$ rpki-client -vvf rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/3131362e3139372e3132382e302f32312d3234203d3e203538333639.roa File: 3131362e3139372e3132382e302f32312d3234203d3e203538333639.roa (raw, json) Hash identifier: OqcJ1FgOVvMZslu8Yq80gC8bZca6qyJ6agbjsj+zTzE= Subject key identifier: 99:60:AF:77:D3:F1:F3:8E:22:93:07:B0:C9:C0:70:3A:61:84:72:A2 Certificate issuer: /CN=4C5D523097061FD420EF89872EF55D7D42F9D537 Certificate serial: 43B5B72C0670B27FF1D87C59D70DDE22E98074DF Authority key identifier: 4C:5D:52:30:97:06:1F:D4:20:EF:89:87:2E:F5:5D:7D:42:F9:D5:37 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C5D523097061FD420EF89872EF55D7D42F9D537.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/3131362e3139372e3132382e302f32312d3234203d3e203538333639.roa Signing time: Sun 03 May 2026 02:15:20 +0000 ROA not before: Sun 03 May 2026 02:10:20 +0000 ROA not after: Sun 02 May 2027 02:15:20 +0000 asID: 58369 IP address blocks: 116.197.128.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/4C5D523097061FD420EF89872EF55D7D42F9D537.crl rsync://rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/4C5D523097061FD420EF89872EF55D7D42F9D537.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C5D523097061FD420EF89872EF55D7D42F9D537.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 18:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:b5:b7:2c:06:70:b2:7f:f1:d8:7c:59:d7:0d:de:22:e9:80:74:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4C5D523097061FD420EF89872EF55D7D42F9D537 Validity Not Before: May 3 02:10:20 2026 GMT Not After : May 2 02:15:20 2027 GMT Subject: CN=9960AF77D3F1F38E229307B0C9C0703A618472A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:38:43:49:7b:21:64:a6:41:ad:49:50:a8:7c: d7:57:f7:8c:09:28:05:34:ec:f1:32:d2:d8:39:1e: 9f:6d:d1:1e:67:44:a6:c5:43:48:19:2b:26:7d:47: 21:46:1b:2d:12:c7:1e:c9:21:61:1b:05:e6:9d:b1: 1f:1b:ff:07:c1:c5:19:f1:0a:55:4e:06:76:67:0a: 65:27:12:ed:24:76:56:d5:db:34:87:49:86:29:68: 7d:31:59:31:48:68:8b:3b:66:41:e6:d9:6d:a9:a1: 36:99:71:0d:ff:39:b1:5e:9f:cf:02:bb:55:8e:64: 19:8d:e3:51:ad:51:ac:88:a5:73:b2:69:9d:81:f1: 1b:11:57:d5:f3:67:bf:83:eb:43:2d:e8:f9:23:29: f6:e0:6f:5f:b8:47:e9:91:c3:34:fa:db:87:64:9d: ad:14:56:4a:39:3c:79:c6:91:a0:15:b3:7a:1d:c5: 48:6f:a1:bc:c9:46:5b:d0:a5:af:ee:19:42:a6:5a: 03:11:ac:56:43:af:79:f9:28:36:9d:cf:20:ea:a9: ae:8a:90:1d:f4:50:28:51:c3:f0:8b:cd:43:5c:0e: b8:6e:35:1b:6a:ac:72:a1:89:ef:6d:6f:28:93:dd: 0d:83:b7:a4:00:e2:92:70:1b:99:88:f0:f2:8b:85: cf:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:60:AF:77:D3:F1:F3:8E:22:93:07:B0:C9:C0:70:3A:61:84:72:A2 X509v3 Authority Key Identifier: keyid:4C:5D:52:30:97:06:1F:D4:20:EF:89:87:2E:F5:5D:7D:42:F9:D5:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/4C5D523097061FD420EF89872EF55D7D42F9D537.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C5D523097061FD420EF89872EF55D7D42F9D537.