$ rpki-client -vvf rpki-rsync.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/3131392e31302e3138312e302f32342d3234203d3e203234353330.roa File: 3131392e31302e3138312e302f32342d3234203d3e203234353330.roa (raw, json) Hash identifier: ybxkb0B+hs5pt/EvlpkTwH/9ZJ1gNWd/AVaEY/3TjMw= Subject key identifier: 70:C6:FF:8E:04:38:07:83:4A:76:1C:D8:F7:30:07:9F:74:9F:D0:AD Certificate issuer: /CN=108BD2ED0D3114613C2725256398C38B9DBAD520 Certificate serial: 7C2FCD17876AA21EF9016B146281677BB4ADB6CD Authority key identifier: 10:8B:D2:ED:0D:31:14:61:3C:27:25:25:63:98:C3:8B:9D:BA:D5:20 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/108BD2ED0D3114613C2725256398C38B9DBAD520.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/3131392e31302e3138312e302f32342d3234203d3e203234353330.roa Signing time: Sun 03 May 2026 02:10:47 +0000 ROA not before: Sun 03 May 2026 02:05:47 +0000 ROA not after: Sun 02 May 2027 02:10:47 +0000 asID: 24530 IP address blocks: 119.10.181.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/108BD2ED0D3114613C2725256398C38B9DBAD520.crl rsync://rpki-rsync.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/108BD2ED0D3114613C2725256398C38B9DBAD520.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/108BD2ED0D3114613C2725256398C38B9DBAD520.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 08:08:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:2f:cd:17:87:6a:a2:1e:f9:01:6b:14:62:81:67:7b:b4:ad:b6:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=108BD2ED0D3114613C2725256398C38B9DBAD520 Validity Not Before: May 3 02:05:47 2026 GMT Not After : May 2 02:10:47 2027 GMT Subject: CN=70C6FF8E043807834A761CD8F730079F749FD0AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:32:93:0d:82:6c:99:f5:e9:93:f7:80:a0:aa: dc:ef:e9:38:33:49:56:0d:16:f0:e1:62:be:2d:43: 5d:2a:a5:53:28:31:67:76:0d:e1:4d:4c:e6:b5:1f: 5c:3e:dd:06:01:bd:f9:68:4d:28:65:12:cc:6f:ee: dd:35:6f:b4:40:40:f2:03:51:d7:22:42:53:59:f3: 12:d2:f4:01:ed:7c:47:24:12:0f:04:a8:5b:a9:b3: dc:66:9e:97:dd:9a:a5:3b:b7:62:6d:1b:07:41:c7: 01:2f:54:f5:e7:12:bc:06:c4:55:35:a2:0c:c5:18: 26:fd:e3:fc:a8:92:d7:70:c2:8c:ad:ed:19:68:f1: 6e:47:85:82:dc:27:63:01:5a:45:c1:97:8f:62:8b: a8:70:86:16:cf:6f:f0:86:64:37:88:1a:45:5f:86: c0:60:93:b7:d2:5e:b1:18:02:da:84:b8:66:48:be: b6:60:c8:8c:b6:3b:66:c3:94:0a:66:0d:c8:80:8f: 02:72:af:ed:d8:50:e4:45:f1:ed:0e:ad:5c:e1:0a: 7f:02:9d:cf:a4:bc:31:36:30:b5:55:61:0d:ef:3a: 70:6a:f1:32:fd:8b:8e:53:e4:4c:17:58:59:21:1e: 2d:01:2b:e4:06:bb:f6:fd:49:00:b4:f0:d8:46:db: d0:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:C6:FF:8E:04:38:07:83:4A:76:1C:D8:F7:30:07:9F:74:9F:D0:AD X509v3 Authority Key Identifier: keyid:10:8B:D2:ED:0D:31:14:61:3C:27:25:25:63:98:C3:8B:9D:BA:D5:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/108BD2ED0D3114613C2725256398C38B9DBAD520.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/108BD2ED0D3114613C2725256398C38B9DBAD520.