$ rpki-client -vvf rpki-rsync.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0/3132302e32392e3233312e302f32342d3234203d3e203338373634.roa File: 3132302e32392e3233312e302f32342d3234203d3e203338373634.roa (raw, json) Hash identifier: hcuXQrxnDSCR9sGH8AKpCLGAnxBa8Jctci8rHhKNuLM= Subject key identifier: 28:60:C7:B5:A4:50:7D:1A:14:84:1D:00:60:DE:59:4B:24:7A:60:AA Certificate issuer: /CN=90A149FB759A6A176FE4D47F5082FA60C9767022 Certificate serial: 271A2D2FF050E221E335B8A46B8EDFB655D26652 Authority key identifier: 90:A1:49:FB:75:9A:6A:17:6F:E4:D4:7F:50:82:FA:60:C9:76:70:22 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90A149FB759A6A176FE4D47F5082FA60C9767022.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0/3132302e32392e3233312e302f32342d3234203d3e203338373634.roa Signing time: Sun 03 May 2026 02:19:43 +0000 ROA not before: Sun 03 May 2026 02:14:43 +0000 ROA not after: Sun 02 May 2027 02:19:43 +0000 asID: 38764 IP address blocks: 120.29.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0/90A149FB759A6A176FE4D47F5082FA60C9767022.crl rsync://rpki-rsync.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0/90A149FB759A6A176FE4D47F5082FA60C9767022.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90A149FB759A6A176FE4D47F5082FA60C9767022.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 14:26:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:1a:2d:2f:f0:50:e2:21:e3:35:b8:a4:6b:8e:df:b6:55:d2:66:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90A149FB759A6A176FE4D47F5082FA60C9767022 Validity Not Before: May 3 02:14:43 2026 GMT Not After : May 2 02:19:43 2027 GMT Subject: CN=2860C7B5A4507D1A14841D0060DE594B247A60AA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:66:27:b4:aa:0a:85:94:4b:48:ed:77:ca:a0: c2:1b:00:82:c3:fc:2b:ef:b4:bf:18:41:44:38:3f: fa:9e:69:c7:49:d1:20:e6:23:77:f6:9c:b6:02:c2: e3:1a:6c:eb:c9:ab:b1:28:d2:bb:5f:68:9f:d4:05: dc:15:6a:4b:75:27:02:a1:ca:f0:1e:68:0f:38:7f: 76:60:ec:37:97:9e:20:9f:10:75:f8:52:09:c1:dc: 0b:92:77:bf:b2:ae:a7:89:ec:ed:a7:a7:18:2e:f1: c7:d8:c5:7a:07:dc:0a:f9:b5:1d:33:ce:72:74:86: e6:d5:70:90:23:20:44:1e:2f:34:c8:89:a4:c9:33: 34:68:b6:89:20:81:3d:2e:ed:49:db:b9:80:6b:10: 25:8b:c6:3d:ab:4e:b6:1c:fb:bf:f8:ad:94:79:ac: a9:d2:b4:61:a1:d4:11:66:32:4c:ad:78:72:12:56: f1:d0:7d:a0:45:f8:f4:b9:85:45:af:7c:17:dd:83: 68:b4:43:6e:3b:74:a7:cd:e6:4a:64:bf:1e:c7:65: c4:99:90:1c:27:e6:2b:48:bd:88:d4:ca:98:04:ca: f2:df:71:8b:c9:9f:f6:07:6d:5f:b5:29:8d:ae:61: 3a:a3:38:30:ad:c5:8e:4f:c7:bd:21:96:4b:41:a8: 34:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:60:C7:B5:A4:50:7D:1A:14:84:1D:00:60:DE:59:4B:24:7A:60:AA X509v3 Authority Key Identifier: keyid:90:A1:49:FB:75:9A:6A:17:6F:E4:D4:7F:50:82:FA:60:C9:76:70:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0/90A149FB759A6A176FE4D47F5082FA60C9767022.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90A149FB759A6A176FE4D47F5082FA60C9767022.