$ rpki-client -vvf rpki-rsync.idnic.net/repo/a572dfbe-4ca0-4a46-8037-4968ed97cadc/0/3132312e3130312e3138352e302f32342d3234203d3e203338373835.roa File: 3132312e3130312e3138352e302f32342d3234203d3e203338373835.roa (raw, json) Hash identifier: njy5/kh9KsnXyn0A9UeBHDQF9Tkk8vaMqIfNa9Qx8CA= Subject key identifier: 23:74:A0:2C:67:11:62:4F:9C:4C:9D:50:90:94:EA:A6:4E:B7:B9:F6 Certificate issuer: /CN=EAF11A8ED035ADED159E0977A55B8A135A2DBAF0 Certificate serial: 0A8DC44CB07423F7E63CF99DB607096EA0C15834 Authority key identifier: EA:F1:1A:8E:D0:35:AD:ED:15:9E:09:77:A5:5B:8A:13:5A:2D:BA:F0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAF11A8ED035ADED159E0977A55B8A135A2DBAF0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a572dfbe-4ca0-4a46-8037-4968ed97cadc/0/3132312e3130312e3138352e302f32342d3234203d3e203338373835.roa Signing time: Sun 03 May 2026 02:56:37 +0000 ROA not before: Sun 03 May 2026 02:51:37 +0000 ROA not after: Sun 02 May 2027 02:56:37 +0000 asID: 38785 IP address blocks: 121.101.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a572dfbe-4ca0-4a46-8037-4968ed97cadc/0/EAF11A8ED035ADED159E0977A55B8A135A2DBAF0.crl rsync://rpki-rsync.idnic.net/repo/a572dfbe-4ca0-4a46-8037-4968ed97cadc/0/EAF11A8ED035ADED159E0977A55B8A135A2DBAF0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAF11A8ED035ADED159E0977A55B8A135A2DBAF0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 02:16:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:8d:c4:4c:b0:74:23:f7:e6:3c:f9:9d:b6:07:09:6e:a0:c1:58:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EAF11A8ED035ADED159E0977A55B8A135A2DBAF0 Validity Not Before: May 3 02:51:37 2026 GMT Not After : May 2 02:56:37 2027 GMT Subject: CN=2374A02C6711624F9C4C9D509094EAA64EB7B9F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:ca:ba:36:f6:68:ba:a5:cb:7d:18:7a:30:53: 29:ba:44:1b:47:7a:f5:02:89:d4:0d:61:91:8a:89: af:27:d7:01:71:1c:cb:5c:f2:7a:02:8a:68:6c:c0: 16:a0:20:81:24:77:a5:76:d9:e9:a7:6a:00:fc:4a: 6e:a2:c2:45:4a:87:80:7b:d4:41:d6:3a:cb:3a:c9: c1:c0:c5:18:8f:1a:81:02:b0:89:ac:90:ed:1a:da: 41:a1:25:aa:a5:53:0e:dc:8e:72:95:94:d4:f5:d0: 28:06:8e:dc:88:10:19:97:d0:d9:91:de:9e:2f:56: 59:0f:b3:56:13:12:8d:9a:e7:01:27:d0:0b:f9:dd: c0:e7:76:b7:b4:2b:47:78:0e:96:c1:a6:dd:7e:43: dc:e1:c5:b4:62:44:78:a7:ba:aa:0a:3e:7c:45:f3: 40:82:fe:33:f4:35:d7:21:83:31:ee:5c:78:d1:04: 1e:44:d4:a7:0e:5c:c3:c6:30:5f:34:ba:5c:2c:4a: b2:99:39:45:cb:ee:b8:7c:71:03:1d:eb:79:6f:31: e4:53:c8:2e:31:2c:d7:5d:ad:47:39:8c:37:3e:ff: c9:b1:ac:e5:ff:95:79:a4:01:e0:0f:b5:c4:32:f6: b8:02:b9:80:25:a6:ec:8c:c2:c2:75:1e:4f:b2:89: 35:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:74:A0:2C:67:11:62:4F:9C:4C:9D:50:90:94:EA:A6:4E:B7:B9:F6 X509v3 Authority Key Identifier: keyid:EA:F1:1A:8E:D0:35:AD:ED:15:9E:09:77:A5:5B:8A:13:5A:2D:BA:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a572dfbe-4ca0-4a46-8037-4968ed97cadc/0/EAF11A8ED035ADED159E0977A55B8A135A2DBAF0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAF11A8ED035ADED159E0977A55B8A135A2DBAF0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a572dfbe-4ca0-4a46-8037-4968ed97cadc/0/3132312e3130312e3138352e302f32342d3234203d3e203338373835.