$ rpki-client -vvf rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/3131362e3139372e3133352e302f32342d3234203d3e203538333639.roa File: 3131362e3139372e3133352e302f32342d3234203d3e203538333639.roa (raw, json) Hash identifier: t2NLa1Jp/0a7ELXFq+faxOVNxE6nPE+8ZLwYZh818vY= Subject key identifier: BE:09:CF:50:96:A2:CA:82:7C:30:1B:D3:7F:C7:BC:BE:82:18:7C:52 Certificate issuer: /CN=4C5D523097061FD420EF89872EF55D7D42F9D537 Certificate serial: 4CEA80CAD87B6EFD4810BD54531364544B592F9F Authority key identifier: 4C:5D:52:30:97:06:1F:D4:20:EF:89:87:2E:F5:5D:7D:42:F9:D5:37 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C5D523097061FD420EF89872EF55D7D42F9D537.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/3131362e3139372e3133352e302f32342d3234203d3e203538333639.roa Signing time: Sun 03 May 2026 02:15:17 +0000 ROA not before: Sun 03 May 2026 02:10:17 +0000 ROA not after: Sun 02 May 2027 02:15:17 +0000 asID: 58369 IP address blocks: 116.197.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/4C5D523097061FD420EF89872EF55D7D42F9D537.crl rsync://rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/4C5D523097061FD420EF89872EF55D7D42F9D537.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C5D523097061FD420EF89872EF55D7D42F9D537.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 18:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:ea:80:ca:d8:7b:6e:fd:48:10:bd:54:53:13:64:54:4b:59:2f:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4C5D523097061FD420EF89872EF55D7D42F9D537 Validity Not Before: May 3 02:10:17 2026 GMT Not After : May 2 02:15:17 2027 GMT Subject: CN=BE09CF5096A2CA827C301BD37FC7BCBE82187C52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:88:b9:46:28:d7:d5:1f:7b:c9:eb:fa:e2:4b: fc:17:07:83:15:e8:d1:4e:95:eb:fe:69:98:bf:c1: 6c:23:e5:44:5f:23:ac:11:27:af:28:66:c2:7e:b2: 1f:79:db:c2:2d:eb:c9:ce:2f:a5:32:d3:02:30:32: 8c:9c:77:bb:68:23:62:0c:e0:9f:17:51:67:d0:44: 0d:c7:98:04:1b:7d:37:34:6c:c1:50:03:72:c2:06: 08:f1:9f:f2:72:97:47:69:6b:67:99:31:b3:75:c1: be:79:32:da:81:0d:ac:b0:a7:bf:6a:75:4d:29:9d: 5a:0e:7d:16:88:0a:9a:7c:92:3a:99:08:0d:c6:88: 5e:53:d9:fa:53:a4:e9:29:7d:f8:b0:03:1d:dd:ca: 34:b1:60:55:23:0b:54:db:bc:89:15:ed:6a:97:05: c9:a3:b3:30:e7:59:ea:ca:45:34:4d:f6:42:d1:ef: 20:87:53:d7:e3:4b:48:ee:78:7a:c1:a2:b4:20:cb: 4a:64:ef:97:91:53:f8:1f:44:c1:30:27:89:9a:32: 70:ce:09:6b:ea:9a:2a:c7:c0:97:1e:e1:e7:0d:e2: e2:09:a8:3b:2a:74:3a:9c:fe:b1:ff:1a:96:df:9c: e8:59:cc:fc:50:f8:16:89:45:76:f0:ed:00:32:16: c2:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:09:CF:50:96:A2:CA:82:7C:30:1B:D3:7F:C7:BC:BE:82:18:7C:52 X509v3 Authority Key Identifier: keyid:4C:5D:52:30:97:06:1F:D4:20:EF:89:87:2E:F5:5D:7D:42:F9:D5:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/4C5D523097061FD420EF89872EF55D7D42F9D537.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C5D523097061FD420EF89872EF55D7D42F9D537.