$ rpki-client -vvf rpki-rsync.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/3131392e31382e3135322e302f32312d3234203d3e203535363835.roa File: 3131392e31382e3135322e302f32312d3234203d3e203535363835.roa (raw, json) Hash identifier: 5ZmddhT7GIlx82/rw7f9EHLmxelcV9emeZTvH2dyZ8I= Subject key identifier: 7E:4F:79:01:98:8A:04:8B:BF:36:25:EF:92:93:FD:30:30:08:33:4D Certificate issuer: /CN=408DEB7465856EE053B64340FA814B862FA5ED30 Certificate serial: 568FA1EF2C6B677AB82F43EB2F929A05015F45EA Authority key identifier: 40:8D:EB:74:65:85:6E:E0:53:B6:43:40:FA:81:4B:86:2F:A5:ED:30 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/408DEB7465856EE053B64340FA814B862FA5ED30.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/3131392e31382e3135322e302f32312d3234203d3e203535363835.roa Signing time: Sun 03 May 2026 02:47:57 +0000 ROA not before: Sun 03 May 2026 02:42:57 +0000 ROA not after: Sun 02 May 2027 02:47:57 +0000 asID: 55685 IP address blocks: 119.18.152.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/408DEB7465856EE053B64340FA814B862FA5ED30.crl rsync://rpki-rsync.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/408DEB7465856EE053B64340FA814B862FA5ED30.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/408DEB7465856EE053B64340FA814B862FA5ED30.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:8f:a1:ef:2c:6b:67:7a:b8:2f:43:eb:2f:92:9a:05:01:5f:45:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=408DEB7465856EE053B64340FA814B862FA5ED30 Validity Not Before: May 3 02:42:57 2026 GMT Not After : May 2 02:47:57 2027 GMT Subject: CN=7E4F7901988A048BBF3625EF9293FD303008334D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:5d:47:6c:91:4b:c7:1a:e0:75:e3:6d:90:54: 2f:09:2e:07:52:1a:55:bc:e8:79:ed:77:1b:2d:a9: 46:c3:85:54:08:3a:e6:0e:4a:ac:de:73:d3:09:7c: db:09:25:2d:2d:3e:08:b6:75:d1:91:18:08:fa:f3: 44:86:f6:18:c6:e5:d2:46:81:3c:41:6b:32:06:33: 26:27:ec:0a:57:86:e0:cf:0b:bc:10:0f:2b:14:40: 63:7b:7e:29:c7:57:4c:81:e5:32:f8:f0:b9:d0:7a: a1:fb:b2:61:00:12:df:e4:a4:00:77:29:45:bf:5c: e5:1a:0f:55:44:9f:2a:6b:b1:17:a6:f5:0b:5e:2d: 40:5b:f4:2b:e3:84:42:4c:5f:6d:d4:12:dd:64:cd: 5c:6a:80:e2:67:04:5b:1d:65:c3:21:19:b0:21:84: 26:d3:ac:65:58:de:7e:e4:d5:98:33:76:1c:83:21: 8d:1e:d9:70:18:e0:8e:b0:b9:49:86:02:2e:74:13: 86:8b:55:f2:b5:f8:6d:ea:9a:fd:6f:f1:25:62:e9: 49:8f:d8:4f:50:78:d9:88:e4:f2:ba:df:09:49:81: bc:cb:f8:d4:da:ca:4d:04:63:fa:58:35:ff:39:d1: 8d:e0:a2:55:a8:41:27:69:1f:83:82:d9:35:73:44: 6e:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:4F:79:01:98:8A:04:8B:BF:36:25:EF:92:93:FD:30:30:08:33:4D X509v3 Authority Key Identifier: keyid:40:8D:EB:74:65:85:6E:E0:53:B6:43:40:FA:81:4B:86:2F:A5:ED:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/408DEB7465856EE053B64340FA814B862FA5ED30.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/408DEB7465856EE053B64340FA814B862FA5ED30.