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 121.101.185.0/24 Signature Algorithm: sha256WithRSAEncryption 6a:01:e3:18:80:2a:a3:46:4e:58:51:72:1a:32:b3:f5:60:34: 64:aa:64:64:e5:14:5b:05:69:43:16:2a:f0:26:10:58:55:13: 55:d6:a2:76:b6:1c:d0:c9:d1:41:b4:43:e3:6f:72:98:e8:27: 69:98:d3:62:b6:c6:a2:10:36:3d:3f:c0:46:7b:95:7b:a0:a7: d1:16:ea:66:68:70:6d:74:62:a5:46:fa:3c:f1:e4:51:ec:ef: 39:3a:a3:d7:07:c7:77:ad:a0:ec:e9:e6:5a:2c:b4:ce:05:48: f1:7c:26:83:6c:35:05:fd:ec:ff:68:c9:a9:e9:3c:a8:c7:97: 6d:85:45:13:da:79:8f:bd:50:57:35:8d:47:5d:80:26:08:f9: f9:42:59:11:fd:4d:54:0d:67:6a:53:fd:c5:ab:4d:ed:9f:f6: 82:0f:db:75:73:ab:6c:2a:7c:ad:b3:58:39:f3:53:1f:c8:ab: 60:9d:3c:af:38:3f:37:3b:e9:3b:d4:54:ba:9e:20:2a:f9:75: 2a:8a:f9:9c:99:2a:32:df:f4:e2:68:af:60:d5:26:bb:73:08: 2c:53:cd:b5:e7:3c:89:b2:44:8e:14:56:51:98:b5:46:a0:f9: 2b:10:89:08:34:97:d0:9f:9f:a7:a4:9c:17:3c:03:2c:87:b4: 7b:a4:b4:89 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUCo3ETLB0I/fmPPmdtgcJbqDBWDQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUFGMTFBOEVEMDM1QURFRDE1OUUwOTc3QTU1QjhBMTM1 QTJEQkFGMDAeFw0yNjA1MDMwMjUxMzdaFw0yNzA1MDIwMjU2MzdaMDMxMTAvBgNV BAMTKDIzNzRBMDJDNjcxMTYyNEY5QzRDOUQ1MDkwOTRFQUE2NEVCN0I5RjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjyro29mi6pct9GHowUym6RBtH evUCidQNYZGKia8n1wFxHMtc8noCimhswBagIIEkd6V22emnagD8Sm6iwkVKh4B7 1EHWOss6ycHAxRiPGoECsImskO0a2kGhJaqlUw7cjnKVlNT10CgGjtyIEBmX0NmR 3p4vVlkPs1YTEo2a5wEn0Av53cDndre0K0d4DpbBpt1+Q9zhxbRiRHinuqoKPnxF 80CC/jP0NdchgzHuXHjRBB5E1KcOXMPGMF80ulwsSrKZOUXL7rh8cQMd63lvMeRT yC4xLNddrUc5jDc+/8mxrOX/lXmkAeAPtcQy9rgCuYAlpuyMwsJ1Hk+yiTV1AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUI3SgLGcRYk+cTJ1QkJTqpk63ufYwHwYDVR0j BBgwFoAU6vEajtA1re0Vngl3pVuKE1otuvAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTU3MmRmYmUtNGNhMC00YTQ2LTgwMzctNDk2OGVkOTdjYWRjLzAvRUFGMTFBOEVE MDM1QURFRDE1OUUwOTc3QTU1QjhBMTM1QTJEQkFGMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FQUYxMUE4RUQwMzVBREVEMTU5RTA5NzdBNTVCOEExMzVBMkRC QUYwLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2E1NzJkZmJlLTRjYTAtNGE0Ni04 MDM3LTQ5NjhlZDk3Y2FkYy8wLzMxMzIzMTJlMzEzMDMxMmUzMTM4MzUyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMzM4MzczODM1LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAeWW5MA0GCSqG SIb3DQEBCwUAA4IBAQBqAeMYgCqjRk5YUXIaMrP1YDRkqmRk5RRbBWlDFirwJhBY VRNV1qJ2thzQydFBtEPjb3KY6CdpmNNitsaiEDY9P8BGe5V7oKfRFupmaHBtdGKl Rvo88eRR7O85OqPXB8d3raDs6eZaLLTOBUjxfCaDbDUF/ez/aMmp6Tyox5dthUUT 2nmPvVBXNY1HXYAmCPn5QlkR/U1UDWdqU/3Fq03tn/aCD9t1c6tsKnyts1g581Mf yKtgnTyvOD83O+k71FS6niAq+XUqivmcmSoy3/TiaK9g1Sa7cwgsU8215zyJskSO FFZRmLVGoPkrEIkINJfQn5+npJwXPAMsh7R7pLSJ -----END CERTIFICATE-----Generated at Wed May 13 09:12:51 2026 by rpki-client