$ rpki-client -vvf rpki-rsync.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/3131372e37342e3131342e302f32342d3234203d3e203338353233.roa File: 3131372e37342e3131342e302f32342d3234203d3e203338353233.roa (raw, json) Hash identifier: 99QIwzzuN/Z0qUxV3WwSxtLTN6hnTR8mitqHt39iQf4= Subject key identifier: 17:24:4C:87:2F:4C:16:88:47:BB:98:50:5C:6C:01:32:1E:CC:38:A2 Certificate issuer: /CN=1A4531574FEFFD9E221DE0D82CE657853E4CEE3A Certificate serial: 4CE57B625104852255DE7AC17C0E5A2BD396ADEC Authority key identifier: 1A:45:31:57:4F:EF:FD:9E:22:1D:E0:D8:2C:E6:57:85:3E:4C:EE:3A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1A4531574FEFFD9E221DE0D82CE657853E4CEE3A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/3131372e37342e3131342e302f32342d3234203d3e203338353233.roa Signing time: Sun 03 May 2026 02:25:12 +0000 ROA not before: Sun 03 May 2026 02:20:12 +0000 ROA not after: Sun 02 May 2027 02:25:12 +0000 asID: 38523 IP address blocks: 117.74.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/1A4531574FEFFD9E221DE0D82CE657853E4CEE3A.crl rsync://rpki-rsync.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/1A4531574FEFFD9E221DE0D82CE657853E4CEE3A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1A4531574FEFFD9E221DE0D82CE657853E4CEE3A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 11:56:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:e5:7b:62:51:04:85:22:55:de:7a:c1:7c:0e:5a:2b:d3:96:ad:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A4531574FEFFD9E221DE0D82CE657853E4CEE3A Validity Not Before: May 3 02:20:12 2026 GMT Not After : May 2 02:25:12 2027 GMT Subject: CN=17244C872F4C168847BB98505C6C01321ECC38A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:26:41:04:43:00:89:81:54:7a:85:66:3e:9a: 2e:53:10:ca:c6:ce:51:ff:02:d0:70:28:b7:11:72: 58:91:03:8c:d7:37:27:52:c7:97:19:85:5b:0f:e4: 5f:2b:54:e0:82:46:84:3e:42:a1:8d:15:a9:cf:88: b4:d1:da:2d:d9:1b:54:27:7b:25:1d:b8:2b:0c:03: 01:7f:fe:10:37:62:34:e2:c7:2f:32:e8:81:ea:a0: 6d:5f:a7:a8:e0:2b:7a:4d:0f:f0:c1:12:67:87:64: 9d:7d:79:ac:e5:96:26:28:5b:0c:6a:26:02:a1:21: ce:77:23:10:63:ff:1d:f0:03:6e:e7:38:d1:9b:ea: a6:72:d9:15:9b:ad:15:c5:be:37:38:03:dd:91:0b: 77:70:5f:3a:97:8b:51:27:0b:6a:d7:c4:8e:a8:9e: 0c:4c:08:28:b0:82:19:30:b4:50:e8:58:4a:83:29: d4:79:d3:27:7d:e7:68:aa:24:9d:c1:72:27:c7:ff: 6f:e3:52:35:0e:00:b4:1c:6f:7a:34:f1:28:58:ec: ad:74:52:c6:ee:c1:c3:75:f3:2f:08:f9:b5:9c:16: 7e:fc:69:e5:80:d8:ac:cc:2c:ec:28:88:06:71:c5: 63:9d:c0:bd:70:78:05:e9:b8:3c:51:c5:f1:79:3c: 48:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:24:4C:87:2F:4C:16:88:47:BB:98:50:5C:6C:01:32:1E:CC:38:A2 X509v3 Authority Key Identifier: keyid:1A:45:31:57:4F:EF:FD:9E:22:1D:E0:D8:2C:E6:57:85:3E:4C:EE:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/1A4531574FEFFD9E221DE0D82CE657853E4CEE3A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1A4531574FEFFD9E221DE0D82CE657853E4CEE3A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/3131372e37342e3131342e302f32342d3234203d3e203338353233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 