$ rpki-client -vvf rpki-rsync.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/3131372e37342e3132302e302f32312d3231203d3e203338353135.roa File: 3131372e37342e3132302e302f32312d3231203d3e203338353135.roa (raw, json) Hash identifier: BaQmZEH9tW06GWie+v+l91ALirtn7nIilUv54Li2/vw= Subject key identifier: DE:24:6A:9F:6B:99:6E:09:F9:56:B2:74:1F:90:06:BA:DE:9F:74:42 Certificate issuer: /CN=67869B177D646DD081563D36E6E9775C31473EE2 Certificate serial: 358F19EFA266B9C5BEE2915BB5E503265698FD35 Authority key identifier: 67:86:9B:17:7D:64:6D:D0:81:56:3D:36:E6:E9:77:5C:31:47:3E:E2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67869B177D646DD081563D36E6E9775C31473EE2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/3131372e37342e3132302e302f32312d3231203d3e203338353135.roa Signing time: Sun 03 May 2026 02:41:01 +0000 ROA not before: Sun 03 May 2026 02:36:01 +0000 ROA not after: Sun 02 May 2027 02:41:01 +0000 asID: 38515 IP address blocks: 117.74.120.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/67869B177D646DD081563D36E6E9775C31473EE2.crl rsync://rpki-rsync.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/67869B177D646DD081563D36E6E9775C31473EE2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67869B177D646DD081563D36E6E9775C31473EE2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 11:58:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:8f:19:ef:a2:66:b9:c5:be:e2:91:5b:b5:e5:03:26:56:98:fd:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67869B177D646DD081563D36E6E9775C31473EE2 Validity Not Before: May 3 02:36:01 2026 GMT Not After : May 2 02:41:01 2027 GMT Subject: CN=DE246A9F6B996E09F956B2741F9006BADE9F7442 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:12:ee:d5:62:79:46:b4:9f:6f:87:f2:b7:82: c3:87:58:fc:78:be:c2:40:7c:7c:a3:26:21:8e:b7: 5a:e4:01:19:c4:37:68:da:c3:fc:f4:7b:a7:54:d3: d4:4d:a2:9a:6e:31:8f:17:96:e0:77:80:51:c3:a1: 57:0b:5d:76:e7:e4:b7:9f:ef:26:96:50:12:00:dd: 96:c6:53:9e:f5:d1:e9:e7:33:1f:a4:03:6e:98:1f: 65:37:3a:f8:25:f6:57:88:c8:83:ab:a2:1d:cb:7a: 99:10:65:e5:29:2b:25:76:fd:a4:51:3a:c7:b9:b4: 22:6e:b4:a2:e8:21:c9:73:0c:0a:91:6e:62:1a:28: 19:3a:8d:d1:1c:f3:69:99:47:87:76:6b:fa:c0:8d: 50:ea:a1:77:30:ed:dc:23:2f:59:0c:fb:35:ff:2a: 7b:74:cf:f1:ee:66:c7:ad:38:12:da:61:b2:fb:71: 0b:bc:77:92:92:35:37:d7:d4:a7:56:49:09:79:1e: 5d:63:7d:09:92:2f:ed:13:9c:7e:88:cc:db:2b:99: 34:ef:a9:70:80:7c:1c:27:c8:11:c3:45:db:e4:00: 0a:8a:d8:42:9f:4a:6d:a9:c4:2a:e4:6d:7a:09:fd: 28:0b:57:db:66:74:7c:a5:7d:4c:04:4b:fa:8f:6e: 5e:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:24:6A:9F:6B:99:6E:09:F9:56:B2:74:1F:90:06:BA:DE:9F:74:42 X509v3 Authority Key Identifier: keyid:67:86:9B:17:7D:64:6D:D0:81:56:3D:36:E6:E9:77:5C:31:47:3E:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/67869B177D646DD081563D36E6E9775C31473EE2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67869B177D646DD081563D36E6E9775C31473EE2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/3131372e37342e3132302e302f32312d3231203d3e203338353135.