$ rpki-client -vvf rpki-rsync.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/3131372e37342e3132372e302f32342d3234203d3e203338353135.roa File: 3131372e37342e3132372e302f32342d3234203d3e203338353135.roa (raw, json) Hash identifier: tMvUI+KURvhbQu+c9c8RrqZg9hF/ImzlW6ITnNdYAy4= Subject key identifier: E8:23:6D:02:CD:AF:88:BF:EF:28:61:EE:8C:8E:BD:93:5D:E1:59:F1 Certificate issuer: /CN=67869B177D646DD081563D36E6E9775C31473EE2 Certificate serial: 193D634ECA3BE518D9CB40DBA1C7CD6BEA0E80D9 Authority key identifier: 67:86:9B:17:7D:64:6D:D0:81:56:3D:36:E6:E9:77:5C:31:47:3E:E2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67869B177D646DD081563D36E6E9775C31473EE2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/3131372e37342e3132372e302f32342d3234203d3e203338353135.roa Signing time: Sun 03 May 2026 02:41:03 +0000 ROA not before: Sun 03 May 2026 02:36:03 +0000 ROA not after: Sun 02 May 2027 02:41:03 +0000 asID: 38515 IP address blocks: 117.74.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/67869B177D646DD081563D36E6E9775C31473EE2.crl rsync://rpki-rsync.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/67869B177D646DD081563D36E6E9775C31473EE2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67869B177D646DD081563D36E6E9775C31473EE2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 04:31:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:3d:63:4e:ca:3b:e5:18:d9:cb:40:db:a1:c7:cd:6b:ea:0e:80:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67869B177D646DD081563D36E6E9775C31473EE2 Validity Not Before: May 3 02:36:03 2026 GMT Not After : May 2 02:41:03 2027 GMT Subject: CN=E8236D02CDAF88BFEF2861EE8C8EBD935DE159F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:13:42:a5:b8:0c:5a:4f:96:8b:b9:45:20:7c: 86:35:a7:fb:3d:a7:df:d5:e0:1a:32:77:d9:d4:b5: 4b:ac:31:82:c7:61:ba:a9:03:9c:24:ad:e3:5e:dc: 6e:c1:42:85:bd:9f:71:5f:a2:81:85:b5:8e:6b:bd: 70:36:e2:39:64:1f:02:76:aa:d0:d7:44:04:8c:3e: ea:86:88:87:3d:8b:e9:e8:88:5a:a4:cc:22:d3:f3: ba:87:8d:4e:ab:6e:1a:ee:58:28:8e:32:81:e9:d1: 86:57:be:b9:bd:07:8a:38:53:e2:be:bb:19:6e:b3: f5:ea:22:25:b8:56:29:73:3f:a6:bc:e3:8c:b3:fb: 00:33:38:90:1b:c3:32:b5:54:14:47:f6:3a:83:cd: d6:72:08:8b:c1:3b:dd:9c:dc:00:9a:49:43:69:22: 1a:29:10:75:1b:14:26:06:85:62:de:57:f1:7e:fe: 78:66:98:4a:da:28:12:1f:21:ce:f5:bc:dd:6b:6c: 6a:c2:67:01:62:2d:5d:9b:69:ab:d5:39:61:68:28: 53:bf:6f:6c:b9:45:fb:d1:97:b0:9f:e8:e1:90:fa: 69:b7:ae:0a:43:1f:91:4a:6c:68:ce:66:25:70:ef: af:10:e9:52:3f:83:ac:8e:cb:6a:86:53:65:a1:97: 93:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:23:6D:02:CD:AF:88:BF:EF:28:61:EE:8C:8E:BD:93:5D:E1:59:F1 X509v3 Authority Key Identifier: keyid:67:86:9B:17:7D:64:6D:D0:81:56:3D:36:E6:E9:77:5C:31:47:3E:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/67869B177D646DD081563D36E6E9775C31473EE2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67869B177D646DD081563D36E6E9775C31473EE2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/3131372e37342e3132372e302f32342d3234203d3e203338353135.