$ rpki-client -vvf rpki-rsync.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/3131382e39312e3134302e302f32322d3234203d3e203633353032.roa File: 3131382e39312e3134302e302f32322d3234203d3e203633353032.roa (raw, json) Hash identifier: 27HB+moGW931DJ3lKZUVs+RCefOnlzQL4giJYO55G7A= Subject key identifier: C1:B1:0B:34:80:43:1D:CC:CB:32:B6:F3:19:22:7E:05:5F:8E:C1:F3 Certificate issuer: /CN=FB3286A3734F366E27845180AD985879147BEA5E Certificate serial: 1CEB32F8C35A499C76E4C60EC8B81D78E82FE120 Authority key identifier: FB:32:86:A3:73:4F:36:6E:27:84:51:80:AD:98:58:79:14:7B:EA:5E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB3286A3734F366E27845180AD985879147BEA5E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/3131382e39312e3134302e302f32322d3234203d3e203633353032.roa Signing time: Sun 03 May 2026 02:48:35 +0000 ROA not before: Sun 03 May 2026 02:43:35 +0000 ROA not after: Sun 02 May 2027 02:48:35 +0000 asID: 63502 IP address blocks: 118.91.140.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/FB3286A3734F366E27845180AD985879147BEA5E.crl rsync://rpki-rsync.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/FB3286A3734F366E27845180AD985879147BEA5E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB3286A3734F366E27845180AD985879147BEA5E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:eb:32:f8:c3:5a:49:9c:76:e4:c6:0e:c8:b8:1d:78:e8:2f:e1:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB3286A3734F366E27845180AD985879147BEA5E Validity Not Before: May 3 02:43:35 2026 GMT Not After : May 2 02:48:35 2027 GMT Subject: CN=C1B10B3480431DCCCB32B6F319227E055F8EC1F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:22:90:f7:fe:b1:7e:44:99:6f:74:01:d4:04: 35:75:3e:1e:bc:68:79:6e:94:b2:53:a5:3f:28:0b: e4:5b:70:df:f5:25:d2:a7:87:fe:d6:6d:46:fc:8a: 20:1a:14:c0:7b:05:c8:41:5f:6f:52:43:db:d4:bf: e8:a4:23:e7:9a:40:84:a9:a4:2a:72:f5:f8:14:59: 9a:58:95:f8:c8:c9:ef:c3:24:74:24:08:da:13:0d: fb:a3:82:4c:5c:fa:85:c7:39:1c:de:3c:ac:3f:91: 92:e3:ee:15:25:ca:69:74:14:7c:26:46:dd:cd:cf: fb:e4:e8:7c:e7:de:d6:ce:1c:c6:59:bd:43:63:f3: c4:77:af:56:41:6c:fe:78:8b:e7:a5:60:88:fa:1d: 77:21:5e:dd:41:6b:95:fb:62:c8:3a:de:a4:67:ca: 06:85:a2:5c:cd:5a:95:f2:77:b0:33:f5:97:97:3a: 98:18:64:e8:ab:32:98:f5:68:76:28:b5:c2:6e:64: 24:11:1c:e4:9b:cc:29:d3:11:55:1f:26:3f:a6:1b: c3:d5:c7:52:bc:1e:fd:4f:3d:eb:5c:5c:03:32:20: 07:6c:8d:5e:f3:89:33:5f:c2:74:8d:ad:a0:70:db: 7e:41:08:f8:db:99:42:f0:99:5b:00:a6:88:69:73: a8:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:B1:0B:34:80:43:1D:CC:CB:32:B6:F3:19:22:7E:05:5F:8E:C1:F3 X509v3 Authority Key Identifier: keyid:FB:32:86:A3:73:4F:36:6E:27:84:51:80:AD:98:58:79:14:7B:EA:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/FB3286A3734F366E27845180AD985879147BEA5E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB3286A3734F366E27845180AD985879147BEA5E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/3131382e39312e3134302e302f32322d3234203d3e203633353032.