$ rpki-client -vvf rpki-rsync.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/3131392e34372e38392e302f32342d3234203d3e203338353237.roa File: 3131392e34372e38392e302f32342d3234203d3e203338353237.roa (raw, json) Hash identifier: c/ZF1aWYYnFDz5Gwg0w0tFfbUx8yzQQW9RzM+O5SB0A= Subject key identifier: A7:24:6A:F1:4D:69:50:7D:EC:7B:6B:CC:5F:04:66:13:77:D7:24:BC Certificate issuer: /CN=7521EB714EF9A5F0A697E8574714A86DCF234610 Certificate serial: 50A743F242F78D5BE330525F8345CB33E17E2AE7 Authority key identifier: 75:21:EB:71:4E:F9:A5:F0:A6:97:E8:57:47:14:A8:6D:CF:23:46:10 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7521EB714EF9A5F0A697E8574714A86DCF234610.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/3131392e34372e38392e302f32342d3234203d3e203338353237.roa Signing time: Sun 03 May 2026 02:24:00 +0000 ROA not before: Sun 03 May 2026 02:19:00 +0000 ROA not after: Sun 02 May 2027 02:24:00 +0000 asID: 38527 IP address blocks: 119.47.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/7521EB714EF9A5F0A697E8574714A86DCF234610.crl rsync://rpki-rsync.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/7521EB714EF9A5F0A697E8574714A86DCF234610.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7521EB714EF9A5F0A697E8574714A86DCF234610.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 01:39:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:a7:43:f2:42:f7:8d:5b:e3:30:52:5f:83:45:cb:33:e1:7e:2a:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7521EB714EF9A5F0A697E8574714A86DCF234610 Validity Not Before: May 3 02:19:00 2026 GMT Not After : May 2 02:24:00 2027 GMT Subject: CN=A7246AF14D69507DEC7B6BCC5F04661377D724BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:3d:64:31:d1:19:0b:98:c5:6c:13:89:ab:40: dc:8a:8d:ff:01:0b:c1:31:5f:2f:3f:c5:bf:86:83: af:f0:a8:6c:bc:cc:b9:9f:54:7d:22:c1:0a:4b:6e: b9:12:04:20:66:49:54:3b:cb:d4:b3:85:42:db:26: f7:f9:f7:d2:b3:b8:7f:7d:8b:7c:91:85:99:e9:71: 87:c8:68:35:2f:54:58:8e:fe:5b:6b:b3:f0:3a:f9: d6:eb:55:2e:4c:36:df:48:b6:3e:32:38:d4:5b:f8: 24:f2:26:61:f0:5d:85:60:8b:a9:13:32:01:e8:41: 6d:8c:6b:52:3b:1e:f6:e0:ab:dc:5a:74:a4:62:3e: eb:3e:ae:d4:7b:70:ed:8f:d3:bf:2a:f2:be:63:c6: 12:88:09:8e:f4:c4:d2:67:35:7b:80:ad:df:bc:ee: 5c:2b:30:f2:b6:15:a9:0f:cd:a1:0c:dd:14:7d:75: 2e:19:08:50:07:ad:61:1f:b6:37:ea:ac:8f:03:de: d9:0e:ae:2e:0e:ce:82:95:c1:52:dc:87:4e:e7:a0: ac:4c:47:07:8b:40:54:23:47:3a:18:f4:00:4a:b0: fd:4b:b8:7b:1e:84:8b:d1:a3:94:80:6e:ed:4e:52: 78:66:63:c0:90:f9:6f:f5:15:f8:dd:59:09:8e:ca: bd:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:24:6A:F1:4D:69:50:7D:EC:7B:6B:CC:5F:04:66:13:77:D7:24:BC X509v3 Authority Key Identifier: keyid:75:21:EB:71:4E:F9:A5:F0:A6:97:E8:57:47:14:A8:6D:CF:23:46:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/7521EB714EF9A5F0A697E8574714A86DCF234610.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7521EB714EF9A5F0A697E8574714A86DCF234610.