$ rpki-client -vvf rpki-rsync.idnic.net/repo/a572dfbe-4ca0-4a46-8037-4968ed97cadc/0/3132312e3130312e3138372e302f32342d3234203d3e203338373835.roa File: 3132312e3130312e3138372e302f32342d3234203d3e203338373835.roa (raw, json) Hash identifier: eow5kZw+wlYHSjxq5MYrTPBsAbbgLnc6v4ENArx4+O8= Subject key identifier: 1C:2D:63:4C:83:48:96:4F:E9:F1:09:4D:B2:54:65:4F:6B:FB:B4:E2 Certificate issuer: /CN=EAF11A8ED035ADED159E0977A55B8A135A2DBAF0 Certificate serial: 7FDF75BCB028F2EEE425251AC9D8FF234FF130C3 Authority key identifier: EA:F1:1A:8E:D0:35:AD:ED:15:9E:09:77:A5:5B:8A:13:5A:2D:BA:F0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAF11A8ED035ADED159E0977A55B8A135A2DBAF0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a572dfbe-4ca0-4a46-8037-4968ed97cadc/0/3132312e3130312e3138372e302f32342d3234203d3e203338373835.roa Signing time: Sun 03 May 2026 02:56:39 +0000 ROA not before: Sun 03 May 2026 02:51:39 +0000 ROA not after: Sun 02 May 2027 02:56:39 +0000 asID: 38785 IP address blocks: 121.101.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a572dfbe-4ca0-4a46-8037-4968ed97cadc/0/EAF11A8ED035ADED159E0977A55B8A135A2DBAF0.crl rsync://rpki-rsync.idnic.net/repo/a572dfbe-4ca0-4a46-8037-4968ed97cadc/0/EAF11A8ED035ADED159E0977A55B8A135A2DBAF0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAF11A8ED035ADED159E0977A55B8A135A2DBAF0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 02:16:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:df:75:bc:b0:28:f2:ee:e4:25:25:1a:c9:d8:ff:23:4f:f1:30:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EAF11A8ED035ADED159E0977A55B8A135A2DBAF0 Validity Not Before: May 3 02:51:39 2026 GMT Not After : May 2 02:56:39 2027 GMT Subject: CN=1C2D634C8348964FE9F1094DB254654F6BFBB4E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:22:30:0f:94:69:c3:b2:16:a7:bf:51:c0:74: 30:fd:11:4c:97:55:88:4e:ac:cb:3e:fc:dc:a3:ba: 92:c0:84:85:81:9c:db:e2:d5:31:f5:1f:f6:ed:91: 1d:9b:5c:0c:76:f6:4f:57:7d:58:21:34:33:66:7c: 8a:b6:f6:ff:7a:3d:0d:c7:d8:6f:f7:b6:a7:aa:ae: c2:fc:e6:7b:66:4c:9a:d4:ed:f1:d2:2a:7a:5a:dc: e8:48:9d:15:71:88:66:9f:54:7a:39:2f:8f:3b:04: 61:ba:2c:6e:a0:d3:c1:ef:6b:73:73:b4:e8:59:64: 18:81:cb:cc:25:6c:74:dc:ff:be:8f:b2:4b:40:b0: b4:cc:9f:b3:f5:60:1e:b1:83:54:3f:fa:95:4a:ff: ad:7e:c5:cd:02:51:05:1c:a9:6e:1b:23:1e:87:49: 39:60:c6:60:3e:b1:13:bd:12:20:94:be:5e:2f:a8: bf:0c:dc:4c:11:26:5e:5e:aa:d9:83:1b:26:d6:d6: 04:f5:b9:da:ce:7d:68:52:a1:06:ed:6a:8c:67:0b: e7:b1:4d:64:41:56:5a:7f:1f:1c:1e:e9:bf:3b:1e: e1:98:e5:af:b0:06:71:d8:b9:de:02:08:cb:09:64: 81:55:78:59:d8:4d:3f:12:50:0f:a7:b1:3b:3c:4a: 0b:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:2D:63:4C:83:48:96:4F:E9:F1:09:4D:B2:54:65:4F:6B:FB:B4:E2 X509v3 Authority Key Identifier: keyid:EA:F1:1A:8E:D0:35:AD:ED:15:9E:09:77:A5:5B:8A:13:5A:2D:BA:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a572dfbe-4ca0-4a46-8037-4968ed97cadc/0/EAF11A8ED035ADED159E0977A55B8A135A2DBAF0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAF11A8ED035ADED159E0977A55B8A135A2DBAF0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a572dfbe-4ca0-4a46-8037-4968ed97cadc/0/3132312e3130312e3138372e302f32342d3234203d3e203338373835.