$ rpki-client -vvf rpki-rsync.idnic.net/repo/153b067c-ecc9-4dca-987d-b9576815f855/0/3131372e3132312e3230302e302f32342d3234203d3e203436303239.roa File: 3131372e3132312e3230302e302f32342d3234203d3e203436303239.roa (raw, json) Hash identifier: jjDQyLwOLFkeP+V5865OD4J5ZSFyfyGf7kRLTYcgAUA= Subject key identifier: 82:EF:CB:64:67:D7:D3:5C:A1:28:98:FE:93:D8:96:FB:38:83:E5:26 Certificate issuer: /CN=2CF0624C97052A188B12C2D8DFD69256BEAEA0A3 Certificate serial: 7BD7E7363BC2AB4A30989A4259F5C3C9985B1758 Authority key identifier: 2C:F0:62:4C:97:05:2A:18:8B:12:C2:D8:DF:D6:92:56:BE:AE:A0:A3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CF0624C97052A188B12C2D8DFD69256BEAEA0A3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/153b067c-ecc9-4dca-987d-b9576815f855/0/3131372e3132312e3230302e302f32342d3234203d3e203436303239.roa Signing time: Sun 03 May 2026 02:14:59 +0000 ROA not before: Sun 03 May 2026 02:09:59 +0000 ROA not after: Sun 02 May 2027 02:14:59 +0000 asID: 46029 IP address blocks: 117.121.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/153b067c-ecc9-4dca-987d-b9576815f855/0/2CF0624C97052A188B12C2D8DFD69256BEAEA0A3.crl rsync://rpki-rsync.idnic.net/repo/153b067c-ecc9-4dca-987d-b9576815f855/0/2CF0624C97052A188B12C2D8DFD69256BEAEA0A3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CF0624C97052A188B12C2D8DFD69256BEAEA0A3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:d7:e7:36:3b:c2:ab:4a:30:98:9a:42:59:f5:c3:c9:98:5b:17:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2CF0624C97052A188B12C2D8DFD69256BEAEA0A3 Validity Not Before: May 3 02:09:59 2026 GMT Not After : May 2 02:14:59 2027 GMT Subject: CN=82EFCB6467D7D35CA12898FE93D896FB3883E526 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:15:af:b8:6a:f7:ba:36:0c:e5:a6:c6:17:89: 07:83:42:74:3a:7d:78:fe:fe:0d:68:a1:3e:7c:0a: 38:9c:c8:45:7d:ad:23:ed:67:5d:78:5e:4d:10:ab: b1:17:22:a5:2c:7d:80:28:68:88:49:a5:be:84:1b: b2:02:b8:3a:5b:a5:3f:0d:e6:e6:7d:19:7e:ec:e6: cf:5a:a8:f9:7a:ef:79:33:5e:ac:47:4c:bf:45:d0: 00:b5:7e:22:53:d3:b8:37:2e:f4:e6:08:5f:aa:2e: 0d:80:97:e2:ad:e0:fb:50:db:12:6a:ca:33:71:28: 71:07:0e:94:a1:78:11:52:ef:72:e3:f3:5a:3b:cb: bb:0e:e9:a0:f3:19:4b:f5:a1:f7:57:fa:5d:84:0d: f2:44:3a:35:b9:4f:ab:35:6a:9e:8e:aa:9e:ce:fd: 2a:9a:8b:98:2f:e0:9f:b5:df:65:70:58:8b:28:6a: f8:09:da:f9:f4:e0:c5:19:e5:6f:aa:aa:af:42:2b: 35:7a:d1:57:35:22:63:39:50:da:12:a5:7f:93:c3: de:68:57:99:7d:a4:a5:62:31:f1:b9:e0:7e:59:f2: ef:d8:2a:02:a6:c9:ff:4a:86:5f:50:50:d2:22:43: 0c:86:53:44:12:90:4f:0f:8f:31:8c:4c:c0:dc:c8: 68:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:EF:CB:64:67:D7:D3:5C:A1:28:98:FE:93:D8:96:FB:38:83:E5:26 X509v3 Authority Key Identifier: keyid:2C:F0:62:4C:97:05:2A:18:8B:12:C2:D8:DF:D6:92:56:BE:AE:A0:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/153b067c-ecc9-4dca-987d-b9576815f855/0/2CF0624C97052A188B12C2D8DFD69256BEAEA0A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CF0624C97052A188B12C2D8DFD69256BEAEA0A3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/153b067c-ecc9-4dca-987d-b9576815f855/0/3131372e3132312e3230302e302f32342d3234203d3e203436303239.