$ rpki-client -vvf rpki-rsync.idnic.net/repo/2e434981-36bb-4539-9b55-07b67208fd06/0/3132322e34392e3233302e302f32342d3234203d3e20313431383931.roa File: 3132322e34392e3233302e302f32342d3234203d3e20313431383931.roa (raw, json) Hash identifier: c/jXznRH2rlcrGPGCw1yu+o/ohZ/N0ggw0jp/eYH0Nc= Subject key identifier: EC:78:39:0E:EB:9D:FF:95:B4:3F:65:D4:88:38:31:29:77:AD:99:17 Certificate issuer: /CN=87BE318D9AB9E783D2D6A8E6473B14BE720F4F5C Certificate serial: 3A9D0ECAF6D549CB6B2C78516E4D830E204D2D48 Authority key identifier: 87:BE:31:8D:9A:B9:E7:83:D2:D6:A8:E6:47:3B:14:BE:72:0F:4F:5C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/87BE318D9AB9E783D2D6A8E6473B14BE720F4F5C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2e434981-36bb-4539-9b55-07b67208fd06/0/3132322e34392e3233302e302f32342d3234203d3e20313431383931.roa Signing time: Sun 03 May 2026 02:23:12 +0000 ROA not before: Sun 03 May 2026 02:18:12 +0000 ROA not after: Sun 02 May 2027 02:23:12 +0000 asID: 141891 IP address blocks: 122.49.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2e434981-36bb-4539-9b55-07b67208fd06/0/87BE318D9AB9E783D2D6A8E6473B14BE720F4F5C.crl rsync://rpki-rsync.idnic.net/repo/2e434981-36bb-4539-9b55-07b67208fd06/0/87BE318D9AB9E783D2D6A8E6473B14BE720F4F5C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/87BE318D9AB9E783D2D6A8E6473B14BE720F4F5C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 02:22:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:9d:0e:ca:f6:d5:49:cb:6b:2c:78:51:6e:4d:83:0e:20:4d:2d:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87BE318D9AB9E783D2D6A8E6473B14BE720F4F5C Validity Not Before: May 3 02:18:12 2026 GMT Not After : May 2 02:23:12 2027 GMT Subject: CN=EC78390EEB9DFF95B43F65D48838312977AD9917 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:8d:9e:1c:66:df:1f:a7:a1:72:02:cb:5b:e2: 7e:c8:e5:32:ff:6a:2a:cf:5e:6b:38:cd:b2:76:a5: c6:e1:bc:ee:ba:63:3e:00:c6:3e:40:2f:93:4d:31: 16:1e:38:d6:08:54:9d:a9:ac:a1:39:7e:5e:52:da: d9:85:88:2e:d7:36:21:19:c4:d0:4e:7b:db:47:bc: 32:7c:de:0a:7d:48:ac:2f:30:e4:02:1e:4a:a5:49: 41:43:9f:3f:6b:f8:c2:c3:58:8c:ca:42:6a:04:6f: ee:91:90:bf:ad:04:6a:20:14:10:ca:ad:60:2c:99: 41:b2:05:ed:6d:49:6c:e9:d0:b2:41:05:a4:98:45: f5:89:26:77:7c:f1:6d:77:23:03:fa:52:0e:41:af: 5f:87:4a:43:1f:b6:76:88:6c:8d:ba:56:01:45:6d: 4e:dd:a6:00:1a:fb:72:8b:b9:eb:a4:e5:61:8a:0b: 26:d5:e1:5b:e5:be:c5:1b:b3:d0:8d:40:a0:6d:7a: 99:38:48:4d:37:22:b0:e6:00:12:8c:51:f6:89:11: e4:c6:ba:f6:98:a4:c4:bd:90:b5:7d:41:ea:38:0d: 7b:96:04:59:c8:b9:d4:60:f3:d6:89:b7:37:54:8e: a2:f9:c0:45:ac:6b:df:48:b1:a4:87:a3:09:2d:c0: d5:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:78:39:0E:EB:9D:FF:95:B4:3F:65:D4:88:38:31:29:77:AD:99:17 X509v3 Authority Key Identifier: keyid:87:BE:31:8D:9A:B9:E7:83:D2:D6:A8:E6:47:3B:14:BE:72:0F:4F:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2e434981-36bb-4539-9b55-07b67208fd06/0/87BE318D9AB9E783D2D6A8E6473B14BE720F4F5C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/87BE318D9AB9E783D2D6A8E6473B14BE720F4F5C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2e434981-36bb-4539-9b55-07b67208fd06/0/3132322e34392e3233302e302f32342d3234203d3e20313431383931.