$ rpki-client -vvf rpki-rsync.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/3131392e322e34322e302f32342d3234203d3e203338353234.roa File: 3131392e322e34322e302f32342d3234203d3e203338353234.roa (raw, json) Hash identifier: YegpUFzs5Bo+cor6xkFHxhxoHHFGCrxekO9AohUoA5U= Subject key identifier: 5B:1E:89:DE:90:69:EC:2C:54:4D:50:66:FF:1E:2D:7E:50:F4:C7:82 Certificate issuer: /CN=9436E607F375F72BBD96588FBB7CE6D5B628FF86 Certificate serial: 5A6584D65F82F9AC0803AAE53D05A2816F11F0E0 Authority key identifier: 94:36:E6:07:F3:75:F7:2B:BD:96:58:8F:BB:7C:E6:D5:B6:28:FF:86 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9436E607F375F72BBD96588FBB7CE6D5B628FF86.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/3131392e322e34322e302f32342d3234203d3e203338353234.roa Signing time: Sun 03 May 2026 02:46:30 +0000 ROA not before: Sun 03 May 2026 02:41:30 +0000 ROA not after: Sun 02 May 2027 02:46:30 +0000 asID: 38524 IP address blocks: 119.2.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/9436E607F375F72BBD96588FBB7CE6D5B628FF86.crl rsync://rpki-rsync.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/9436E607F375F72BBD96588FBB7CE6D5B628FF86.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9436E607F375F72BBD96588FBB7CE6D5B628FF86.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 21:29:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:65:84:d6:5f:82:f9:ac:08:03:aa:e5:3d:05:a2:81:6f:11:f0:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9436E607F375F72BBD96588FBB7CE6D5B628FF86 Validity Not Before: May 3 02:41:30 2026 GMT Not After : May 2 02:46:30 2027 GMT Subject: CN=5B1E89DE9069EC2C544D5066FF1E2D7E50F4C782 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:10:1d:0f:0a:b1:7c:bc:61:fe:42:5a:7b:85: 80:db:11:a8:ee:9a:23:7a:27:d2:40:b3:b3:38:20: 41:03:50:e0:b3:50:ee:04:d9:c9:5c:c4:9b:ff:64: 87:81:e6:62:53:87:8e:ea:99:95:3a:bb:54:7b:4c: 40:db:e3:ec:c2:a8:a3:87:ec:dd:65:93:1f:65:4c: 2e:a5:6d:cc:f5:f1:d0:88:62:76:a5:df:92:70:13: 14:e9:af:34:f7:58:d6:13:1d:b6:b8:9e:f3:53:f2: eb:46:02:f9:8b:bd:bd:9b:cd:c3:a6:87:92:cb:27: f6:3d:6c:42:29:3c:78:c2:f4:25:13:e3:0b:58:0b: 42:01:b6:2b:18:58:d1:8a:ac:3b:00:c9:d2:72:c6: ae:5c:79:32:eb:9f:7f:86:29:f8:19:55:83:3d:ab: 5b:e9:d4:c7:61:3c:ea:46:de:a3:09:c7:63:88:e0: db:f7:f9:8a:d2:e4:2e:e7:23:54:d2:0e:30:65:cf: 87:68:9b:14:95:ee:63:bc:c0:38:11:a6:6c:74:5d: 13:3d:c7:aa:7a:d8:5a:15:7f:f8:7d:f6:e6:c7:f0: 84:27:5d:79:f7:ab:9d:be:3d:c0:82:fd:28:b0:36: f3:18:d0:6e:69:71:d1:74:83:1f:1e:d7:6d:c8:ea: 3a:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:1E:89:DE:90:69:EC:2C:54:4D:50:66:FF:1E:2D:7E:50:F4:C7:82 X509v3 Authority Key Identifier: keyid:94:36:E6:07:F3:75:F7:2B:BD:96:58:8F:BB:7C:E6:D5:B6:28:FF:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/9436E607F375F72BBD96588FBB7CE6D5B628FF86.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9436E607F375F72BBD96588FBB7CE6D5B628FF86.