$ rpki-client -vvf rpki-rsync.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/3131372e37342e3131392e302f32342d3234203d3e203338353233.roa File: 3131372e37342e3131392e302f32342d3234203d3e203338353233.roa (raw, json) Hash identifier: uwXs1B2vENHoFPXzX6L0y7II8AePyfh6rZF6h22vRrA= Subject key identifier: 9F:29:33:DE:DB:CB:1B:B2:E5:33:2C:71:77:59:82:11:EB:1B:1D:D0 Certificate issuer: /CN=1A4531574FEFFD9E221DE0D82CE657853E4CEE3A Certificate serial: 343BDD38ECFC7BEDD3A20621FF9FC7D493804444 Authority key identifier: 1A:45:31:57:4F:EF:FD:9E:22:1D:E0:D8:2C:E6:57:85:3E:4C:EE:3A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1A4531574FEFFD9E221DE0D82CE657853E4CEE3A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/3131372e37342e3131392e302f32342d3234203d3e203338353233.roa Signing time: Sun 03 May 2026 02:25:12 +0000 ROA not before: Sun 03 May 2026 02:20:12 +0000 ROA not after: Sun 02 May 2027 02:25:12 +0000 asID: 38523 IP address blocks: 117.74.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/1A4531574FEFFD9E221DE0D82CE657853E4CEE3A.crl rsync://rpki-rsync.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/1A4531574FEFFD9E221DE0D82CE657853E4CEE3A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1A4531574FEFFD9E221DE0D82CE657853E4CEE3A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 11:56:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:3b:dd:38:ec:fc:7b:ed:d3:a2:06:21:ff:9f:c7:d4:93:80:44:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A4531574FEFFD9E221DE0D82CE657853E4CEE3A Validity Not Before: May 3 02:20:12 2026 GMT Not After : May 2 02:25:12 2027 GMT Subject: CN=9F2933DEDBCB1BB2E5332C7177598211EB1B1DD0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:62:48:8e:98:a0:57:5e:c3:7a:59:b2:25:ee: d2:78:d7:b6:6e:00:c7:fe:e5:72:f8:58:12:80:3c: f6:15:c2:66:10:df:79:d1:02:7f:32:23:7d:62:82: 11:fd:45:fa:ae:ca:7d:df:63:5f:25:73:af:0b:95: 91:32:ba:24:73:d0:7b:49:d7:97:3f:13:f8:7f:3c: 74:f4:63:d4:0b:e2:d6:3b:93:b0:74:5e:87:ca:b9: ae:a9:72:2d:00:6f:d7:9f:bb:cd:07:d8:f9:a5:7f: 37:28:ad:7d:6e:81:da:cd:e6:d6:4a:de:cf:a5:1b: 3e:8a:c9:11:ea:6d:ee:a4:94:bf:25:65:a3:5e:ba: 98:d9:ff:ef:92:cf:0c:e3:f2:67:4b:79:de:f6:66: 15:65:99:4f:ba:d8:49:65:c9:e1:37:b5:9b:30:74: 63:c8:fa:35:67:ae:34:38:ad:b3:30:b7:b0:6f:95: 7f:f4:51:f0:5d:59:35:9d:69:8a:fe:ad:ef:a8:f2: 9f:91:b8:23:e8:5e:bb:01:86:b6:18:52:8f:ee:09: 37:79:65:d4:20:61:46:9c:a3:f0:fd:1a:22:9a:33: 79:0e:a0:9d:ae:dd:22:da:f4:b1:5a:8e:51:b6:b7: 21:d5:5b:50:aa:4d:6b:53:f8:61:43:1a:e6:ee:1d: 75:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:29:33:DE:DB:CB:1B:B2:E5:33:2C:71:77:59:82:11:EB:1B:1D:D0 X509v3 Authority Key Identifier: keyid:1A:45:31:57:4F:EF:FD:9E:22:1D:E0:D8:2C:E6:57:85:3E:4C:EE:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/1A4531574FEFFD9E221DE0D82CE657853E4CEE3A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1A4531574FEFFD9E221DE0D82CE657853E4CEE3A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/3131372e37342e3131392e302f32342d3234203d3e203338353233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 