$ rpki-client -vvf rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3131362e39302e3137332e302f32342d3234203d3e203138303539.roa File: 3131362e39302e3137332e302f32342d3234203d3e203138303539.roa (raw, json) Hash identifier: 87FDCx7gH6XpR8NO8eIUt652+Ic0tP+I45mw+TEje7I= Subject key identifier: 9D:AE:76:E7:26:A2:4F:88:94:7F:E4:E7:20:19:13:14:21:BA:BD:3D Certificate issuer: /CN=67239F5E47D123019D26807163E6542441401507 Certificate serial: 52609CB64D1CBC305362655795BE4DAA34697448 Authority key identifier: 67:23:9F:5E:47:D1:23:01:9D:26:80:71:63:E6:54:24:41:40:15:07 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67239F5E47D123019D26807163E6542441401507.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3131362e39302e3137332e302f32342d3234203d3e203138303539.roa Signing time: Sun 03 May 2026 03:03:47 +0000 ROA not before: Sun 03 May 2026 02:58:47 +0000 ROA not after: Sun 02 May 2027 03:03:47 +0000 asID: 18059 IP address blocks: 116.90.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/67239F5E47D123019D26807163E6542441401507.crl rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/67239F5E47D123019D26807163E6542441401507.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67239F5E47D123019D26807163E6542441401507.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 18:10:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:60:9c:b6:4d:1c:bc:30:53:62:65:57:95:be:4d:aa:34:69:74:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67239F5E47D123019D26807163E6542441401507 Validity Not Before: May 3 02:58:47 2026 GMT Not After : May 2 03:03:47 2027 GMT Subject: CN=9DAE76E726A24F88947FE4E72019131421BABD3D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:4b:a1:ea:53:9e:cb:72:41:f5:d2:ef:f6:dc: 81:22:61:4c:6c:8c:3a:61:b7:6f:d1:f3:db:71:1f: 11:93:73:fa:e7:35:38:d4:a1:08:40:5e:3f:c9:f7: 4e:ef:e9:61:2d:f8:45:a0:d3:7f:29:85:96:86:0e: 5a:d8:e6:d8:fd:1d:da:8d:6a:22:3c:92:c7:84:37: f5:94:d4:ee:df:b3:ac:3b:ef:2a:a0:e9:da:1a:b6: a7:8a:43:85:74:43:2e:81:aa:10:77:52:6e:87:4c: da:f0:a9:14:90:f5:c2:90:b0:7b:99:7d:0e:16:d5: 39:7d:e8:e9:60:f9:01:62:56:77:83:6b:8d:9e:6b: 23:3f:5d:f8:6a:d1:62:90:80:10:97:8e:52:4b:02: 39:d5:b5:37:c4:2c:1f:c6:5f:1c:be:da:6a:62:1c: df:72:a8:ff:37:5b:d7:f0:be:95:d3:c8:1b:b8:c9: 89:10:0d:7d:d4:bb:67:10:2a:20:5a:21:b1:4e:bf: 15:64:2d:29:58:37:cc:40:a6:20:0a:01:bc:df:28: 59:e4:16:76:10:15:32:51:a8:bf:3f:1d:de:81:ab: a4:ae:68:69:22:da:ac:2b:86:f1:21:55:64:54:90: be:11:8d:53:6a:a3:6e:d5:c9:ab:92:eb:f3:20:72: d1:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:AE:76:E7:26:A2:4F:88:94:7F:E4:E7:20:19:13:14:21:BA:BD:3D X509v3 Authority Key Identifier: keyid:67:23:9F:5E:47:D1:23:01:9D:26:80:71:63:E6:54:24:41:40:15:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/67239F5E47D123019D26807163E6542441401507.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67239F5E47D123019D26807163E6542441401507.