$ rpki-client -vvf rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/3131362e36382e3136332e302f32342d3234203d3e203536323436.roa File: 3131362e36382e3136332e302f32342d3234203d3e203536323436.roa (raw, json) Hash identifier: 4rAkydEsvzUApfn8D90Nf1rq/iJ5a12zvomjvdMOckU= Subject key identifier: 68:C6:12:3B:06:A8:40:4A:FB:D4:A6:39:B2:21:EA:E6:86:5B:32:D5 Certificate issuer: /CN=10DB2C44E26CA2A146EF738D39F53CBB0901DB52 Certificate serial: 2B56CD9EEC65031DD00E0C2BEA8C88843E7DA86C Authority key identifier: 10:DB:2C:44:E2:6C:A2:A1:46:EF:73:8D:39:F5:3C:BB:09:01:DB:52 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/3131362e36382e3136332e302f32342d3234203d3e203536323436.roa Signing time: Sun 03 May 2026 02:36:32 +0000 ROA not before: Sun 03 May 2026 02:31:32 +0000 ROA not after: Sun 02 May 2027 02:36:32 +0000 asID: 56246 IP address blocks: 116.68.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.crl rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 00:10:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:56:cd:9e:ec:65:03:1d:d0:0e:0c:2b:ea:8c:88:84:3e:7d:a8:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10DB2C44E26CA2A146EF738D39F53CBB0901DB52 Validity Not Before: May 3 02:31:32 2026 GMT Not After : May 2 02:36:32 2027 GMT Subject: CN=68C6123B06A8404AFBD4A639B221EAE6865B32D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:df:b5:9c:9e:39:04:a5:e5:92:28:fe:91:23: d5:49:74:16:e5:95:b1:bb:76:7e:b1:a5:cf:27:3c: 40:5e:b9:da:fa:0c:8f:b5:50:e5:8b:2b:44:fd:27: 9e:d3:6e:06:73:33:ce:17:bc:40:dd:d1:2b:95:23: 7f:8f:1e:44:69:75:a7:ec:af:38:84:49:52:f8:aa: 7e:f0:8d:7a:57:98:0f:a3:1c:28:92:a6:1e:33:48: e6:58:0c:fb:31:27:6e:ed:35:68:b7:d9:ba:41:42: 1b:8f:d8:60:a0:c6:de:c4:04:4a:92:59:92:1f:8f: 19:ba:7b:17:e7:95:31:a0:42:2b:68:b6:17:df:e7: 9d:8d:42:d1:17:f5:80:b3:33:86:6f:cc:6a:c1:39: 0e:69:f9:9d:ee:1a:51:69:1f:d4:ca:79:64:ba:f0: 55:12:9f:93:b7:3a:a0:bd:40:a2:8a:04:61:a9:dc: 73:8d:a9:be:56:66:24:ed:ac:5e:20:11:0c:8b:ac: 34:3c:d4:1d:b9:88:3f:96:df:7d:6f:03:af:ed:43: e9:d4:4e:72:5f:d4:6e:1e:55:10:55:6a:46:ad:c0: b0:38:41:23:f4:e5:40:4e:63:fd:ec:9d:bf:91:db: 0b:90:f7:52:93:77:d4:8e:46:b1:3e:77:fb:f8:91: 74:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:C6:12:3B:06:A8:40:4A:FB:D4:A6:39:B2:21:EA:E6:86:5B:32:D5 X509v3 Authority Key Identifier: keyid:10:DB:2C:44:E2:6C:A2:A1:46:EF:73:8D:39:F5:3C:BB:09:01:DB:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/3131362e36382e3136332e302f32342d3234203d3e203536323436.