$ rpki-client -vvf rpki-rsync.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0/3132302e32392e3232352e302f32342d3234203d3e203139393035.roa File: 3132302e32392e3232352e302f32342d3234203d3e203139393035.roa (raw, json) Hash identifier: WJbMrhYWH52zN+15Q0lEM0yHGULJofqinsPUUc3DEoM= Subject key identifier: C5:68:74:89:58:8D:71:23:0D:B7:1B:5C:5A:C6:80:68:65:40:5B:56 Certificate issuer: /CN=90A149FB759A6A176FE4D47F5082FA60C9767022 Certificate serial: 31932E06B74C4710FA1CB26A0898852B1C785A7D Authority key identifier: 90:A1:49:FB:75:9A:6A:17:6F:E4:D4:7F:50:82:FA:60:C9:76:70:22 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90A149FB759A6A176FE4D47F5082FA60C9767022.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0/3132302e32392e3232352e302f32342d3234203d3e203139393035.roa Signing time: Sun 03 May 2026 02:19:44 +0000 ROA not before: Sun 03 May 2026 02:14:44 +0000 ROA not after: Sun 02 May 2027 02:19:44 +0000 asID: 19905 IP address blocks: 120.29.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0/90A149FB759A6A176FE4D47F5082FA60C9767022.crl rsync://rpki-rsync.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0/90A149FB759A6A176FE4D47F5082FA60C9767022.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90A149FB759A6A176FE4D47F5082FA60C9767022.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 14:26:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:93:2e:06:b7:4c:47:10:fa:1c:b2:6a:08:98:85:2b:1c:78:5a:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90A149FB759A6A176FE4D47F5082FA60C9767022 Validity Not Before: May 3 02:14:44 2026 GMT Not After : May 2 02:19:44 2027 GMT Subject: CN=C5687489588D71230DB71B5C5AC6806865405B56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:02:44:67:67:59:ab:18:a6:18:9e:19:b2:83: c6:fb:1f:13:45:ff:e4:4d:96:07:08:86:3a:27:4a: 87:fe:25:9b:0a:d5:72:1b:93:97:61:27:f4:b5:42: 49:cd:e3:2d:0f:52:6b:5f:d1:5f:97:e6:61:cf:7a: ac:f4:44:11:ed:74:8d:c7:fc:67:16:b9:18:d4:90: 9d:8b:68:78:0d:ab:48:b5:ae:5e:90:8a:dc:25:55: 20:cb:e8:75:26:bc:ef:7a:b9:eb:02:3e:d2:47:6a: d6:4f:61:ea:fa:85:bb:f7:cb:4e:89:25:9b:52:31: 9a:6f:41:e7:63:b6:51:bb:b6:5a:3b:8d:5b:ff:70: d9:da:39:4c:98:26:26:82:bd:89:cd:b7:67:0e:be: 0b:b5:17:33:16:53:71:d1:fc:20:ae:c0:51:fe:24: 87:91:89:94:5c:3b:a8:7b:43:39:77:50:69:fd:7b: 39:9d:81:a2:36:3a:d8:88:7d:16:0b:cc:dd:fb:96: e8:e3:c0:52:07:a9:fd:bf:3d:f1:32:46:fe:24:3f: 43:be:a0:7e:57:e2:bf:59:01:df:cf:eb:87:45:60: 21:82:ff:f8:c1:65:e6:d4:30:30:5c:b0:9d:92:4e: 74:7e:44:65:ae:80:d5:bf:c9:e8:d9:5c:b9:92:32: 9f:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:68:74:89:58:8D:71:23:0D:B7:1B:5C:5A:C6:80:68:65:40:5B:56 X509v3 Authority Key Identifier: keyid:90:A1:49:FB:75:9A:6A:17:6F:E4:D4:7F:50:82:FA:60:C9:76:70:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0/90A149FB759A6A176FE4D47F5082FA60C9767022.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90A149FB759A6A176FE4D47F5082FA60C9767022.