$ rpki-client -vvf rpki-rsync.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0/3132302e32392e3232382e302f32342d3234203d3e203139393035.roa File: 3132302e32392e3232382e302f32342d3234203d3e203139393035.roa (raw, json) Hash identifier: X5HsBE1ewqrCbWqrNdoiRxUV2ywDPMva+dNQ4cS5oB4= Subject key identifier: 5C:1A:81:23:D1:89:E3:6F:33:0C:DF:22:7A:6E:26:6E:16:CE:74:9A Certificate issuer: /CN=90A149FB759A6A176FE4D47F5082FA60C9767022 Certificate serial: 5DC2406F9CE0EFC5F74C585843FA893D8EEAA382 Authority key identifier: 90:A1:49:FB:75:9A:6A:17:6F:E4:D4:7F:50:82:FA:60:C9:76:70:22 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90A149FB759A6A176FE4D47F5082FA60C9767022.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0/3132302e32392e3232382e302f32342d3234203d3e203139393035.roa Signing time: Sun 03 May 2026 02:19:40 +0000 ROA not before: Sun 03 May 2026 02:14:40 +0000 ROA not after: Sun 02 May 2027 02:19:40 +0000 asID: 19905 IP address blocks: 120.29.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0/90A149FB759A6A176FE4D47F5082FA60C9767022.crl rsync://rpki-rsync.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0/90A149FB759A6A176FE4D47F5082FA60C9767022.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90A149FB759A6A176FE4D47F5082FA60C9767022.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 14:26:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:c2:40:6f:9c:e0:ef:c5:f7:4c:58:58:43:fa:89:3d:8e:ea:a3:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90A149FB759A6A176FE4D47F5082FA60C9767022 Validity Not Before: May 3 02:14:40 2026 GMT Not After : May 2 02:19:40 2027 GMT Subject: CN=5C1A8123D189E36F330CDF227A6E266E16CE749A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:98:fb:7e:a1:3f:e6:c6:40:4e:a4:b9:47:61: bd:e8:ca:f4:59:e6:93:01:ad:c9:a3:6d:65:b0:0c: c0:40:c4:77:9c:24:45:91:6f:58:c6:9e:f5:db:85: 85:5d:e7:8f:29:d7:ae:cf:17:c8:fd:c4:e6:95:a7: 76:91:8e:54:fd:a7:6a:76:f1:d4:0d:74:09:a2:01: cf:5d:bc:27:02:32:20:3a:41:ba:14:bb:7a:53:48: 9c:f1:c7:74:39:b6:d9:09:08:b8:db:7a:90:30:76: bc:aa:9a:5c:10:b0:37:71:50:71:12:8f:41:0d:a9: 4a:ff:74:00:de:0e:59:7d:5d:f9:e4:ff:66:25:76: 3a:0a:95:0e:31:4d:46:85:80:0f:f9:8d:e6:a5:8c: 64:6d:13:72:c5:d3:7c:df:24:f7:96:29:29:4c:81: 7d:d3:d2:2d:df:79:96:50:2f:27:e5:6b:c1:c0:aa: c5:a2:cd:02:de:04:66:59:70:35:07:d7:8a:82:38: ea:3f:c3:3e:9a:5e:df:34:1b:84:ba:ba:55:2f:9c: 8b:15:44:e0:7e:bc:b8:19:dc:4a:8b:a6:ba:42:fd: 1f:ed:3b:ce:f5:2b:d6:0d:e9:77:c6:e0:0d:86:aa: 7d:6a:ae:0a:7c:1e:4e:e8:dc:ef:d2:a4:0c:e0:3e: 16:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:1A:81:23:D1:89:E3:6F:33:0C:DF:22:7A:6E:26:6E:16:CE:74:9A X509v3 Authority Key Identifier: keyid:90:A1:49:FB:75:9A:6A:17:6F:E4:D4:7F:50:82:FA:60:C9:76:70:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0/90A149FB759A6A176FE4D47F5082FA60C9767022.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90A149FB759A6A176FE4D47F5082FA60C9767022.