$ rpki-client -vvf rpki-rsync.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0/3132302e32392e3232392e302f32342d3234203d3e203139393035.roa File: 3132302e32392e3232392e302f32342d3234203d3e203139393035.roa (raw, json) Hash identifier: fEHjHjujgkqVA1apLtwPlgVoJB63v2RTVUpYlDyn+3c= Subject key identifier: AF:FE:4F:D9:C2:2F:E6:DD:B7:4F:28:12:27:AE:A4:F4:2F:08:EE:EF Certificate issuer: /CN=90A149FB759A6A176FE4D47F5082FA60C9767022 Certificate serial: 602542EA28D149F38DB0388CB91EB77CEE6326CF Authority key identifier: 90:A1:49:FB:75:9A:6A:17:6F:E4:D4:7F:50:82:FA:60:C9:76:70:22 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90A149FB759A6A176FE4D47F5082FA60C9767022.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0/3132302e32392e3232392e302f32342d3234203d3e203139393035.roa Signing time: Sun 03 May 2026 02:19:42 +0000 ROA not before: Sun 03 May 2026 02:14:42 +0000 ROA not after: Sun 02 May 2027 02:19:42 +0000 asID: 19905 IP address blocks: 120.29.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0/90A149FB759A6A176FE4D47F5082FA60C9767022.crl rsync://rpki-rsync.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0/90A149FB759A6A176FE4D47F5082FA60C9767022.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90A149FB759A6A176FE4D47F5082FA60C9767022.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 14:26:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:25:42:ea:28:d1:49:f3:8d:b0:38:8c:b9:1e:b7:7c:ee:63:26:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90A149FB759A6A176FE4D47F5082FA60C9767022 Validity Not Before: May 3 02:14:42 2026 GMT Not After : May 2 02:19:42 2027 GMT Subject: CN=AFFE4FD9C22FE6DDB74F281227AEA4F42F08EEEF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:3e:0d:74:ac:d1:e3:d5:6d:ff:11:71:96:e0: ca:9d:b1:d3:6a:e1:53:14:8b:7b:6d:8b:ca:4d:f7: 91:5e:e2:3d:ca:8a:48:5c:70:88:8e:4f:cd:b7:9b: b9:b8:21:20:a3:38:b4:ce:c9:4a:e9:ed:3c:a2:47: 3b:1b:8c:33:e9:b0:94:23:9c:1b:1f:c5:d2:28:ac: bb:98:53:58:49:96:c0:06:1c:d5:b3:8d:eb:9e:23: f4:32:99:b5:1d:dc:70:e4:62:a6:51:f3:74:f5:1e: c0:b3:71:da:ec:b8:e1:ac:cf:6a:a5:fa:c5:3a:dd: 5d:9f:64:39:d2:2b:5c:ed:54:59:08:b1:a8:76:32: dd:e2:04:9e:b0:56:95:a4:4e:d2:4e:26:cd:5d:b9: 90:78:2d:7d:f1:7d:47:cb:8b:0c:fe:70:46:2b:6e: 1b:48:0c:86:bc:8d:0a:c3:85:16:df:08:f1:9c:ed: 51:7a:09:6b:93:67:87:f8:24:0e:7f:ff:81:fe:f8: 01:77:2b:c7:dc:b2:22:67:a6:6a:ab:d8:a8:ec:e5: 7f:4e:45:64:02:54:6a:44:86:19:78:6e:06:e9:40: aa:4c:68:c9:8d:83:04:82:3c:a6:c1:a8:c1:a5:ea: cd:77:16:6a:e6:86:69:20:a7:7d:3c:f9:20:7f:cb: 79:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:FE:4F:D9:C2:2F:E6:DD:B7:4F:28:12:27:AE:A4:F4:2F:08:EE:EF X509v3 Authority Key Identifier: keyid:90:A1:49:FB:75:9A:6A:17:6F:E4:D4:7F:50:82:FA:60:C9:76:70:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0/90A149FB759A6A176FE4D47F5082FA60C9767022.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90A149FB759A6A176FE4D47F5082FA60C9767022.