:46:dd:ed:d6:d3:d3:c1:26:64:98:e4:9e:71:de:67:90: 1a:54:4c:d2:f2:0c:e5:91:23:b6:c0:86:a2:1b:e0:16:ce:f2: c1:c8:f9:e9:27:d8:fe:04:e9:0d:15:2e:bc:79:da:ca:79:ac: a2:4e:6e:ba:a8:de:27:a7:b0:51:e3:9b:9d:04:d1:9e:02:30: 7b:99:9f:b5:39:fb:0f:55:bd:75:31:00:6b:31:40:ef:c4:31: e6:28:e9:67:4a:25:53:cf:c6:a6:00:b3:17:15:30:09:cc:02: de:49:bd:5a:5b:c0:70:e0:86:a1:64:fb:44:3d:12:d4:c1:02: 8f:b3:74:39:dd:3c:ec:60:4a:e8:30:d0:01:9e:21:cc:d7:94: de:65:12:c9:31:b4:6e:e4:91:fe:34:31:90:76:5d:20:fc:b3: a2:30:da:59 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUdTADEV22Tf1DxaS+n3amYw0B+rkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTA4QkQyRUQwRDMxMTQ2MTNDMjcyNTI1NjM5OEMzOEI5 REJBRDUyMDAeFw0yNjA1MDMwMjA1NDRaFw0yNzA1MDIwMjEwNDRaMDMxMTAvBgNV BAMTKDM2QTAyREQ0NkMyQzFCNDk0MzA3Rjg5MTVGMjU0RDBCMkIwM0RFODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9hT9F+f3PxncQN/tmkO3TLE5i kHX/D2h9yuZXRIrAqmfqrfNVVacOSsd+BZb7P7EIUe+uVXungaYDna7y0B6KBZ03 U1gRt3Wu2E4nDLyKHe9ZjONR2qpC9swQSyrENktFYdUcp4Jg6LfZeqvP8TcBDvF9 7clt6jGY21K8DHELBHDNDai1Iyd2KMlVCYeynn8Fer6zyTGXAtvg1HIQC8sAVt/f KxTdpcBPmfQdvU820QMizYlJ6Ah/nUZm2nLiOOO92y8jW8AYJ+TGDF4diIhUAmCv 0b9mwkrJGctJ4x2/7D3rC59IC86c/LVscAl87Ok3snqHDDL6H6G9F2LigJsFAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUNqAt1GwsG0lDB/iRXyVNCysD3okwHwYDVR0j BBgwFoAUEIvS7Q0xFGE8JyUlY5jDi5261SAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDQyMzQ0YmUtZjlmYi00NjM0LTkyZDYtODk0ZGQ1MzhjYWRmLzAvMTA4QkQyRUQw RDMxMTQ2MTNDMjcyNTI1NjM5OEMzOEI5REJBRDUyMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xMDhCRDJFRDBEMzExNDYxM0MyNzI1MjU2Mzk4QzM4QjlEQkFE NTIwLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzA0MjM0NGJlLWY5ZmItNDYzNC05 MmQ2LTg5NGRkNTM4Y2FkZi8wLzMxMzEzOTJlMzEzMDJlMzEzNzM5MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzIzNDM1MzMzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHcKszANBgkqhkiG 9w0BAQsFAAOCAQEAt9QG9cWJXqcU+ohFZtqSY2oDGplRVbhbMyQe1y7K424lSDRU hcSaR5Zjv0R2YeYbc6gR43GAdrcxwPPKVsDBKwuTnFLx5FJz2COj+/plgIi2FThZ Ws9smQOCOCdG3e3W09PBJmSY5J5x3meQGlRM0vIM5ZEjtsCGohvgFs7ywcj56SfY /gTpDRUuvHnaynmsok5uuqjeJ6ewUeObnQTRngIwe5mftTn7D1W9dTEAazFA78Qx 5ijpZ0olU8/GpgCzFxUwCcwC3km9WlvAcOCGoWT7RD0S1MECj7N0Od087GBK6DDQ AZ4hzNeU3mUSyTG0buSR/jQxkHZdIPyzojDaWQ== -----END CERTIFICATE-----Generated at Wed May 13 13:48:47 2026 by rpki-client