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/3131362e3139372e3133352e302f32342d3234203d3e203538333639.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 116.197.135.0/24 Signature Algorithm: sha256WithRSAEncryption a9:4e:a1:c2:a0:a0:fc:66:aa:a0:66:aa:e0:b8:8c:fa:40:12: 57:5a:f6:c2:2c:b7:bc:d9:dd:04:5f:ac:f2:78:5d:cd:10:64: 80:f9:87:4e:39:2c:bd:a8:f7:6e:46:1f:f3:13:2f:5f:ea:54: 06:8c:90:b1:af:59:6c:b3:50:f8:9a:9b:0e:29:45:a8:07:26: 45:ca:b9:5a:9a:f3:28:ce:2b:88:a8:0a:04:f8:83:2d:a1:09: 86:26:a0:c2:72:a6:1c:64:27:2d:d2:ca:93:1e:ca:95:b8:ab: 01:fc:ef:20:94:7a:e2:e7:a1:4c:02:f3:f8:be:40:4a:11:89: 21:f6:03:aa:24:e8:31:fc:d2:02:6c:76:8d:57:c3:24:81:21: c5:2b:a7:4a:ef:d6:74:c4:16:0a:be:3b:3f:4a:c3:34:17:f4: 53:3e:d4:59:a9:9b:4f:f1:32:35:a3:fd:5e:54:44:e8:85:e4: 61:20:e4:76:85:4a:f5:05:e2:7a:77:38:3c:32:d4:27:9c:25: 07:cb:f8:3d:25:1c:ff:8a:62:c3:b5:72:61:8f:d5:28:c6:c5: d9:da:17:5b:82:08:12:9d:52:1c:82:ae:1f:fd:99:f4:58:06: 40:f0:5d:22:1c:53:b4:a6:3a:17:be:aa:f9:96:81:87:17:78: 4f:5b:94:13 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUTOqAyth7bv1IEL1UUxNkVEtZL58wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEM1RDUyMzA5NzA2MUZENDIwRUY4OTg3MkVGNTVEN0Q0 MkY5RDUzNzAeFw0yNjA1MDMwMjEwMTdaFw0yNzA1MDIwMjE1MTdaMDMxMTAvBgNV BAMTKEJFMDlDRjUwOTZBMkNBODI3QzMwMUJEMzdGQzdCQ0JFODIxODdDNTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeiLlGKNfVH3vJ6/riS/wXB4MV 6NFOlev+aZi/wWwj5URfI6wRJ68oZsJ+sh9528It68nOL6Uy0wIwMoycd7toI2IM 4J8XUWfQRA3HmAQbfTc0bMFQA3LCBgjxn/Jyl0dpa2eZMbN1wb55MtqBDaywp79q dU0pnVoOfRaICpp8kjqZCA3GiF5T2fpTpOkpffiwAx3dyjSxYFUjC1TbvIkV7WqX BcmjszDnWerKRTRN9kLR7yCHU9fjS0jueHrBorQgy0pk75eRU/gfRMEwJ4maMnDO CWvqmirHwJce4ecN4uIJqDsqdDqc/rH/GpbfnOhZzPxQ+BaJRXbw7QAyFsI7AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUvgnPUJaiyoJ8MBvTf8e8voIYfFIwHwYDVR0j BBgwFoAUTF1SMJcGH9Qg74mHLvVdfUL51TcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTZhODExODItN2NlYi00NjVjLWE1YjUtYTE0ZWM3MzliZjk5LzAvNEM1RDUyMzA5 NzA2MUZENDIwRUY4OTg3MkVGNTVEN0Q0MkY5RDUzNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80QzVENTIzMDk3MDYxRkQ0MjBFRjg5ODcyRUY1NUQ3RDQyRjlE NTM3LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzE2YTgxMTgyLTdjZWItNDY1Yy1h NWI1LWExNGVjNzM5YmY5OS8wLzMxMzEzNjJlMzEzOTM3MmUzMTMzMzUyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzNTM4MzMzNjM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAdMWHMA0GCSqG SIb3DQEBCwUAA4IBAQCpTqHCoKD8ZqqgZqrguIz6QBJXWvbCLLe82d0EX6zyeF3N EGSA+YdOOSy9qPduRh/zEy9f6lQGjJCxr1lss1D4mpsOKUWoByZFyrlamvMoziuI qAoE+IMtoQmGJqDCcqYcZCct0sqTHsqVuKsB/O8glHri56FMAvP4vkBKEYkh9gOq JOgx/NICbHaNV8MkgSHFK6dK79Z0xBYKvjs/SsM0F/RTPtRZqZtP8TI1o/1eVETo heRhIOR2hUr1BeJ6dzg8MtQnnCUHy/g9JRz/imLDtXJhj9UoxsXZ2hdbgggSnVIc gq4f/Zn0WAZA8F0iHFO0pjoXvqr5loGHF3hPW5QT -----END CERTIFICATE-----Generated at Wed May 13 08:45:19 2026 by rpki-client