$ rpki-client -vvf rpki-rsync.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/3132342e3130392e32332e302f32342d3234203d3e203538333738.roa File: 3132342e3130392e32332e302f32342d3234203d3e203538333738.roa (raw, json) Hash identifier: zskLNuuXyQpxVs+4KksAWAlYXKzx7CDbhiYyNpVsFrs= Subject key identifier: 96:CD:9E:8E:C7:CF:04:23:FD:33:E4:48:A2:3E:D9:72:54:65:72:4A Certificate issuer: /CN=7521EB714EF9A5F0A697E8574714A86DCF234610 Certificate serial: 0C2C7E7E86ACEE2E32E4AE0852B82411362A20C1 Authority key identifier: 75:21:EB:71:4E:F9:A5:F0:A6:97:E8:57:47:14:A8:6D:CF:23:46:10 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7521EB714EF9A5F0A697E8574714A86DCF234610.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/3132342e3130392e32332e302f32342d3234203d3e203538333738.roa Signing time: Sun 03 May 2026 02:23:59 +0000 ROA not before: Sun 03 May 2026 02:18:59 +0000 ROA not after: Sun 02 May 2027 02:23:59 +0000 asID: 58378 IP address blocks: 124.109.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/7521EB714EF9A5F0A697E8574714A86DCF234610.crl rsync://rpki-rsync.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/7521EB714EF9A5F0A697E8574714A86DCF234610.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7521EB714EF9A5F0A697E8574714A86DCF234610.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 01:39:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:2c:7e:7e:86:ac:ee:2e:32:e4:ae:08:52:b8:24:11:36:2a:20:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7521EB714EF9A5F0A697E8574714A86DCF234610 Validity Not Before: May 3 02:18:59 2026 GMT Not After : May 2 02:23:59 2027 GMT Subject: CN=96CD9E8EC7CF0423FD33E448A23ED9725465724A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:a9:d0:67:6b:93:43:89:c4:95:e1:1b:32:c2: 96:ce:cf:71:e7:68:cb:39:3b:c3:24:4e:46:55:73: af:6e:4d:ff:2b:a6:d5:dd:27:cc:dc:52:6e:7a:0a: ab:3c:f9:29:e5:f5:aa:41:df:27:f5:a0:11:75:90: ba:50:fb:df:ae:04:72:e6:e0:2e:85:d9:76:52:69: cd:a3:98:35:6c:cc:06:cd:dc:72:6d:5b:52:e7:20: b7:63:01:21:e9:b4:f0:79:8e:d6:63:a1:c0:f9:ea: 17:99:65:f5:60:e6:3b:18:4a:a8:61:ef:83:a5:16: e4:af:28:03:22:ea:87:0d:d6:04:e1:31:98:e4:53: 19:a5:3a:60:90:96:ef:2f:d1:23:96:07:6f:90:04: 8d:72:ad:5b:f1:c9:64:ea:fe:38:81:bc:6b:3d:42: 05:38:bc:f6:e7:04:1a:fa:64:a8:a8:0d:af:1f:d4: 0b:0b:ff:e2:59:f9:b2:00:0c:a7:4b:75:40:15:a5: 88:0d:7c:13:b7:01:a9:d1:7a:4b:1e:22:b9:6d:68: 6c:bc:d4:16:5e:c5:10:39:05:fb:3a:c7:53:d4:c1: a9:d3:bd:97:77:af:d2:34:ed:53:05:03:7a:41:fa: 42:ef:f0:af:e1:86:cf:1e:62:fc:47:9b:c0:b4:ed: 10:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:CD:9E:8E:C7:CF:04:23:FD:33:E4:48:A2:3E:D9:72:54:65:72:4A X509v3 Authority Key Identifier: keyid:75:21:EB:71:4E:F9:A5:F0:A6:97:E8:57:47:14:A8:6D:CF:23:46:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/7521EB714EF9A5F0A697E8574714A86DCF234610.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7521EB714EF9A5F0A697E8574714A86DCF234610.