$ rpki-client -vvf rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3131362e39302e3137342e302f32342d3234203d3e203138303539.roa File: 3131362e39302e3137342e302f32342d3234203d3e203138303539.roa (raw, json) Hash identifier: bfJbBL1xY1n99fxKGNHG89O/9a6zEgi+F0/ObJVdUks= Subject key identifier: 12:55:A4:FA:0A:67:DA:C7:5A:20:A9:D8:26:D6:D0:99:93:43:31:BC Certificate issuer: /CN=67239F5E47D123019D26807163E6542441401507 Certificate serial: 481F42F43F67F02A6FE3746C9074E4BF085655A5 Authority key identifier: 67:23:9F:5E:47:D1:23:01:9D:26:80:71:63:E6:54:24:41:40:15:07 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67239F5E47D123019D26807163E6542441401507.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3131362e39302e3137342e302f32342d3234203d3e203138303539.roa Signing time: Sun 03 May 2026 03:03:44 +0000 ROA not before: Sun 03 May 2026 02:58:44 +0000 ROA not after: Sun 02 May 2027 03:03:44 +0000 asID: 18059 IP address blocks: 116.90.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/67239F5E47D123019D26807163E6542441401507.crl rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/67239F5E47D123019D26807163E6542441401507.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67239F5E47D123019D26807163E6542441401507.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 18:10:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:1f:42:f4:3f:67:f0:2a:6f:e3:74:6c:90:74:e4:bf:08:56:55:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67239F5E47D123019D26807163E6542441401507 Validity Not Before: May 3 02:58:44 2026 GMT Not After : May 2 03:03:44 2027 GMT Subject: CN=1255A4FA0A67DAC75A20A9D826D6D099934331BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:a2:24:03:5b:ac:01:8d:23:5e:b7:56:fe:de: 6d:ac:0c:e4:0a:51:ef:8f:48:be:8d:6d:9c:68:e7: 2d:c9:b2:97:06:53:eb:10:78:40:b3:c6:71:cc:0f: d3:d1:6d:8c:67:fb:9c:32:af:53:f7:b8:42:b4:6a: f0:0d:a1:60:76:ca:10:fa:e6:62:bf:0d:86:d2:ba: 93:20:e0:4d:a9:4f:ca:cc:45:ff:ec:00:b3:e8:c8: a4:bb:e6:e1:b1:4b:98:fd:83:d0:ca:b0:6f:da:54: 1f:ae:42:b1:e6:2b:0a:b8:be:3c:ba:6a:01:58:0e: 02:2d:eb:27:3e:ac:16:27:6e:e8:ff:19:a0:ff:b2: 70:c4:f4:6b:6a:e2:57:95:99:a4:57:fb:76:25:fa: 27:24:a9:dc:be:d5:a0:76:68:c1:96:2b:a9:61:dd: 02:76:a2:ae:61:4f:8c:bf:9b:af:77:79:da:ba:d5: be:86:3b:c7:fd:31:73:96:2d:82:02:c9:a6:f2:30: 90:ac:e5:58:17:2b:66:74:12:d2:94:62:27:c7:cf: 1e:8c:cd:ae:bd:57:17:3d:f4:ed:f9:04:bb:b7:b4: d2:bf:99:03:88:54:39:88:66:59:bb:35:22:61:1d: 63:1b:b1:fc:7a:86:0d:4f:cb:dc:2a:ca:cb:b7:9a: 4a:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:55:A4:FA:0A:67:DA:C7:5A:20:A9:D8:26:D6:D0:99:93:43:31:BC X509v3 Authority Key Identifier: keyid:67:23:9F:5E:47:D1:23:01:9D:26:80:71:63:E6:54:24:41:40:15:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/67239F5E47D123019D26807163E6542441401507.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67239F5E47D123019D26807163E6542441401507.