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0/3132302e32392e3232352e302f32342d3234203d3e203139393035.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 120.29.225.0/24 Signature Algorithm: sha256WithRSAEncryption 26:2c:2e:17:dd:5f:9b:31:fa:c4:12:66:f2:22:0c:c0:77:2a: 63:36:49:6e:f8:e3:0d:7a:f3:be:7b:f1:48:4c:36:c0:28:fc: 15:02:71:fd:0a:b1:e8:46:b1:93:2e:7c:fc:72:d7:e9:81:25: e0:61:09:5f:d6:55:64:1e:04:c9:0a:70:b6:39:5b:8e:39:f0: 83:db:af:79:52:87:b4:98:23:8f:ca:c7:18:c2:dd:ed:67:21: 1a:78:8d:9a:35:e9:14:0a:f5:b6:58:d2:74:66:51:9c:9c:c5: 85:e5:20:49:78:0a:15:08:db:12:47:9d:29:6c:57:6c:0a:6b: b3:da:f7:50:ab:73:a1:6b:a6:33:86:4c:33:5c:a4:c7:fb:f6: a3:6a:e4:e0:d3:14:2e:8e:ea:c2:f2:ed:44:a1:08:f1:ee:ad: 94:e7:c2:da:ac:68:0c:da:da:eb:64:5b:0a:ee:ed:8d:a1:79: 95:b0:17:59:1a:fb:bc:ee:94:3e:f7:d3:ca:98:70:cb:4f:1e: dc:66:e4:5d:d4:20:33:b4:f0:3e:85:46:d2:82:cc:e5:04:fe: 55:d6:99:e6:01:11:07:de:36:f7:c3:3f:75:14:dd:c9:5d:96: e5:20:0a:45:75:bc:d7:09:a2:1c:9e:18:4c:31:09:23:58:bc: 72:07:f2:38 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUMZMuBrdMRxD6HLJqCJiFKxx4Wn0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTBBMTQ5RkI3NTlBNkExNzZGRTRENDdGNTA4MkZBNjBD OTc2NzAyMjAeFw0yNjA1MDMwMjE0NDRaFw0yNzA1MDIwMjE5NDRaMDMxMTAvBgNV BAMTKEM1Njg3NDg5NTg4RDcxMjMwREI3MUI1QzVBQzY4MDY4NjU0MDVCNTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEAkRnZ1mrGKYYnhmyg8b7HxNF /+RNlgcIhjonSof+JZsK1XIbk5dhJ/S1QknN4y0PUmtf0V+X5mHPeqz0RBHtdI3H /GcWuRjUkJ2LaHgNq0i1rl6QitwlVSDL6HUmvO96uesCPtJHatZPYer6hbv3y06J JZtSMZpvQedjtlG7tlo7jVv/cNnaOUyYJiaCvYnNt2cOvgu1FzMWU3HR/CCuwFH+ JIeRiZRcO6h7Qzl3UGn9ezmdgaI2OtiIfRYLzN37lujjwFIHqf2/PfEyRv4kP0O+ oH5X4r9ZAd/P64dFYCGC//jBZebUMDBcsJ2STnR+RGWugNW/yejZXLmSMp+HAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUxWh0iViNcSMNtxtcWsaAaGVAW1YwHwYDVR0j BBgwFoAUkKFJ+3Waahdv5NR/UIL6YMl2cCIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjIxYzljYWQtYzNiOS00NWEwLWJlYjYtYmNlNDhlMmIyMjcyLzAvOTBBMTQ5RkI3 NTlBNkExNzZGRTRENDdGNTA4MkZBNjBDOTc2NzAyMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85MEExNDlGQjc1OUE2QTE3NkZFNEQ0N0Y1MDgyRkE2MEM5NzY3 MDIyLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzIyMWM5Y2FkLWMzYjktNDVhMC1i ZWI2LWJjZTQ4ZTJiMjI3Mi8wLzMxMzIzMDJlMzIzOTJlMzIzMjM1MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzOTM5MzAzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHgd4TANBgkqhkiG 9w0BAQsFAAOCAQEAJiwuF91fmzH6xBJm8iIMwHcqYzZJbvjjDXrzvnvxSEw2wCj8 FQJx/Qqx6Eaxky58/HLX6YEl4GEJX9ZVZB4EyQpwtjlbjjnwg9uveVKHtJgjj8rH GMLd7WchGniNmjXpFAr1tljSdGZRnJzFheUgSXgKFQjbEkedKWxXbAprs9r3UKtz oWumM4ZMM1ykx/v2o2rk4NMULo7qwvLtRKEI8e6tlOfC2qxoDNra62RbCu7tjaF5 lbAXWRr7vO6UPvfTyphwy08e3GbkXdQgM7TwPoVG0oLM5QT+VdaZ5gERB94298M/ dRTdyV2W5SAKRXW81wmiHJ4YTDEJI1i8cgfyOA== -----END CERTIFICATE-----Generated at Wed May 13 07:10:59 2026 by rpki-client