$ rpki-client -vvf rpki-rsync.idnic.net/repo/04e377b9-5889-4cb3-a4c9-08712b4f66fc/0/3230332e3131312e3235342e302f32332d3234203d3e20313531393931.roa File: 3230332e3131312e3235342e302f32332d3234203d3e20313531393931.roa (raw, json) Hash identifier: otj2sIGnWzWgRnhmdcO20guHoUVJ8w7hWeCj8su+1ls= Subject key identifier: E9:7E:A2:A9:2A:44:7B:8B:72:4B:14:92:3D:99:36:C7:ED:FC:0A:5F Certificate issuer: /CN=85638E4C723F993851F22E4C79D5E467D64EF6E5 Certificate serial: 11D57A97C12DF4CF3DC69A6BC0AFD962E81E6AB6 Authority key identifier: 85:63:8E:4C:72:3F:99:38:51:F2:2E:4C:79:D5:E4:67:D6:4E:F6:E5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/85638E4C723F993851F22E4C79D5E467D64EF6E5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/04e377b9-5889-4cb3-a4c9-08712b4f66fc/0/3230332e3131312e3235342e302f32332d3234203d3e20313531393931.roa Signing time: Sun 03 May 2026 02:11:02 +0000 ROA not before: Sun 03 May 2026 02:06:02 +0000 ROA not after: Sun 02 May 2027 02:11:02 +0000 asID: 151991 IP address blocks: 203.111.254.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/04e377b9-5889-4cb3-a4c9-08712b4f66fc/0/85638E4C723F993851F22E4C79D5E467D64EF6E5.crl rsync://rpki-rsync.idnic.net/repo/04e377b9-5889-4cb3-a4c9-08712b4f66fc/0/85638E4C723F993851F22E4C79D5E467D64EF6E5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/85638E4C723F993851F22E4C79D5E467D64EF6E5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 22:55:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:d5:7a:97:c1:2d:f4:cf:3d:c6:9a:6b:c0:af:d9:62:e8:1e:6a:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85638E4C723F993851F22E4C79D5E467D64EF6E5 Validity Not Before: May 3 02:06:02 2026 GMT Not After : May 2 02:11:02 2027 GMT Subject: CN=E97EA2A92A447B8B724B14923D9936C7EDFC0A5F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:43:04:b7:cf:45:16:24:93:d7:4a:fb:11:cd: a4:57:b3:08:f0:b9:9c:a1:97:ec:6c:31:9f:15:f9: 06:42:32:5b:29:3b:16:e4:a4:5e:f8:0a:2a:97:d7: 80:40:93:dd:3a:ae:c6:3b:ea:fa:a6:fe:a7:26:91: a8:42:8a:ab:6f:32:99:fa:57:fb:04:ac:d2:48:b2: 5f:3b:5d:7c:10:f6:e2:6e:92:bd:ae:da:a2:c4:25: 17:ba:be:46:1c:34:1d:c5:5e:77:06:66:a0:71:a0: 48:49:2c:1f:e1:c0:4c:01:68:e8:76:10:d6:81:57: 04:2e:7a:7d:9d:92:44:42:b1:02:34:4c:73:f1:d1: 0d:18:3d:d0:03:0d:9f:54:a9:65:9c:da:0d:da:f6: d6:5b:78:66:56:f8:29:cc:95:31:a6:41:23:f8:a1: 82:b0:67:ec:32:f8:7a:37:e9:cd:b3:6d:3f:5f:29: 00:a7:91:5c:4b:bb:a5:5a:63:be:de:1e:39:bd:4a: 43:7c:ed:68:5c:c6:8d:3b:1e:12:88:40:2e:f4:bd: 40:49:61:17:66:ed:5b:e4:c2:87:a8:7b:44:92:91: ac:c4:6a:a8:12:a1:d7:4b:e1:d2:65:4c:9c:2e:0e: 48:02:cc:95:9a:44:b3:66:ee:05:a4:ac:78:43:62: 05:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:7E:A2:A9:2A:44:7B:8B:72:4B:14:92:3D:99:36:C7:ED:FC:0A:5F X509v3 Authority Key Identifier: keyid:85:63:8E:4C:72:3F:99:38:51:F2:2E:4C:79:D5:E4:67:D6:4E:F6:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/04e377b9-5889-4cb3-a4c9-08712b4f66fc/0/85638E4C723F993851F22E4C79D5E467D64EF6E5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/85638E4C723F993851F22E4C79D5E467D64EF6E5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/04e377b9-5889-4cb3-a4c9-08712b4f66fc/0/3230332e3131312e3235342e302f32332d3234203d3e20313531393931.