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/3131392e322e34322e302f32342d3234203d3e203338353234.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 119.2.42.0/24 Signature Algorithm: sha256WithRSAEncryption 53:c7:21:35:41:dd:06:ef:2a:6a:97:18:d2:14:96:38:96:b4: f6:75:be:ca:d2:94:02:7e:33:dc:56:de:87:c7:f5:8e:cb:35: 1a:f9:39:c6:62:a9:10:ec:8d:92:a8:ab:b5:d4:81:4f:24:e9: 38:8e:55:0e:8b:e3:15:55:29:62:5a:4c:02:5f:72:f6:51:60: a4:df:1f:d6:da:1d:8f:c5:be:98:82:57:ed:86:40:37:ce:c1: 62:c2:fd:0f:79:d0:0a:06:4e:ef:84:2f:f4:6c:b5:79:20:bd: 25:cb:69:05:0a:ff:60:cc:ca:72:75:d8:c4:fa:f9:7a:9b:bb: 74:6f:6d:36:c0:20:c4:61:a7:30:74:9e:c3:50:90:b1:3b:ab: 5a:39:a5:cd:09:99:e2:60:46:16:c2:da:aa:52:87:ca:f7:98: f2:16:bc:28:fe:96:d1:3c:59:2a:e7:97:e6:5b:87:c9:cc:aa: 04:00:7c:2d:89:bc:07:20:86:49:3f:2c:ce:10:96:bf:9b:3c: 97:aa:b6:2c:8a:ba:1d:65:24:e8:50:0b:95:e5:d2:1f:fc:a1: 90:bc:a4:02:1d:7a:0a:e2:09:e7:6b:ed:2e:3c:00:a3:9d:58: d8:a8:ad:85:4b:c1:4f:7d:bd:84:7a:69:1d:ec:cb:b5:b8:62: a2:6d:be:b5 -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgIUWmWE1l+C+awIA6rlPQWigW8R8OAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTQzNkU2MDdGMzc1RjcyQkJEOTY1ODhGQkI3Q0U2RDVC NjI4RkY4NjAeFw0yNjA1MDMwMjQxMzBaFw0yNzA1MDIwMjQ2MzBaMDMxMTAvBgNV BAMTKDVCMUU4OURFOTA2OUVDMkM1NDRENTA2NkZGMUUyRDdFNTBGNEM3ODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCOEB0PCrF8vGH+Qlp7hYDbEaju miN6J9JAs7M4IEEDUOCzUO4E2clcxJv/ZIeB5mJTh47qmZU6u1R7TEDb4+zCqKOH 7N1lkx9lTC6lbcz18dCIYnal35JwExTprzT3WNYTHba4nvNT8utGAvmLvb2bzcOm h5LLJ/Y9bEIpPHjC9CUT4wtYC0IBtisYWNGKrDsAydJyxq5ceTLrn3+GKfgZVYM9 q1vp1MdhPOpG3qMJx2OI4Nv3+YrS5C7nI1TSDjBlz4domxSV7mO8wDgRpmx0XRM9 x6p62FoVf/h99ubH8IQnXXn3q52+PcCC/SiwNvMY0G5pcdF0gx8e123I6jrRAgMB AAGjggItMIICKTAdBgNVHQ4EFgQUWx6J3pBp7CxUTVBm/x4tflD0x4IwHwYDVR0j BBgwFoAUlDbmB/N19yu9lliPu3zm1bYo/4YwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2ZmOTY5ZmMtMzljNy00NGNkLTg3MTYtOWNlNGM2ZDVhYzkxLzAvOTQzNkU2MDdG Mzc1RjcyQkJEOTY1ODhGQkI3Q0U2RDVCNjI4RkY4Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85NDM2RTYwN0YzNzVGNzJCQkQ5NjU4OEZCQjdDRTZENUI2MjhG Rjg2LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUFBzALhn9yc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2ZmOTY5ZmMtMzljNy00NGNkLTg3 MTYtOWNlNGM2ZDVhYzkxLzAvMzEzMTM5MmUzMjJlMzQzMjJlMzAyZjMyMzQyZDMy MzQyMDNkM2UyMDMzMzgzNTMyMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAB3AiowDQYJKoZIhvcNAQEL BQADggEBAFPHITVB3QbvKmqXGNIUljiWtPZ1vsrSlAJ+M9xW3ofH9Y7LNRr5OcZi qRDsjZKoq7XUgU8k6TiOVQ6L4xVVKWJaTAJfcvZRYKTfH9baHY/FvpiCV+2GQDfO wWLC/Q950AoGTu+EL/RstXkgvSXLaQUK/2DMynJ12MT6+Xqbu3RvbTbAIMRhpzB0 nsNQkLE7q1o5pc0JmeJgRhbC2qpSh8r3mPIWvCj+ltE8WSrnl+Zbh8nMqgQAfC2J vAcghkk/LM4Qlr+bPJeqtiyKuh1lJOhQC5Xl0h/8oZC8pAIdegriCedr7S48AKOd WNiorYVLwU99vYR6aR3sy7W4YqJtvrU= -----END CERTIFICATE-----Generated at Wed May 13 03:51:25 2026 by rpki-client