$ rpki-client -vvf rpki-rsync.idnic.net/repo/153b067c-ecc9-4dca-987d-b9576815f855/0/3131372e3132312e3230372e302f32342d3234203d3e203436303239.roa File: 3131372e3132312e3230372e302f32342d3234203d3e203436303239.roa (raw, json) Hash identifier: 5qjiHCREo3yTZVwviMFSFaOdgsJ0Wu7pJnWioBrnUw8= Subject key identifier: FC:41:08:3C:AD:8A:3E:09:FB:93:B3:BE:C5:60:D8:9C:25:97:0C:6F Certificate issuer: /CN=2CF0624C97052A188B12C2D8DFD69256BEAEA0A3 Certificate serial: 791CA3590B2EF95C2B0B470D425C5F9CBA4E41EB Authority key identifier: 2C:F0:62:4C:97:05:2A:18:8B:12:C2:D8:DF:D6:92:56:BE:AE:A0:A3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CF0624C97052A188B12C2D8DFD69256BEAEA0A3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/153b067c-ecc9-4dca-987d-b9576815f855/0/3131372e3132312e3230372e302f32342d3234203d3e203436303239.roa Signing time: Sun 03 May 2026 02:15:00 +0000 ROA not before: Sun 03 May 2026 02:10:00 +0000 ROA not after: Sun 02 May 2027 02:15:00 +0000 asID: 46029 IP address blocks: 117.121.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/153b067c-ecc9-4dca-987d-b9576815f855/0/2CF0624C97052A188B12C2D8DFD69256BEAEA0A3.crl rsync://rpki-rsync.idnic.net/repo/153b067c-ecc9-4dca-987d-b9576815f855/0/2CF0624C97052A188B12C2D8DFD69256BEAEA0A3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CF0624C97052A188B12C2D8DFD69256BEAEA0A3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:1c:a3:59:0b:2e:f9:5c:2b:0b:47:0d:42:5c:5f:9c:ba:4e:41:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2CF0624C97052A188B12C2D8DFD69256BEAEA0A3 Validity Not Before: May 3 02:10:00 2026 GMT Not After : May 2 02:15:00 2027 GMT Subject: CN=FC41083CAD8A3E09FB93B3BEC560D89C25970C6F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:37:20:86:e1:22:0b:f1:88:58:bb:a3:91:01: 19:8d:5d:10:f6:a6:04:89:93:83:52:3d:da:92:b8: 94:6d:01:b1:11:c1:22:03:cc:87:98:93:4f:21:6f: fb:7f:8a:b2:d5:a3:2c:4d:47:b5:46:a8:33:d5:47: ab:bd:43:95:7d:c5:6d:f5:fb:90:a2:34:eb:1a:b7: a9:25:f9:83:f6:fc:79:b5:3c:41:43:ec:02:7e:8b: a0:c9:d0:f9:d6:c9:a1:f8:3e:5e:75:c2:22:79:cd: 6b:42:4e:e3:ae:4f:74:0c:ed:d7:32:73:90:03:e6: 18:0d:9d:6f:c6:78:6f:be:58:0e:46:f6:80:b0:f9: 35:fd:40:86:ae:fa:47:fe:81:ee:17:a4:21:9a:fd: 98:2d:58:6e:29:00:1d:60:b0:23:26:08:a3:db:d8: dc:27:84:63:08:4e:41:69:e5:e3:38:5b:7e:68:2a: 47:71:05:a1:b7:32:f7:0c:42:d8:92:e3:cb:c5:19: 18:f2:40:86:f7:15:88:0e:3e:8d:98:bd:4f:8e:59: 1a:5c:3c:09:7e:5c:69:ab:12:a4:a3:49:e8:4e:8c: 96:e6:3c:6a:f4:25:ba:e7:c4:f8:75:7a:4f:63:40: bb:d3:19:58:ae:96:ab:c9:5b:7a:62:eb:5c:46:41: ae:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:41:08:3C:AD:8A:3E:09:FB:93:B3:BE:C5:60:D8:9C:25:97:0C:6F X509v3 Authority Key Identifier: keyid:2C:F0:62:4C:97:05:2A:18:8B:12:C2:D8:DF:D6:92:56:BE:AE:A0:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/153b067c-ecc9-4dca-987d-b9576815f855/0/2CF0624C97052A188B12C2D8DFD69256BEAEA0A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CF0624C97052A188B12C2D8DFD69256BEAEA0A3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/153b067c-ecc9-4dca-987d-b9576815f855/0/3131372e3132312e3230372e302f32342d3234203d3e203436303239.