$ rpki-client -vvf rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3132322e3132382e32382e302f32342d3234203d3e203138303539.roa File: 3132322e3132382e32382e302f32342d3234203d3e203138303539.roa (raw, json) Hash identifier: +dKzcRD41kvZsk9fUUhY2LmCQDwYccKtJe+dte8SLgg= Subject key identifier: B8:9A:FC:44:5B:32:26:CC:8F:FB:BC:71:3F:0C:F1:C4:E9:B8:0F:D5 Certificate issuer: /CN=67239F5E47D123019D26807163E6542441401507 Certificate serial: 7439B5BCEB960000FECD0D3B2FCC4EF078616F40 Authority key identifier: 67:23:9F:5E:47:D1:23:01:9D:26:80:71:63:E6:54:24:41:40:15:07 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67239F5E47D123019D26807163E6542441401507.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3132322e3132382e32382e302f32342d3234203d3e203138303539.roa Signing time: Sun 03 May 2026 03:03:55 +0000 ROA not before: Sun 03 May 2026 02:58:55 +0000 ROA not after: Sun 02 May 2027 03:03:55 +0000 asID: 18059 IP address blocks: 122.128.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/67239F5E47D123019D26807163E6542441401507.crl rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/67239F5E47D123019D26807163E6542441401507.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67239F5E47D123019D26807163E6542441401507.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 18:10:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:39:b5:bc:eb:96:00:00:fe:cd:0d:3b:2f:cc:4e:f0:78:61:6f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67239F5E47D123019D26807163E6542441401507 Validity Not Before: May 3 02:58:55 2026 GMT Not After : May 2 03:03:55 2027 GMT Subject: CN=B89AFC445B3226CC8FFBBC713F0CF1C4E9B80FD5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:bd:d9:0f:5d:27:9f:ac:18:67:62:95:01:11: 0d:ff:9b:48:24:74:19:ff:3b:7d:ef:d5:6e:d9:3c: 63:f0:75:6f:21:f7:41:da:8f:f9:f4:75:e6:04:b2: 12:5d:d6:aa:10:1d:78:a0:bd:09:5e:70:3f:12:9d: 1b:99:bd:2f:af:aa:d7:21:50:72:59:2f:af:d9:89: c5:9d:68:e7:90:33:87:36:f0:a9:fe:26:77:c0:d8: 3c:b5:ed:6b:e6:1e:36:89:6c:91:c2:80:dd:fd:ef: 18:b1:dc:d7:f5:b6:6d:fc:65:b4:fb:e6:69:35:29: 98:a2:e1:58:89:74:1e:13:01:6c:d1:a7:93:cb:69: f3:13:04:0c:58:9c:4c:8b:ad:00:e2:98:de:32:fe: 8b:17:04:35:03:a2:7a:a2:c2:4e:20:b8:6f:df:e2: 65:39:6e:5e:44:c4:66:82:47:9b:ef:c2:79:5c:82: 45:da:33:9c:dd:84:16:1b:97:d3:4a:e2:65:6c:b2: bd:0f:01:f4:a8:ed:89:3d:4d:42:96:e9:b6:84:24: 7f:0e:ac:07:d3:58:6d:f3:db:7d:9c:02:bb:08:53: 92:36:96:0f:cc:a5:ce:20:20:df:8d:75:c0:d2:af: c2:58:71:ae:ba:28:5c:4b:d4:5e:a0:ad:f7:c1:8a: 88:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:9A:FC:44:5B:32:26:CC:8F:FB:BC:71:3F:0C:F1:C4:E9:B8:0F:D5 X509v3 Authority Key Identifier: keyid:67:23:9F:5E:47:D1:23:01:9D:26:80:71:63:E6:54:24:41:40:15:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/67239F5E47D123019D26807163E6542441401507.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67239F5E47D123019D26807163E6542441401507.