$ rpki-client -vvf rpki-rsync.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/3132302e38392e39302e302f32332d3234203d3e20313335343737.roa File: 3132302e38392e39302e302f32332d3234203d3e20313335343737.roa (raw, json) Hash identifier: L8OlDd+zcMlp2nj6z/A4ihQhVRTYQCBk+qSvJaFpcus= Subject key identifier: 78:2A:EB:C6:73:AB:5D:AA:23:85:41:B4:4E:05:5D:0C:AE:C1:14:95 Certificate issuer: /CN=EAF1BBC2E7852A08EC9726DF037B7A90020F613C Certificate serial: 51F97DA16EDF05828162A34CBD6D9A10844C02B5 Authority key identifier: EA:F1:BB:C2:E7:85:2A:08:EC:97:26:DF:03:7B:7A:90:02:0F:61:3C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAF1BBC2E7852A08EC9726DF037B7A90020F613C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/3132302e38392e39302e302f32332d3234203d3e20313335343737.roa Signing time: Sun 03 May 2026 02:57:39 +0000 ROA not before: Sun 03 May 2026 02:52:39 +0000 ROA not after: Sun 02 May 2027 02:57:39 +0000 asID: 135477 IP address blocks: 120.89.90.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/EAF1BBC2E7852A08EC9726DF037B7A90020F613C.crl rsync://rpki-rsync.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/EAF1BBC2E7852A08EC9726DF037B7A90020F613C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAF1BBC2E7852A08EC9726DF037B7A90020F613C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 05:44:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:f9:7d:a1:6e:df:05:82:81:62:a3:4c:bd:6d:9a:10:84:4c:02:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EAF1BBC2E7852A08EC9726DF037B7A90020F613C Validity Not Before: May 3 02:52:39 2026 GMT Not After : May 2 02:57:39 2027 GMT Subject: CN=782AEBC673AB5DAA238541B44E055D0CAEC11495 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:fd:31:ca:19:2b:4f:ad:73:24:f7:3b:f9:89: 0f:9e:32:ea:3f:3b:62:7c:4d:bc:bd:61:5d:04:27: 5e:30:06:cc:c9:20:85:56:53:e1:5d:b3:c0:3d:28: 65:21:0f:7e:44:6d:0d:a8:74:8c:78:37:c0:99:d5: ab:a2:05:9e:c4:dc:f2:b2:e5:b6:e3:15:df:95:82: 37:d9:b1:6f:fb:ef:81:c4:4b:dc:7a:b4:2d:ef:72: d9:c4:be:00:ea:cc:f4:5f:88:cd:c8:6b:0c:3d:c4: d2:67:b7:67:06:83:6a:ef:db:60:b6:a1:27:36:42: 97:20:3f:6f:ab:9c:71:82:fa:12:45:c9:c0:e1:3c: 29:ce:ca:6e:84:79:dd:8c:19:06:78:99:ce:f4:2e: 50:eb:7e:e3:7e:e2:04:33:f8:5e:6f:72:63:ca:13: 5f:95:c5:1a:b3:ef:dd:ad:c9:d4:7a:70:26:3e:2c: f1:82:ef:e2:f7:3b:4d:0a:68:f7:cd:e0:77:58:5f: d2:d9:af:de:1b:0a:47:00:2d:cd:d2:86:77:e9:f7: 48:d2:95:c2:c3:b4:a4:92:a5:52:45:51:3d:85:c4: ac:38:e8:31:79:50:de:a6:b6:d0:3a:3e:10:f6:c2: 3d:4b:03:8e:12:c6:a4:5a:8f:18:10:3e:ba:ee:b3: 5c:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:2A:EB:C6:73:AB:5D:AA:23:85:41:B4:4E:05:5D:0C:AE:C1:14:95 X509v3 Authority Key Identifier: keyid:EA:F1:BB:C2:E7:85:2A:08:EC:97:26:DF:03:7B:7A:90:02:0F:61:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/EAF1BBC2E7852A08EC9726DF037B7A90020F613C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAF1BBC2E7852A08EC9726DF037B7A90020F613C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/3132302e38392e39302e302f32332d3234203d3e20313335343737.