$ rpki-client -vvf rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3132322e3132382e32342e302f32312d3234203d3e203138303539.roa File: 3132322e3132382e32342e302f32312d3234203d3e203138303539.roa (raw, json) Hash identifier: nC29gmB5SsmshmZSjOuqMbc5zAetuzenjWrCBkYpHFI= Subject key identifier: 1E:A7:09:E9:86:F3:31:D3:51:EB:D9:69:79:25:48:05:87:64:DD:E5 Certificate issuer: /CN=67239F5E47D123019D26807163E6542441401507 Certificate serial: 2892300C834F3670507156C63163B47B3F41DB27 Authority key identifier: 67:23:9F:5E:47:D1:23:01:9D:26:80:71:63:E6:54:24:41:40:15:07 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67239F5E47D123019D26807163E6542441401507.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3132322e3132382e32342e302f32312d3234203d3e203138303539.roa Signing time: Sun 03 May 2026 03:03:40 +0000 ROA not before: Sun 03 May 2026 02:58:40 +0000 ROA not after: Sun 02 May 2027 03:03:40 +0000 asID: 18059 IP address blocks: 122.128.24.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/67239F5E47D123019D26807163E6542441401507.crl rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/67239F5E47D123019D26807163E6542441401507.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67239F5E47D123019D26807163E6542441401507.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 18:10:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:92:30:0c:83:4f:36:70:50:71:56:c6:31:63:b4:7b:3f:41:db:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67239F5E47D123019D26807163E6542441401507 Validity Not Before: May 3 02:58:40 2026 GMT Not After : May 2 03:03:40 2027 GMT Subject: CN=1EA709E986F331D351EBD969792548058764DDE5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:a4:1b:ae:84:eb:4a:7f:e1:60:9a:f5:dd:b2: 84:fb:83:50:ed:cf:0a:9c:b3:cb:32:a5:7b:2f:fe: 0d:42:98:aa:86:37:a7:17:01:fa:cc:19:0e:66:e2: 0a:be:d6:24:98:49:4a:b8:7b:e2:84:31:90:b4:d7: 4e:f7:f7:23:9e:a3:a4:cd:72:70:6a:51:82:a4:79: 28:52:31:7f:ba:db:f9:03:96:a9:af:82:10:ba:4a: 37:26:62:e5:17:65:ea:c9:b9:b2:28:7b:62:66:01: 81:a6:59:4f:18:e3:bf:af:19:fe:9c:27:6d:45:ed: c6:20:fa:9c:ce:8c:5a:4f:04:2f:41:12:91:4b:d0: 20:7c:b1:14:81:54:5b:88:7e:18:01:7e:21:9b:aa: 3b:dd:58:13:cd:dc:53:d1:c1:37:2c:b7:d3:ac:94: 9b:fb:97:b2:52:f9:b8:9a:17:35:78:da:72:17:6e: d1:44:08:20:fe:19:bf:c5:d5:f1:93:00:1e:45:6c: ea:f4:5c:43:66:57:2e:ae:10:18:e9:46:3d:9a:a1: 35:45:75:07:43:0b:f9:66:a7:d2:72:72:df:3d:19: be:69:87:3b:0f:b6:3a:3a:42:d9:07:49:44:68:7f: e6:77:56:6c:b4:9f:60:a7:45:cf:d4:9a:c7:9d:da: 91:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:A7:09:E9:86:F3:31:D3:51:EB:D9:69:79:25:48:05:87:64:DD:E5 X509v3 Authority Key Identifier: keyid:67:23:9F:5E:47:D1:23:01:9D:26:80:71:63:E6:54:24:41:40:15:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/67239F5E47D123019D26807163E6542441401507.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67239F5E47D123019D26807163E6542441401507.