$ rpki-client -vvf rpki-rsync.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/3131392e34372e39352e302f32342d3234203d3e20313439343039.roa File: 3131392e34372e39352e302f32342d3234203d3e20313439343039.roa (raw, json) Hash identifier: TS2p463fv/9DyZu6QnNhlvJI+JFIyXgQjG+Ob9/1Y6g= Subject key identifier: 62:91:CD:F0:C7:23:7A:B9:90:DA:6B:44:AC:64:B1:C5:BF:41:FD:F4 Certificate issuer: /CN=7521EB714EF9A5F0A697E8574714A86DCF234610 Certificate serial: 21C844AC3B7AF089E07322483183E0F9507E31F8 Authority key identifier: 75:21:EB:71:4E:F9:A5:F0:A6:97:E8:57:47:14:A8:6D:CF:23:46:10 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7521EB714EF9A5F0A697E8574714A86DCF234610.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/3131392e34372e39352e302f32342d3234203d3e20313439343039.roa Signing time: Sun 03 May 2026 02:24:00 +0000 ROA not before: Sun 03 May 2026 02:19:00 +0000 ROA not after: Sun 02 May 2027 02:24:00 +0000 asID: 149409 IP address blocks: 119.47.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/7521EB714EF9A5F0A697E8574714A86DCF234610.crl rsync://rpki-rsync.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/7521EB714EF9A5F0A697E8574714A86DCF234610.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7521EB714EF9A5F0A697E8574714A86DCF234610.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 01:39:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:c8:44:ac:3b:7a:f0:89:e0:73:22:48:31:83:e0:f9:50:7e:31:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7521EB714EF9A5F0A697E8574714A86DCF234610 Validity Not Before: May 3 02:19:00 2026 GMT Not After : May 2 02:24:00 2027 GMT Subject: CN=6291CDF0C7237AB990DA6B44AC64B1C5BF41FDF4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:89:89:e4:d8:1a:3c:d8:65:c2:c3:f9:c7:6d: ea:ce:a3:0d:26:cb:33:ec:30:7f:42:38:da:a6:ba: 14:f2:44:4e:87:36:54:0f:4b:58:9d:7a:3c:5b:50: a7:c2:dd:3e:4d:41:82:74:3a:db:1e:b4:5c:10:12: 7e:b6:ab:d1:ed:5e:d7:7e:24:b8:08:08:48:87:33: 8c:67:a0:04:2e:b8:48:50:e8:b5:16:b3:b5:86:cb: c5:88:fe:95:85:de:94:ca:80:b7:1c:1f:14:e6:28: e9:43:60:5b:9a:dd:d9:d2:df:6f:79:d0:26:1d:07: a7:87:6e:40:ec:86:06:57:e7:82:20:80:b4:20:da: 58:44:6e:57:58:75:fa:58:14:4c:f6:13:fc:5b:ca: 79:3e:33:d0:3c:16:05:aa:65:53:ff:0d:0b:ec:16: 25:38:74:b2:cf:ee:0a:e6:20:ce:e2:25:79:d8:d0: 5e:e4:dc:33:19:81:8c:0e:3a:ad:72:cb:36:26:df: ad:9e:82:41:1d:2f:dc:91:2f:e1:a3:e6:d5:72:c4: f2:1c:f1:ad:4c:31:11:82:8b:36:42:2e:e4:ba:a6: 92:95:5b:c6:e4:8b:a6:b9:ac:df:47:bf:15:49:0e: 80:5f:5f:fe:3b:cd:a8:f2:a8:01:26:d6:ee:26:0f: 24:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:91:CD:F0:C7:23:7A:B9:90:DA:6B:44:AC:64:B1:C5:BF:41:FD:F4 X509v3 Authority Key Identifier: keyid:75:21:EB:71:4E:F9:A5:F0:A6:97:E8:57:47:14:A8:6D:CF:23:46:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/7521EB714EF9A5F0A697E8574714A86DCF234610.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7521EB714EF9A5F0A697E8574714A86DCF234610.