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3131362e39302e3137332e302f32342d3234203d3e203138303539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 116.90.173.0/24 Signature Algorithm: sha256WithRSAEncryption 8a:40:22:ac:f3:75:df:a4:81:47:d9:39:5a:ea:7a:96:c7:87: 04:0a:04:89:53:8c:df:4d:66:93:58:74:70:27:1b:66:1d:c9: 60:0f:1a:47:3d:99:83:54:db:6d:5e:a3:6d:c2:dd:2e:38:a3: ad:51:75:85:5c:1b:7d:6d:0b:41:dd:1a:bb:2c:d7:de:34:08: 00:38:b7:f3:3f:78:ad:71:be:f9:30:bc:bd:08:d8:c6:cd:b2: cb:1b:6d:b4:0d:64:b5:5d:37:c3:eb:23:5d:27:52:d8:bf:3c: 35:c5:09:8f:d8:7c:0e:ee:4a:c9:2c:02:ea:0d:5a:8c:ef:16: 9a:a5:78:40:68:05:0c:c2:75:83:48:b8:13:9e:cf:de:2c:0d: 1e:b3:56:d2:3e:0a:4a:d4:e8:62:9a:65:16:17:ce:2f:02:f3: 5e:24:44:d3:d5:7e:b0:a8:af:76:22:98:ae:ca:4f:aa:1e:3e: 33:b0:79:dc:1a:3e:9c:1e:63:aa:44:f3:9f:fb:d1:17:74:36: a1:a3:49:a9:67:4b:f9:2a:a2:64:4e:6f:f9:45:d8:79:ee:74: 50:94:9a:84:57:a8:42:f1:6c:a5:80:60:40:7f:c2:75:70:59: b1:cc:ac:5f:81:54:ba:73:7d:f9:fa:0e:95:d0:b1:27:34:25: 55:1f:00:2c -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUUmCctk0cvDBTYmVXlb5NqjRpdEgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjcyMzlGNUU0N0QxMjMwMTlEMjY4MDcxNjNFNjU0MjQ0 MTQwMTUwNzAeFw0yNjA1MDMwMjU4NDdaFw0yNzA1MDIwMzAzNDdaMDMxMTAvBgNV BAMTKDlEQUU3NkU3MjZBMjRGODg5NDdGRTRFNzIwMTkxMzE0MjFCQUJEM0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0S6HqU57LckH10u/23IEiYUxs jDpht2/R89txHxGTc/rnNTjUoQhAXj/J907v6WEt+EWg038phZaGDlrY5tj9HdqN aiI8kseEN/WU1O7fs6w77yqg6doatqeKQ4V0Qy6BqhB3Um6HTNrwqRSQ9cKQsHuZ fQ4W1Tl96Olg+QFiVneDa42eayM/Xfhq0WKQgBCXjlJLAjnVtTfELB/GXxy+2mpi HN9yqP83W9fwvpXTyBu4yYkQDX3Uu2cQKiBaIbFOvxVkLSlYN8xApiAKAbzfKFnk FnYQFTJRqL8/Hd6Bq6SuaGki2qwrhvEhVWRUkL4RjVNqo27VyauS6/MgctEdAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUna525yaiT4iUf+TnIBkTFCG6vT0wHwYDVR0j BBgwFoAUZyOfXkfRIwGdJoBxY+ZUJEFAFQcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzI4MzY3NjMtMTJiNi00ZDhmLWFkMGItNGNkNWI2MTk1OWVmLzAvNjcyMzlGNUU0 N0QxMjMwMTlEMjY4MDcxNjNFNjU0MjQ0MTQwMTUwNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82NzIzOUY1RTQ3RDEyMzAxOUQyNjgwNzE2M0U2NTQyNDQxNDAx NTA3LmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2MyODM2NzYzLTEyYjYtNGQ4Zi1h ZDBiLTRjZDViNjE5NTllZi8wLzMxMzEzNjJlMzkzMDJlMzEzNzMzMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzODMwMzUzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHRarTANBgkqhkiG 9w0BAQsFAAOCAQEAikAirPN136SBR9k5Wup6lseHBAoEiVOM301mk1h0cCcbZh3J YA8aRz2Zg1TbbV6jbcLdLjijrVF1hVwbfW0LQd0auyzX3jQIADi38z94rXG++TC8 vQjYxs2yyxtttA1ktV03w+sjXSdS2L88NcUJj9h8Du5KySwC6g1ajO8WmqV4QGgF DMJ1g0i4E57P3iwNHrNW0j4KStToYpplFhfOLwLzXiRE09V+sKivdiKYrspPqh4+ M7B53Bo+nB5jqkTzn/vRF3Q2oaNJqWdL+SqiZE5v+UXYee50UJSahFeoQvFspYBg QH/CdXBZscysX4FUunN9+foOldCxJzQlVR8ALA== -----END CERTIFICATE-----Generated at Wed May 13 10:20:16 2026 by rpki-client