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 120.89.90.0/23 Signature Algorithm: sha256WithRSAEncryption 7d:00:42:88:01:0c:d7:a3:12:fe:d7:ef:11:c5:53:8b:a6:8e: 6b:f1:c1:af:63:19:ce:07:aa:59:1c:dc:90:c9:04:38:fb:31: 86:6b:4a:49:10:2f:8a:84:7c:08:ba:58:8d:25:18:c4:22:6f: fe:a1:8f:15:1b:cf:78:a4:92:f8:74:c5:1e:94:5d:6e:7a:fc: 0c:23:c1:88:3a:f4:c7:e5:27:f7:39:21:dc:fd:76:f5:6a:0e: a5:dc:fd:53:33:58:75:42:64:dc:b8:47:92:f4:50:88:9b:dd: b9:46:3f:e6:72:76:c4:ff:d6:71:76:32:cb:59:d0:1f:e4:60: 68:a2:a2:a9:3f:d6:f1:c9:fa:b1:3b:54:e5:b2:b6:d4:e5:01: d6:c4:03:33:56:3d:87:d8:e4:16:48:b3:66:e7:d7:0f:ad:b4: bb:1a:0e:cf:f2:2a:7d:0a:74:d1:ee:09:74:da:3e:37:d6:21: 50:c3:da:59:e8:2d:d6:3a:fc:ca:f7:ff:43:28:38:79:15:31: 99:7b:13:02:6b:d7:c8:ca:de:17:00:2b:23:25:08:05:b6:2b: ba:69:12:5f:69:86:61:ca:b1:9b:61:c0:2f:fc:63:3b:a8:cd: 15:dd:45:1e:40:c3:b8:fc:09:91:57:a3:fe:5b:ab:33:b4:ff: a1:ec:e2:62 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUUfl9oW7fBYKBYqNMvW2aEIRMArUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUFGMUJCQzJFNzg1MkEwOEVDOTcyNkRGMDM3QjdBOTAw MjBGNjEzQzAeFw0yNjA1MDMwMjUyMzlaFw0yNzA1MDIwMjU3MzlaMDMxMTAvBgNV BAMTKDc4MkFFQkM2NzNBQjVEQUEyMzg1NDFCNDRFMDU1RDBDQUVDMTE0OTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCX/THKGStPrXMk9zv5iQ+eMuo/ O2J8Tby9YV0EJ14wBszJIIVWU+Fds8A9KGUhD35EbQ2odIx4N8CZ1auiBZ7E3PKy 5bbjFd+VgjfZsW/774HES9x6tC3vctnEvgDqzPRfiM3Iaww9xNJnt2cGg2rv22C2 oSc2QpcgP2+rnHGC+hJFycDhPCnOym6Eed2MGQZ4mc70LlDrfuN+4gQz+F5vcmPK E1+VxRqz792tydR6cCY+LPGC7+L3O00KaPfN4HdYX9LZr94bCkcALc3Shnfp90jS lcLDtKSSpVJFUT2FxKw46DF5UN6mttA6PhD2wj1LA44SxqRajxgQPrrus1yfAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUeCrrxnOrXaojhUG0TgVdDK7BFJUwHwYDVR0j BBgwFoAU6vG7wueFKgjslybfA3t6kAIPYTwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTdmZGY0M2UtNGE0Yy00ZGJjLWI3ODUtZGQ3Y2JmMWE2N2I3LzAvRUFGMUJCQzJF Nzg1MkEwOEVDOTcyNkRGMDM3QjdBOTAwMjBGNjEzQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FQUYxQkJDMkU3ODUyQTA4RUM5NzI2REYwMzdCN0E5MDAyMEY2 MTNDLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2E3ZmRmNDNlLTRhNGMtNGRiYy1i Nzg1LWRkN2NiZjFhNjdiNy8wLzMxMzIzMDJlMzgzOTJlMzkzMDJlMzAyZjMyMzMy ZDMyMzQyMDNkM2UyMDMxMzMzNTM0MzczNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAXhZWjANBgkqhkiG 9w0BAQsFAAOCAQEAfQBCiAEM16MS/tfvEcVTi6aOa/HBr2MZzgeqWRzckMkEOPsx hmtKSRAvioR8CLpYjSUYxCJv/qGPFRvPeKSS+HTFHpRdbnr8DCPBiDr0x+Un9zkh 3P129WoOpdz9UzNYdUJk3LhHkvRQiJvduUY/5nJ2xP/WcXYyy1nQH+RgaKKiqT/W 8cn6sTtU5bK21OUB1sQDM1Y9h9jkFkizZufXD620uxoOz/IqfQp00e4JdNo+N9Yh UMPaWegt1jr8yvf/Qyg4eRUxmXsTAmvXyMreFwArIyUIBbYrumkSX2mGYcqxm2HA L/xjO6jNFd1FHkDDuPwJkVej/lurM7T/oeziYg== -----END CERTIFICATE-----Generated at Tue May 12 22:49:39 2026 by rpki-client