$ rpki-client -vvf rpki-rsync.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/3132342e3130392e32322e302f32342d3234203d3e20313431313037.roa File: 3132342e3130392e32322e302f32342d3234203d3e20313431313037.roa (raw, json) Hash identifier: iOYmug4IgOWAtbexlc92hDoV/tNe429g9AsNdYSsaJc= Subject key identifier: 7E:D0:F1:A6:29:E3:7E:AB:C1:AC:31:D0:1F:1B:4F:BD:47:5A:44:6C Certificate issuer: /CN=7521EB714EF9A5F0A697E8574714A86DCF234610 Certificate serial: 5C34F894A859F2A27BFA0E607336592068C602FE Authority key identifier: 75:21:EB:71:4E:F9:A5:F0:A6:97:E8:57:47:14:A8:6D:CF:23:46:10 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7521EB714EF9A5F0A697E8574714A86DCF234610.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/3132342e3130392e32322e302f32342d3234203d3e20313431313037.roa Signing time: Sun 03 May 2026 02:24:00 +0000 ROA not before: Sun 03 May 2026 02:19:00 +0000 ROA not after: Sun 02 May 2027 02:24:00 +0000 asID: 141107 IP address blocks: 124.109.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/7521EB714EF9A5F0A697E8574714A86DCF234610.crl rsync://rpki-rsync.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/7521EB714EF9A5F0A697E8574714A86DCF234610.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7521EB714EF9A5F0A697E8574714A86DCF234610.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 01:39:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:34:f8:94:a8:59:f2:a2:7b:fa:0e:60:73:36:59:20:68:c6:02:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7521EB714EF9A5F0A697E8574714A86DCF234610 Validity Not Before: May 3 02:19:00 2026 GMT Not After : May 2 02:24:00 2027 GMT Subject: CN=7ED0F1A629E37EABC1AC31D01F1B4FBD475A446C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:a0:2a:43:63:61:63:9d:68:df:a5:43:71:84: 37:9e:db:e1:f0:cf:51:47:2c:de:f6:e0:bb:15:4d: 4a:c1:cb:de:7e:4d:8c:28:d4:76:9c:9c:09:0c:13: 72:a4:e8:10:03:f7:a8:fd:77:9a:b4:a1:6c:b2:4c: cb:6a:e5:0a:67:ba:48:d0:b3:3a:a8:e2:ec:3c:bc: 02:08:24:c9:1a:c3:cc:bf:fa:b6:dc:aa:07:e5:75: 18:2e:46:c8:1d:ac:7b:a5:18:78:28:5e:a7:b0:ab: b3:c1:cc:90:21:cc:cd:db:09:d7:e5:31:f6:61:2e: a2:67:91:a2:56:b2:96:ed:0d:ee:e5:0b:41:76:b5: 7e:c8:56:a6:43:b9:8c:e2:ff:78:8d:f6:d9:92:df: 75:fc:7b:79:cd:bc:3e:ba:86:68:89:fe:cf:46:76: ea:a7:fb:27:c3:25:c2:08:d4:77:bb:38:41:91:b1: 0d:dd:08:fa:09:ed:cb:bc:7f:b2:b1:0d:85:30:fe: 82:7d:d0:ea:c4:67:10:c7:36:fe:b6:e9:52:d4:24: c0:56:eb:e1:2d:fa:22:c4:e2:6a:fb:dc:14:c8:02: 0c:80:83:75:a0:16:25:bc:47:16:be:cb:4a:78:37: 98:7b:5e:37:09:c3:c7:ff:4c:e0:89:c8:66:db:59: af:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:D0:F1:A6:29:E3:7E:AB:C1:AC:31:D0:1F:1B:4F:BD:47:5A:44:6C X509v3 Authority Key Identifier: keyid:75:21:EB:71:4E:F9:A5:F0:A6:97:E8:57:47:14:A8:6D:CF:23:46:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/7521EB714EF9A5F0A697E8574714A86DCF234610.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7521EB714EF9A5F0A697E8574714A86DCF234610.