$ rpki-client -vvf rpki-rsync.idnic.net/repo/a572dfbe-4ca0-4a46-8037-4968ed97cadc/0/3132312e3130312e3138392e302f32342d3234203d3e203338373835.roa File: 3132312e3130312e3138392e302f32342d3234203d3e203338373835.roa (raw, json) Hash identifier: pWwlBOgo0c3x6IIcXfvg9KBIWmKkPWfxlYAnYQTVkEg= Subject key identifier: 7E:DA:DC:44:68:45:C2:1D:F4:EF:08:CA:05:B7:08:5F:30:D5:D1:E8 Certificate issuer: /CN=EAF11A8ED035ADED159E0977A55B8A135A2DBAF0 Certificate serial: 41B8738C912CFEFF43176101A431A20CB30E1816 Authority key identifier: EA:F1:1A:8E:D0:35:AD:ED:15:9E:09:77:A5:5B:8A:13:5A:2D:BA:F0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAF11A8ED035ADED159E0977A55B8A135A2DBAF0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a572dfbe-4ca0-4a46-8037-4968ed97cadc/0/3132312e3130312e3138392e302f32342d3234203d3e203338373835.roa Signing time: Sun 03 May 2026 02:56:36 +0000 ROA not before: Sun 03 May 2026 02:51:36 +0000 ROA not after: Sun 02 May 2027 02:56:36 +0000 asID: 38785 IP address blocks: 121.101.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a572dfbe-4ca0-4a46-8037-4968ed97cadc/0/EAF11A8ED035ADED159E0977A55B8A135A2DBAF0.crl rsync://rpki-rsync.idnic.net/repo/a572dfbe-4ca0-4a46-8037-4968ed97cadc/0/EAF11A8ED035ADED159E0977A55B8A135A2DBAF0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAF11A8ED035ADED159E0977A55B8A135A2DBAF0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 02:16:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:b8:73:8c:91:2c:fe:ff:43:17:61:01:a4:31:a2:0c:b3:0e:18:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EAF11A8ED035ADED159E0977A55B8A135A2DBAF0 Validity Not Before: May 3 02:51:36 2026 GMT Not After : May 2 02:56:36 2027 GMT Subject: CN=7EDADC446845C21DF4EF08CA05B7085F30D5D1E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:c5:b0:f7:e5:8e:0d:e7:f8:0b:98:86:ce:38: fe:4f:46:a6:30:41:26:d4:e0:ce:dd:1a:c1:db:ad: 4f:72:02:36:6e:d7:38:ea:90:04:f2:ba:2d:8b:a4: a3:13:17:ab:59:cd:4c:3e:fe:3d:75:d4:e1:83:af: c8:19:84:0d:8b:5a:c5:e8:1c:4c:fd:28:d1:90:1b: 26:3f:34:91:50:6b:75:dd:5f:eb:a8:4b:81:f5:f8: 6a:e8:1f:42:38:ce:8a:9d:b8:12:19:d2:24:79:06: 1d:21:1d:d5:8b:2f:fb:ac:88:55:29:ab:f8:55:f0: 15:58:a3:61:72:62:98:81:50:9a:94:1b:cd:29:00: 9c:9f:59:b7:34:59:7b:5e:50:9a:e9:39:48:5c:1b: 37:52:00:6a:62:fe:1c:de:06:2f:42:a2:4b:2e:40: 57:00:a8:39:f1:2c:96:3e:67:10:63:25:32:99:9c: 40:0a:0d:da:15:9d:9a:15:4c:e8:96:10:dd:9c:96: 04:f6:23:79:01:30:d8:fb:d4:e9:03:43:ed:0a:fe: 71:3e:cd:3d:cf:1c:c1:bc:77:1c:43:cd:e4:3f:20: 18:8a:df:13:b0:7d:d8:60:01:9e:47:1f:2b:b2:8f: 40:e3:73:fe:0d:61:4c:34:43:9f:6a:18:56:ad:ac: 29:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:DA:DC:44:68:45:C2:1D:F4:EF:08:CA:05:B7:08:5F:30:D5:D1:E8 X509v3 Authority Key Identifier: keyid:EA:F1:1A:8E:D0:35:AD:ED:15:9E:09:77:A5:5B:8A:13:5A:2D:BA:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a572dfbe-4ca0-4a46-8037-4968ed97cadc/0/EAF11A8ED035ADED159E0977A55B8A135A2DBAF0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAF11A8ED035ADED159E0977A55B8A135A2DBAF0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a572dfbe-4ca0-4a46-8037-4968ed97cadc/0/3132312e3130312e3138392e302f32342d3234203d3e203338373835.