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.111.254.0/23 Signature Algorithm: sha256WithRSAEncryption 4a:75:1e:8e:d1:3e:b5:1a:d0:d4:c6:66:d0:f7:95:2a:f0:a7: 2c:3c:83:6f:fd:cc:ef:4c:7e:ac:4d:85:82:1b:a1:ae:fb:23: 04:f9:56:99:7d:6b:ec:83:11:70:b6:c9:0e:69:0e:c5:45:23: cc:b0:ef:27:3b:ee:af:49:69:db:c5:31:2b:80:bb:78:f3:82: 05:de:7d:84:5a:ae:4f:ad:dd:fa:56:ca:6d:63:a2:b9:2e:03: 88:d8:69:ef:07:63:e3:53:98:61:34:df:09:b5:b3:3f:3c:5c: dc:d9:a1:c2:7c:74:ef:b1:16:0a:7c:17:6e:f9:ec:1f:f5:d2: 33:1d:b1:29:4d:4a:7c:5d:3d:d2:d9:b4:d7:fc:ff:fc:70:95: 22:d0:82:b3:fb:a7:ec:88:89:47:b3:81:a6:56:95:a8:50:33: 46:26:b5:2f:c4:6b:a5:58:07:e2:fb:b0:12:98:a7:c0:56:76: fb:5d:20:10:be:d1:7e:82:e2:4b:d3:a0:ce:e8:82:a1:24:e8: bd:0e:70:2b:14:10:1e:94:3f:01:4a:1f:4a:3d:9c:71:50:1e: ba:35:15:ce:b2:06:ae:e6:d0:dc:a1:ee:da:05:9d:e3:59:ed: 11:8e:8b:6e:c8:00:14:7b:3d:62:d0:96:35:15:00:c9:4f:47: e4:12:24:1d -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUEdV6l8Et9M89xpprwK/ZYugearYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODU2MzhFNEM3MjNGOTkzODUxRjIyRTRDNzlENUU0NjdE NjRFRjZFNTAeFw0yNjA1MDMwMjA2MDJaFw0yNzA1MDIwMjExMDJaMDMxMTAvBgNV BAMTKEU5N0VBMkE5MkE0NDdCOEI3MjRCMTQ5MjNEOTkzNkM3RURGQzBBNUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIQwS3z0UWJJPXSvsRzaRXswjw uZyhl+xsMZ8V+QZCMlspOxbkpF74CiqX14BAk906rsY76vqm/qcmkahCiqtvMpn6 V/sErNJIsl87XXwQ9uJukr2u2qLEJRe6vkYcNB3FXncGZqBxoEhJLB/hwEwBaOh2 ENaBVwQuen2dkkRCsQI0THPx0Q0YPdADDZ9UqWWc2g3a9tZbeGZW+CnMlTGmQSP4 oYKwZ+wy+Ho36c2zbT9fKQCnkVxLu6VaY77eHjm9SkN87Whcxo07HhKIQC70vUBJ YRdm7Vvkwoeoe0SSkazEaqgSoddL4dJlTJwuDkgCzJWaRLNm7gWkrHhDYgU3AgMB AAGjggI2MIICMjAdBgNVHQ4EFgQU6X6iqSpEe4tySxSSPZk2x+38Cl8wHwYDVR0j BBgwFoAUhWOOTHI/mThR8i5MedXkZ9ZO9uUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDRlMzc3YjktNTg4OS00Y2IzLWE0YzktMDg3MTJiNGY2NmZjLzAvODU2MzhFNEM3 MjNGOTkzODUxRjIyRTRDNzlENUU0NjdENjRFRjZFNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NTYzOEU0QzcyM0Y5OTM4NTFGMjJFNEM3OUQ1RTQ2N0Q2NEVG NkU1LmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzA0ZTM3N2I5LTU4ODktNGNiMy1h NGM5LTA4NzEyYjRmNjZmYy8wLzMyMzAzMzJlMzEzMTMxMmUzMjM1MzQyZTMwMmYz MjMzMmQzMjM0MjAzZDNlMjAzMTM1MzEzOTM5MzEucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAHLb/4wDQYJ KoZIhvcNAQELBQADggEBAEp1Ho7RPrUa0NTGZtD3lSrwpyw8g2/9zO9MfqxNhYIb oa77IwT5Vpl9a+yDEXC2yQ5pDsVFI8yw7yc77q9JadvFMSuAu3jzggXefYRark+t 3fpWym1jorkuA4jYae8HY+NTmGE03wm1sz88XNzZocJ8dO+xFgp8F2757B/10jMd sSlNSnxdPdLZtNf8//xwlSLQgrP7p+yIiUezgaZWlahQM0YmtS/Ea6VYB+L7sBKY p8BWdvtdIBC+0X6C4kvToM7ogqEk6L0OcCsUEB6UPwFKH0o9nHFQHro1Fc6yBq7m 0Nyh7toFneNZ7RGOi27IABR7PWLQljUVAMlPR+QSJB0= -----END CERTIFICATE-----Generated at Wed May 13 07:57:18 2026 by rpki-client