$ rpki-client -vvf rpki-rsync.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/3131392e322e34342e302f32342d3234203d3e203338353234.roa File: 3131392e322e34342e302f32342d3234203d3e203338353234.roa (raw, json) Hash identifier: 6nmjpDUCW73mzpavFLZk1xxl3ntC7CHrr4nvfcRb/EA= Subject key identifier: 8F:C2:17:CE:7D:6F:66:27:09:0F:48:20:83:24:06:7C:A6:36:F0:85 Certificate issuer: /CN=9436E607F375F72BBD96588FBB7CE6D5B628FF86 Certificate serial: 154588FB3CDFA38F8B7DA103B1651F62CA80571B Authority key identifier: 94:36:E6:07:F3:75:F7:2B:BD:96:58:8F:BB:7C:E6:D5:B6:28:FF:86 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9436E607F375F72BBD96588FBB7CE6D5B628FF86.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/3131392e322e34342e302f32342d3234203d3e203338353234.roa Signing time: Sun 03 May 2026 02:46:28 +0000 ROA not before: Sun 03 May 2026 02:41:28 +0000 ROA not after: Sun 02 May 2027 02:46:28 +0000 asID: 38524 IP address blocks: 119.2.44.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/9436E607F375F72BBD96588FBB7CE6D5B628FF86.crl rsync://rpki-rsync.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/9436E607F375F72BBD96588FBB7CE6D5B628FF86.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9436E607F375F72BBD96588FBB7CE6D5B628FF86.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:45:88:fb:3c:df:a3:8f:8b:7d:a1:03:b1:65:1f:62:ca:80:57:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9436E607F375F72BBD96588FBB7CE6D5B628FF86 Validity Not Before: May 3 02:41:28 2026 GMT Not After : May 2 02:46:28 2027 GMT Subject: CN=8FC217CE7D6F6627090F48208324067CA636F085 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:0a:a2:0f:42:bd:c7:24:5c:30:08:79:c6:26: 68:3e:4a:b6:76:1b:0d:c3:f1:cf:99:1d:9c:73:fb: 30:46:24:59:26:e4:8a:9e:a9:d5:6e:93:e3:70:eb: 1a:50:5c:84:32:1a:e9:27:54:cc:bd:3b:32:d5:88: f0:52:a6:b8:35:2d:a7:91:22:24:a0:c8:1d:dd:0c: 28:7f:b6:20:c1:5d:ba:30:a7:43:ac:46:c9:19:ed: 57:de:db:7e:02:4c:ba:1e:27:9f:91:d5:22:b5:89: 15:37:54:25:db:a0:6a:97:60:83:2b:5e:53:d5:3a: fe:1f:a1:56:9f:ce:94:06:3d:1a:07:cb:b0:de:8c: b8:59:5c:2c:44:46:a8:d9:b4:7e:f4:36:87:b2:31: 07:07:18:fb:dc:d2:51:e8:40:dc:ab:a1:52:ba:4c: 3c:c5:a9:cd:93:7d:77:0f:1c:34:f7:db:01:9f:92: 6d:33:df:0c:3e:46:99:aa:8e:85:56:61:7e:a2:39: 6c:07:60:1e:22:48:e4:a0:9d:b9:ad:09:a7:ed:1b: 21:d9:1a:b9:8e:16:be:67:15:28:7f:3a:06:41:b5: c2:3c:8b:8e:f3:62:51:1d:8c:33:08:ef:a9:f9:87: 3e:90:28:c4:98:46:74:c7:e4:5c:e9:d5:43:f4:48: e0:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:C2:17:CE:7D:6F:66:27:09:0F:48:20:83:24:06:7C:A6:36:F0:85 X509v3 Authority Key Identifier: keyid:94:36:E6:07:F3:75:F7:2B:BD:96:58:8F:BB:7C:E6:D5:B6:28:FF:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/9436E607F375F72BBD96588FBB7CE6D5B628FF86.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9436E607F375F72BBD96588FBB7CE6D5B628FF86.