$ rpki-client -vvf rpki-rsync.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/3131372e32302e34382e302f32302d3234203d3e203233393531.roa File: 3131372e32302e34382e302f32302d3234203d3e203233393531.roa (raw, json) Hash identifier: ZPDwYO2P6k8WjawbES/6S1o1QZK3XoCLsSCHN9ik8MI= Subject key identifier: BF:AA:86:26:71:50:09:19:C9:BE:E0:87:68:47:7C:73:AF:14:8D:B7 Certificate issuer: /CN=6682CFF7F80E4587133A4FFEFC163B1417741DC6 Certificate serial: 410F74167722851DD41AF269C26BC58BAC42F5B0 Authority key identifier: 66:82:CF:F7:F8:0E:45:87:13:3A:4F:FE:FC:16:3B:14:17:74:1D:C6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6682CFF7F80E4587133A4FFEFC163B1417741DC6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/3131372e32302e34382e302f32302d3234203d3e203233393531.roa Signing time: Sun 03 May 2026 02:18:14 +0000 ROA not before: Sun 03 May 2026 02:13:14 +0000 ROA not after: Sun 02 May 2027 02:18:14 +0000 asID: 23951 IP address blocks: 117.20.48.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/6682CFF7F80E4587133A4FFEFC163B1417741DC6.crl rsync://rpki-rsync.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/6682CFF7F80E4587133A4FFEFC163B1417741DC6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6682CFF7F80E4587133A4FFEFC163B1417741DC6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:0f:74:16:77:22:85:1d:d4:1a:f2:69:c2:6b:c5:8b:ac:42:f5:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6682CFF7F80E4587133A4FFEFC163B1417741DC6 Validity Not Before: May 3 02:13:14 2026 GMT Not After : May 2 02:18:14 2027 GMT Subject: CN=BFAA862671500919C9BEE08768477C73AF148DB7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a4:85:7a:45:ba:6e:7e:f5:24:8f:59:a9:0b: 46:ba:17:73:31:f2:30:e7:8a:75:12:0a:81:5a:d6: 52:f2:bd:ec:f3:40:ab:5e:83:a9:cf:a3:a7:ff:8c: fd:19:b6:8e:85:6c:40:ef:35:73:98:26:3f:51:26: 8e:e9:04:36:28:fe:af:dc:03:9a:7b:da:ca:09:e6: bb:39:81:85:de:ff:8c:16:15:6f:7c:ea:ec:9a:bd: a7:bd:1f:4b:84:f9:7f:5e:96:d5:fd:12:ff:5c:c9: 32:85:07:7d:4a:15:58:bc:b3:04:49:bd:9c:eb:4c: 33:36:53:52:36:72:13:5a:6c:2a:e1:a1:2c:20:8e: 05:8e:72:11:03:5e:33:7d:ff:76:34:f0:0a:28:a2: 72:53:00:ff:72:d1:4a:49:55:1f:90:b9:1e:80:7c: 29:f2:f6:6f:e7:25:66:9d:57:f6:b8:09:45:7b:15: a6:06:e9:0a:21:d2:39:44:72:50:4c:20:47:2f:61: 45:e0:82:fe:e4:53:c6:a1:6f:e2:6f:46:d0:88:c1: 5d:1e:04:03:12:a1:76:b8:33:56:e0:41:c1:63:fd: e0:c0:6c:c5:2b:d4:f3:fa:55:57:29:aa:d9:01:81: 76:a5:49:51:1d:4b:77:e2:50:1c:ea:83:8e:cf:d0: 25:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:AA:86:26:71:50:09:19:C9:BE:E0:87:68:47:7C:73:AF:14:8D:B7 X509v3 Authority Key Identifier: keyid:66:82:CF:F7:F8:0E:45:87:13:3A:4F:FE:FC:16:3B:14:17:74:1D:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/6682CFF7F80E4587133A4FFEFC163B1417741DC6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6682CFF7F80E4587133A4FFEFC163B1417741DC6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/3131372e32302e34382e302f32302d3234203d3e203233393531.