$ rpki-client -vvf rpki-rsync.idnic.net/repo/31224247-347f-4a57-a79a-cb2c21c9170e/0/3231302e38372e3132332e302f32342d3234203d3e20313532303634.roa File: 3231302e38372e3132332e302f32342d3234203d3e20313532303634.roa (raw, json) Hash identifier: ap3QpSwMafndkQYGTllRc8VLk6+JUlWDpLrHeilcohw= Subject key identifier: 8B:02:84:61:E8:54:3A:C5:D0:C7:60:BE:E0:A1:E4:FB:39:CC:17:B4 Certificate issuer: /CN=EA9248CB81F3EE7B4C9344FBE431252A1739FD6B Certificate serial: 246A9DC152F3B1F10CC06A4F9A07DC3502968606 Authority key identifier: EA:92:48:CB:81:F3:EE:7B:4C:93:44:FB:E4:31:25:2A:17:39:FD:6B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EA9248CB81F3EE7B4C9344FBE431252A1739FD6B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/31224247-347f-4a57-a79a-cb2c21c9170e/0/3231302e38372e3132332e302f32342d3234203d3e20313532303634.roa Signing time: Sun 03 May 2026 02:23:49 +0000 ROA not before: Sun 03 May 2026 02:18:49 +0000 ROA not after: Sun 02 May 2027 02:23:49 +0000 asID: 152064 IP address blocks: 210.87.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/31224247-347f-4a57-a79a-cb2c21c9170e/0/EA9248CB81F3EE7B4C9344FBE431252A1739FD6B.crl rsync://rpki-rsync.idnic.net/repo/31224247-347f-4a57-a79a-cb2c21c9170e/0/EA9248CB81F3EE7B4C9344FBE431252A1739FD6B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EA9248CB81F3EE7B4C9344FBE431252A1739FD6B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 02:15:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:6a:9d:c1:52:f3:b1:f1:0c:c0:6a:4f:9a:07:dc:35:02:96:86:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EA9248CB81F3EE7B4C9344FBE431252A1739FD6B Validity Not Before: May 3 02:18:49 2026 GMT Not After : May 2 02:23:49 2027 GMT Subject: CN=8B028461E8543AC5D0C760BEE0A1E4FB39CC17B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:62:de:e4:bd:03:50:24:03:1a:a3:b3:18:c6: 7c:d2:2b:a1:82:e1:09:25:ee:3c:ef:66:af:c5:b0: dd:a6:a8:d9:2c:87:39:92:1f:b5:ae:20:6b:87:77: ac:94:ef:06:bd:57:d9:da:51:8e:5e:51:3d:27:86: 24:cf:af:49:af:c6:c5:da:a4:86:34:8d:1d:3c:c8: 6a:0a:7a:1e:d6:04:c0:0a:b0:2b:9c:04:f9:05:38: 07:3a:97:a8:68:b2:53:90:6a:00:70:ba:e2:c4:70: b6:3d:d0:90:50:a9:97:1b:49:9c:fd:6c:8c:b7:2c: 12:4e:52:36:3b:6c:15:a3:82:77:f0:41:7e:38:c1: 4f:f9:2f:c0:28:cd:cf:b3:40:bf:55:57:bc:6b:85: 76:6c:4e:46:67:0d:f9:b1:c0:b3:ad:b7:ff:05:bd: ab:99:b4:c3:93:e4:6d:f5:e4:f6:35:8f:9b:d2:bc: 71:d8:ea:9e:2e:a7:43:90:64:6d:e0:62:32:ff:7a: ab:fa:a4:e5:6c:2d:c0:eb:26:f4:48:9d:cc:ee:68: 82:f7:b8:f7:26:4d:c5:16:1b:db:a3:88:0b:4a:48: 1a:04:a4:2f:aa:9b:07:3d:a7:b1:71:44:40:fd:27: ea:48:c1:11:4c:87:b5:3c:5e:5f:d4:fe:27:cf:e6: 69:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:02:84:61:E8:54:3A:C5:D0:C7:60:BE:E0:A1:E4:FB:39:CC:17:B4 X509v3 Authority Key Identifier: keyid:EA:92:48:CB:81:F3:EE:7B:4C:93:44:FB:E4:31:25:2A:17:39:FD:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/31224247-347f-4a57-a79a-cb2c21c9170e/0/EA9248CB81F3EE7B4C9344FBE431252A1739FD6B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EA9248CB81F3EE7B4C9344FBE431252A1739FD6B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/31224247-347f-4a57-a79a-cb2c21c9170e/0/3231302e38372e3132332e302f32342d3234203d3e20313532303634.