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3132322e3132382e32382e302f32342d3234203d3e203138303539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 122.128.28.0/24 Signature Algorithm: sha256WithRSAEncryption 5d:9c:9e:d0:3a:13:f5:26:5c:f0:6b:25:fd:07:43:9e:24:ae: 46:84:3e:bb:4b:08:4f:11:b8:e4:9b:57:f8:1d:b9:1e:a0:bc: ab:6b:a1:1d:6a:85:e2:c2:b0:43:8c:d9:f0:03:61:2a:19:13: e4:97:b8:d5:c5:73:6d:1e:6f:97:58:8a:ac:ca:01:73:c8:eb: 7f:27:11:c5:76:10:89:e3:30:91:f3:0b:c8:c8:22:b9:b8:82: 13:a0:2e:f2:8c:72:06:fa:72:da:50:26:2d:2d:35:77:12:ee: 1b:85:e2:4a:e8:7f:c0:d9:1a:a1:76:f8:95:dc:19:ef:1d:c9: 1e:df:67:26:a6:d8:5e:4d:32:25:9f:7b:4a:f6:13:4d:67:63: b1:79:89:66:86:bd:a1:62:c5:3b:bc:fa:1d:9d:6d:67:06:b8: 41:bb:87:a5:88:9c:40:b0:dd:49:6c:c1:61:b3:08:48:14:15: 0d:d4:fa:9a:d8:78:69:23:39:66:95:2d:89:ff:7b:98:36:64: 66:ab:aa:f6:5f:8e:1d:16:19:be:0f:96:92:65:52:d0:d9:01: 46:5c:48:1f:49:3b:b3:76:ab:f1:43:6c:32:0b:d3:4a:61:ef: af:be:82:48:9b:0d:bb:b2:17:8f:e4:b9:1d:8e:37:68:f3:b4: 8a:09:3b:33 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUdDm1vOuWAAD+zQ07L8xO8Hhhb0AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjcyMzlGNUU0N0QxMjMwMTlEMjY4MDcxNjNFNjU0MjQ0 MTQwMTUwNzAeFw0yNjA1MDMwMjU4NTVaFw0yNzA1MDIwMzAzNTVaMDMxMTAvBgNV BAMTKEI4OUFGQzQ0NUIzMjI2Q0M4RkZCQkM3MTNGMENGMUM0RTlCODBGRDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLvdkPXSefrBhnYpUBEQ3/m0gk dBn/O33v1W7ZPGPwdW8h90Haj/n0deYEshJd1qoQHXigvQlecD8SnRuZvS+vqtch UHJZL6/ZicWdaOeQM4c28Kn+JnfA2Dy17WvmHjaJbJHCgN397xix3Nf1tm38ZbT7 5mk1KZii4ViJdB4TAWzRp5PLafMTBAxYnEyLrQDimN4y/osXBDUDonqiwk4guG/f 4mU5bl5ExGaCR5vvwnlcgkXaM5zdhBYbl9NK4mVssr0PAfSo7Yk9TUKW6baEJH8O rAfTWG3z232cArsIU5I2lg/Mpc4gIN+NdcDSr8JYca66KFxL1F6grffBiojBAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUuJr8RFsyJsyP+7xxPwzxxOm4D9UwHwYDVR0j BBgwFoAUZyOfXkfRIwGdJoBxY+ZUJEFAFQcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzI4MzY3NjMtMTJiNi00ZDhmLWFkMGItNGNkNWI2MTk1OWVmLzAvNjcyMzlGNUU0 N0QxMjMwMTlEMjY4MDcxNjNFNjU0MjQ0MTQwMTUwNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82NzIzOUY1RTQ3RDEyMzAxOUQyNjgwNzE2M0U2NTQyNDQxNDAx NTA3LmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2MyODM2NzYzLTEyYjYtNGQ4Zi1h ZDBiLTRjZDViNjE5NTllZi8wLzMxMzIzMjJlMzEzMjM4MmUzMjM4MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzODMwMzUzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHqAHDANBgkqhkiG 9w0BAQsFAAOCAQEAXZye0DoT9SZc8Gsl/QdDniSuRoQ+u0sITxG45JtX+B25HqC8 q2uhHWqF4sKwQ4zZ8ANhKhkT5Je41cVzbR5vl1iKrMoBc8jrfycRxXYQieMwkfML yMgiubiCE6Au8oxyBvpy2lAmLS01dxLuG4XiSuh/wNkaoXb4ldwZ7x3JHt9nJqbY Xk0yJZ97SvYTTWdjsXmJZoa9oWLFO7z6HZ1tZwa4QbuHpYicQLDdSWzBYbMISBQV DdT6mth4aSM5ZpUtif97mDZkZquq9l+OHRYZvg+WkmVS0NkBRlxIH0k7s3ar8UNs MgvTSmHvr76CSJsNu7IXj+S5HY43aPO0igk7Mw== -----END CERTIFICATE-----Generated at Wed May 13 08:39:29 2026 by rpki-client