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 117.121.207.0/24 Signature Algorithm: sha256WithRSAEncryption 70:8e:e4:7c:3e:ba:ff:c5:db:5b:65:ac:b8:22:47:a9:b9:a1: 9e:d2:9f:ac:9f:b4:d0:1a:f1:d0:0b:ff:e9:d7:78:d3:db:14: d0:1c:b0:a5:10:7d:a6:8e:ee:5a:9d:c7:41:b9:2e:1e:de:9b: 6f:7b:37:ae:fd:6c:6c:e1:9d:31:44:1e:84:75:df:3e:62:c0: 0c:a2:81:e3:68:77:8b:fd:cb:c3:70:01:71:82:41:5a:c6:4d: 8e:2d:1c:44:72:b5:45:9d:e0:82:d9:b3:4f:49:33:4e:e1:30: 51:33:bd:8b:d6:2e:b3:8b:81:b0:02:5d:d5:fe:2f:6a:8f:a0: 12:3f:b3:5c:3a:d6:a3:1c:5c:5a:53:72:7c:dc:ef:9d:52:ea: 34:9e:8c:9a:96:2c:74:ee:82:5e:8e:c5:e4:58:13:68:53:42: 67:bf:6e:b4:e9:a9:94:2f:ea:f4:25:38:b7:2f:ad:c0:6b:6a: 97:d9:a2:5e:d8:d7:a8:7e:a9:c3:14:d5:a3:75:e9:63:d0:35: 90:74:96:ff:3a:75:fb:0b:d9:f9:19:74:b7:c7:20:58:9a:d1: fe:4d:ae:4a:e3:af:81:f1:2f:ed:b1:df:f8:d6:95:b8:9a:93: 1f:8d:a7:4f:f7:4d:d7:58:5a:dd:a2:83:90:7b:43:47:37:73: ca:59:d6:42 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUeRyjWQsu+VwrC0cNQlxfnLpOQeswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkNGMDYyNEM5NzA1MkExODhCMTJDMkQ4REZENjkyNTZC RUFFQTBBMzAeFw0yNjA1MDMwMjEwMDBaFw0yNzA1MDIwMjE1MDBaMDMxMTAvBgNV BAMTKEZDNDEwODNDQUQ4QTNFMDlGQjkzQjNCRUM1NjBEODlDMjU5NzBDNkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvNyCG4SIL8YhYu6ORARmNXRD2 pgSJk4NSPdqSuJRtAbERwSIDzIeYk08hb/t/irLVoyxNR7VGqDPVR6u9Q5V9xW31 +5CiNOsat6kl+YP2/Hm1PEFD7AJ+i6DJ0PnWyaH4Pl51wiJ5zWtCTuOuT3QM7dcy c5AD5hgNnW/GeG++WA5G9oCw+TX9QIau+kf+ge4XpCGa/ZgtWG4pAB1gsCMmCKPb 2NwnhGMITkFp5eM4W35oKkdxBaG3MvcMQtiS48vFGRjyQIb3FYgOPo2YvU+OWRpc PAl+XGmrEqSjSehOjJbmPGr0JbrnxPh1ek9jQLvTGViulqvJW3pi61xGQa6FAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU/EEIPK2KPgn7k7O+xWDYnCWXDG8wHwYDVR0j BBgwFoAULPBiTJcFKhiLEsLY39aSVr6uoKMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTUzYjA2N2MtZWNjOS00ZGNhLTk4N2QtYjk1NzY4MTVmODU1LzAvMkNGMDYyNEM5 NzA1MkExODhCMTJDMkQ4REZENjkyNTZCRUFFQTBBMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yQ0YwNjI0Qzk3MDUyQTE4OEIxMkMyRDhERkQ2OTI1NkJFQUVB MEEzLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzE1M2IwNjdjLWVjYzktNGRjYS05 ODdkLWI5NTc2ODE1Zjg1NS8wLzMxMzEzNzJlMzEzMjMxMmUzMjMwMzcyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzNDM2MzAzMjM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAdXnPMA0GCSqG SIb3DQEBCwUAA4IBAQBwjuR8Prr/xdtbZay4IkepuaGe0p+sn7TQGvHQC//p13jT 2xTQHLClEH2mju5ancdBuS4e3ptvezeu/Wxs4Z0xRB6Edd8+YsAMooHjaHeL/cvD cAFxgkFaxk2OLRxEcrVFneCC2bNPSTNO4TBRM72L1i6zi4GwAl3V/i9qj6ASP7Nc OtajHFxaU3J83O+dUuo0noyalix07oJejsXkWBNoU0Jnv2606amUL+r0JTi3L63A a2qX2aJe2NeofqnDFNWjdelj0DWQdJb/OnX7C9n5GXS3xyBYmtH+Ta5K46+B8S/t sd/41pW4mpMfjadP903XWFrdooOQe0NHN3PKWdZC -----END CERTIFICATE-----Generated at Wed May 13 02:13:43 2026 by rpki-client