117.74.119.0/24 Signature Algorithm: sha256WithRSAEncryption c2:0f:d6:d3:ce:1b:f0:af:f1:d3:de:47:53:f6:ba:85:f7:75: 66:c0:7e:3e:df:ac:04:ea:2c:73:a0:56:e5:49:be:97:f4:c6: 0e:60:32:e8:45:32:62:d8:7b:41:67:e6:48:4e:1e:c5:ec:5a: d0:6c:6a:16:de:69:7d:3b:da:8c:b8:ab:cd:b6:51:32:d7:0b: a0:bd:51:40:0d:94:6f:b6:4c:2f:f2:ad:cc:e9:36:d8:6c:ed: fa:3f:9d:46:fc:76:4c:a5:e3:03:c8:4d:d9:34:2e:ac:b5:27: 26:90:1c:fa:03:9e:04:79:98:7c:c2:f9:a9:13:ef:da:76:07: 67:76:96:03:49:e1:09:54:64:24:b7:d2:86:1b:e8:2e:2c:f7: c3:2b:4a:02:f8:56:01:47:78:33:49:f8:28:20:51:36:bf:a9: 83:be:6b:9f:ac:0a:a6:44:90:de:f9:32:06:83:2a:c6:ab:7c: 67:c0:4b:fa:b1:3e:71:c6:d2:98:6c:85:ae:a6:ce:66:3a:11: 3b:d7:a0:5c:0e:86:0a:44:6f:ca:ab:c2:90:84:9c:34:5a:71: 0d:1f:4b:37:2a:c0:ed:7a:91:03:47:1c:15:b0:d0:1e:e1:46: b4:91:a3:d0:ad:d9:44:40:14:82:3c:29:12:24:ed:4b:4b:49: dc:20:5c:81 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUNDvdOOz8e+3TogYh/5/H1JOAREQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE0NTMxNTc0RkVGRkQ5RTIyMURFMEQ4MkNFNjU3ODUz RTRDRUUzQTAeFw0yNjA1MDMwMjIwMTJaFw0yNzA1MDIwMjI1MTJaMDMxMTAvBgNV BAMTKDlGMjkzM0RFREJDQjFCQjJFNTMzMkM3MTc3NTk4MjExRUIxQjFERDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2YkiOmKBXXsN6WbIl7tJ417Zu AMf+5XL4WBKAPPYVwmYQ33nRAn8yI31ighH9Rfquyn3fY18lc68LlZEyuiRz0HtJ 15c/E/h/PHT0Y9QL4tY7k7B0XofKua6pci0Ab9efu80H2PmlfzcorX1ugdrN5tZK 3s+lGz6KyRHqbe6klL8lZaNeupjZ/++Szwzj8mdLed72ZhVlmU+62EllyeE3tZsw dGPI+jVnrjQ4rbMwt7BvlX/0UfBdWTWdaYr+re+o8p+RuCPoXrsBhrYYUo/uCTd5 ZdQgYUaco/D9GiKaM3kOoJ2u3SLa9LFajlG2tyHVW1CqTWtT+GFDGubuHXW/AgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUnykz3tvLG7LlMyxxd1mCEesbHdAwHwYDVR0j BBgwFoAUGkUxV0/v/Z4iHeDYLOZXhT5M7jowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzU1YTFhNDQtMzM3ZC00ZGI0LTkwZDctNWJkNGYzNzIxNGI4LzAvMUE0NTMxNTc0 RkVGRkQ5RTIyMURFMEQ4MkNFNjU3ODUzRTRDRUUzQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xQTQ1MzE1NzRGRUZGRDlFMjIxREUwRDgyQ0U2NTc4NTNFNENF RTNBLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzM1NWExYTQ0LTMzN2QtNGRiNC05 MGQ3LTViZDRmMzcyMTRiOC8wLzMxMzEzNzJlMzczNDJlMzEzMTM5MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzMzODM1MzIzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHVKdzANBgkqhkiG 9w0BAQsFAAOCAQEAwg/W084b8K/x095HU/a6hfd1ZsB+Pt+sBOosc6BW5Um+l/TG DmAy6EUyYth7QWfmSE4exexa0GxqFt5pfTvajLirzbZRMtcLoL1RQA2Ub7ZML/Kt zOk22Gzt+j+dRvx2TKXjA8hN2TQurLUnJpAc+gOeBHmYfML5qRPv2nYHZ3aWA0nh CVRkJLfShhvoLiz3wytKAvhWAUd4M0n4KCBRNr+pg75rn6wKpkSQ3vkyBoMqxqt8 Z8BL+rE+ccbSmGyFrqbOZjoRO9egXA6GCkRvyqvCkIScNFpxDR9LNyrA7XqRA0cc FbDQHuFGtJGj0K3ZREAUgjwpEiTtS0tJ3CBcgQ== -----END CERTIFICATE-----Generated at Wed May 13 04:03:54 2026 by rpki-client