$ rpki-client -vvf rpki-rsync.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0/3131372e35332e3134342e302f32322d3234203d3e203538333937.roa File: 3131372e35332e3134342e302f32322d3234203d3e203538333937.roa (raw, json) Hash identifier: Sxgj/jIWe1519euOI3Cc2FFGv49kzekxQhzGH0BLJlM= Subject key identifier: 24:02:63:07:91:49:0B:F8:68:6B:B0:78:CF:47:D2:C2:A6:0C:15:E1 Certificate issuer: /CN=D31497BCB1472C5592E6CB6AED8B3CBFEAB99430 Certificate serial: 703A5FA915090FFCA9D49BBAB0143B86F0DE2B04 Authority key identifier: D3:14:97:BC:B1:47:2C:55:92:E6:CB:6A:ED:8B:3C:BF:EA:B9:94:30 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D31497BCB1472C5592E6CB6AED8B3CBFEAB99430.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0/3131372e35332e3134342e302f32322d3234203d3e203538333937.roa Signing time: Sun 03 May 2026 02:32:54 +0000 ROA not before: Sun 03 May 2026 02:27:54 +0000 ROA not after: Sun 02 May 2027 02:32:54 +0000 asID: 58397 IP address blocks: 117.53.144.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0/D31497BCB1472C5592E6CB6AED8B3CBFEAB99430.crl rsync://rpki-rsync.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0/D31497BCB1472C5592E6CB6AED8B3CBFEAB99430.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D31497BCB1472C5592E6CB6AED8B3CBFEAB99430.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 02:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:3a:5f:a9:15:09:0f:fc:a9:d4:9b:ba:b0:14:3b:86:f0:de:2b:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D31497BCB1472C5592E6CB6AED8B3CBFEAB99430 Validity Not Before: May 3 02:27:54 2026 GMT Not After : May 2 02:32:54 2027 GMT Subject: CN=2402630791490BF8686BB078CF47D2C2A60C15E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:a2:c5:b4:df:1c:42:7f:11:53:a3:ed:6c:0f: 3d:30:98:9d:81:82:59:ae:c1:c2:9d:47:7e:95:de: 1f:02:56:4f:d4:fe:17:78:e5:4e:2b:7c:ca:4b:e1: 85:a5:f4:e2:e1:cc:08:de:4b:d9:37:18:f2:56:0d: 19:ee:86:03:99:79:c4:6c:7e:b0:a1:1d:64:2b:a9: f0:63:1d:75:19:dd:24:af:b2:2e:85:09:bf:c3:06: 07:15:a8:51:b6:d4:a0:3e:62:63:4e:ef:37:e0:fe: 4d:e9:52:77:53:aa:86:82:c3:ff:c4:c0:6f:3f:40: 35:fd:19:19:63:08:c6:d3:93:15:81:ed:b7:aa:f1: 07:44:39:fb:29:f6:7f:27:76:25:ab:b2:e6:2d:d0: 13:03:d8:9a:a2:da:76:9b:11:6d:28:3e:21:d9:9f: e2:db:1d:36:9b:6e:d3:54:21:4d:5d:14:54:2f:08: ff:e7:23:da:9c:55:01:8c:3b:29:8d:70:6e:ac:43: 09:e0:d5:ed:4a:c2:d7:c9:ad:75:6e:b3:20:f4:22: 17:e1:5e:58:ff:22:62:3b:55:fe:ac:22:6b:91:d8: 38:a5:5f:fa:fa:37:31:51:8e:b4:3f:de:3a:55:c6: c4:c3:d1:57:d3:cc:a6:b4:29:5b:9d:e1:ed:aa:7a: f0:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:02:63:07:91:49:0B:F8:68:6B:B0:78:CF:47:D2:C2:A6:0C:15:E1 X509v3 Authority Key Identifier: keyid:D3:14:97:BC:B1:47:2C:55:92:E6:CB:6A:ED:8B:3C:BF:EA:B9:94:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0/D31497BCB1472C5592E6CB6AED8B3CBFEAB99430.