$ rpki-client -vvf rpki-rsync.idnic.net/repo/943e2e67-a171-4d9e-a935-406902b1e13b/0/3131392e3233352e31362e302f32302d3234203d3e203234353332.roa File: 3131392e3233352e31362e302f32302d3234203d3e203234353332.roa (raw, json) Hash identifier: a1jLyYlI+XXOuvRXX5wEn6MAtEMedfGoxkqMvx1OXCk= Subject key identifier: 41:A4:0E:33:A4:6E:9F:78:47:58:A0:FF:EC:0A:29:69:9E:4B:A4:53 Certificate issuer: /CN=EFA0A80DF71CA377A289711EA4310F3117358BDA Certificate serial: 2C94FE9C88E1E02F6256C85282688660EEFA05AD Authority key identifier: EF:A0:A8:0D:F7:1C:A3:77:A2:89:71:1E:A4:31:0F:31:17:35:8B:DA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EFA0A80DF71CA377A289711EA4310F3117358BDA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/943e2e67-a171-4d9e-a935-406902b1e13b/0/3131392e3233352e31362e302f32302d3234203d3e203234353332.roa Signing time: Sun 03 May 2026 02:52:40 +0000 ROA not before: Sun 03 May 2026 02:47:40 +0000 ROA not after: Sun 02 May 2027 02:52:40 +0000 asID: 24532 IP address blocks: 119.235.16.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/943e2e67-a171-4d9e-a935-406902b1e13b/0/EFA0A80DF71CA377A289711EA4310F3117358BDA.crl rsync://rpki-rsync.idnic.net/repo/943e2e67-a171-4d9e-a935-406902b1e13b/0/EFA0A80DF71CA377A289711EA4310F3117358BDA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EFA0A80DF71CA377A289711EA4310F3117358BDA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 18:51:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:94:fe:9c:88:e1:e0:2f:62:56:c8:52:82:68:86:60:ee:fa:05:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EFA0A80DF71CA377A289711EA4310F3117358BDA Validity Not Before: May 3 02:47:40 2026 GMT Not After : May 2 02:52:40 2027 GMT Subject: CN=41A40E33A46E9F784758A0FFEC0A29699E4BA453 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:3a:ac:41:eb:bc:0b:64:79:15:d9:ff:07:9c: 45:68:ec:ac:3e:5a:51:19:25:74:cf:23:58:72:d0: bf:0a:c3:18:ea:68:0b:da:91:91:94:d7:65:62:87: ff:d6:74:b4:c3:62:b2:bb:12:fd:75:09:65:81:e2: 83:5e:1f:ef:8f:4c:99:75:10:3c:f8:e4:0e:db:9c: ee:9c:22:79:86:87:7c:f4:50:b0:db:31:6b:dd:40: d4:d1:57:e0:d4:c4:86:4d:7b:6b:ac:30:c2:19:5c: c5:db:70:b1:35:7c:68:3f:21:57:47:05:34:b9:bf: d6:b3:36:f7:73:d3:99:1a:89:70:97:97:ce:81:08: 31:31:15:f0:cf:31:f1:c2:5e:94:77:e4:d1:c1:08: e8:4c:20:b5:da:e7:c3:69:04:08:9f:8b:26:06:42: 04:34:ab:81:c1:b3:84:b2:11:be:40:eb:18:da:cd: 9f:6d:51:fb:f8:3c:20:f4:b7:82:55:69:17:2a:d1: 03:2a:e1:86:e7:f4:0f:90:0b:65:ef:75:2c:2e:b1: 1f:90:3e:cf:f7:cf:89:cd:e6:e4:d4:f1:00:ff:b3: dc:ec:0e:0a:a5:89:fa:0b:e7:18:2c:b5:56:ec:21: 77:53:c9:2c:50:5e:b9:fc:49:38:5a:eb:a1:51:0d: 49:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:A4:0E:33:A4:6E:9F:78:47:58:A0:FF:EC:0A:29:69:9E:4B:A4:53 X509v3 Authority Key Identifier: keyid:EF:A0:A8:0D:F7:1C:A3:77:A2:89:71:1E:A4:31:0F:31:17:35:8B:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/943e2e67-a171-4d9e-a935-406902b1e13b/0/EFA0A80DF71CA377A289711EA4310F3117358BDA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EFA0A80DF71CA377A289711EA4310F3117358BDA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/943e2e67-a171-4d9e-a935-406902b1e13b/0/3131392e3233352e31362e302f32302d3234203d3e203234353332.