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/3131362e3139372e3132382e302f32312d3234203d3e203538333639.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 116.197.128.0/21 Signature Algorithm: sha256WithRSAEncryption bd:d6:08:dc:99:b0:ff:bc:2b:c1:15:c6:8b:9d:34:40:a3:5b: 30:b8:4f:8f:67:07:e9:cc:46:5e:69:9a:7a:80:35:bb:f5:58: 5a:63:de:a6:eb:cc:b4:77:02:37:15:59:3c:46:fa:ed:6e:a8: 83:5b:14:4f:91:c6:5d:6a:22:5e:79:ce:87:1a:c7:df:c9:0d: 46:98:68:f3:46:57:3f:14:0f:ad:66:b6:69:c3:04:ae:69:ac: 51:b5:73:f8:ba:96:4e:3c:11:13:72:70:72:29:d8:ee:c0:fd: d3:f4:be:dc:7f:6b:90:27:7f:95:a4:85:3d:c8:e6:d6:61:96: 36:62:00:bf:d7:31:97:70:06:b4:1a:00:07:f1:80:65:c5:1d: be:af:48:07:bc:84:15:4b:86:f5:d1:68:4a:7a:d7:4d:5e:b2: 14:28:14:19:f3:a1:d7:9d:af:a2:3f:c6:ab:c2:db:17:2c:a7: ee:63:40:27:03:06:16:f9:1e:72:57:de:91:6e:76:21:cf:c0: 4e:e7:37:35:14:4a:63:c6:72:09:fa:ea:27:4f:10:fe:c4:3c: b2:7e:49:ca:50:15:15:59:25:9b:3f:e5:ad:3a:f7:8b:4b:df: 66:f9:6c:67:cc:3e:c0:21:41:6a:9b:d9:f6:25:52:ce:a9:38: d9:e7:1c:64 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUQ7W3LAZwsn/x2HxZ1w3eIumAdN8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEM1RDUyMzA5NzA2MUZENDIwRUY4OTg3MkVGNTVEN0Q0 MkY5RDUzNzAeFw0yNjA1MDMwMjEwMjBaFw0yNzA1MDIwMjE1MjBaMDMxMTAvBgNV BAMTKDk5NjBBRjc3RDNGMUYzOEUyMjkzMDdCMEM5QzA3MDNBNjE4NDcyQTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4OENJeyFkpkGtSVCofNdX94wJ KAU07PEy0tg5Hp9t0R5nRKbFQ0gZKyZ9RyFGGy0Sxx7JIWEbBeadsR8b/wfBxRnx ClVOBnZnCmUnEu0kdlbV2zSHSYYpaH0xWTFIaIs7ZkHm2W2poTaZcQ3/ObFen88C u1WOZBmN41GtUayIpXOyaZ2B8RsRV9XzZ7+D60Mt6PkjKfbgb1+4R+mRwzT624dk na0UVko5PHnGkaAVs3odxUhvobzJRlvQpa/uGUKmWgMRrFZDr3n5KDadzyDqqa6K kB30UChRw/CLzUNcDrhuNRtqrHKhie9tbyiT3Q2Dt6QA4pJwG5mI8PKLhc8PAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUmWCvd9Px844ikwewycBwOmGEcqIwHwYDVR0j BBgwFoAUTF1SMJcGH9Qg74mHLvVdfUL51TcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTZhODExODItN2NlYi00NjVjLWE1YjUtYTE0ZWM3MzliZjk5LzAvNEM1RDUyMzA5 NzA2MUZENDIwRUY4OTg3MkVGNTVEN0Q0MkY5RDUzNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80QzVENTIzMDk3MDYxRkQ0MjBFRjg5ODcyRUY1NUQ3RDQyRjlE NTM3LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzE2YTgxMTgyLTdjZWItNDY1Yy1h NWI1LWExNGVjNzM5YmY5OS8wLzMxMzEzNjJlMzEzOTM3MmUzMTMyMzgyZTMwMmYz MjMxMmQzMjM0MjAzZDNlMjAzNTM4MzMzNjM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDdMWAMA0GCSqG SIb3DQEBCwUAA4IBAQC91gjcmbD/vCvBFcaLnTRAo1swuE+PZwfpzEZeaZp6gDW7 9VhaY96m68y0dwI3FVk8RvrtbqiDWxRPkcZdaiJeec6HGsffyQ1GmGjzRlc/FA+t ZrZpwwSuaaxRtXP4upZOPBETcnByKdjuwP3T9L7cf2uQJ3+VpIU9yObWYZY2YgC/ 1zGXcAa0GgAH8YBlxR2+r0gHvIQVS4b10WhKetdNXrIUKBQZ86HXna+iP8arwtsX LKfuY0AnAwYW+R5yV96RbnYhz8BO5zc1FEpjxnIJ+uonTxD+xDyyfknKUBUVWSWb P+WtOveLS99m+WxnzD7AIUFqm9n2JVLOqTjZ5xxk -----END CERTIFICATE-----Generated at Wed May 13 09:12:53 2026 by rpki-client