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0/3132302e32392e3232392e302f32342d3234203d3e203139393035.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 120.29.229.0/24 Signature Algorithm: sha256WithRSAEncryption 74:eb:99:2c:f9:0d:7d:fd:75:8e:8c:b0:c1:95:fc:84:c9:e0: f2:29:6d:a4:7b:58:1b:79:ea:68:57:10:36:73:32:a2:fc:06: 48:b0:e2:41:a5:b3:8d:e6:42:e8:65:a8:60:ad:d9:20:82:fc: 6f:f7:0b:3b:0a:00:01:18:88:77:5c:82:6a:e8:be:28:74:da: b6:5a:49:e1:53:ff:c3:89:ec:a6:05:3d:db:47:e3:8b:de:5f: 7a:6c:b7:ff:28:06:05:02:ab:f5:16:c4:c7:19:9e:2b:b0:c8: 90:53:25:d4:4b:d6:f5:24:bd:15:8e:47:04:86:0f:10:da:58: 26:6f:f4:f4:cc:f9:01:5d:a0:08:7c:bc:11:43:30:65:f8:2f: 12:40:7c:48:ef:b1:5b:72:c8:89:bf:1e:43:67:6c:da:54:fc: 8d:83:e7:7b:c5:c3:05:11:a4:a3:17:22:2c:cb:30:77:d2:0e: 0a:fc:e2:19:83:2c:73:46:b3:0a:4c:d9:3b:0c:0f:85:fd:19: f8:db:0f:ee:86:54:ad:a1:16:e4:bd:10:a5:6e:22:03:e4:92: 1a:d0:00:b3:ce:fc:ba:c7:a4:78:16:6b:8f:4c:70:f5:10:c9: da:65:54:89:35:b0:03:df:cc:90:1f:aa:5a:dc:d0:bd:f2:4f: f8:2d:9a:c2 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUYCVC6ijRSfONsDiMuR63fO5jJs8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTBBMTQ5RkI3NTlBNkExNzZGRTRENDdGNTA4MkZBNjBD OTc2NzAyMjAeFw0yNjA1MDMwMjE0NDJaFw0yNzA1MDIwMjE5NDJaMDMxMTAvBgNV BAMTKEFGRkU0RkQ5QzIyRkU2RERCNzRGMjgxMjI3QUVBNEY0MkYwOEVFRUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsPg10rNHj1W3/EXGW4MqdsdNq 4VMUi3tti8pN95Fe4j3KikhccIiOT823m7m4ISCjOLTOyUrp7TyiRzsbjDPpsJQj nBsfxdIorLuYU1hJlsAGHNWzjeueI/QymbUd3HDkYqZR83T1HsCzcdrsuOGsz2ql +sU63V2fZDnSK1ztVFkIsah2Mt3iBJ6wVpWkTtJOJs1duZB4LX3xfUfLiwz+cEYr bhtIDIa8jQrDhRbfCPGc7VF6CWuTZ4f4JA5//4H++AF3K8fcsiJnpmqr2Kjs5X9O RWQCVGpEhhl4bgbpQKpMaMmNgwSCPKbBqMGl6s13Fmrmhmkgp308+SB/y3l9AgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUr/5P2cIv5t23TygSJ66k9C8I7u8wHwYDVR0j BBgwFoAUkKFJ+3Waahdv5NR/UIL6YMl2cCIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjIxYzljYWQtYzNiOS00NWEwLWJlYjYtYmNlNDhlMmIyMjcyLzAvOTBBMTQ5RkI3 NTlBNkExNzZGRTRENDdGNTA4MkZBNjBDOTc2NzAyMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85MEExNDlGQjc1OUE2QTE3NkZFNEQ0N0Y1MDgyRkE2MEM5NzY3 MDIyLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzIyMWM5Y2FkLWMzYjktNDVhMC1i ZWI2LWJjZTQ4ZTJiMjI3Mi8wLzMxMzIzMDJlMzIzOTJlMzIzMjM5MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzOTM5MzAzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHgd5TANBgkqhkiG 9w0BAQsFAAOCAQEAdOuZLPkNff11joywwZX8hMng8iltpHtYG3nqaFcQNnMyovwG SLDiQaWzjeZC6GWoYK3ZIIL8b/cLOwoAARiId1yCaui+KHTatlpJ4VP/w4nspgU9 20fji95femy3/ygGBQKr9RbExxmeK7DIkFMl1EvW9SS9FY5HBIYPENpYJm/09Mz5 AV2gCHy8EUMwZfgvEkB8SO+xW3LIib8eQ2ds2lT8jYPne8XDBRGkoxciLMswd9IO CvziGYMsc0azCkzZOwwPhf0Z+NsP7oZUraEW5L0QpW4iA+SSGtAAs878usekeBZr j0xw9RDJ2mVUiTWwA9/MkB+qWtzQvfJP+C2awg== -----END CERTIFICATE-----Generated at Wed May 13 06:57:47 2026 by rpki-client