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 119.235.16.0/20 Signature Algorithm: sha256WithRSAEncryption 41:d6:9b:f4:e4:9b:09:82:53:d1:a3:61:2e:df:ed:88:8d:8b: 57:a0:43:c4:53:3e:ac:93:6c:df:13:68:d3:46:ad:53:d8:1c: 61:44:ca:26:08:e1:9d:b7:45:7d:08:60:3e:95:5d:74:b2:06: 5f:bb:a5:c7:d7:a8:96:86:73:5b:94:84:1e:78:32:ba:56:2a: bb:6a:ae:fe:ae:9d:b0:28:2b:1a:1d:df:0e:31:67:d9:96:b7: f0:bb:e0:67:ba:3e:af:41:71:53:43:5c:84:f3:d7:ea:d2:d4: 14:a0:39:a7:1e:c4:78:f4:a8:a4:bf:49:20:d9:ba:bc:e8:da: 64:19:bd:34:3c:2b:48:b7:24:e4:ad:e4:33:02:0c:1b:73:93: 9e:0e:0b:3e:e8:7a:05:c4:d6:af:6a:f2:24:7b:6f:79:da:25: 92:cf:3f:ab:44:0a:b5:0b:d1:56:c0:dd:7a:9d:b4:ed:11:c4: 88:37:e5:e7:d9:b8:89:dc:1f:c9:eb:f5:c7:fe:3f:3b:24:4d: 1a:33:b5:de:45:9c:ee:53:57:8a:12:d3:1b:30:4b:aa:e5:04: 6a:b5:0f:05:29:77:a2:a2:b0:24:4a:30:63:c7:3b:ab:ff:20: 56:12:4a:9a:16:25:7a:c9:79:a4:47:4a:af:5f:b9:7a:32:1b: 4b:89:55:46 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIULJT+nIjh4C9iVshSgmiGYO76Ba0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUZBMEE4MERGNzFDQTM3N0EyODk3MTFFQTQzMTBGMzEx NzM1OEJEQTAeFw0yNjA1MDMwMjQ3NDBaFw0yNzA1MDIwMjUyNDBaMDMxMTAvBgNV BAMTKDQxQTQwRTMzQTQ2RTlGNzg0NzU4QTBGRkVDMEEyOTY5OUU0QkE0NTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCIOqxB67wLZHkV2f8HnEVo7Kw+ WlEZJXTPI1hy0L8KwxjqaAvakZGU12Vih//WdLTDYrK7Ev11CWWB4oNeH++PTJl1 EDz45A7bnO6cInmGh3z0ULDbMWvdQNTRV+DUxIZNe2usMMIZXMXbcLE1fGg/IVdH BTS5v9azNvdz05kaiXCXl86BCDExFfDPMfHCXpR35NHBCOhMILXa58NpBAifiyYG QgQ0q4HBs4SyEb5A6xjazZ9tUfv4PCD0t4JVaRcq0QMq4Ybn9A+QC2XvdSwusR+Q Ps/3z4nN5uTU8QD/s9zsDgqlifoL5xgstVbsIXdTySxQXrn8STha66FRDUnvAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUQaQOM6Run3hHWKD/7AopaZ5LpFMwHwYDVR0j BBgwFoAU76CoDfcco3eiiXEepDEPMRc1i9owDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTQzZTJlNjctYTE3MS00ZDllLWE5MzUtNDA2OTAyYjFlMTNiLzAvRUZBMEE4MERG NzFDQTM3N0EyODk3MTFFQTQzMTBGMzExNzM1OEJEQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FRkEwQTgwREY3MUNBMzc3QTI4OTcxMUVBNDMxMEYzMTE3MzU4 QkRBLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzk0M2UyZTY3LWExNzEtNGQ5ZS1h OTM1LTQwNjkwMmIxZTEzYi8wLzMxMzEzOTJlMzIzMzM1MmUzMTM2MmUzMDJmMzIz MDJkMzIzNDIwM2QzZTIwMzIzNDM1MzMzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBHfrEDANBgkqhkiG 9w0BAQsFAAOCAQEAQdab9OSbCYJT0aNhLt/tiI2LV6BDxFM+rJNs3xNo00atU9gc YUTKJgjhnbdFfQhgPpVddLIGX7ulx9eoloZzW5SEHngyulYqu2qu/q6dsCgrGh3f DjFn2Za38LvgZ7o+r0FxU0NchPPX6tLUFKA5px7EePSopL9JINm6vOjaZBm9NDwr SLck5K3kMwIMG3OTng4LPuh6BcTWr2ryJHtvedolks8/q0QKtQvRVsDdep207RHE iDfl59m4idwfyev1x/4/OyRNGjO13kWc7lNXihLTGzBLquUEarUPBSl3oqKwJEow Y8c7q/8gVhJKmhYlesl5pEdKr1+5ejIbS4lVRg== -----END CERTIFICATE-----Generated at Wed May 13 05:38:20 2026 by rpki-client