$ rpki-client -vvf rpki-rsync.idnic.net/repo/99e3b1d8-bf19-46e3-b609-0d160988dac8/0/3131392e3233352e3234382e302f32312d3234203d3e203435313436.roa File: 3131392e3233352e3234382e302f32312d3234203d3e203435313436.roa (raw, json) Hash identifier: I4d4M5kb/PaS52EXblXxmrUeQhD789o5zOZWBGwmGC8= Subject key identifier: 94:EB:96:E3:E0:91:8B:64:E9:F3:29:0B:ED:68:7A:55:E6:23:C9:0F Certificate issuer: /CN=78A2C1B7FD05098A611E198E8481B7297F924590 Certificate serial: 7B47A76C2F568C00FAE0DD9416724C9FF7FA9021 Authority key identifier: 78:A2:C1:B7:FD:05:09:8A:61:1E:19:8E:84:81:B7:29:7F:92:45:90 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/78A2C1B7FD05098A611E198E8481B7297F924590.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/99e3b1d8-bf19-46e3-b609-0d160988dac8/0/3131392e3233352e3234382e302f32312d3234203d3e203435313436.roa Signing time: Sun 03 May 2026 02:53:55 +0000 ROA not before: Sun 03 May 2026 02:48:55 +0000 ROA not after: Sun 02 May 2027 02:53:55 +0000 asID: 45146 IP address blocks: 119.235.248.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/99e3b1d8-bf19-46e3-b609-0d160988dac8/0/78A2C1B7FD05098A611E198E8481B7297F924590.crl rsync://rpki-rsync.idnic.net/repo/99e3b1d8-bf19-46e3-b609-0d160988dac8/0/78A2C1B7FD05098A611E198E8481B7297F924590.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/78A2C1B7FD05098A611E198E8481B7297F924590.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 21:16:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:47:a7:6c:2f:56:8c:00:fa:e0:dd:94:16:72:4c:9f:f7:fa:90:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78A2C1B7FD05098A611E198E8481B7297F924590 Validity Not Before: May 3 02:48:55 2026 GMT Not After : May 2 02:53:55 2027 GMT Subject: CN=94EB96E3E0918B64E9F3290BED687A55E623C90F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:a0:fc:56:b7:62:9a:c0:49:0f:3d:b1:57:11: c1:a4:94:24:0c:2d:d8:b8:73:3f:b5:f4:67:6d:a8: 19:d7:b2:a9:ec:05:81:ae:eb:6e:1e:e0:7f:48:bd: 49:8b:11:6c:ea:2f:ee:aa:4d:2e:1c:34:37:3e:28: 1c:8d:3f:82:d7:cb:d9:7b:0f:83:2f:2c:8f:80:ff: 47:1a:37:c4:48:3a:54:43:40:9d:84:68:4e:4e:71: db:60:fb:4d:58:ae:1b:be:f6:8e:c1:55:b5:fe:1a: 99:6c:85:61:f0:43:c3:49:06:b8:cf:48:cf:79:c9: 75:d9:0f:62:a3:d3:24:12:23:ce:5d:42:ec:ee:46: a9:54:c0:93:04:02:c3:c9:56:4c:80:fd:cd:1c:46: 3a:e0:71:bb:73:51:97:04:7e:cd:b5:10:64:ac:c2: f7:cb:b0:73:02:95:e7:e2:76:bf:a1:1e:27:d8:7f: e4:92:4c:fa:ea:5c:d9:5a:05:df:6c:b3:e3:c9:46: 1c:e2:89:09:0c:7b:f3:1d:19:23:26:c1:c6:21:cf: fd:db:52:13:8d:02:32:fa:4e:7a:b3:59:1d:bf:a8: 5f:94:66:04:1a:c2:75:df:b5:15:bb:31:f0:73:f6: 67:e9:f8:ee:e4:03:5e:1f:19:69:4d:a8:10:6c:fa: b0:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:EB:96:E3:E0:91:8B:64:E9:F3:29:0B:ED:68:7A:55:E6:23:C9:0F X509v3 Authority Key Identifier: keyid:78:A2:C1:B7:FD:05:09:8A:61:1E:19:8E:84:81:B7:29:7F:92:45:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/99e3b1d8-bf19-46e3-b609-0d160988dac8/0/78A2C1B7FD05098A611E198E8481B7297F924590.