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0/3132302e32392e3232382e302f32342d3234203d3e203139393035.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 120.29.228.0/24 Signature Algorithm: sha256WithRSAEncryption 2b:41:75:68:b5:69:4e:b3:18:0e:1f:41:07:64:c3:8d:70:7f: d1:00:a4:84:40:62:cb:9c:d6:cf:8b:ed:e9:b9:08:b9:4a:82: 6c:36:60:71:99:3f:7f:5c:94:1c:63:af:c4:8a:67:95:6c:fb: a2:9f:61:3d:84:6d:d2:7a:d9:4e:bb:28:fe:fa:e3:ef:23:a7: 49:46:40:2c:f3:39:4b:f4:64:9c:02:35:47:50:b0:57:68:ca: 4f:77:3c:4d:64:34:2e:65:ce:9e:fd:af:9a:98:37:6b:d0:98: db:7a:70:b4:f5:2f:3c:04:aa:fe:a9:f9:99:6b:15:54:ae:83: 5b:9d:a0:b1:dd:2a:91:67:e6:1c:a1:2f:a4:08:37:e1:af:79: 4d:da:8d:c0:e9:ef:eb:84:85:59:3e:48:cb:84:30:24:85:00: 9f:22:85:b1:18:54:a8:25:7b:99:c3:7e:c2:af:03:b6:f5:aa: 8d:5f:93:8f:84:70:bf:c4:3c:f6:b2:32:22:bc:e4:ab:63:2e: 36:18:09:fe:46:60:8c:20:e9:31:5a:4b:a7:f3:0d:39:bb:10: 60:80:15:95:2b:1b:0f:00:84:c0:c1:ff:6b:69:eb:3c:c2:89: 46:df:14:cb:84:24:9c:10:5a:75:ce:59:ab:b8:cf:86:60:a7: 57:f4:86:ec -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUXcJAb5zg78X3TFhYQ/qJPY7qo4IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTBBMTQ5RkI3NTlBNkExNzZGRTRENDdGNTA4MkZBNjBD OTc2NzAyMjAeFw0yNjA1MDMwMjE0NDBaFw0yNzA1MDIwMjE5NDBaMDMxMTAvBgNV BAMTKDVDMUE4MTIzRDE4OUUzNkYzMzBDREYyMjdBNkUyNjZFMTZDRTc0OUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxmPt+oT/mxkBOpLlHYb3oyvRZ 5pMBrcmjbWWwDMBAxHecJEWRb1jGnvXbhYVd548p167PF8j9xOaVp3aRjlT9p2p2 8dQNdAmiAc9dvCcCMiA6QboUu3pTSJzxx3Q5ttkJCLjbepAwdryqmlwQsDdxUHES j0ENqUr/dADeDll9Xfnk/2YldjoKlQ4xTUaFgA/5jealjGRtE3LF03zfJPeWKSlM gX3T0i3feZZQLyfla8HAqsWizQLeBGZZcDUH14qCOOo/wz6aXt80G4S6ulUvnIsV ROB+vLgZ3EqLprpC/R/tO871K9YN6XfG4A2Gqn1qrgp8Hk7o3O/SpAzgPhazAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUXBqBI9GJ428zDN8iem4mbhbOdJowHwYDVR0j BBgwFoAUkKFJ+3Waahdv5NR/UIL6YMl2cCIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjIxYzljYWQtYzNiOS00NWEwLWJlYjYtYmNlNDhlMmIyMjcyLzAvOTBBMTQ5RkI3 NTlBNkExNzZGRTRENDdGNTA4MkZBNjBDOTc2NzAyMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85MEExNDlGQjc1OUE2QTE3NkZFNEQ0N0Y1MDgyRkE2MEM5NzY3 MDIyLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzIyMWM5Y2FkLWMzYjktNDVhMC1i ZWI2LWJjZTQ4ZTJiMjI3Mi8wLzMxMzIzMDJlMzIzOTJlMzIzMjM4MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzOTM5MzAzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHgd5DANBgkqhkiG 9w0BAQsFAAOCAQEAK0F1aLVpTrMYDh9BB2TDjXB/0QCkhEBiy5zWz4vt6bkIuUqC bDZgcZk/f1yUHGOvxIpnlWz7op9hPYRt0nrZTrso/vrj7yOnSUZALPM5S/RknAI1 R1CwV2jKT3c8TWQ0LmXOnv2vmpg3a9CY23pwtPUvPASq/qn5mWsVVK6DW52gsd0q kWfmHKEvpAg34a95TdqNwOnv64SFWT5Iy4QwJIUAnyKFsRhUqCV7mcN+wq8DtvWq jV+Tj4Rwv8Q89rIyIrzkq2MuNhgJ/kZgjCDpMVpLp/MNObsQYIAVlSsbDwCEwMH/ a2nrPMKJRt8Uy4QknBBadc5Zq7jPhmCnV/SG7A== -----END CERTIFICATE-----Generated at Wed May 13 07:15:12 2026 by rpki-client