$ rpki-client -vvf rpki-rsync.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0/3132302e32392e3232392e302f32342d3234203d3e203338373634.roa File: 3132302e32392e3232392e302f32342d3234203d3e203338373634.roa (raw, json) Hash identifier: G5X9t8nXB1mRf0UKItbT4yn3eidWxB2oSMgKDMVRVbE= Subject key identifier: 1F:A7:28:ED:12:24:49:4F:7D:FF:6B:9C:57:8E:A3:3A:B6:73:66:64 Certificate issuer: /CN=90A149FB759A6A176FE4D47F5082FA60C9767022 Certificate serial: 08ADDEC6F6DD3A73416F7F70A60CC4B677483C0F Authority key identifier: 90:A1:49:FB:75:9A:6A:17:6F:E4:D4:7F:50:82:FA:60:C9:76:70:22 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90A149FB759A6A176FE4D47F5082FA60C9767022.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0/3132302e32392e3232392e302f32342d3234203d3e203338373634.roa Signing time: Sun 03 May 2026 02:19:44 +0000 ROA not before: Sun 03 May 2026 02:14:44 +0000 ROA not after: Sun 02 May 2027 02:19:44 +0000 asID: 38764 IP address blocks: 120.29.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0/90A149FB759A6A176FE4D47F5082FA60C9767022.crl rsync://rpki-rsync.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0/90A149FB759A6A176FE4D47F5082FA60C9767022.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90A149FB759A6A176FE4D47F5082FA60C9767022.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 14:26:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:ad:de:c6:f6:dd:3a:73:41:6f:7f:70:a6:0c:c4:b6:77:48:3c:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90A149FB759A6A176FE4D47F5082FA60C9767022 Validity Not Before: May 3 02:14:44 2026 GMT Not After : May 2 02:19:44 2027 GMT Subject: CN=1FA728ED1224494F7DFF6B9C578EA33AB6736664 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:4c:5d:5c:56:68:e0:72:37:60:31:5f:92:f6: 1b:02:6c:bc:19:ee:d0:e1:52:27:8d:ab:3e:1f:46: b4:df:73:fd:ff:f2:21:07:ad:c2:86:7a:0a:7a:0e: 9c:b5:bd:11:6b:4f:ec:19:e1:b0:01:b8:d0:dd:a4: cc:9b:08:65:30:3c:ee:26:21:56:5a:fa:e2:bb:2b: da:82:15:36:72:c0:61:33:67:47:76:9b:2c:d1:43: fc:b7:bc:95:39:e9:51:b6:81:ee:d0:27:85:ee:ed: ca:0b:b0:30:c2:07:27:aa:c4:26:e2:69:6e:60:76: 00:43:56:34:9e:17:c5:cd:55:d6:d0:3c:5c:9f:bf: fc:82:53:27:09:e6:d6:7e:04:07:ff:07:67:94:55: e0:0d:af:65:a9:a3:db:14:fa:86:e9:5b:b4:45:b4: 0d:e4:bd:67:0d:06:59:b3:ec:74:bc:1d:59:75:8b: 07:21:83:30:0b:95:c5:cd:e1:87:9c:65:16:ee:03: f0:5d:1c:e8:8e:69:83:9c:62:d2:65:c8:e4:24:d4: 84:49:95:b8:e2:fd:f8:7c:07:4c:e6:be:1d:ff:48: 6a:7c:4e:d4:a9:ec:d0:8f:f9:e9:31:5a:4a:08:a1: 60:42:19:ab:31:de:af:97:f4:17:0c:af:d2:c2:01: e4:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:A7:28:ED:12:24:49:4F:7D:FF:6B:9C:57:8E:A3:3A:B6:73:66:64 X509v3 Authority Key Identifier: keyid:90:A1:49:FB:75:9A:6A:17:6F:E4:D4:7F:50:82:FA:60:C9:76:70:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0/90A149FB759A6A176FE4D47F5082FA60C9767022.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90A149FB759A6A176FE4D47F5082FA60C9767022.