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/3132342e3130392e32332e302f32342d3234203d3e203538333738.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 124.109.23.0/24 Signature Algorithm: sha256WithRSAEncryption 1b:34:5e:00:b7:76:a7:0b:bb:72:7b:24:25:64:0b:2a:23:98: 02:1b:ea:60:22:cb:2f:b0:53:c2:d0:f2:a3:e0:f5:56:e6:17: 33:12:69:38:7a:3b:05:80:ac:84:14:fc:14:f5:a8:fe:47:0e: 67:c8:d1:05:bc:3d:b9:a4:45:0e:40:47:f2:a3:25:37:b8:db: 0b:13:80:fb:c3:2a:fe:fc:8a:88:86:10:d6:30:b1:7d:49:d7: 11:86:52:4c:ca:6b:3f:3b:15:ed:4e:43:dd:81:92:dc:3e:c5: 73:c5:58:4b:75:a8:47:cf:e9:0d:91:8b:ee:ae:91:c8:a7:db: 57:18:ee:70:d6:52:bb:15:a2:03:42:22:6f:38:f3:3e:43:2f: 92:aa:78:10:d9:c9:fb:e1:af:bd:38:0a:e9:a3:4a:98:2d:ce: d3:f0:c5:bb:24:1b:88:fe:01:97:75:80:de:36:93:8d:a0:9c: c7:45:69:c8:06:60:a6:ac:94:c3:25:1f:7c:4b:10:7e:38:d9: 44:b3:de:f8:9f:16:0a:e6:16:86:38:16:5d:ae:80:53:eb:a1: 1e:96:e0:ae:cc:84:bf:46:de:dd:c1:88:a9:3e:08:f5:da:a5: 28:ec:85:25:f0:54:f6:5f:47:ff:65:83:70:fe:71:50:4a:92: f0:75:57:5c -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUDCx+foas7i4y5K4IUrgkETYqIMEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzUyMUVCNzE0RUY5QTVGMEE2OTdFODU3NDcxNEE4NkRD RjIzNDYxMDAeFw0yNjA1MDMwMjE4NTlaFw0yNzA1MDIwMjIzNTlaMDMxMTAvBgNV BAMTKDk2Q0Q5RThFQzdDRjA0MjNGRDMzRTQ0OEEyM0VEOTcyNTQ2NTcyNEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmqdBna5NDicSV4RsywpbOz3Hn aMs5O8MkTkZVc69uTf8rptXdJ8zcUm56Cqs8+Snl9apB3yf1oBF1kLpQ+9+uBHLm 4C6F2XZSac2jmDVszAbN3HJtW1LnILdjASHptPB5jtZjocD56heZZfVg5jsYSqhh 74OlFuSvKAMi6ocN1gThMZjkUxmlOmCQlu8v0SOWB2+QBI1yrVvxyWTq/jiBvGs9 QgU4vPbnBBr6ZKioDa8f1AsL/+JZ+bIADKdLdUAVpYgNfBO3AanRekseIrltaGy8 1BZexRA5Bfs6x1PUwanTvZd3r9I07VMFA3pB+kLv8K/hhs8eYvxHm8C07RAvAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUls2ejsfPBCP9M+RIoj7ZclRlckowHwYDVR0j BBgwFoAUdSHrcU75pfCml+hXRxSobc8jRhAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzE3ZWZkMmEtMDJhYi00MjAyLTk3MGYtZjY5OWRmZjk3ZGU1LzAvNzUyMUVCNzE0 RUY5QTVGMEE2OTdFODU3NDcxNEE4NkRDRjIzNDYxMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83NTIxRUI3MTRFRjlBNUYwQTY5N0U4NTc0NzE0QTg2RENGMjM0 NjEwLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzMxN2VmZDJhLTAyYWItNDIwMi05 NzBmLWY2OTlkZmY5N2RlNS8wLzMxMzIzNDJlMzEzMDM5MmUzMjMzMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzUzODMzMzczOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHxtFzANBgkqhkiG 9w0BAQsFAAOCAQEAGzReALd2pwu7cnskJWQLKiOYAhvqYCLLL7BTwtDyo+D1VuYX MxJpOHo7BYCshBT8FPWo/kcOZ8jRBbw9uaRFDkBH8qMlN7jbCxOA+8Mq/vyKiIYQ 1jCxfUnXEYZSTMprPzsV7U5D3YGS3D7Fc8VYS3WoR8/pDZGL7q6RyKfbVxjucNZS uxWiA0IibzjzPkMvkqp4ENnJ++GvvTgK6aNKmC3O0/DFuyQbiP4Bl3WA3jaTjaCc x0VpyAZgpqyUwyUffEsQfjjZRLPe+J8WCuYWhjgWXa6AU+uhHpbgrsyEv0be3cGI qT4I9dqlKOyFJfBU9l9H/2WDcP5xUEqS8HVXXA== -----END CERTIFICATE-----Generated at Wed May 13 04:19:51 2026 by rpki-client