117.74.114.0/24 Signature Algorithm: sha256WithRSAEncryption 4d:88:c3:c5:fb:5f:a9:7e:ca:3b:d0:7b:89:bd:6c:a9:57:6f: d7:2c:95:70:a0:da:fe:7a:ac:87:1e:57:d8:02:a9:90:3d:fb: f1:57:f2:52:e1:66:56:08:a2:ed:9d:f9:dd:8b:53:d8:74:76: cc:a7:75:37:dd:2f:cd:5a:6d:d8:a1:cb:51:2c:32:d5:3a:47: b4:76:24:6b:5a:a8:2f:35:f9:fa:e9:bf:fd:22:d3:a0:82:87: 73:bc:31:c6:10:80:16:82:4e:1b:0a:9c:0b:d4:cc:b2:cf:4e: d4:c2:2c:c2:ea:01:7d:45:cb:6d:fe:98:ba:07:af:bc:f0:e8: 13:a6:e8:75:72:6e:97:a8:2e:0e:b9:f0:23:e5:41:c7:7e:36: ef:9b:81:39:b2:a3:d7:36:28:6e:d4:4f:50:77:b7:5c:38:dc: 2a:98:75:5c:e2:60:c1:ca:fc:b5:ae:d8:30:28:b7:18:27:1b: 6b:02:10:6f:c6:95:6d:48:ed:8b:48:c0:ff:d7:be:90:07:0f: 8c:bb:5f:c5:da:d4:8b:14:37:4f:ac:59:1c:ce:f8:d3:8e:64: f2:91:05:b3:e4:ab:84:9d:39:32:80:63:00:19:86:a4:f6:a3: 70:96:fa:89:02:4d:59:c2:64:2f:ef:b2:91:7a:4b:b7:99:da: 8e:e5:f7:e0 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUTOV7YlEEhSJV3nrBfA5aK9OWrewwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE0NTMxNTc0RkVGRkQ5RTIyMURFMEQ4MkNFNjU3ODUz RTRDRUUzQTAeFw0yNjA1MDMwMjIwMTJaFw0yNzA1MDIwMjI1MTJaMDMxMTAvBgNV BAMTKDE3MjQ0Qzg3MkY0QzE2ODg0N0JCOTg1MDVDNkMwMTMyMUVDQzM4QTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIJkEEQwCJgVR6hWY+mi5TEMrG zlH/AtBwKLcRcliRA4zXNydSx5cZhVsP5F8rVOCCRoQ+QqGNFanPiLTR2i3ZG1Qn eyUduCsMAwF//hA3YjTixy8y6IHqoG1fp6jgK3pND/DBEmeHZJ19eazlliYoWwxq JgKhIc53IxBj/x3wA27nONGb6qZy2RWbrRXFvjc4A92RC3dwXzqXi1EnC2rXxI6o ngxMCCiwghkwtFDoWEqDKdR50yd952iqJJ3BcifH/2/jUjUOALQcb3o08ShY7K10 UsbuwcN18y8I+bWcFn78aeWA2KzMLOwoiAZxxWOdwL1weAXpuDxRxfF5PEi3AgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUFyRMhy9MFohHu5hQXGwBMh7MOKIwHwYDVR0j BBgwFoAUGkUxV0/v/Z4iHeDYLOZXhT5M7jowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzU1YTFhNDQtMzM3ZC00ZGI0LTkwZDctNWJkNGYzNzIxNGI4LzAvMUE0NTMxNTc0 RkVGRkQ5RTIyMURFMEQ4MkNFNjU3ODUzRTRDRUUzQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xQTQ1MzE1NzRGRUZGRDlFMjIxREUwRDgyQ0U2NTc4NTNFNENF RTNBLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzM1NWExYTQ0LTMzN2QtNGRiNC05 MGQ3LTViZDRmMzcyMTRiOC8wLzMxMzEzNzJlMzczNDJlMzEzMTM0MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzMzODM1MzIzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHVKcjANBgkqhkiG 9w0BAQsFAAOCAQEATYjDxftfqX7KO9B7ib1sqVdv1yyVcKDa/nqshx5X2AKpkD37 8VfyUuFmVgii7Z353YtT2HR2zKd1N90vzVpt2KHLUSwy1TpHtHYka1qoLzX5+um/ /SLToIKHc7wxxhCAFoJOGwqcC9TMss9O1MIswuoBfUXLbf6YugevvPDoE6bodXJu l6guDrnwI+VBx34275uBObKj1zYobtRPUHe3XDjcKph1XOJgwcr8ta7YMCi3GCcb awIQb8aVbUjti0jA/9e+kAcPjLtfxdrUixQ3T6xZHM74045k8pEFs+SrhJ05MoBj ABmGpPajcJb6iQJNWcJkL++ykXpLt5najuX34A== -----END CERTIFICATE-----Generated at Wed May 13 04:03:58 2026 by rpki-client