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/78A2C1B7FD05098A611E198E8481B7297F924590.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/99e3b1d8-bf19-46e3-b609-0d160988dac8/0/3131392e3233352e3234382e302f32312d3234203d3e203435313436.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 119.235.248.0/21 Signature Algorithm: sha256WithRSAEncryption 7e:28:15:ce:cf:d2:5e:d5:5d:95:02:52:33:e8:d3:60:a9:26: b7:4a:24:90:60:2a:d7:01:6a:3f:82:f9:14:f6:ea:ea:ff:a6: ff:c6:f2:f8:7e:b1:20:c2:fd:59:ef:ed:52:4c:95:d4:7e:bf: 7b:89:5c:cb:5e:27:0e:c4:b2:a5:b3:c7:55:89:e3:a3:55:42: 1a:74:13:47:c1:b6:35:9b:3e:70:7b:9d:07:b4:b9:27:ef:71: 40:37:53:e8:ae:82:a9:34:71:a8:c7:09:62:8a:2e:89:36:29: 40:14:7c:c7:d9:44:6b:92:9d:e0:bb:ee:f4:1c:b7:11:70:e3: 41:f1:4c:fa:a1:26:ef:14:6b:b6:e3:f0:c6:29:7d:2b:5b:71: 33:12:0d:ca:cd:b8:38:16:7e:e8:46:e8:0f:bf:b4:f5:da:9e: 2a:1e:38:2c:ca:51:ba:4b:e6:75:67:f5:01:4c:7d:bd:76:9e: 89:cc:40:23:1f:0a:cb:e7:d3:a7:5e:d4:ec:43:4c:1e:32:43: 8c:40:db:c6:d3:9a:86:6c:1c:c0:e9:b3:87:2b:88:9b:d9:02: 95:c8:61:27:d9:22:8c:78:74:78:09:bd:2b:be:36:17:93:0f: 71:c3:cd:d2:f0:ce:a7:b6:69:fd:a1:eb:8a:44:f6:bd:e0:4a: 95:fa:86:e5 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUe0enbC9WjAD64N2UFnJMn/f6kCEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzhBMkMxQjdGRDA1MDk4QTYxMUUxOThFODQ4MUI3Mjk3 RjkyNDU5MDAeFw0yNjA1MDMwMjQ4NTVaFw0yNzA1MDIwMjUzNTVaMDMxMTAvBgNV BAMTKDk0RUI5NkUzRTA5MThCNjRFOUYzMjkwQkVENjg3QTU1RTYyM0M5MEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+oPxWt2KawEkPPbFXEcGklCQM Ldi4cz+19GdtqBnXsqnsBYGu624e4H9IvUmLEWzqL+6qTS4cNDc+KByNP4LXy9l7 D4MvLI+A/0caN8RIOlRDQJ2EaE5Ocdtg+01Yrhu+9o7BVbX+GplshWHwQ8NJBrjP SM95yXXZD2Kj0yQSI85dQuzuRqlUwJMEAsPJVkyA/c0cRjrgcbtzUZcEfs21EGSs wvfLsHMClefidr+hHifYf+SSTPrqXNlaBd9ss+PJRhziiQkMe/MdGSMmwcYhz/3b UhONAjL6TnqzWR2/qF+UZgQawnXftRW7MfBz9mfp+O7kA14fGWlNqBBs+rCLAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUlOuW4+CRi2Tp8ykL7Wh6VeYjyQ8wHwYDVR0j BBgwFoAUeKLBt/0FCYphHhmOhIG3KX+SRZAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTllM2IxZDgtYmYxOS00NmUzLWI2MDktMGQxNjA5ODhkYWM4LzAvNzhBMkMxQjdG RDA1MDk4QTYxMUUxOThFODQ4MUI3Mjk3RjkyNDU5MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83OEEyQzFCN0ZEMDUwOThBNjExRTE5OEU4NDgxQjcyOTdGOTI0 NTkwLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzk5ZTNiMWQ4LWJmMTktNDZlMy1i NjA5LTBkMTYwOTg4ZGFjOC8wLzMxMzEzOTJlMzIzMzM1MmUzMjM0MzgyZTMwMmYz MjMxMmQzMjM0MjAzZDNlMjAzNDM1MzEzNDM2LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDd+v4MA0GCSqG SIb3DQEBCwUAA4IBAQB+KBXOz9Je1V2VAlIz6NNgqSa3SiSQYCrXAWo/gvkU9urq /6b/xvL4frEgwv1Z7+1STJXUfr97iVzLXicOxLKls8dVieOjVUIadBNHwbY1mz5w e50HtLkn73FAN1PoroKpNHGoxwliii6JNilAFHzH2URrkp3gu+70HLcRcONB8Uz6 oSbvFGu24/DGKX0rW3EzEg3Kzbg4Fn7oRugPv7T12p4qHjgsylG6S+Z1Z/UBTH29 dp6JzEAjHwrL59OnXtTsQ0weMkOMQNvG05qGbBzA6bOHK4ib2QKVyGEn2SKMeHR4 Cb0rvjYXkw9xw83S8M6ntmn9oeuKRPa94EqV+obl -----END CERTIFICATE-----Generated at Wed May 13 10:04:10 2026 by rpki-client