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/3131392e34372e38392e302f32342d3234203d3e203338353237.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 119.47.89.0/24 Signature Algorithm: sha256WithRSAEncryption 23:93:74:45:1f:20:f7:24:28:96:8e:93:3f:3e:44:e9:89:82: ac:d8:25:1b:99:5e:6e:ae:97:92:a0:63:85:d0:d2:c8:de:82: 1a:9c:e4:7f:93:6a:d9:08:29:10:51:a7:3b:ea:95:79:56:5b: 1a:65:10:f9:2c:2f:9b:5d:ae:80:ab:6d:7a:05:9c:8c:14:bb: cf:39:3a:22:2c:af:2f:1e:e9:1f:dd:b0:13:1f:c1:9f:61:ee: 2e:95:8d:0e:45:e0:c9:02:70:8c:9b:1a:1d:59:fd:f1:60:4d: 3e:50:19:50:40:cd:5e:0b:0d:3c:03:82:90:cd:89:32:12:20: 72:44:16:ad:6d:53:98:4d:ae:bf:5f:da:5d:ce:5a:6f:67:28: ab:30:22:f7:1d:c4:25:7a:7a:0a:b9:a8:3f:cd:52:52:df:6b: f1:41:63:3a:ac:b9:ae:5c:fb:d0:56:99:6d:0b:b2:62:5d:f7: 8f:b8:2c:36:a1:8d:9a:e1:58:ac:9b:f7:ca:0d:47:fa:17:1a: 4d:e4:2a:b8:c5:cb:58:b3:16:ab:b3:8f:4b:87:6c:22:25:ac: 66:d8:b4:fe:85:6e:39:39:35:e6:f5:1c:26:83:5b:f3:9f:47: a4:34:d4:13:22:4e:f7:09:3c:b5:1a:44:60:16:fc:d5:27:1d: 57:dd:3e:fc -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUUKdD8kL3jVvjMFJfg0XLM+F+KucwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzUyMUVCNzE0RUY5QTVGMEE2OTdFODU3NDcxNEE4NkRD RjIzNDYxMDAeFw0yNjA1MDMwMjE5MDBaFw0yNzA1MDIwMjI0MDBaMDMxMTAvBgNV BAMTKEE3MjQ2QUYxNEQ2OTUwN0RFQzdCNkJDQzVGMDQ2NjEzNzdENzI0QkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnPWQx0RkLmMVsE4mrQNyKjf8B C8ExXy8/xb+Gg6/wqGy8zLmfVH0iwQpLbrkSBCBmSVQ7y9SzhULbJvf599KzuH99 i3yRhZnpcYfIaDUvVFiO/ltrs/A6+dbrVS5MNt9Itj4yONRb+CTyJmHwXYVgi6kT MgHoQW2Ma1I7Hvbgq9xadKRiPus+rtR7cO2P078q8r5jxhKICY70xNJnNXuArd+8 7lwrMPK2FakPzaEM3RR9dS4ZCFAHrWEftjfqrI8D3tkOri4OzoKVwVLch07noKxM RweLQFQjRzoY9ABKsP1LuHsehIvRo5SAbu1OUnhmY8CQ+W/1FfjdWQmOyr1DAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUpyRq8U1pUH3se2vMXwRmE3fXJLwwHwYDVR0j BBgwFoAUdSHrcU75pfCml+hXRxSobc8jRhAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzE3ZWZkMmEtMDJhYi00MjAyLTk3MGYtZjY5OWRmZjk3ZGU1LzAvNzUyMUVCNzE0 RUY5QTVGMEE2OTdFODU3NDcxNEE4NkRDRjIzNDYxMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83NTIxRUI3MTRFRjlBNUYwQTY5N0U4NTc0NzE0QTg2RENGMjM0 NjEwLmNlcjCBoQYIKwYBBQUHAQsEgZQwgZEwgY4GCCsGAQUFBzALhoGBcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzMxN2VmZDJhLTAyYWItNDIwMi05 NzBmLWY2OTlkZmY5N2RlNS8wLzMxMzEzOTJlMzQzNzJlMzgzOTJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMzMzgzNTMyMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAB3L1kwDQYJKoZIhvcN AQELBQADggEBACOTdEUfIPckKJaOkz8+ROmJgqzYJRuZXm6ul5KgY4XQ0sjeghqc 5H+TatkIKRBRpzvqlXlWWxplEPksL5tdroCrbXoFnIwUu885OiIsry8e6R/dsBMf wZ9h7i6VjQ5F4MkCcIybGh1Z/fFgTT5QGVBAzV4LDTwDgpDNiTISIHJEFq1tU5hN rr9f2l3OWm9nKKswIvcdxCV6egq5qD/NUlLfa/FBYzqsua5c+9BWmW0LsmJd94+4 LDahjZrhWKyb98oNR/oXGk3kKrjFy1izFquzj0uHbCIlrGbYtP6Fbjk5Neb1HCaD W/OfR6Q01BMiTvcJPLUaRGAW/NUnHVfdPvw= -----END CERTIFICATE-----Generated at Wed May 13 06:37:12 2026 by rpki-client