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 121.101.187.0/24 Signature Algorithm: sha256WithRSAEncryption a4:99:2c:6e:d8:6c:77:70:5d:0b:b1:4c:9b:3d:68:65:fc:b9: e6:95:ac:52:97:1d:7b:03:a0:3c:d5:4d:f4:b3:cd:32:da:65: 79:ce:46:a7:e4:69:8b:58:ad:bd:40:a5:84:5c:fb:0e:c5:aa: 49:ea:51:31:49:7e:6e:bf:e5:71:e8:a6:cd:ed:46:a4:3a:d5: de:ab:68:0f:6b:11:01:98:ed:bf:57:8b:50:c6:1e:94:d0:59: 98:a4:b2:89:8a:47:c8:99:03:9e:87:92:0e:38:2b:21:43:98: 1c:e7:7f:01:fa:0e:b2:f6:64:a0:f0:1a:a1:4f:57:c6:be:66: 6d:86:30:f2:39:69:a7:c9:f4:40:f0:23:fa:a2:8e:d8:21:9e: d7:32:47:82:f0:ea:c4:1f:b6:34:f5:c8:42:9b:24:6d:5a:cc: 8c:03:f4:a3:9d:8f:24:06:75:65:f4:67:44:6f:36:e0:bd:93: 2b:52:7a:20:78:7c:23:d4:70:0e:b7:d6:a5:4f:72:e8:35:bc: 98:da:da:a5:48:a8:d9:9c:61:5e:65:10:ee:23:00:67:2b:d3: fa:6a:d0:83:a6:a6:fb:15:be:8d:6f:54:1c:6b:d7:ac:b3:7c: 1b:89:4e:b2:90:61:65:34:0a:71:25:9d:56:08:b5:41:57:6b: 30:f3:5d:eb -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUf991vLAo8u7kJSUaydj/I0/xMMMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUFGMTFBOEVEMDM1QURFRDE1OUUwOTc3QTU1QjhBMTM1 QTJEQkFGMDAeFw0yNjA1MDMwMjUxMzlaFw0yNzA1MDIwMjU2MzlaMDMxMTAvBgNV BAMTKDFDMkQ2MzRDODM0ODk2NEZFOUYxMDk0REIyNTQ2NTRGNkJGQkI0RTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiIjAPlGnDshanv1HAdDD9EUyX VYhOrMs+/NyjupLAhIWBnNvi1TH1H/btkR2bXAx29k9XfVghNDNmfIq29v96PQ3H 2G/3tqeqrsL85ntmTJrU7fHSKnpa3OhInRVxiGafVHo5L487BGG6LG6g08Hva3Nz tOhZZBiBy8wlbHTc/76PsktAsLTMn7P1YB6xg1Q/+pVK/61+xc0CUQUcqW4bIx6H STlgxmA+sRO9EiCUvl4vqL8M3EwRJl5eqtmDGybW1gT1udrOfWhSoQbtaoxnC+ex TWRBVlp/Hxwe6b87HuGY5a+wBnHYud4CCMsJZIFVeFnYTT8SUA+nsTs8Sgs1AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUHC1jTINIlk/p8QlNslRlT2v7tOIwHwYDVR0j BBgwFoAU6vEajtA1re0Vngl3pVuKE1otuvAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTU3MmRmYmUtNGNhMC00YTQ2LTgwMzctNDk2OGVkOTdjYWRjLzAvRUFGMTFBOEVE MDM1QURFRDE1OUUwOTc3QTU1QjhBMTM1QTJEQkFGMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FQUYxMUE4RUQwMzVBREVEMTU5RTA5NzdBNTVCOEExMzVBMkRC QUYwLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2E1NzJkZmJlLTRjYTAtNGE0Ni04 MDM3LTQ5NjhlZDk3Y2FkYy8wLzMxMzIzMTJlMzEzMDMxMmUzMTM4MzcyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMzM4MzczODM1LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAeWW7MA0GCSqG SIb3DQEBCwUAA4IBAQCkmSxu2Gx3cF0LsUybPWhl/LnmlaxSlx17A6A81U30s80y 2mV5zkan5GmLWK29QKWEXPsOxapJ6lExSX5uv+Vx6KbN7UakOtXeq2gPaxEBmO2/ V4tQxh6U0FmYpLKJikfImQOeh5IOOCshQ5gc538B+g6y9mSg8BqhT1fGvmZthjDy OWmnyfRA8CP6oo7YIZ7XMkeC8OrEH7Y09chCmyRtWsyMA/SjnY8kBnVl9GdEbzbg vZMrUnogeHwj1HAOt9alT3LoNbyY2tqlSKjZnGFeZRDuIwBnK9P6atCDpqb7Fb6N b1Qca9ess3wbiU6ykGFlNApxJZ1WCLVBV2sw813r -----END CERTIFICATE-----Generated at Wed May 13 08:45:11 2026 by rpki-client