$ rpki-client -vvf rpki-rsync.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/3131392e3131302e38322e302f32332d3233203d3e203338373533.roa File: 3131392e3131302e38322e302f32332d3233203d3e203338373533.roa (raw, json) Hash identifier: 8djfFrPJnnmzCe+N8ldBuVcXTxgsoV0diYsMqks41bU= Subject key identifier: 65:B2:85:67:8B:3F:29:C7:4C:B0:1E:93:C7:69:5C:C1:00:0E:53:EF Certificate issuer: /CN=955AF2D41C7C84BFE354F8648EE3271584452C79 Certificate serial: 2AEFA88EA1E377CE0A661373CC05D2575E50424B Authority key identifier: 95:5A:F2:D4:1C:7C:84:BF:E3:54:F8:64:8E:E3:27:15:84:45:2C:79 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/955AF2D41C7C84BFE354F8648EE3271584452C79.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/3131392e3131302e38322e302f32332d3233203d3e203338373533.roa Signing time: Sun 03 May 2026 02:55:18 +0000 ROA not before: Sun 03 May 2026 02:50:18 +0000 ROA not after: Sun 02 May 2027 02:55:18 +0000 asID: 38753 IP address blocks: 119.110.82.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/955AF2D41C7C84BFE354F8648EE3271584452C79.crl rsync://rpki-rsync.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/955AF2D41C7C84BFE354F8648EE3271584452C79.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/955AF2D41C7C84BFE354F8648EE3271584452C79.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 19:15:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:ef:a8:8e:a1:e3:77:ce:0a:66:13:73:cc:05:d2:57:5e:50:42:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=955AF2D41C7C84BFE354F8648EE3271584452C79 Validity Not Before: May 3 02:50:18 2026 GMT Not After : May 2 02:55:18 2027 GMT Subject: CN=65B285678B3F29C74CB01E93C7695CC1000E53EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:e3:c5:8e:66:d6:2d:65:35:26:b6:46:26:ce: f6:31:16:0d:32:1c:d3:5f:41:d7:74:23:ab:58:c7: 8c:6c:47:c9:9c:0f:6c:f0:c8:d7:d1:5f:cd:d0:d3: c3:00:c4:43:83:ac:41:fb:c3:54:05:4e:55:c0:15: 1b:ee:dc:db:3b:a8:8a:89:76:26:29:f7:77:13:56: fa:bd:51:1b:ac:20:dd:c6:89:3b:3e:4e:d1:d6:3e: cd:6c:51:0e:17:25:0e:23:84:75:b7:2a:41:ad:a1: 65:81:db:09:a1:2e:60:d1:e8:3b:54:3f:6e:e8:e7: db:e0:e1:7a:88:e7:18:4c:7a:7f:68:39:3c:ed:91: 81:a3:60:15:53:4b:5f:8e:15:63:54:14:bc:4f:78: b5:2a:c3:01:bf:56:fe:27:f8:cc:ef:89:22:63:be: 7c:cc:f8:b5:b2:98:74:39:ba:96:d7:0f:f0:47:50: fe:b4:07:4c:08:7f:f2:a5:6d:4c:75:4c:57:96:83: 2d:ba:a2:60:61:0e:32:90:a3:7a:15:57:8e:4c:bf: 2e:aa:0d:fc:82:7d:62:7f:ac:92:90:2f:e1:07:13: 61:06:61:8d:c4:ec:3d:6c:fc:ea:e3:8f:8f:13:78: dc:45:26:92:79:37:92:c7:d1:98:9f:c4:2a:9a:79: 15:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:B2:85:67:8B:3F:29:C7:4C:B0:1E:93:C7:69:5C:C1:00:0E:53:EF X509v3 Authority Key Identifier: keyid:95:5A:F2:D4:1C:7C:84:BF:E3:54:F8:64:8E:E3:27:15:84:45:2C:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/955AF2D41C7C84BFE354F8648EE3271584452C79.