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/3131392e31382e3135322e302f32312d3234203d3e203535363835.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 119.18.152.0/21 Signature Algorithm: sha256WithRSAEncryption 6c:26:4b:fe:a7:91:65:9d:a4:5e:7e:88:67:f2:83:47:d4:fd: 01:2c:be:9d:16:29:19:b5:e2:6a:18:16:6f:13:bf:b8:8a:2c: 65:2d:48:8b:17:1a:67:3b:09:f5:d7:19:35:61:f4:44:e3:23: 11:ed:27:35:cd:8e:6c:5f:c2:9a:df:7b:1a:60:f1:b6:38:35: d0:9a:91:c4:25:c8:70:b6:25:c9:34:c6:4b:02:8b:8e:9d:6a: b3:fc:3c:62:73:f1:3b:19:44:c3:ee:f5:be:60:4c:f3:c7:df: ed:6c:cf:4a:70:ab:9f:a2:93:81:bc:58:b3:14:89:ad:75:7c: fd:62:8f:fe:ac:68:63:5d:b4:37:57:8c:e0:f8:84:21:7b:d3: a0:53:b6:17:c4:e5:27:1c:d0:86:f1:79:39:36:c4:3b:a8:2e: c0:77:76:56:28:57:52:a3:11:3e:af:cd:e4:86:ee:1c:58:a1: 40:0a:e6:a2:44:53:de:22:79:43:23:8c:89:23:2b:a0:24:1d: 34:e1:02:ee:28:33:53:0e:a1:55:8e:54:96:2f:22:c6:c4:69: 3c:92:1a:d7:c6:14:02:1a:76:f5:c5:6a:83:b8:24:97:62:49: 60:30:b5:3c:03:9e:0a:e7:b2:e6:cb:ff:de:6f:68:f4:5f:4a: ef:6f:24:8a -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUVo+h7yxrZ3q4L0PrL5KaBQFfReowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDA4REVCNzQ2NTg1NkVFMDUzQjY0MzQwRkE4MTRCODYy RkE1RUQzMDAeFw0yNjA1MDMwMjQyNTdaFw0yNzA1MDIwMjQ3NTdaMDMxMTAvBgNV BAMTKDdFNEY3OTAxOTg4QTA0OEJCRjM2MjVFRjkyOTNGRDMwMzAwODMzNEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwXUdskUvHGuB1422QVC8JLgdS GlW86HntdxstqUbDhVQIOuYOSqzec9MJfNsJJS0tPgi2ddGRGAj680SG9hjG5dJG gTxBazIGMyYn7ApXhuDPC7wQDysUQGN7finHV0yB5TL48LnQeqH7smEAEt/kpAB3 KUW/XOUaD1VEnyprsRem9QteLUBb9CvjhEJMX23UEt1kzVxqgOJnBFsdZcMhGbAh hCbTrGVY3n7k1ZgzdhyDIY0e2XAY4I6wuUmGAi50E4aLVfK1+G3qmv1v8SVi6UmP 2E9QeNmI5PK63wlJgbzL+NTayk0EY/pYNf850Y3golWoQSdpH4OC2TVzRG7VAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUfk95AZiKBIu/NiXvkpP9MDAIM00wHwYDVR0j BBgwFoAUQI3rdGWFbuBTtkNA+oFLhi+l7TAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODVkOGRhYjQtOGJiNi00ZWQwLThkYWItNWE0MDYxNjdiOTlkLzAvNDA4REVCNzQ2 NTg1NkVFMDUzQjY0MzQwRkE4MTRCODYyRkE1RUQzMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80MDhERUI3NDY1ODU2RUUwNTNCNjQzNDBGQTgxNEI4NjJGQTVF RDMwLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzg1ZDhkYWI0LThiYjYtNGVkMC04 ZGFiLTVhNDA2MTY3Yjk5ZC8wLzMxMzEzOTJlMzEzODJlMzEzNTMyMmUzMDJmMzIz MTJkMzIzNDIwM2QzZTIwMzUzNTM2MzgzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA3cSmDANBgkqhkiG 9w0BAQsFAAOCAQEAbCZL/qeRZZ2kXn6IZ/KDR9T9ASy+nRYpGbXiahgWbxO/uIos ZS1IixcaZzsJ9dcZNWH0ROMjEe0nNc2ObF/Cmt97GmDxtjg10JqRxCXIcLYlyTTG SwKLjp1qs/w8YnPxOxlEw+71vmBM88ff7WzPSnCrn6KTgbxYsxSJrXV8/WKP/qxo Y120N1eM4PiEIXvToFO2F8TlJxzQhvF5OTbEO6guwHd2VihXUqMRPq/N5IbuHFih QArmokRT3iJ5QyOMiSMroCQdNOEC7igzUw6hVY5Uli8ixsRpPJIa18YUAhp29cVq g7gkl2JJYDC1PAOeCuey5sv/3m9o9F9K728kig== -----END CERTIFICATE-----Generated at Wed May 13 02:12:58 2026 by rpki-client