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0/3132302e32392e3233312e302f32342d3234203d3e203338373634.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 120.29.231.0/24 Signature Algorithm: sha256WithRSAEncryption 1a:bb:6a:0c:83:ea:6d:8e:5f:61:99:be:fb:47:b8:40:52:2b: 58:c9:68:b5:f8:5c:bb:8d:2b:d4:79:b4:97:a3:7f:83:e2:67: 9e:b3:e9:1d:70:99:3d:7a:6f:e8:73:23:57:e9:53:aa:3c:0b: f2:85:46:3a:82:68:ec:ee:7b:80:cc:34:f9:6f:5e:f0:78:4d: 3c:1c:7c:48:4f:c2:f1:f5:62:e0:c3:92:79:ab:b8:b5:4f:a9: a6:c0:3d:f9:54:31:37:ff:d8:cb:ae:8d:cd:25:85:c6:09:14: 54:b2:66:0d:85:e3:ef:d1:a7:10:72:35:57:be:35:30:b8:c6: bf:d5:a8:3c:5e:25:5a:d5:cc:b0:1a:fb:f7:6d:c3:d3:87:a4: 40:a0:7a:2d:00:f2:06:ee:93:bf:9b:a5:62:ab:48:62:ca:52: 81:f7:60:2b:6b:cc:02:b8:99:e6:c6:7a:8c:58:c2:75:7c:d4: d3:f8:57:33:08:95:85:1b:f7:54:92:7f:5f:61:99:60:11:69: a7:bc:a9:f4:1d:9b:76:af:e8:01:00:80:29:06:65:a1:d4:61: f8:f8:7c:e1:2b:d4:bd:5a:ef:96:0f:6d:2d:7f:ff:6e:a2:90: 21:bc:14:96:ca:74:05:1b:ac:0a:88:8b:32:75:1f:d6:fb:a1: 38:1a:63:11 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUJxotL/BQ4iHjNbika47ftlXSZlIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTBBMTQ5RkI3NTlBNkExNzZGRTRENDdGNTA4MkZBNjBD OTc2NzAyMjAeFw0yNjA1MDMwMjE0NDNaFw0yNzA1MDIwMjE5NDNaMDMxMTAvBgNV BAMTKDI4NjBDN0I1QTQ1MDdEMUExNDg0MUQwMDYwREU1OTRCMjQ3QTYwQUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFZie0qgqFlEtI7XfKoMIbAILD /CvvtL8YQUQ4P/qeacdJ0SDmI3f2nLYCwuMabOvJq7Eo0rtfaJ/UBdwVakt1JwKh yvAeaA84f3Zg7DeXniCfEHX4UgnB3AuSd7+yrqeJ7O2npxgu8cfYxXoH3Ar5tR0z znJ0hubVcJAjIEQeLzTIiaTJMzRotokggT0u7UnbuYBrECWLxj2rTrYc+7/4rZR5 rKnStGGh1BFmMkyteHISVvHQfaBF+PS5hUWvfBfdg2i0Q247dKfN5kpkvx7HZcSZ kBwn5itIvYjUypgEyvLfcYvJn/YHbV+1KY2uYTqjODCtxY5Px70hlktBqDTxAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUKGDHtaRQfRoUhB0AYN5ZSyR6YKowHwYDVR0j BBgwFoAUkKFJ+3Waahdv5NR/UIL6YMl2cCIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjIxYzljYWQtYzNiOS00NWEwLWJlYjYtYmNlNDhlMmIyMjcyLzAvOTBBMTQ5RkI3 NTlBNkExNzZGRTRENDdGNTA4MkZBNjBDOTc2NzAyMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85MEExNDlGQjc1OUE2QTE3NkZFNEQ0N0Y1MDgyRkE2MEM5NzY3 MDIyLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzIyMWM5Y2FkLWMzYjktNDVhMC1i ZWI2LWJjZTQ4ZTJiMjI3Mi8wLzMxMzIzMDJlMzIzOTJlMzIzMzMxMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzMzODM3MzYzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHgd5zANBgkqhkiG 9w0BAQsFAAOCAQEAGrtqDIPqbY5fYZm++0e4QFIrWMlotfhcu40r1Hm0l6N/g+Jn nrPpHXCZPXpv6HMjV+lTqjwL8oVGOoJo7O57gMw0+W9e8HhNPBx8SE/C8fVi4MOS eau4tU+ppsA9+VQxN//Yy66NzSWFxgkUVLJmDYXj79GnEHI1V741MLjGv9WoPF4l WtXMsBr7923D04ekQKB6LQDyBu6Tv5ulYqtIYspSgfdgK2vMAriZ5sZ6jFjCdXzU 0/hXMwiVhRv3VJJ/X2GZYBFpp7yp9B2bdq/oAQCAKQZlodRh+Ph84SvUvVrvlg9t LX//bqKQIbwUlsp0BRusCoiLMnUf1vuhOBpjEQ== -----END CERTIFICATE-----Generated at Wed May 13 04:09:58 2026 by rpki-client