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 121.101.189.0/24 Signature Algorithm: sha256WithRSAEncryption 91:23:5c:5a:c1:87:c9:c4:ef:ff:65:c3:f0:80:87:d2:80:c2: b0:a5:df:c5:c2:52:4d:6a:c6:eb:21:a2:7b:6e:2f:64:60:fe: 0d:92:e1:ef:30:fa:e1:50:5f:e0:68:cc:a5:16:9d:1b:32:6a: 4e:c9:27:e0:24:e9:51:99:2c:49:26:c1:d1:0b:a9:53:5f:4b: 6f:59:6d:f3:c0:57:93:d4:17:19:44:51:c2:64:0b:2a:98:f6: ce:41:41:5c:0b:1b:ad:60:0a:71:2c:02:e6:e0:74:54:cb:f4: d7:91:ca:b4:f2:a0:66:a0:59:00:51:c0:99:41:e7:ab:77:22: 9b:23:6a:c3:0b:27:99:9f:8b:a3:2a:8b:40:93:9f:4e:af:0e: fa:1a:79:da:4a:8d:f9:fa:29:58:7c:5d:6d:dd:fc:a2:40:20: d7:cd:91:5c:0f:50:ca:3a:68:1f:19:55:0c:a2:f8:6a:09:8f: f8:0c:cc:47:64:b6:6c:81:7f:b4:5f:e4:9d:4f:79:94:9a:19: ee:94:d1:41:bc:7d:d4:a9:e3:84:c6:86:9e:85:98:dc:09:30: 8e:d0:d1:a3:db:2f:82:02:ec:19:be:70:52:c6:24:61:b3:3d: 28:0c:fa:7d:15:c7:e9:84:1f:8b:bf:5f:23:ed:81:53:fe:d8: 3b:3c:50:04 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUQbhzjJEs/v9DF2EBpDGiDLMOGBYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUFGMTFBOEVEMDM1QURFRDE1OUUwOTc3QTU1QjhBMTM1 QTJEQkFGMDAeFw0yNjA1MDMwMjUxMzZaFw0yNzA1MDIwMjU2MzZaMDMxMTAvBgNV BAMTKDdFREFEQzQ0Njg0NUMyMURGNEVGMDhDQTA1QjcwODVGMzBENUQxRTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbxbD35Y4N5/gLmIbOOP5PRqYw QSbU4M7dGsHbrU9yAjZu1zjqkATyui2LpKMTF6tZzUw+/j111OGDr8gZhA2LWsXo HEz9KNGQGyY/NJFQa3XdX+uoS4H1+GroH0I4zoqduBIZ0iR5Bh0hHdWLL/usiFUp q/hV8BVYo2FyYpiBUJqUG80pAJyfWbc0WXteUJrpOUhcGzdSAGpi/hzeBi9Coksu QFcAqDnxLJY+ZxBjJTKZnEAKDdoVnZoVTOiWEN2clgT2I3kBMNj71OkDQ+0K/nE+ zT3PHMG8dxxDzeQ/IBiK3xOwfdhgAZ5HHyuyj0Djc/4NYUw0Q59qGFatrCl5AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUftrcRGhFwh307wjKBbcIXzDV0egwHwYDVR0j BBgwFoAU6vEajtA1re0Vngl3pVuKE1otuvAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTU3MmRmYmUtNGNhMC00YTQ2LTgwMzctNDk2OGVkOTdjYWRjLzAvRUFGMTFBOEVE MDM1QURFRDE1OUUwOTc3QTU1QjhBMTM1QTJEQkFGMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FQUYxMUE4RUQwMzVBREVEMTU5RTA5NzdBNTVCOEExMzVBMkRC QUYwLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2E1NzJkZmJlLTRjYTAtNGE0Ni04 MDM3LTQ5NjhlZDk3Y2FkYy8wLzMxMzIzMTJlMzEzMDMxMmUzMTM4MzkyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMzM4MzczODM1LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAeWW9MA0GCSqG SIb3DQEBCwUAA4IBAQCRI1xawYfJxO//ZcPwgIfSgMKwpd/FwlJNasbrIaJ7bi9k YP4NkuHvMPrhUF/gaMylFp0bMmpOySfgJOlRmSxJJsHRC6lTX0tvWW3zwFeT1BcZ RFHCZAsqmPbOQUFcCxutYApxLALm4HRUy/TXkcq08qBmoFkAUcCZQeerdyKbI2rD CyeZn4ujKotAk59Orw76GnnaSo35+ilYfF1t3fyiQCDXzZFcD1DKOmgfGVUMovhq CY/4DMxHZLZsgX+0X+SdT3mUmhnulNFBvH3UqeOExoaehZjcCTCO0NGj2y+CAuwZ vnBSxiRhsz0oDPp9FcfphB+Lv18j7YFT/tg7PFAE -----END CERTIFICATE-----Generated at Wed May 13 10:26:25 2026 by rpki-client