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/955AF2D41C7C84BFE354F8648EE3271584452C79.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/3131392e3131302e38322e302f32332d3233203d3e203338373533.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 119.110.82.0/23 Signature Algorithm: sha256WithRSAEncryption 51:e9:40:6e:0d:48:f6:d5:23:78:65:17:e6:02:3e:d3:64:8e: 93:7b:88:5c:8a:42:45:d9:01:5c:01:9a:9d:82:c1:9b:a9:70: 8c:e5:03:7a:92:37:11:83:11:b5:57:96:44:38:0b:8f:2f:cf: b3:3b:c2:27:68:80:f8:df:48:b2:c1:5f:89:5f:e6:99:20:ba: f8:97:02:16:48:48:de:55:27:b9:fd:a6:f0:21:ef:99:73:45: 30:a6:b4:0f:02:a1:16:e7:7e:2b:38:83:3f:db:9f:d0:1e:fc: 11:fb:13:42:86:cb:1e:5e:6c:3b:59:c2:f9:18:49:24:3a:60: 77:c3:7e:90:aa:83:b5:1d:a3:76:f1:c4:3b:07:46:8e:78:51: 3f:34:2c:98:45:c6:5e:aa:8b:7a:5f:27:f1:65:35:73:82:3e: 06:61:62:25:b7:8a:8a:f6:22:70:50:b5:d0:b2:5f:ed:a4:08: 9a:26:c3:bb:90:1c:a5:17:8e:02:f7:3e:52:6a:e4:b0:da:d3: 98:d4:45:e3:b6:07:45:28:d7:d7:d2:b4:7d:ba:ea:dd:01:c6: bf:5c:85:73:e2:07:e1:39:a8:0c:34:8a:9c:d6:7d:b8:e4:ea: 1f:4c:fd:3f:a7:46:50:3a:7c:59:1a:0d:a6:a9:74:8f:b1:4b: fe:20:71:15 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUKu+ojqHjd84KZhNzzAXSV15QQkswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTU1QUYyRDQxQzdDODRCRkUzNTRGODY0OEVFMzI3MTU4 NDQ1MkM3OTAeFw0yNjA1MDMwMjUwMThaFw0yNzA1MDIwMjU1MThaMDMxMTAvBgNV BAMTKDY1QjI4NTY3OEIzRjI5Qzc0Q0IwMUU5M0M3Njk1Q0MxMDAwRTUzRUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCX48WOZtYtZTUmtkYmzvYxFg0y HNNfQdd0I6tYx4xsR8mcD2zwyNfRX83Q08MAxEODrEH7w1QFTlXAFRvu3Ns7qIqJ diYp93cTVvq9URusIN3GiTs+TtHWPs1sUQ4XJQ4jhHW3KkGtoWWB2wmhLmDR6DtU P27o59vg4XqI5xhMen9oOTztkYGjYBVTS1+OFWNUFLxPeLUqwwG/Vv4n+MzviSJj vnzM+LWymHQ5upbXD/BHUP60B0wIf/KlbUx1TFeWgy26omBhDjKQo3oVV45Mvy6q DfyCfWJ/rJKQL+EHE2EGYY3E7D1s/Orjj48TeNxFJpJ5N5LH0ZifxCqaeRXHAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUZbKFZ4s/KcdMsB6Tx2lcwQAOU+8wHwYDVR0j BBgwFoAUlVry1Bx8hL/jVPhkjuMnFYRFLHkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTA2YjY2NzMtNDdhMS00NWU1LWI2YzItNDJhYjhiNDc2MjQ5LzAvOTU1QUYyRDQx QzdDODRCRkUzNTRGODY0OEVFMzI3MTU4NDQ1MkM3OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85NTVBRjJENDFDN0M4NEJGRTM1NEY4NjQ4RUUzMjcxNTg0NDUy Qzc5LmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2EwNmI2NjczLTQ3YTEtNDVlNS1i NmMyLTQyYWI4YjQ3NjI0OS8wLzMxMzEzOTJlMzEzMTMwMmUzODMyMmUzMDJmMzIz MzJkMzIzMzIwM2QzZTIwMzMzODM3MzUzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAXduUjANBgkqhkiG 9w0BAQsFAAOCAQEAUelAbg1I9tUjeGUX5gI+02SOk3uIXIpCRdkBXAGanYLBm6lw jOUDepI3EYMRtVeWRDgLjy/PszvCJ2iA+N9IssFfiV/mmSC6+JcCFkhI3lUnuf2m 8CHvmXNFMKa0DwKhFud+KziDP9uf0B78EfsTQobLHl5sO1nC+RhJJDpgd8N+kKqD tR2jdvHEOwdGjnhRPzQsmEXGXqqLel8n8WU1c4I+BmFiJbeKivYicFC10LJf7aQI mibDu5AcpReOAvc+UmrksNrTmNRF47YHRSjX19K0fbrq3QHGv1yFc+IH4TmoDDSK nNZ9uOTqH0z9P6dGUDp8WRoNpql0j7FL/iBxFQ== -----END CERTIFICATE-----Generated at Wed May 13 04:26:44 2026 by rpki-client