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3131362e39302e3137342e302f32342d3234203d3e203138303539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 116.90.174.0/24 Signature Algorithm: sha256WithRSAEncryption 4f:27:0d:e2:72:80:ce:d6:ea:dd:8f:ed:b5:43:1a:d5:91:d1: 8c:a1:2c:13:7a:a9:43:a3:f6:be:0a:1e:29:3e:29:3f:20:f7: 3f:5c:fd:b9:58:75:2f:73:3d:49:75:8a:8e:bb:92:f4:80:19: 98:9f:9f:d7:c9:c2:8e:ee:7f:72:79:9f:60:e5:86:49:1f:5d: d6:86:40:41:01:8a:84:ae:a9:18:c6:fe:35:8e:4c:a5:73:51: 6c:a3:62:4a:7b:92:ff:50:aa:3c:95:7f:7e:9e:b4:e5:ea:87: 31:36:f0:1a:f0:03:a7:02:13:86:96:11:80:71:10:10:82:94: b2:2a:4e:e3:e0:59:06:14:00:84:3d:df:89:4a:58:e0:b2:49: 84:a8:c4:4e:88:72:1c:ad:0f:f6:0f:f9:e1:89:b1:3f:52:5b: d4:4b:1c:b2:34:f2:ca:f9:b9:ac:28:50:0a:8f:a2:34:83:0b: f7:73:2b:be:7c:9e:98:63:fc:92:e9:35:0a:cb:ad:40:e8:9a: 0b:4c:55:04:6c:fc:55:67:95:55:6d:a8:ac:5a:1b:71:47:5c: 41:d2:14:44:ad:9a:36:33:c1:f0:2b:63:3c:06:d1:59:a0:d5: 98:ef:ac:b1:46:5b:af:a5:de:aa:20:b0:4a:50:71:fc:cf:25: 07:07:4c:ff -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUSB9C9D9n8Cpv43RskHTkvwhWVaUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjcyMzlGNUU0N0QxMjMwMTlEMjY4MDcxNjNFNjU0MjQ0 MTQwMTUwNzAeFw0yNjA1MDMwMjU4NDRaFw0yNzA1MDIwMzAzNDRaMDMxMTAvBgNV BAMTKDEyNTVBNEZBMEE2N0RBQzc1QTIwQTlEODI2RDZEMDk5OTM0MzMxQkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAoiQDW6wBjSNet1b+3m2sDOQK Ue+PSL6NbZxo5y3JspcGU+sQeECzxnHMD9PRbYxn+5wyr1P3uEK0avANoWB2yhD6 5mK/DYbSupMg4E2pT8rMRf/sALPoyKS75uGxS5j9g9DKsG/aVB+uQrHmKwq4vjy6 agFYDgIt6yc+rBYnbuj/GaD/snDE9Gtq4leVmaRX+3Yl+ickqdy+1aB2aMGWK6lh 3QJ2oq5hT4y/m693edq61b6GO8f9MXOWLYICyabyMJCs5VgXK2Z0EtKUYifHzx6M za69Vxc99O35BLu3tNK/mQOIVDmIZlm7NSJhHWMbsfx6hg1Py9wqysu3mkr9AgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUElWk+gpn2sdaIKnYJtbQmZNDMbwwHwYDVR0j BBgwFoAUZyOfXkfRIwGdJoBxY+ZUJEFAFQcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzI4MzY3NjMtMTJiNi00ZDhmLWFkMGItNGNkNWI2MTk1OWVmLzAvNjcyMzlGNUU0 N0QxMjMwMTlEMjY4MDcxNjNFNjU0MjQ0MTQwMTUwNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82NzIzOUY1RTQ3RDEyMzAxOUQyNjgwNzE2M0U2NTQyNDQxNDAx NTA3LmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2MyODM2NzYzLTEyYjYtNGQ4Zi1h ZDBiLTRjZDViNjE5NTllZi8wLzMxMzEzNjJlMzkzMDJlMzEzNzM0MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzODMwMzUzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHRarjANBgkqhkiG 9w0BAQsFAAOCAQEATycN4nKAztbq3Y/ttUMa1ZHRjKEsE3qpQ6P2vgoeKT4pPyD3 P1z9uVh1L3M9SXWKjruS9IAZmJ+f18nCju5/cnmfYOWGSR9d1oZAQQGKhK6pGMb+ NY5MpXNRbKNiSnuS/1CqPJV/fp605eqHMTbwGvADpwIThpYRgHEQEIKUsipO4+BZ BhQAhD3fiUpY4LJJhKjETohyHK0P9g/54YmxP1Jb1EscsjTyyvm5rChQCo+iNIML 93MrvnyemGP8kuk1CsutQOiaC0xVBGz8VWeVVW2orFobcUdcQdIURK2aNjPB8Ctj PAbRWaDVmO+ssUZbr6XeqiCwSlBx/M8lBwdM/w== -----END CERTIFICATE-----Generated at Wed May 13 09:51:35 2026 by rpki-client