$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/3/3134312e3232392e322e302f32332d3234203d3e20313535303934.roa File: 3134312e3232392e322e302f32332d3234203d3e20313535303934.roa (raw, json) Hash identifier: Mbwp3si8xqnNQO2UGAjC2FyC6JOrXfyDYf5RCEkKnwQ= Subject key identifier: 31:5D:D6:EC:6D:DD:61:37:F8:4F:2C:96:98:9D:0E:B2:65:79:D1:A1 Certificate issuer: /CN=A91862140000/serialNumber=F927DF3848ABABCA88FF3D95A1E5B16754C63A53 Certificate serial: 2109D6F260C390914EB91BC52AA1D5F1D81CC2D2 Authority key identifier: F9:27:DF:38:48:AB:AB:CA:88:FF:3D:95:A1:E5:B1:67:54:C6:3A:53 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/-SffOEirq8qI_z2VoeWxZ1TGOlM.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/3/3134312e3232392e322e302f32332d3234203d3e20313535303934.roa Signing time: Tue 10 Nov 2026 03:46:07 +0000 ROA not before: Tue 10 Nov 2026 03:41:07 +0000 ROA not after: Tue 09 Nov 2027 03:46:07 +0000 asID: 155094 IP address blocks: 141.229.2.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/3/F927DF3848ABABCA88FF3D95A1E5B16754C63A53.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/3/F927DF3848ABABCA88FF3D95A1E5B16754C63A53.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/-SffOEirq8qI_z2VoeWxZ1TGOlM.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 15:26:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:09:d6:f2:60:c3:90:91:4e:b9:1b:c5:2a:a1:d5:f1:d8:1c:c2:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=F927DF3848ABABCA88FF3D95A1E5B16754C63A53 Validity Not Before: Nov 10 03:41:07 2026 GMT Not After : Nov 9 03:46:07 2027 GMT Subject: CN=315DD6EC6DDD6137F84F2C96989D0EB26579D1A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:60:e3:4f:fb:93:9e:9e:58:a8:4b:4f:aa:f9: 9b:9c:8b:db:4c:60:d1:fc:32:17:c8:83:83:b2:41: f0:cf:9a:e0:09:ed:82:e8:66:e8:a6:00:55:20:10: 49:a9:d3:58:e3:7c:c6:73:a9:b0:c4:81:c7:7b:49: 4c:83:53:f2:cf:84:29:ca:68:c2:f8:2d:f2:30:7d: de:8c:0e:94:8c:e2:e4:f9:43:b9:df:49:37:a5:6b: c7:a0:63:8d:e7:d1:a8:cb:e0:40:cd:fa:49:99:08: 81:eb:25:8d:25:55:bb:0e:74:7c:be:ab:da:ef:91: a3:5d:b5:77:6b:21:9a:7b:69:f7:70:d0:ce:3f:a0: f0:1a:95:de:9b:05:18:d8:8e:45:eb:fc:f4:a9:dd: 90:0a:ee:8f:a5:15:0b:ea:b2:bb:bb:73:bd:57:a0: 0b:74:61:82:ea:14:67:53:4d:d2:3a:13:92:bb:14: f0:89:56:de:f2:c0:57:13:bf:34:a1:50:fe:e0:a2: b5:f1:fc:f5:a1:6b:17:ed:48:e0:4d:13:e8:05:b4: 73:0f:e2:02:0f:dd:71:b1:64:b1:fb:9a:b8:d4:04: 87:9d:1a:be:26:eb:3a:38:b8:18:3d:5b:f9:c2:f9: eb:24:1b:bb:6f:c7:c0:1e:fb:3c:1a:92:06:88:c5: 59:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:5D:D6:EC:6D:DD:61:37:F8:4F:2C:96:98:9D:0E:B2:65:79:D1:A1 X509v3 Authority Key Identifier: keyid:F9:27:DF:38:48:AB:AB:CA:88:FF:3D:95:A1:E5:B1:67:54:C6:3A:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/3/F927DF3848ABABCA88FF3D95A1E5B16754C63A53.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/-SffOEirq8qI_z2VoeWxZ1TGOlM.