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3132322e3132382e32342e302f32312d3234203d3e203138303539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 122.128.24.0/21 Signature Algorithm: sha256WithRSAEncryption 57:f4:d1:5c:55:78:cd:32:76:96:8d:5f:f6:2c:72:4a:cf:90: a3:25:cf:08:4d:7c:f8:29:22:8c:44:4f:f9:c0:c1:82:b3:8c: 2f:d0:06:c5:f7:aa:a3:28:fc:bb:41:f7:2b:0c:30:e8:ea:62: ba:3a:a1:a0:8c:ea:ea:1e:2b:e8:fc:02:f4:6b:e5:41:91:b3: c6:b0:7b:92:11:2f:3f:0e:a4:90:ae:f7:4e:1a:ad:62:cf:63: b6:f8:82:71:f7:d1:65:15:1b:a3:84:ec:a3:3d:ca:76:09:d8: a4:44:6f:5b:d5:8f:71:93:07:ec:f5:7b:8a:7b:a5:21:5e:5e: 73:2b:ad:a8:60:f9:a1:9d:0a:b1:97:3b:96:8d:a9:2b:c4:dc: d8:98:ca:c8:5a:70:4d:d8:f8:4d:fd:b8:fb:c3:09:87:6c:1f: ae:31:73:9c:91:d1:aa:8c:83:dd:00:50:3b:c3:a7:a2:9d:ec: 8f:c0:b0:b2:71:db:f0:43:50:0d:f1:36:07:a5:fc:d8:f5:32: ef:84:a3:d1:af:db:11:c0:71:bb:f5:8d:75:cc:94:e2:7d:fc: ba:09:a1:c3:d0:64:36:46:0b:0f:e2:f6:cd:e5:d7:14:19:e6: 5f:71:2c:7a:16:1f:52:20:0e:70:8f:9d:d1:ea:77:d5:e1:b8: 0f:57:15:91 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUKJIwDINPNnBQcVbGMWO0ez9B2ycwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjcyMzlGNUU0N0QxMjMwMTlEMjY4MDcxNjNFNjU0MjQ0 MTQwMTUwNzAeFw0yNjA1MDMwMjU4NDBaFw0yNzA1MDIwMzAzNDBaMDMxMTAvBgNV BAMTKDFFQTcwOUU5ODZGMzMxRDM1MUVCRDk2OTc5MjU0ODA1ODc2NERERTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvpBuuhOtKf+FgmvXdsoT7g1Dt zwqcs8sypXsv/g1CmKqGN6cXAfrMGQ5m4gq+1iSYSUq4e+KEMZC010739yOeo6TN cnBqUYKkeShSMX+62/kDlqmvghC6SjcmYuUXZerJubIoe2JmAYGmWU8Y47+vGf6c J21F7cYg+pzOjFpPBC9BEpFL0CB8sRSBVFuIfhgBfiGbqjvdWBPN3FPRwTcst9Os lJv7l7JS+biaFzV42nIXbtFECCD+Gb/F1fGTAB5FbOr0XENmVy6uEBjpRj2aoTVF dQdDC/lmp9Jyct89Gb5phzsPtjo6QtkHSURof+Z3Vmy0n2CnRc/Umsed2pEZAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUHqcJ6YbzMdNR69lpeSVIBYdk3eUwHwYDVR0j BBgwFoAUZyOfXkfRIwGdJoBxY+ZUJEFAFQcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzI4MzY3NjMtMTJiNi00ZDhmLWFkMGItNGNkNWI2MTk1OWVmLzAvNjcyMzlGNUU0 N0QxMjMwMTlEMjY4MDcxNjNFNjU0MjQ0MTQwMTUwNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82NzIzOUY1RTQ3RDEyMzAxOUQyNjgwNzE2M0U2NTQyNDQxNDAx NTA3LmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2MyODM2NzYzLTEyYjYtNGQ4Zi1h ZDBiLTRjZDViNjE5NTllZi8wLzMxMzIzMjJlMzEzMjM4MmUzMjM0MmUzMDJmMzIz MTJkMzIzNDIwM2QzZTIwMzEzODMwMzUzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA3qAGDANBgkqhkiG 9w0BAQsFAAOCAQEAV/TRXFV4zTJ2lo1f9ixySs+QoyXPCE18+CkijERP+cDBgrOM L9AGxfeqoyj8u0H3Kwww6OpiujqhoIzq6h4r6PwC9GvlQZGzxrB7khEvPw6kkK73 ThqtYs9jtviCcffRZRUbo4Tsoz3KdgnYpERvW9WPcZMH7PV7inulIV5ecyutqGD5 oZ0KsZc7lo2pK8Tc2JjKyFpwTdj4Tf24+8MJh2wfrjFznJHRqoyD3QBQO8Onop3s j8CwsnHb8ENQDfE2B6X82PUy74Sj0a/bEcBxu/WNdcyU4n38ugmhw9BkNkYLD+L2 zeXXFBnmX3EsehYfUiAOcI+d0ep31eG4D1cVkQ== -----END CERTIFICATE-----Generated at Wed May 13 04:09:59 2026 by rpki-client