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 117.74.120.0/21 Signature Algorithm: sha256WithRSAEncryption 72:d9:37:48:05:13:01:18:f0:4e:70:48:a2:f1:53:5e:6a:3e: 12:44:b7:0f:cb:7e:ca:f0:09:f0:41:5b:b2:f7:26:6a:05:7e: 0c:7d:3b:15:60:03:d8:01:27:33:1e:00:61:5e:d6:7b:5b:8d: 70:f7:6c:c4:4e:1b:17:f9:0b:92:2e:8f:18:2e:b4:61:c7:87: 1a:40:80:6b:5d:fe:c0:7f:b7:fb:f8:ea:6b:8f:f9:b4:d6:58: 92:f7:33:e7:90:88:b2:c5:0e:20:18:df:51:40:7e:e2:69:b1: d9:56:68:ac:48:fb:81:14:61:36:09:20:b9:39:d7:5c:85:16: b7:c2:d6:35:e8:3b:52:6d:3b:fc:e3:66:fa:dd:bb:9c:3d:9d: 57:48:b2:4e:f5:de:68:c0:96:75:03:75:d4:a8:2c:6e:6a:69: 36:2e:cf:51:fd:8a:94:55:27:c4:70:f1:b3:aa:f5:f3:9e:fc: 4f:ec:8c:b9:6e:3c:c8:1f:c5:dd:d6:70:f4:80:3a:49:1f:ab: 9a:cc:75:11:07:df:62:ef:87:38:bb:59:ae:6d:5d:dd:9d:72: 4f:d9:01:74:6c:29:fa:0b:99:35:ac:c3:18:b3:d6:86:89:c8: 6c:f3:8a:69:07:06:17:c8:39:9b:21:d7:05:c2:2f:b9:ea:e5: c5:40:08:b6 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUNY8Z76JmucW+4pFbteUDJlaY/TUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjc4NjlCMTc3RDY0NkREMDgxNTYzRDM2RTZFOTc3NUMz MTQ3M0VFMjAeFw0yNjA1MDMwMjM2MDFaFw0yNzA1MDIwMjQxMDFaMDMxMTAvBgNV BAMTKERFMjQ2QTlGNkI5OTZFMDlGOTU2QjI3NDFGOTAwNkJBREU5Rjc0NDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdEu7VYnlGtJ9vh/K3gsOHWPx4 vsJAfHyjJiGOt1rkARnEN2jaw/z0e6dU09RNoppuMY8XluB3gFHDoVcLXXbn5Lef 7yaWUBIA3ZbGU5710ennMx+kA26YH2U3Ovgl9leIyIOroh3LepkQZeUpKyV2/aRR Ose5tCJutKLoIclzDAqRbmIaKBk6jdEc82mZR4d2a/rAjVDqoXcw7dwjL1kM+zX/ Knt0z/HuZsetOBLaYbL7cQu8d5KSNTfX1KdWSQl5Hl1jfQmSL+0TnH6IzNsrmTTv qXCAfBwnyBHDRdvkAAqK2EKfSm2pxCrkbXoJ/SgLV9tmdHylfUwES/qPbl5DAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQU3iRqn2uZbgn5VrJ0H5AGut6fdEIwHwYDVR0j BBgwFoAUZ4abF31kbdCBVj025ul3XDFHPuIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmM0YzY0YTktMzUzNy00YmM3LTg2MTMtOGU5ODE2MjllNGNhLzAvNjc4NjlCMTc3 RDY0NkREMDgxNTYzRDM2RTZFOTc3NUMzMTQ3M0VFMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82Nzg2OUIxNzdENjQ2REQwODE1NjNEMzZFNkU5Nzc1QzMxNDcz RUUyLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzZjNGM2NGE5LTM1MzctNGJjNy04 NjEzLThlOTgxNjI5ZTRjYS8wLzMxMzEzNzJlMzczNDJlMzEzMjMwMmUzMDJmMzIz MTJkMzIzMTIwM2QzZTIwMzMzODM1MzEzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA3VKeDANBgkqhkiG 9w0BAQsFAAOCAQEActk3SAUTARjwTnBIovFTXmo+EkS3D8t+yvAJ8EFbsvcmagV+ DH07FWAD2AEnMx4AYV7We1uNcPdsxE4bF/kLki6PGC60YceHGkCAa13+wH+3+/jq a4/5tNZYkvcz55CIssUOIBjfUUB+4mmx2VZorEj7gRRhNgkguTnXXIUWt8LWNeg7 Um07/ONm+t27nD2dV0iyTvXeaMCWdQN11KgsbmppNi7PUf2KlFUnxHDxs6r18578 T+yMuW48yB/F3dZw9IA6SR+rmsx1EQffYu+HOLtZrm1d3Z1yT9kBdGwp+guZNazD GLPWhonIbPOKaQcGF8g5myHXBcIvuerlxUAItg== -----END CERTIFICATE-----Generated at Wed May 13 04:09:56 2026 by rpki-client