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/3131392e322e34342e302f32342d3234203d3e203338353234.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 119.2.44.0/24 Signature Algorithm: sha256WithRSAEncryption 17:69:d6:4a:00:60:57:0a:ee:57:5b:68:53:e0:36:be:14:47: a8:e8:6b:b0:e7:43:d7:e4:3e:33:a1:c5:3a:1d:3a:da:e7:69: 8d:73:13:b0:1e:0b:17:0f:c0:12:ad:07:75:3a:74:36:e3:bd: a6:2e:0b:bb:36:30:b5:99:5a:0c:fb:b3:de:c5:5c:32:2c:6b: 05:82:15:31:43:63:28:94:f0:bd:52:07:d6:25:f8:c4:f3:1c: 9a:0e:85:ef:d7:db:69:5b:a8:08:75:be:b0:2e:0a:a8:05:86: 2d:f1:53:cf:98:11:38:6f:cb:26:1d:4a:19:8e:6a:ac:78:59: 11:b0:dc:37:7a:64:c2:2a:d3:3c:b3:cc:e5:e0:a7:65:cd:9b: 40:7f:6a:4a:73:39:1f:ae:1e:68:f8:7f:f3:c6:ea:ac:78:82: e1:a7:07:32:e9:98:73:23:4b:2b:a6:eb:da:e4:c8:a9:8a:12: f1:19:6b:82:7a:36:9c:8d:03:91:f4:7c:ac:f0:31:46:22:fc: 12:60:db:c4:8e:8e:8c:e2:32:28:0f:bd:d9:da:1f:2c:cc:61: 9e:a0:28:d2:b5:56:7d:38:ea:42:e5:bf:6a:3c:c3:a3:5f:fa: e7:1a:d2:73:b8:1d:9f:56:5d:a5:1f:76:e4:98:65:28:37:dd: 45:96:dc:f4 -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgIUFUWI+zzfo4+LfaEDsWUfYsqAVxswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTQzNkU2MDdGMzc1RjcyQkJEOTY1ODhGQkI3Q0U2RDVC NjI4RkY4NjAeFw0yNjA1MDMwMjQxMjhaFw0yNzA1MDIwMjQ2MjhaMDMxMTAvBgNV BAMTKDhGQzIxN0NFN0Q2RjY2MjcwOTBGNDgyMDgzMjQwNjdDQTYzNkYwODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNCqIPQr3HJFwwCHnGJmg+SrZ2 Gw3D8c+ZHZxz+zBGJFkm5IqeqdVuk+Nw6xpQXIQyGuknVMy9OzLViPBSprg1LaeR IiSgyB3dDCh/tiDBXbowp0OsRskZ7Vfe234CTLoeJ5+R1SK1iRU3VCXboGqXYIMr XlPVOv4foVafzpQGPRoHy7DejLhZXCxERqjZtH70NoeyMQcHGPvc0lHoQNyroVK6 TDzFqc2TfXcPHDT32wGfkm0z3ww+RpmqjoVWYX6iOWwHYB4iSOSgnbmtCaftGyHZ GrmOFr5nFSh/OgZBtcI8i47zYlEdjDMI76n5hz6QKMSYRnTH5Fzp1UP0SOBNAgMB AAGjggItMIICKTAdBgNVHQ4EFgQUj8IXzn1vZicJD0gggyQGfKY28IUwHwYDVR0j BBgwFoAUlDbmB/N19yu9lliPu3zm1bYo/4YwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2ZmOTY5ZmMtMzljNy00NGNkLTg3MTYtOWNlNGM2ZDVhYzkxLzAvOTQzNkU2MDdG Mzc1RjcyQkJEOTY1ODhGQkI3Q0U2RDVCNjI4RkY4Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85NDM2RTYwN0YzNzVGNzJCQkQ5NjU4OEZCQjdDRTZENUI2MjhG Rjg2LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUFBzALhn9yc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2ZmOTY5ZmMtMzljNy00NGNkLTg3 MTYtOWNlNGM2ZDVhYzkxLzAvMzEzMTM5MmUzMjJlMzQzNDJlMzAyZjMyMzQyZDMy MzQyMDNkM2UyMDMzMzgzNTMyMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAB3AiwwDQYJKoZIhvcNAQEL BQADggEBABdp1koAYFcK7ldbaFPgNr4UR6joa7DnQ9fkPjOhxTodOtrnaY1zE7Ae CxcPwBKtB3U6dDbjvaYuC7s2MLWZWgz7s97FXDIsawWCFTFDYyiU8L1SB9Yl+MTz HJoOhe/X22lbqAh1vrAuCqgFhi3xU8+YEThvyyYdShmOaqx4WRGw3Dd6ZMIq0zyz zOXgp2XNm0B/akpzOR+uHmj4f/PG6qx4guGnBzLpmHMjSyum69rkyKmKEvEZa4J6 NpyNA5H0fKzwMUYi/BJg28SOjoziMigPvdnaHyzMYZ6gKNK1Vn046kLlv2o8w6Nf +uca0nO4HZ9WXaUfduSYZSg33UWW3PQ= -----END CERTIFICATE-----Generated at Wed May 13 02:50:44 2026 by rpki-client