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 117.121.200.0/24 Signature Algorithm: sha256WithRSAEncryption 92:b6:c9:cb:62:08:c8:7c:98:58:47:72:51:14:84:f0:24:01: 62:35:d5:91:b7:1a:77:64:22:da:e2:78:44:be:a3:63:13:df: 4a:58:bf:42:fe:f7:e8:c1:f8:1f:4d:c8:7d:08:1f:9f:b8:b7: 24:61:5d:05:ad:be:94:f4:92:a5:10:9a:6f:4d:10:47:c5:be: ff:0c:a8:10:d8:c5:59:f1:6b:4c:10:91:4a:19:ec:3b:c2:7f: 0a:aa:47:78:b7:6a:e6:cd:49:c1:ac:70:14:74:29:f6:fc:09: d6:ea:c8:de:71:70:02:3b:f3:20:b9:0d:fa:12:b7:86:9a:ef: 02:43:c8:0b:f8:d6:e1:ea:00:ef:72:ab:a6:2a:2f:64:0c:3e: dc:d2:e9:7f:19:c2:c4:7c:e6:af:f0:90:78:15:59:21:b4:db: 27:69:0e:99:b8:30:dc:8a:4c:5a:d1:7f:a5:e8:c7:63:24:ee: 9e:50:79:8c:c5:0f:f9:06:99:4f:d4:c1:fc:b5:73:0d:1d:a4: 74:37:90:76:3a:cb:1f:e0:58:9e:3c:79:9e:e1:cc:9c:f1:bd: b6:6d:02:61:c4:55:f9:bc:56:f8:a1:98:56:68:88:84:3c:ad: ab:3a:12:91:76:e8:8a:74:15:41:07:4b:94:d2:de:ec:8a:b1: bd:0b:43:cf -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUe9fnNjvCq0owmJpCWfXDyZhbF1gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkNGMDYyNEM5NzA1MkExODhCMTJDMkQ4REZENjkyNTZC RUFFQTBBMzAeFw0yNjA1MDMwMjA5NTlaFw0yNzA1MDIwMjE0NTlaMDMxMTAvBgNV BAMTKDgyRUZDQjY0NjdEN0QzNUNBMTI4OThGRTkzRDg5NkZCMzg4M0U1MjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpFa+4ave6NgzlpsYXiQeDQnQ6 fXj+/g1ooT58CjicyEV9rSPtZ114Xk0Qq7EXIqUsfYAoaIhJpb6EG7ICuDpbpT8N 5uZ9GX7s5s9aqPl673kzXqxHTL9F0AC1fiJT07g3LvTmCF+qLg2Al+Kt4PtQ2xJq yjNxKHEHDpSheBFS73Lj81o7y7sO6aDzGUv1ofdX+l2EDfJEOjW5T6s1ap6Oqp7O /Sqai5gv4J+132VwWIsoavgJ2vn04MUZ5W+qqq9CKzV60Vc1ImM5UNoSpX+Tw95o V5l9pKViMfG54H5Z8u/YKgKmyf9Khl9QUNIiQwyGU0QSkE8PjzGMTMDcyGi7AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUgu/LZGfX01yhKJj+k9iW+ziD5SYwHwYDVR0j BBgwFoAULPBiTJcFKhiLEsLY39aSVr6uoKMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTUzYjA2N2MtZWNjOS00ZGNhLTk4N2QtYjk1NzY4MTVmODU1LzAvMkNGMDYyNEM5 NzA1MkExODhCMTJDMkQ4REZENjkyNTZCRUFFQTBBMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yQ0YwNjI0Qzk3MDUyQTE4OEIxMkMyRDhERkQ2OTI1NkJFQUVB MEEzLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzE1M2IwNjdjLWVjYzktNGRjYS05 ODdkLWI5NTc2ODE1Zjg1NS8wLzMxMzEzNzJlMzEzMjMxMmUzMjMwMzAyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzNDM2MzAzMjM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAdXnIMA0GCSqG SIb3DQEBCwUAA4IBAQCStsnLYgjIfJhYR3JRFITwJAFiNdWRtxp3ZCLa4nhEvqNj E99KWL9C/vfowfgfTch9CB+fuLckYV0Frb6U9JKlEJpvTRBHxb7/DKgQ2MVZ8WtM EJFKGew7wn8Kqkd4t2rmzUnBrHAUdCn2/AnW6sjecXACO/MguQ36EreGmu8CQ8gL +Nbh6gDvcqumKi9kDD7c0ul/GcLEfOav8JB4FVkhtNsnaQ6ZuDDcikxa0X+l6Mdj JO6eUHmMxQ/5BplP1MH8tXMNHaR0N5B2Ossf4FiePHme4cyc8b22bQJhxFX5vFb4 oZhWaIiEPK2rOhKRduiKdBVBB0uU0t7sirG9C0PP -----END CERTIFICATE-----Generated at Wed May 13 02:37:50 2026 by rpki-client