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 118.91.140.0/22 Signature Algorithm: sha256WithRSAEncryption 20:57:bb:8f:5f:02:6d:74:d4:f9:6a:59:f2:dd:82:89:df:56: c9:19:ce:ae:8d:5c:05:2d:19:7a:f9:b3:b8:34:d2:ca:6b:ce: 6e:f9:3d:97:84:21:87:06:a8:55:03:5e:40:8b:27:3e:a5:74: 3a:33:ae:34:b8:7b:ce:f9:0d:09:f6:b1:5c:64:e6:c3:2d:9a: cd:61:80:5c:09:64:90:99:d5:21:a0:6c:f3:4a:d6:d8:75:5a: 61:ce:7c:41:34:18:41:d2:d6:33:60:65:fa:dc:13:a7:eb:54: ab:a4:55:58:b0:d4:37:67:c4:c8:8a:7e:db:c9:ec:26:17:93: c0:fd:ba:3f:eb:4e:20:dd:c4:aa:69:ba:41:7e:53:0b:97:f1: 8c:49:52:9b:77:d1:1e:42:0a:ae:39:11:97:d8:61:bf:07:1c: 41:b1:ad:6b:04:45:46:84:36:0a:56:8a:02:18:a2:1b:a5:30: 6f:73:0b:88:66:ea:19:0f:6f:fa:c4:15:00:5c:e0:c4:0d:fc: c2:23:90:d3:4c:56:fb:60:bb:32:bd:aa:67:d6:b4:c2:ab:57: d5:2f:7a:e8:5d:9c:03:0b:b9:f7:94:65:16:10:20:e7:8f:45: 5b:75:d3:81:dd:bb:00:0f:12:4a:de:e2:4c:89:b8:e6:d9:d7: 50:24:51:41 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUHOsy+MNaSZx25MYOyLgdeOgv4SAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkIzMjg2QTM3MzRGMzY2RTI3ODQ1MTgwQUQ5ODU4Nzkx NDdCRUE1RTAeFw0yNjA1MDMwMjQzMzVaFw0yNzA1MDIwMjQ4MzVaMDMxMTAvBgNV BAMTKEMxQjEwQjM0ODA0MzFEQ0NDQjMyQjZGMzE5MjI3RTA1NUY4RUMxRjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsIpD3/rF+RJlvdAHUBDV1Ph68 aHlulLJTpT8oC+RbcN/1JdKnh/7WbUb8iiAaFMB7BchBX29SQ9vUv+ikI+eaQISp pCpy9fgUWZpYlfjIye/DJHQkCNoTDfujgkxc+oXHORzePKw/kZLj7hUlyml0FHwm Rt3Nz/vk6Hzn3tbOHMZZvUNj88R3r1ZBbP54i+elYIj6HXchXt1Ba5X7Ysg63qRn ygaFolzNWpXyd7Az9ZeXOpgYZOirMpj1aHYotcJuZCQRHOSbzCnTEVUfJj+mG8PV x1K8Hv1PPetcXAMyIAdsjV7ziTNfwnSNraBw235BCPjbmULwmVsApohpc6jNAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUwbELNIBDHczLMrbzGSJ+BV+OwfMwHwYDVR0j BBgwFoAU+zKGo3NPNm4nhFGArZhYeRR76l4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODc5MmE0Y2QtZGJhYy00M2FjLTgwNjAtMmU4ZDQyZWFlNjU1LzAvRkIzMjg2QTM3 MzRGMzY2RTI3ODQ1MTgwQUQ5ODU4NzkxNDdCRUE1RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GQjMyODZBMzczNEYzNjZFMjc4NDUxODBBRDk4NTg3OTE0N0JF QTVFLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzg3OTJhNGNkLWRiYWMtNDNhYy04 MDYwLTJlOGQ0MmVhZTY1NS8wLzMxMzEzODJlMzkzMTJlMzEzNDMwMmUzMDJmMzIz MjJkMzIzNDIwM2QzZTIwMzYzMzM1MzAzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAnZbjDANBgkqhkiG 9w0BAQsFAAOCAQEAIFe7j18CbXTU+WpZ8t2Cid9WyRnOro1cBS0ZevmzuDTSymvO bvk9l4QhhwaoVQNeQIsnPqV0OjOuNLh7zvkNCfaxXGTmwy2azWGAXAlkkJnVIaBs 80rW2HVaYc58QTQYQdLWM2Bl+twTp+tUq6RVWLDUN2fEyIp+28nsJheTwP26P+tO IN3Eqmm6QX5TC5fxjElSm3fRHkIKrjkRl9hhvwccQbGtawRFRoQ2ClaKAhiiG6Uw b3MLiGbqGQ9v+sQVAFzgxA38wiOQ00xW+2C7Mr2qZ9a0wqtX1S966F2cAwu595Rl FhAg549FW3XTgd27AA8SSt7iTIm45tnXUCRRQQ== -----END CERTIFICATE-----Generated at Tue May 12 22:56:30 2026 by rpki-client