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/3131392e34372e39352e302f32342d3234203d3e20313439343039.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 119.47.95.0/24 Signature Algorithm: sha256WithRSAEncryption 10:04:02:b6:ad:32:d5:d0:7b:4d:2c:3a:10:13:5f:48:a6:a7: 87:72:1f:41:8a:18:7f:0b:3f:40:5e:aa:06:e8:ee:d1:7d:1c: 89:9e:6c:b8:91:da:f0:2d:c3:9f:96:2c:2f:a6:68:22:60:5e: f4:d4:bc:e8:a1:b3:0d:3e:78:7f:4e:75:e1:63:2f:62:92:50: 83:f8:66:eb:f1:8b:d4:c1:aa:4e:78:47:1f:d2:18:68:f0:55: 57:81:45:c1:04:b5:6b:d9:bd:e1:81:65:09:81:72:74:bf:a1: d2:2c:66:3b:77:04:f8:b7:53:86:84:fe:15:ac:e3:39:3b:30: e4:ab:af:9a:13:f0:0d:2e:6c:6b:10:39:21:77:f2:3e:6d:43: 14:78:bf:58:f8:18:e6:38:11:c8:64:0c:24:d0:41:8d:23:a0: 53:08:6e:8d:03:72:02:78:e8:65:af:a8:d6:59:34:ce:d1:a2: ad:19:55:d9:b5:93:54:da:e9:fa:09:58:9f:68:3f:26:8d:3c: 19:21:cb:39:56:22:f1:45:18:32:07:33:1b:85:32:4a:75:94: e4:aa:8b:91:42:13:44:f8:bc:6c:d0:09:5f:29:5c:30:92:70: 50:ff:1b:cf:f1:d9:06:f9:b3:46:60:04:bd:24:2f:ef:57:66: ab:b7:e1:78 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUIchErDt68IngcyJIMYPg+VB+MfgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzUyMUVCNzE0RUY5QTVGMEE2OTdFODU3NDcxNEE4NkRD RjIzNDYxMDAeFw0yNjA1MDMwMjE5MDBaFw0yNzA1MDIwMjI0MDBaMDMxMTAvBgNV BAMTKDYyOTFDREYwQzcyMzdBQjk5MERBNkI0NEFDNjRCMUM1QkY0MUZERjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6iYnk2Bo82GXCw/nHberOow0m yzPsMH9CONqmuhTyRE6HNlQPS1idejxbUKfC3T5NQYJ0OtsetFwQEn62q9HtXtd+ JLgICEiHM4xnoAQuuEhQ6LUWs7WGy8WI/pWF3pTKgLccHxTmKOlDYFua3dnS3295 0CYdB6eHbkDshgZX54IggLQg2lhEbldYdfpYFEz2E/xbynk+M9A8FgWqZVP/DQvs FiU4dLLP7grmIM7iJXnY0F7k3DMZgYwOOq1yyzYm362egkEdL9yRL+Gj5tVyxPIc 8a1MMRGCizZCLuS6ppKVW8bki6a5rN9HvxVJDoBfX/47zajyqAEm1u4mDyTPAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUYpHN8McjermQ2mtErGSxxb9B/fQwHwYDVR0j BBgwFoAUdSHrcU75pfCml+hXRxSobc8jRhAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzE3ZWZkMmEtMDJhYi00MjAyLTk3MGYtZjY5OWRmZjk3ZGU1LzAvNzUyMUVCNzE0 RUY5QTVGMEE2OTdFODU3NDcxNEE4NkRDRjIzNDYxMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83NTIxRUI3MTRFRjlBNUYwQTY5N0U4NTc0NzE0QTg2RENGMjM0 NjEwLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzMxN2VmZDJhLTAyYWItNDIwMi05 NzBmLWY2OTlkZmY5N2RlNS8wLzMxMzEzOTJlMzQzNzJlMzkzNTJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMxMzQzOTM0MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHcvXzANBgkqhkiG 9w0BAQsFAAOCAQEAEAQCtq0y1dB7TSw6EBNfSKanh3IfQYoYfws/QF6qBuju0X0c iZ5suJHa8C3Dn5YsL6ZoImBe9NS86KGzDT54f0514WMvYpJQg/hm6/GL1MGqTnhH H9IYaPBVV4FFwQS1a9m94YFlCYFydL+h0ixmO3cE+LdThoT+FazjOTsw5KuvmhPw DS5saxA5IXfyPm1DFHi/WPgY5jgRyGQMJNBBjSOgUwhujQNyAnjoZa+o1lk0ztGi rRlV2bWTVNrp+glYn2g/Jo08GSHLOVYi8UUYMgczG4UySnWU5KqLkUITRPi8bNAJ XylcMJJwUP8bz/HZBvmzRmAEvSQv71dmq7fheA== -----END CERTIFICATE-----Generated at Wed May 13 09:11:34 2026 by rpki-client