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 117.20.48.0/20 Signature Algorithm: sha256WithRSAEncryption 0e:43:88:f0:74:93:04:48:1e:2c:e2:e4:10:87:ff:94:d6:bf: 61:c8:99:12:f6:21:9f:f9:e4:fa:88:ad:86:08:bf:ae:d8:f4: af:b4:4a:6f:09:1f:e3:be:f8:f1:d2:c6:ba:98:ff:40:b1:8b: 0c:b7:9b:bb:19:9b:5c:63:c8:7d:00:a0:36:1b:3b:7b:09:30: 0f:14:bc:7c:e7:70:f3:69:dd:d1:90:ab:cc:27:9b:32:56:67: 4f:61:64:1d:05:ef:6e:8f:1b:22:9c:35:ca:82:60:47:3f:2d: 72:1f:59:ab:fa:fb:e3:18:c1:78:f1:73:84:23:d0:c0:11:5d: 01:11:5e:67:7e:16:45:46:0f:15:40:47:1d:15:95:01:41:0d: 78:94:22:9e:44:6d:a3:69:8a:c3:a4:25:c6:3e:44:3c:f8:0b: 39:d4:eb:4e:34:5f:f8:2b:00:e5:b3:97:e4:58:57:49:45:ff: 4f:f3:8b:cb:7e:67:56:d3:78:11:83:87:23:f5:68:d5:37:c8: 62:e5:8b:34:7d:cc:ab:e2:04:46:9e:40:d1:e1:f5:ed:e0:1d: 3d:e6:3d:f2:ea:a7:b6:45:cb:51:ca:19:65:44:35:d3:df:ed: ed:4a:f7:8e:3f:1a:69:ed:fd:e1:90:6f:af:72:4e:fd:90:b1: 14:29:51:24 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUQQ90FncihR3UGvJpwmvFi6xC9bAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjY4MkNGRjdGODBFNDU4NzEzM0E0RkZFRkMxNjNCMTQx Nzc0MURDNjAeFw0yNjA1MDMwMjEzMTRaFw0yNzA1MDIwMjE4MTRaMDMxMTAvBgNV BAMTKEJGQUE4NjI2NzE1MDA5MTlDOUJFRTA4NzY4NDc3QzczQUYxNDhEQjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4pIV6RbpufvUkj1mpC0a6F3Mx 8jDninUSCoFa1lLyvezzQKteg6nPo6f/jP0Zto6FbEDvNXOYJj9RJo7pBDYo/q/c A5p72soJ5rs5gYXe/4wWFW986uyavae9H0uE+X9eltX9Ev9cyTKFB31KFVi8swRJ vZzrTDM2U1I2chNabCrhoSwgjgWOchEDXjN9/3Y08AooonJTAP9y0UpJVR+QuR6A fCny9m/nJWadV/a4CUV7FaYG6Qoh0jlEclBMIEcvYUXggv7kU8ahb+JvRtCIwV0e BAMSoXa4M1bgQcFj/eDAbMUr1PP6VVcpqtkBgXalSVEdS3fiUBzqg47P0CX7AgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUv6qGJnFQCRnJvuCHaEd8c68UjbcwHwYDVR0j BBgwFoAUZoLP9/gORYcTOk/+/BY7FBd0HcYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWU2YTdlNDYtYjZhZC00YTdkLWI5MzAtMWFiMGJmMDJkZDVkLzAvNjY4MkNGRjdG ODBFNDU4NzEzM0E0RkZFRkMxNjNCMTQxNzc0MURDNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82NjgyQ0ZGN0Y4MEU0NTg3MTMzQTRGRkVGQzE2M0IxNDE3NzQx REM2LmNlcjCBoQYIKwYBBQUHAQsEgZQwgZEwgY4GCCsGAQUFBzALhoGBcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzFlNmE3ZTQ2LWI2YWQtNGE3ZC1i OTMwLTFhYjBiZjAyZGQ1ZC8wLzMxMzEzNzJlMzIzMDJlMzQzODJlMzAyZjMyMzAy ZDMyMzQyMDNkM2UyMDMyMzMzOTM1MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAR1FDAwDQYJKoZIhvcN AQELBQADggEBAA5DiPB0kwRIHizi5BCH/5TWv2HImRL2IZ/55PqIrYYIv67Y9K+0 Sm8JH+O++PHSxrqY/0Cxiwy3m7sZm1xjyH0AoDYbO3sJMA8UvHzncPNp3dGQq8wn mzJWZ09hZB0F726PGyKcNcqCYEc/LXIfWav6++MYwXjxc4Qj0MARXQERXmd+FkVG DxVARx0VlQFBDXiUIp5EbaNpisOkJcY+RDz4CznU6040X/grAOWzl+RYV0lF/0/z i8t+Z1bTeBGDhyP1aNU3yGLlizR9zKviBEaeQNHh9e3gHT3mPfLqp7ZFy1HKGWVE NdPf7e1K944/Gmnt/eGQb69yTv2QsRQpUSQ= -----END CERTIFICATE-----Generated at Wed May 13 00:54:19 2026 by rpki-client