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 210.87.123.0/24 Signature Algorithm: sha256WithRSAEncryption 37:82:0d:cb:84:e9:b5:3c:76:db:1b:6a:6d:8e:b1:96:f5:e0: 87:71:be:72:74:da:a8:d9:e3:50:e1:ea:99:86:d1:72:46:ad: 0a:95:b8:4b:b7:d4:14:65:fd:8e:88:9a:a2:a4:03:30:e7:ae: f6:bd:4e:63:21:cb:ee:46:09:74:02:e1:5f:c2:ad:b8:36:3c: 02:95:17:a1:e0:3d:9f:af:5d:49:28:b2:a9:ba:1e:79:f8:ee: 42:39:9b:1a:df:c5:73:fc:c0:88:9f:c0:9e:85:cf:8e:76:5d: f4:60:36:f9:ec:89:5d:33:e6:27:0f:82:ca:8f:fa:38:93:cf: 0d:1d:2c:ae:51:a1:7c:81:73:f9:be:88:c7:06:b5:b8:cf:f4: 02:6f:49:0a:9c:f5:fb:a7:4f:c3:a7:2b:6b:3f:a2:7f:1d:d4: cf:f9:cd:4b:16:56:17:18:64:06:ad:0d:21:aa:04:b5:39:cc: e3:88:b9:1f:68:6c:f8:8d:58:1c:6c:af:e4:45:80:2f:a8:64: 18:71:c6:76:5e:62:e4:db:87:33:08:45:4e:0a:90:2b:d6:1b: e3:5e:57:fd:13:c3:a2:f3:0c:51:31:cd:de:54:49:dd:c7:4a: 06:0a:f7:f3:47:8d:c8:f0:b9:fd:15:8a:97:8c:75:77:f9:3d: 6a:6c:2e:dd -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUJGqdwVLzsfEMwGpPmgfcNQKWhgYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUE5MjQ4Q0I4MUYzRUU3QjRDOTM0NEZCRTQzMTI1MkEx NzM5RkQ2QjAeFw0yNjA1MDMwMjE4NDlaFw0yNzA1MDIwMjIzNDlaMDMxMTAvBgNV BAMTKDhCMDI4NDYxRTg1NDNBQzVEMEM3NjBCRUUwQTFFNEZCMzlDQzE3QjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqYt7kvQNQJAMao7MYxnzSK6GC 4Qkl7jzvZq/FsN2mqNkshzmSH7WuIGuHd6yU7wa9V9naUY5eUT0nhiTPr0mvxsXa pIY0jR08yGoKeh7WBMAKsCucBPkFOAc6l6hoslOQagBwuuLEcLY90JBQqZcbSZz9 bIy3LBJOUjY7bBWjgnfwQX44wU/5L8Aozc+zQL9VV7xrhXZsTkZnDfmxwLOtt/8F vauZtMOT5G315PY1j5vSvHHY6p4up0OQZG3gYjL/eqv6pOVsLcDrJvRInczuaIL3 uPcmTcUWG9ujiAtKSBoEpC+qmwc9p7FxRED9J+pIwRFMh7U8Xl/U/ifP5mlXAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUiwKEYehUOsXQx2C+4KHk+znMF7QwHwYDVR0j BBgwFoAU6pJIy4Hz7ntMk0T75DElKhc5/WswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzEyMjQyNDctMzQ3Zi00YTU3LWE3OWEtY2IyYzIxYzkxNzBlLzAvRUE5MjQ4Q0I4 MUYzRUU3QjRDOTM0NEZCRTQzMTI1MkExNzM5RkQ2Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FQTkyNDhDQjgxRjNFRTdCNEM5MzQ0RkJFNDMxMjUyQTE3MzlG RDZCLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzMxMjI0MjQ3LTM0N2YtNGE1Ny1h NzlhLWNiMmMyMWM5MTcwZS8wLzMyMzEzMDJlMzgzNzJlMzEzMjMzMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNTMyMzAzNjM0LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ld7MA0GCSqG SIb3DQEBCwUAA4IBAQA3gg3LhOm1PHbbG2ptjrGW9eCHcb5ydNqo2eNQ4eqZhtFy Rq0KlbhLt9QUZf2OiJqipAMw5672vU5jIcvuRgl0AuFfwq24NjwClReh4D2fr11J KLKpuh55+O5COZsa38Vz/MCIn8Cehc+Odl30YDb57IldM+YnD4LKj/o4k88NHSyu UaF8gXP5vojHBrW4z/QCb0kKnPX7p0/DpytrP6J/HdTP+c1LFlYXGGQGrQ0hqgS1 OczjiLkfaGz4jVgcbK/kRYAvqGQYccZ2XmLk24czCEVOCpAr1hvjXlf9E8Oi8wxR Mc3eVEndx0oGCvfzR43I8Ln9FYqXjHV3+T1qbC7d -----END CERTIFICATE-----Generated at Wed May 13 06:01:02 2026 by rpki-client