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 122.49.230.0/24 Signature Algorithm: sha256WithRSAEncryption 0c:ac:6e:13:5c:fb:ff:1c:0e:ce:60:24:ec:b3:99:8c:c2:bd: a8:87:da:0a:26:28:31:1d:c2:f0:b7:5e:4d:6c:70:ca:45:e2: 92:a8:8f:57:78:dd:de:07:c5:55:be:76:85:2b:ee:0e:5b:24: 4c:0c:10:29:5a:b7:22:b2:cc:68:1f:af:a2:fc:f8:32:bd:ae: 2d:03:e1:50:c4:7d:c5:6c:6e:6d:93:ab:35:61:16:9f:cf:a4: 2a:78:13:a1:df:99:71:22:c2:10:b0:c2:2e:cc:30:d7:b9:5a: 5d:a8:14:9c:06:f3:12:94:ac:de:51:31:1b:f3:5e:f5:bb:0a: 00:f2:a7:31:eb:2d:60:b8:3e:45:6e:29:57:fa:7b:a6:60:01: 69:9b:52:ad:bc:33:a8:3e:1b:dc:d9:6d:a6:80:02:fc:de:e4: 44:5c:e9:e7:e9:c0:10:70:51:c6:7d:81:5d:2b:1d:26:23:4c: 96:94:2d:d2:ed:13:91:03:45:c4:a8:c9:60:88:2d:1d:61:af: 5d:79:ac:f1:8c:a2:05:14:43:ab:01:e2:0b:0a:75:b9:42:d5: 6a:be:47:e1:86:06:32:d8:df:e2:b9:9e:c4:4e:16:34:1c:d9: 83:1a:cc:7d:2a:91:59:da:24:0a:ea:17:05:38:75:40:20:a6: 50:21:37:4e -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUOp0OyvbVSctrLHhRbk2DDiBNLUgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODdCRTMxOEQ5QUI5RTc4M0QyRDZBOEU2NDczQjE0QkU3 MjBGNEY1QzAeFw0yNjA1MDMwMjE4MTJaFw0yNzA1MDIwMjIzMTJaMDMxMTAvBgNV BAMTKEVDNzgzOTBFRUI5REZGOTVCNDNGNjVENDg4MzgzMTI5NzdBRDk5MTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/jZ4cZt8fp6FyAstb4n7I5TL/ airPXms4zbJ2pcbhvO66Yz4Axj5AL5NNMRYeONYIVJ2prKE5fl5S2tmFiC7XNiEZ xNBOe9tHvDJ83gp9SKwvMOQCHkqlSUFDnz9r+MLDWIzKQmoEb+6RkL+tBGogFBDK rWAsmUGyBe1tSWzp0LJBBaSYRfWJJnd88W13IwP6Ug5Br1+HSkMftnaIbI26VgFF bU7dpgAa+3KLueuk5WGKCybV4VvlvsUbs9CNQKBtepk4SE03IrDmABKMUfaJEeTG uvaYpMS9kLV9Qeo4DXuWBFnIudRg89aJtzdUjqL5wEWsa99IsaSHowktwNUBAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU7Hg5Duud/5W0P2XUiDgxKXetmRcwHwYDVR0j BBgwFoAUh74xjZq554PS1qjmRzsUvnIPT1wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmU0MzQ5ODEtMzZiYi00NTM5LTliNTUtMDdiNjcyMDhmZDA2LzAvODdCRTMxOEQ5 QUI5RTc4M0QyRDZBOEU2NDczQjE0QkU3MjBGNEY1Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84N0JFMzE4RDlBQjlFNzgzRDJENkE4RTY0NzNCMTRCRTcyMEY0 RjVDLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzJlNDM0OTgxLTM2YmItNDUzOS05 YjU1LTA3YjY3MjA4ZmQwNi8wLzMxMzIzMjJlMzQzOTJlMzIzMzMwMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNDMxMzgzOTMxLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAejHmMA0GCSqG SIb3DQEBCwUAA4IBAQAMrG4TXPv/HA7OYCTss5mMwr2oh9oKJigxHcLwt15NbHDK ReKSqI9XeN3eB8VVvnaFK+4OWyRMDBApWrcissxoH6+i/Pgyva4tA+FQxH3FbG5t k6s1YRafz6QqeBOh35lxIsIQsMIuzDDXuVpdqBScBvMSlKzeUTEb8171uwoA8qcx 6y1guD5FbilX+numYAFpm1KtvDOoPhvc2W2mgAL83uREXOnn6cAQcFHGfYFdKx0m I0yWlC3S7RORA0XEqMlgiC0dYa9deazxjKIFFEOrAeILCnW5QtVqvkfhhgYy2N/i uZ7EThY0HNmDGsx9KpFZ2iQK6hcFOHVAIKZQITdO -----END CERTIFICATE-----Generated at Wed May 13 11:59:37 2026 by rpki-client