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 117.74.127.0/24 Signature Algorithm: sha256WithRSAEncryption 7c:06:c0:ec:0c:0b:52:32:a3:70:b6:46:a1:5d:3d:87:88:87: b3:58:33:2b:95:b7:6e:ab:31:52:78:78:c2:6d:32:c6:8f:8e: f8:2d:c0:a5:73:11:91:6d:6c:c3:99:16:63:c4:fd:9c:6a:82: 3f:68:69:d6:80:6f:d9:b4:89:fc:aa:8d:b8:fc:fd:9c:5d:5a: a0:e3:d1:0d:64:ec:e7:41:c0:65:36:a8:db:47:f4:c3:b5:7a: 60:29:f2:e7:ac:25:02:e2:be:23:c9:ec:ac:1f:62:8e:03:9b: 29:93:65:c5:fb:51:9b:11:2e:77:87:8b:da:af:25:a8:79:aa: b7:28:cb:f6:4a:2a:50:25:24:93:2c:a7:8d:76:65:07:61:43: 42:44:68:7e:fc:37:ca:3f:37:ae:99:05:f4:5b:ef:10:90:bb: 3c:4c:54:7d:d0:50:11:b5:2a:f1:7f:1b:ce:13:c0:0f:16:bc: 28:ad:25:9e:0d:6f:94:8f:7c:ce:8e:10:d7:5e:7e:00:f4:38: 03:62:ab:05:27:aa:9c:e3:60:6c:eb:1b:d1:4f:ac:8f:c0:72: c1:17:8f:0d:a5:9c:83:5a:21:5e:ef:32:78:ae:88:d6:a0:19: 5f:b7:9c:21:a1:82:73:28:cc:75:bb:05:76:82:82:86:fd:4a: 02:68:2a:5c -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUGT1jTso75RjZy0DbocfNa+oOgNkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjc4NjlCMTc3RDY0NkREMDgxNTYzRDM2RTZFOTc3NUMz MTQ3M0VFMjAeFw0yNjA1MDMwMjM2MDNaFw0yNzA1MDIwMjQxMDNaMDMxMTAvBgNV BAMTKEU4MjM2RDAyQ0RBRjg4QkZFRjI4NjFFRThDOEVCRDkzNURFMTU5RjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBE0KluAxaT5aLuUUgfIY1p/s9 p9/V4Boyd9nUtUusMYLHYbqpA5wkreNe3G7BQoW9n3FfooGFtY5rvXA24jlkHwJ2 qtDXRASMPuqGiIc9i+noiFqkzCLT87qHjU6rbhruWCiOMoHp0YZXvrm9B4o4U+K+ uxlus/XqIiW4VilzP6a844yz+wAzOJAbwzK1VBRH9jqDzdZyCIvBO92c3ACaSUNp IhopEHUbFCYGhWLeV/F+/nhmmEraKBIfIc71vN1rbGrCZwFiLV2baavVOWFoKFO/ b2y5RfvRl7Cf6OGQ+mm3rgpDH5FKbGjOZiVw768Q6VI/g6yOy2qGU2Whl5O7AgMB AAGjggIyMIICLjAdBgNVHQ4EFgQU6CNtAs2viL/vKGHujI69k13hWfEwHwYDVR0j BBgwFoAUZ4abF31kbdCBVj025ul3XDFHPuIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmM0YzY0YTktMzUzNy00YmM3LTg2MTMtOGU5ODE2MjllNGNhLzAvNjc4NjlCMTc3 RDY0NkREMDgxNTYzRDM2RTZFOTc3NUMzMTQ3M0VFMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82Nzg2OUIxNzdENjQ2REQwODE1NjNEMzZFNkU5Nzc1QzMxNDcz RUUyLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzZjNGM2NGE5LTM1MzctNGJjNy04 NjEzLThlOTgxNjI5ZTRjYS8wLzMxMzEzNzJlMzczNDJlMzEzMjM3MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzMzODM1MzEzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHVKfzANBgkqhkiG 9w0BAQsFAAOCAQEAfAbA7AwLUjKjcLZGoV09h4iHs1gzK5W3bqsxUnh4wm0yxo+O +C3ApXMRkW1sw5kWY8T9nGqCP2hp1oBv2bSJ/KqNuPz9nF1aoOPRDWTs50HAZTao 20f0w7V6YCny56wlAuK+I8nsrB9ijgObKZNlxftRmxEud4eL2q8lqHmqtyjL9koq UCUkkyynjXZlB2FDQkRofvw3yj83rpkF9FvvEJC7PExUfdBQEbUq8X8bzhPADxa8 KK0lng1vlI98zo4Q115+APQ4A2KrBSeqnONgbOsb0U+sj8BywRePDaWcg1ohXu8y eK6I1qAZX7ecIaGCcyjMdbsFdoKChv1KAmgqXA== -----END CERTIFICATE-----Generated at Wed May 13 05:36:47 2026 by rpki-client