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 116.68.163.0/24 Signature Algorithm: sha256WithRSAEncryption 40:0f:e3:f5:fc:e0:7f:c5:bd:75:fe:1c:0b:71:a7:79:95:40: 61:75:d0:35:62:23:02:e4:2d:62:a4:62:9f:ab:0e:a2:98:44: 7f:11:99:3f:ed:47:8f:ac:17:16:81:d5:07:75:eb:df:ce:75: fe:06:ba:d3:9a:a2:f0:17:60:ca:e9:3f:38:2c:6d:c8:c1:74: 22:19:39:06:f4:8c:a2:bd:47:d1:a9:2b:72:71:83:d5:02:0a: 2d:43:f4:0f:b4:22:df:89:cd:23:cc:9c:be:8f:59:50:3e:1f: 46:56:43:ad:2e:0a:64:68:d2:9f:69:78:5f:f4:e2:b6:97:a4: 27:41:38:02:05:eb:17:7e:94:96:00:e2:ea:67:b4:d1:f5:5d: 9e:5b:84:03:d7:0a:9e:10:71:98:78:5d:0d:27:d2:32:00:b1: 86:ac:51:5f:7d:7b:2e:8e:24:72:a0:83:13:9b:bc:24:c6:de: 8e:97:88:4f:36:e9:28:35:37:39:95:2e:4d:cf:b4:aa:87:99: b6:28:06:45:56:0a:46:b6:8f:c0:df:6e:9d:c9:2c:67:ce:a6: 27:d1:40:44:d6:46:e1:5c:40:45:b8:81:4a:8f:28:0a:e8:89: a0:76:8f:64:9d:e1:ac:47:44:07:25:5f:19:10:ef:dc:73:e6: fe:ee:5a:0f -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUK1bNnuxlAx3QDgwr6oyIhD59qGwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTBEQjJDNDRFMjZDQTJBMTQ2RUY3MzhEMzlGNTNDQkIw OTAxREI1MjAeFw0yNjA1MDMwMjMxMzJaFw0yNzA1MDIwMjM2MzJaMDMxMTAvBgNV BAMTKDY4QzYxMjNCMDZBODQwNEFGQkQ0QTYzOUIyMjFFQUU2ODY1QjMyRDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDv37WcnjkEpeWSKP6RI9VJdBbl lbG7dn6xpc8nPEBeudr6DI+1UOWLK0T9J57TbgZzM84XvEDd0SuVI3+PHkRpdafs rziESVL4qn7wjXpXmA+jHCiSph4zSOZYDPsxJ27tNWi32bpBQhuP2GCgxt7EBEqS WZIfjxm6exfnlTGgQitothff552NQtEX9YCzM4ZvzGrBOQ5p+Z3uGlFpH9TKeWS6 8FUSn5O3OqC9QKKKBGGp3HONqb5WZiTtrF4gEQyLrDQ81B25iD+W331vA6/tQ+nU TnJf1G4eVRBVakatwLA4QSP05UBOY/3snb+R2wuQ91KTd9SORrE+d/v4kXT9AgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUaMYSOwaoQEr71KY5siHq5oZbMtUwHwYDVR0j BBgwFoAUENssROJsoqFG73ONOfU8uwkB21IwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWQyMjdkYmUtNGExYy00MGIwLTk0YTYtNzkzYmRiZGEzNzc3LzAvMTBEQjJDNDRF MjZDQTJBMTQ2RUY3MzhEMzlGNTNDQkIwOTAxREI1Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xMERCMkM0NEUyNkNBMkExNDZFRjczOEQzOUY1M0NCQjA5MDFE QjUyLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzVkMjI3ZGJlLTRhMWMtNDBiMC05 NGE2LTc5M2JkYmRhMzc3Ny8wLzMxMzEzNjJlMzYzODJlMzEzNjMzMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzUzNjMyMzQzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHREozANBgkqhkiG 9w0BAQsFAAOCAQEAQA/j9fzgf8W9df4cC3GneZVAYXXQNWIjAuQtYqRin6sOophE fxGZP+1Hj6wXFoHVB3Xr3851/ga605qi8Bdgyuk/OCxtyMF0Ihk5BvSMor1H0akr cnGD1QIKLUP0D7Qi34nNI8ycvo9ZUD4fRlZDrS4KZGjSn2l4X/TitpekJ0E4AgXr F36UlgDi6me00fVdnluEA9cKnhBxmHhdDSfSMgCxhqxRX317Lo4kcqCDE5u8JMbe jpeITzbpKDU3OZUuTc+0qoeZtigGRVYKRraPwN9uncksZ86mJ9FARNZG4VxARbiB So8oCuiJoHaPZJ3hrEdEByVfGRDv3HPm/u5aDw== -----END CERTIFICATE-----Generated at Wed May 13 04:16:58 2026 by rpki-client