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/3/3134312e3232392e322e302f32332d3234203d3e20313535303934.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.229.2.0/23 Signature Algorithm: sha256WithRSAEncryption 9c:88:1e:dc:5f:5e:83:0d:f5:8a:1f:60:fd:cd:45:f5:28:22: b4:04:ff:57:16:09:e9:0d:0c:60:af:ca:51:f6:76:c7:66:8a: ba:ee:cb:fe:1f:40:fa:03:52:c4:02:cf:04:b5:0e:91:81:f6: f4:d8:03:2a:19:54:a4:b4:a8:33:bb:58:07:ce:d1:a9:fa:3f: 64:06:9e:49:62:9b:4a:6c:07:3b:87:42:78:ee:0e:7b:75:7f: cb:88:12:68:7f:04:f1:c3:c6:c6:27:39:4b:96:e4:a7:ac:3f: 28:41:70:c3:28:f3:f1:fc:a8:24:4b:2e:ba:3f:b3:71:03:eb: 0c:52:84:7a:30:d1:b1:8b:71:5b:d2:92:7d:0e:ba:5a:66:51: 51:1e:b6:30:c8:38:22:47:74:d7:5d:11:b8:72:5e:01:63:1c: 74:2d:b6:2c:36:e6:97:58:1a:75:b8:33:2f:24:d5:36:bf:2f: 1d:e6:f7:4f:f7:49:c6:6d:b2:26:3c:01:df:31:ef:1e:71:98: d3:af:70:f6:ce:bf:33:d1:4a:e6:eb:2c:ec:b6:93:c4:3c:83: 99:03:db:5d:75:f0:b7:ea:4f:4e:c1:a8:3c:44:c9:9e:b2:3c: 63:35:71:a5:72:21:3b:68:be:d7:33:cd:09:66:05:80:c8:e6: 6a:64:0a:de -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgIUIQnW8mDDkJFOuRvFKqHV8dgcwtIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhGOTI3REYzODQ4 QUJBQkNBODhGRjNEOTVBMUU1QjE2NzU0QzYzQTUzMB4XDTI2MTExMDAzNDEwN1oX DTI3MTEwOTAzNDYwN1owMzExMC8GA1UEAxMoMzE1REQ2RUM2RERENjEzN0Y4NEYy Qzk2OTg5RDBFQjI2NTc5RDFBMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKZg40/7k56eWKhLT6r5m5yL20xg0fwyF8iDg7JB8M+a4Antguhm6KYAVSAQ SanTWON8xnOpsMSBx3tJTINT8s+EKcpowvgt8jB93owOlIzi5PlDud9JN6Vrx6Bj jefRqMvgQM36SZkIgesljSVVuw50fL6r2u+Ro121d2shmntp93DQzj+g8BqV3psF GNiORev89KndkAruj6UVC+qyu7tzvVegC3RhguoUZ1NN0joTkrsU8IlW3vLAVxO/ NKFQ/uCitfH89aFrF+1I4E0T6AW0cw/iAg/dcbFksfuauNQEh50avibrOji4GD1b +cL56yQbu2/HwB77PBqSBojFWSECAwEAAaOCAfswggH3MB0GA1UdDgQWBBQxXdbs bd1hN/hPLJaYnQ6yZXnRoTAfBgNVHSMEGDAWgBT5J984SKuryoj/PZWh5bFnVMY6 UzAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzMvRjkyN0RGMzg0OEFCQUJDQTg4 RkYzRDk1QTFFNUIxNjc1NEM2M0E1My5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1 RjQxRDY2MTFFMkEzRjI3RjdDNzJGRDFGRjIvLVNmZk9FaXJxOHFJX3oyVm9lV3ha MVRHT2xNLmNlcjCBgAYIKwYBBQUHAQsEdDByMHAGCCsGAQUFBzALhmRyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMy8zMTM0MzEyZTMyMzIz OTJlMzIyZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzMTM1MzUzMDM5MzQucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAGN5QIwDQYJKoZIhvcNAQELBQADggEBAJyIHtxfXoMN9YofYP3NRfUoIrQE /1cWCekNDGCvylH2dsdmirruy/4fQPoDUsQCzwS1DpGB9vTYAyoZVKS0qDO7WAfO 0an6P2QGnklim0psBzuHQnjuDnt1f8uIEmh/BPHDxsYnOUuW5KesPyhBcMMo8/H8 qCRLLro/s3ED6wxShHow0bGLcVvSkn0OulpmUVEetjDIOCJHdNddEbhyXgFjHHQt tiw25pdYGnW4My8k1Ta/Lx3m90/3ScZtsiY8Ad8x7x5xmNOvcPbOvzPRSubrLOy2 k8Q8g5kD21118LfqT07BqDxEyZ6yPGM1caVyITtovtczzQlmBYDI5mpkCt4= -----END CERTIFICATE-----Generated at Sun Nov 15 00:11:54 2026 by rpki-client