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D31497BCB1472C5592E6CB6AED8B3CBFEAB99430.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0/3131372e35332e3134342e302f32322d3234203d3e203538333937.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 117.53.144.0/22 Signature Algorithm: sha256WithRSAEncryption 7a:fc:1e:62:77:40:ac:16:e4:1c:ba:20:76:45:bf:b4:f9:43: d9:ee:74:1b:6f:94:e8:b4:58:ac:b7:83:54:8a:d6:2d:c5:2a: a3:38:c7:a8:a5:10:1e:25:c1:44:4d:cf:2e:2c:25:8d:5f:f9: 12:53:4c:40:10:cd:9c:f2:9f:15:eb:93:95:a3:41:ad:63:5f: f7:0b:ac:5e:ff:18:a2:e8:ae:01:8b:fa:0a:f1:24:6f:fb:46: b2:66:17:33:d8:69:b2:ef:08:1b:76:26:58:0a:b8:fd:51:f4: 71:e7:37:0b:47:fb:ed:d8:9b:4f:44:04:e4:17:aa:3a:dc:d6: 6f:5e:13:28:57:06:7c:73:1e:b7:88:66:e3:e7:e0:fe:66:ab: de:59:c9:93:5a:91:1c:c8:23:a4:e4:8f:bb:e2:2d:2a:ed:1b: aa:97:51:53:5d:6d:7a:de:ea:3c:c6:22:1f:be:5a:5e:be:77: f5:c2:6c:58:12:7b:52:89:ac:6f:0c:a5:3e:54:67:04:a1:4f: f8:6e:2d:dc:67:c9:56:9f:f1:eb:b8:a3:e8:62:62:f2:97:8d: 5b:73:ec:3d:34:ee:1e:c7:c5:a9:1b:66:84:73:19:2c:08:84: a0:60:e8:e9:83:55:0e:f2:48:6e:51:21:74:c6:a7:b8:d8:c3: 1f:45:9c:7e -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUcDpfqRUJD/yp1Ju6sBQ7hvDeKwQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDMxNDk3QkNCMTQ3MkM1NTkyRTZDQjZBRUQ4QjNDQkZF QUI5OTQzMDAeFw0yNjA1MDMwMjI3NTRaFw0yNzA1MDIwMjMyNTRaMDMxMTAvBgNV BAMTKDI0MDI2MzA3OTE0OTBCRjg2ODZCQjA3OENGNDdEMkMyQTYwQzE1RTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfosW03xxCfxFTo+1sDz0wmJ2B glmuwcKdR36V3h8CVk/U/hd45U4rfMpL4YWl9OLhzAjeS9k3GPJWDRnuhgOZecRs frChHWQrqfBjHXUZ3SSvsi6FCb/DBgcVqFG21KA+YmNO7zfg/k3pUndTqoaCw//E wG8/QDX9GRljCMbTkxWB7beq8QdEOfsp9n8ndiWrsuYt0BMD2Jqi2nabEW0oPiHZ n+LbHTabbtNUIU1dFFQvCP/nI9qcVQGMOymNcG6sQwng1e1KwtfJrXVusyD0Ihfh Xlj/ImI7Vf6sImuR2DilX/r6NzFRjrQ/3jpVxsTD0VfTzKa0KVud4e2qevDxAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUJAJjB5FJC/hoa7B4z0fSwqYMFeEwHwYDVR0j BBgwFoAU0xSXvLFHLFWS5stq7Ys8v+q5lDAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTE5MTY2YTEtMThjZC00NGQzLWE2ZTAtMmVmODJmNzYwZDI4LzAvRDMxNDk3QkNC MTQ3MkM1NTkyRTZDQjZBRUQ4QjNDQkZFQUI5OTQzMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EMzE0OTdCQ0IxNDcyQzU1OTJFNkNCNkFFRDhCM0NCRkVBQjk5 NDMwLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzUxOTE2NmExLTE4Y2QtNDRkMy1h NmUwLTJlZjgyZjc2MGQyOC8wLzMxMzEzNzJlMzUzMzJlMzEzNDM0MmUzMDJmMzIz MjJkMzIzNDIwM2QzZTIwMzUzODMzMzkzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAnU1kDANBgkqhkiG 9w0BAQsFAAOCAQEAevweYndArBbkHLogdkW/tPlD2e50G2+U6LRYrLeDVIrWLcUq ozjHqKUQHiXBRE3PLiwljV/5ElNMQBDNnPKfFeuTlaNBrWNf9wusXv8YouiuAYv6 CvEkb/tGsmYXM9hpsu8IG3YmWAq4/VH0cec3C0f77dibT0QE5BeqOtzWb14TKFcG fHMet4hm4+fg/mar3lnJk1qRHMgjpOSPu+ItKu0bqpdRU11tet7qPMYiH75aXr53 9cJsWBJ7UomsbwylPlRnBKFP+G4t3GfJVp/x67ij6GJi8peNW3PsPTTuHsfFqRtm hHMZLAiEoGDo6YNVDvJIblEhdManuNjDH0Wcfg== -----END CERTIFICATE-----Generated at Wed May 13 06:37:07 2026 by rpki-client