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0/3132302e32392e3232392e302f32342d3234203d3e203338373634.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 120.29.229.0/24 Signature Algorithm: sha256WithRSAEncryption 92:d6:3e:8f:8b:36:b8:10:04:ad:e5:76:81:bc:96:07:f3:84: f0:79:f1:f1:65:71:c8:ae:91:2d:08:00:03:0a:cd:5f:5b:e2: 66:5e:63:1d:6f:55:5e:3b:39:eb:14:2a:52:ad:fa:10:8b:a8: e6:36:be:78:1e:db:76:dc:d1:01:cc:f3:98:07:4f:67:1e:4e: 26:93:99:66:9d:dd:93:9c:13:f8:65:65:93:c1:2a:f2:85:da: 1c:ba:ba:52:13:43:e5:e1:39:cb:70:18:27:41:a7:c8:0e:fd: f7:13:f9:c6:19:06:07:85:67:33:b7:be:d7:8e:fd:68:13:5e: 09:74:1c:2b:eb:3d:b7:b6:79:f3:20:24:ba:cd:5f:14:0a:8d: 11:5e:91:a7:8b:bf:68:db:2c:8a:03:d7:d0:71:1f:f9:a7:84: 63:00:aa:6f:7d:44:8a:e8:55:38:aa:74:1a:86:ed:ca:78:bc: 64:21:89:c3:67:01:30:a3:67:ee:1f:50:62:3f:e5:84:9f:c9: 4d:b7:87:b6:32:c9:dd:8e:f9:0f:a6:ab:d7:22:fe:cc:fa:93: bf:52:23:1c:6b:e7:81:18:46:60:2e:ab:0f:22:45:c9:24:d6: 18:d2:0c:6b:4d:34:2f:12:b4:72:aa:e7:53:21:a9:4e:49:84: 67:cf:af:5b -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUCK3exvbdOnNBb39wpgzEtndIPA8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTBBMTQ5RkI3NTlBNkExNzZGRTRENDdGNTA4MkZBNjBD OTc2NzAyMjAeFw0yNjA1MDMwMjE0NDRaFw0yNzA1MDIwMjE5NDRaMDMxMTAvBgNV BAMTKDFGQTcyOEVEMTIyNDQ5NEY3REZGNkI5QzU3OEVBMzNBQjY3MzY2NjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjTF1cVmjgcjdgMV+S9hsCbLwZ 7tDhUieNqz4fRrTfc/3/8iEHrcKGegp6Dpy1vRFrT+wZ4bABuNDdpMybCGUwPO4m IVZa+uK7K9qCFTZywGEzZ0d2myzRQ/y3vJU56VG2ge7QJ4Xu7coLsDDCByeqxCbi aW5gdgBDVjSeF8XNVdbQPFyfv/yCUycJ5tZ+BAf/B2eUVeANr2Wpo9sU+obpW7RF tA3kvWcNBlmz7HS8HVl1iwchgzALlcXN4YecZRbuA/BdHOiOaYOcYtJlyOQk1IRJ lbji/fh8B0zmvh3/SGp8TtSp7NCP+ekxWkoIoWBCGasx3q+X9BcMr9LCAeTBAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUH6co7RIkSU99/2ucV46jOrZzZmQwHwYDVR0j BBgwFoAUkKFJ+3Waahdv5NR/UIL6YMl2cCIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjIxYzljYWQtYzNiOS00NWEwLWJlYjYtYmNlNDhlMmIyMjcyLzAvOTBBMTQ5RkI3 NTlBNkExNzZGRTRENDdGNTA4MkZBNjBDOTc2NzAyMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85MEExNDlGQjc1OUE2QTE3NkZFNEQ0N0Y1MDgyRkE2MEM5NzY3 MDIyLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzIyMWM5Y2FkLWMzYjktNDVhMC1i ZWI2LWJjZTQ4ZTJiMjI3Mi8wLzMxMzIzMDJlMzIzOTJlMzIzMjM5MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzMzODM3MzYzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHgd5TANBgkqhkiG 9w0BAQsFAAOCAQEAktY+j4s2uBAEreV2gbyWB/OE8Hnx8WVxyK6RLQgAAwrNX1vi Zl5jHW9VXjs56xQqUq36EIuo5ja+eB7bdtzRAczzmAdPZx5OJpOZZp3dk5wT+GVl k8Eq8oXaHLq6UhND5eE5y3AYJ0GnyA799xP5xhkGB4VnM7e+1479aBNeCXQcK+s9 t7Z58yAkus1fFAqNEV6Rp4u/aNssigPX0HEf+aeEYwCqb31EiuhVOKp0Gobtyni8 ZCGJw2cBMKNn7h9QYj/lhJ/JTbeHtjLJ3Y75D6ar1yL+zPqTv1IjHGvngRhGYC6r DyJFySTWGNIMa000LxK0cqrnUyGpTkmEZ8+vWw== -----END CERTIFICATE-----Generated at Wed May 13 05:14:43 2026 by rpki-client