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/3132342e3130392e32322e302f32342d3234203d3e20313431313037.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 124.109.22.0/24 Signature Algorithm: sha256WithRSAEncryption 25:86:12:46:40:e6:05:09:39:3a:0a:84:29:8d:d2:c3:45:7e: d3:68:79:60:28:a3:e9:72:d7:a8:cf:87:f6:50:79:4e:45:05: c5:74:fe:3a:67:3d:fb:b3:6b:a9:98:5a:f4:b0:1b:f4:9a:ec: c1:53:15:fe:4c:09:0f:01:c2:d9:0b:e2:4c:6d:7d:1e:c1:47: 94:6e:68:14:c4:a5:e3:c3:d4:83:49:67:2f:08:df:66:3a:86: e9:7a:9f:6e:f4:ef:a5:7d:b9:cb:29:20:85:45:32:9b:6a:74: cd:9e:d9:c5:36:3d:8e:ab:c0:a7:7a:9d:06:bb:fb:08:b0:04: ef:3d:cb:bb:1d:8b:d9:17:dc:1e:a3:1d:8b:24:fc:fa:55:bd: 0b:68:03:2f:cb:5a:ec:15:79:8d:74:b2:6f:25:31:81:b7:f9: d9:53:ea:f5:2a:b7:6c:87:a1:2a:22:37:79:30:a4:99:02:af: aa:82:48:c7:bb:d6:02:1f:58:cb:6f:6a:c0:68:0d:97:3c:59: 95:a0:12:72:ae:4e:51:81:8b:46:e2:6f:e8:5a:37:37:04:67: a4:4f:60:58:55:f4:0c:ff:3b:e6:08:06:02:33:9f:8e:df:a1: 05:9d:4c:b5:8f:99:89:59:d6:e6:da:06:9e:51:71:03:69:18: 85:91:67:9e -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUXDT4lKhZ8qJ7+g5gczZZIGjGAv4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzUyMUVCNzE0RUY5QTVGMEE2OTdFODU3NDcxNEE4NkRD RjIzNDYxMDAeFw0yNjA1MDMwMjE5MDBaFw0yNzA1MDIwMjI0MDBaMDMxMTAvBgNV BAMTKDdFRDBGMUE2MjlFMzdFQUJDMUFDMzFEMDFGMUI0RkJENDc1QTQ0NkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8oCpDY2FjnWjfpUNxhDee2+Hw z1FHLN724LsVTUrBy95+TYwo1HacnAkME3Kk6BAD96j9d5q0oWyyTMtq5QpnukjQ szqo4uw8vAIIJMkaw8y/+rbcqgfldRguRsgdrHulGHgoXqewq7PBzJAhzM3bCdfl MfZhLqJnkaJWspbtDe7lC0F2tX7IVqZDuYzi/3iN9tmS33X8e3nNvD66hmiJ/s9G duqn+yfDJcII1He7OEGRsQ3dCPoJ7cu8f7KxDYUw/oJ90OrEZxDHNv626VLUJMBW 6+Et+iLE4mr73BTIAgyAg3WgFiW8Rxa+y0p4N5h7XjcJw8f/TOCJyGbbWa/9AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUftDxpinjfqvBrDHQHxtPvUdaRGwwHwYDVR0j BBgwFoAUdSHrcU75pfCml+hXRxSobc8jRhAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzE3ZWZkMmEtMDJhYi00MjAyLTk3MGYtZjY5OWRmZjk3ZGU1LzAvNzUyMUVCNzE0 RUY5QTVGMEE2OTdFODU3NDcxNEE4NkRDRjIzNDYxMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83NTIxRUI3MTRFRjlBNUYwQTY5N0U4NTc0NzE0QTg2RENGMjM0 NjEwLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzMxN2VmZDJhLTAyYWItNDIwMi05 NzBmLWY2OTlkZmY5N2RlNS8wLzMxMzIzNDJlMzEzMDM5MmUzMjMyMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNDMxMzEzMDM3LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAfG0WMA0GCSqG SIb3DQEBCwUAA4IBAQAlhhJGQOYFCTk6CoQpjdLDRX7TaHlgKKPpcteoz4f2UHlO RQXFdP46Zz37s2upmFr0sBv0muzBUxX+TAkPAcLZC+JMbX0ewUeUbmgUxKXjw9SD SWcvCN9mOobpep9u9O+lfbnLKSCFRTKbanTNntnFNj2Oq8Cnep0Gu/sIsATvPcu7 HYvZF9weox2LJPz6Vb0LaAMvy1rsFXmNdLJvJTGBt/nZU+r1Krdsh6EqIjd5MKSZ Aq+qgkjHu9YCH1jLb2rAaA2XPFmVoBJyrk5RgYtG4m/oWjc3BGekT2BYVfQM/zvm CAYCM5+O36EFnUy1j5mJWdbm2gaeUXEDaRiFkWee -----END CERTIFICATE-----Generated at Wed May 13 06:19:16 2026 by rpki-client