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/3131392e31302e3138312e302f32342d3234203d3e203234353330.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 119.10.181.0/24 Signature Algorithm: sha256WithRSAEncryption 7a:df:5b:3e:57:b0:91:37:e6:b4:ae:25:88:3b:10:0d:8d:b2: 23:fb:6c:35:ee:5f:6d:fe:a3:6f:30:92:46:a4:f6:fb:fb:36: dd:b6:45:14:64:0e:c9:a6:68:c1:3c:33:13:78:91:54:c7:8b: e0:55:dd:ce:ab:6d:be:e5:ec:15:b2:55:6b:4f:e0:62:52:11: 76:10:56:c4:6f:83:8d:eb:b2:98:c2:29:12:35:f2:6b:02:d8: a4:e7:9a:21:02:71:8f:c6:f6:dc:1c:86:e0:84:a9:b5:41:83: b0:bb:76:13:06:b8:33:f2:a5:0e:2d:4b:17:03:1b:11:e7:34: 55:09:96:fe:ad:28:96:fd:d1:a9:56:9e:3f:c1:60:0f:0a:6b: 54:a1:8d:b3:39:f6:7b:7c:65:be:83:72:3f:08:24:e3:8c:dc: d3:d6:47:c2:3c:20:f5:a6:7b:78:15:dd:9d:f7:fc:b9:23:d9: 97:2d:48:44:62:32:f2:31:32:22:cf:34:75:57:50:3b:b1:4f: 9f:82:a4:ea:15:2b:f8:58:34:a4:8a:82:36:f3:32:1f:66:2f: bf:54:40:b0:ab:35:bb:5a:2a:13:3e:a0:0b:fb:24:cf:66:a8: 66:f6:f7:de:75:67:d0:1a:89:52:37:cf:f5:0b:89:09:82:b0: 56:66:75:a3 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUfC/NF4dqoh75AWsUYoFne7Stts0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTA4QkQyRUQwRDMxMTQ2MTNDMjcyNTI1NjM5OEMzOEI5 REJBRDUyMDAeFw0yNjA1MDMwMjA1NDdaFw0yNzA1MDIwMjEwNDdaMDMxMTAvBgNV BAMTKDcwQzZGRjhFMDQzODA3ODM0QTc2MUNEOEY3MzAwNzlGNzQ5RkQwQUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyMpMNgmyZ9emT94Cgqtzv6Tgz SVYNFvDhYr4tQ10qpVMoMWd2DeFNTOa1H1w+3QYBvfloTShlEsxv7t01b7RAQPID UdciQlNZ8xLS9AHtfEckEg8EqFups9xmnpfdmqU7t2JtGwdBxwEvVPXnErwGxFU1 ogzFGCb94/yoktdwwoyt7Rlo8W5HhYLcJ2MBWkXBl49ii6hwhhbPb/CGZDeIGkVf hsBgk7fSXrEYAtqEuGZIvrZgyIy2O2bDlApmDciAjwJyr+3YUORF8e0OrVzhCn8C nc+kvDE2MLVVYQ3vOnBq8TL9i45T5EwXWFkhHi0BK+QGu/b9SQC08NhG29C3AgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUcMb/jgQ4B4NKdhzY9zAHn3Sf0K0wHwYDVR0j BBgwFoAUEIvS7Q0xFGE8JyUlY5jDi5261SAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDQyMzQ0YmUtZjlmYi00NjM0LTkyZDYtODk0ZGQ1MzhjYWRmLzAvMTA4QkQyRUQw RDMxMTQ2MTNDMjcyNTI1NjM5OEMzOEI5REJBRDUyMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xMDhCRDJFRDBEMzExNDYxM0MyNzI1MjU2Mzk4QzM4QjlEQkFE NTIwLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzA0MjM0NGJlLWY5ZmItNDYzNC05 MmQ2LTg5NGRkNTM4Y2FkZi8wLzMxMzEzOTJlMzEzMDJlMzEzODMxMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzIzNDM1MzMzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHcKtTANBgkqhkiG 9w0BAQsFAAOCAQEAet9bPlewkTfmtK4liDsQDY2yI/tsNe5fbf6jbzCSRqT2+/s2 3bZFFGQOyaZowTwzE3iRVMeL4FXdzqttvuXsFbJVa0/gYlIRdhBWxG+DjeuymMIp EjXyawLYpOeaIQJxj8b23ByG4ISptUGDsLt2Ewa4M/KlDi1LFwMbEec0VQmW/q0o lv3RqVaeP8FgDwprVKGNszn2e3xlvoNyPwgk44zc09ZHwjwg9aZ7eBXdnff8uSPZ ly1IRGIy8jEyIs80dVdQO7FPn4Kk6hUr+Fg0pIqCNvMyH2Yvv1RAsKs1u1oqEz6g C/skz2aoZvb33nVn0BqJUjfP9QuJCYKwVmZ1ow== -----END CERTIFICATE-----Generated at Wed May 13 14:02:57 2026 by rpki-client