$ rpki-client -vvf rpki-rsync.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/3131342e3134312e38392e302f32342d3234203d3e203338373733.roa File: 3131342e3134312e38392e302f32342d3234203d3e203338373733.roa (raw, json) Hash identifier: uTIMEfksgIfw3pC5q8pYKmgEjBmK5dhPwmsdESCHDfM= Subject key identifier: 3A:3D:84:3A:BF:93:41:EC:B4:3E:03:60:4D:39:34:BB:4F:0E:DA:EB Certificate issuer: /CN=38D72675FCFA53571947E587993417F0A2E84774 Certificate serial: 5A96D9E4989956B67D569D69A33F8D2B98E6294B Authority key identifier: 38:D7:26:75:FC:FA:53:57:19:47:E5:87:99:34:17:F0:A2:E8:47:74 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/38D72675FCFA53571947E587993417F0A2E84774.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/3131342e3134312e38392e302f32342d3234203d3e203338373733.roa Signing time: Sun 03 May 2026 03:05:57 +0000 ROA not before: Sun 03 May 2026 03:00:57 +0000 ROA not after: Sun 02 May 2027 03:05:57 +0000 asID: 38773 IP address blocks: 114.141.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/38D72675FCFA53571947E587993417F0A2E84774.crl rsync://rpki-rsync.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/38D72675FCFA53571947E587993417F0A2E84774.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/38D72675FCFA53571947E587993417F0A2E84774.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:96:d9:e4:98:99:56:b6:7d:56:9d:69:a3:3f:8d:2b:98:e6:29:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38D72675FCFA53571947E587993417F0A2E84774 Validity Not Before: May 3 03:00:57 2026 GMT Not After : May 2 03:05:57 2027 GMT Subject: CN=3A3D843ABF9341ECB43E03604D3934BB4F0EDAEB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:e6:7d:eb:58:0f:ff:f4:95:8d:ab:a7:22:fd: 2c:a5:3f:21:43:65:f6:37:5d:9b:05:3c:68:42:c2: 6e:b3:79:e5:ce:04:22:a5:46:0a:ee:84:60:ac:e1: 3b:2e:c9:5f:cc:85:55:ce:2b:54:b4:77:3e:8a:d9: b1:91:19:44:3d:fd:c3:c9:fc:28:3a:4f:be:a2:07: 19:a5:c7:18:5e:64:36:11:73:88:73:38:dc:1e:8c: e2:a6:79:ea:33:8f:48:2c:2b:26:46:65:4a:e7:55: e1:a7:1e:9b:27:af:c1:36:83:16:24:1d:1f:35:c2: 83:5f:20:2a:65:3e:40:91:e2:7f:7d:05:df:a0:6d: 14:39:24:8c:90:e7:67:c2:0a:1c:2a:61:71:8a:05: c7:af:7f:eb:c2:be:6c:6c:6d:e3:e0:79:4d:93:32: 87:6f:16:00:e8:ce:2c:df:37:e0:d4:10:a0:3f:3a: cc:78:a6:b2:33:0a:2d:b1:91:45:ab:96:9c:8e:b7: 41:61:d0:63:ce:14:66:bf:7a:8b:f2:63:96:f4:d1: fd:1f:6d:f6:a1:1c:e1:aa:fd:f9:bc:5e:3c:c0:16: 40:54:d3:ff:e0:ec:73:6e:65:25:80:47:0f:3d:21: 9f:5c:ad:cd:e9:90:d2:7b:f8:42:48:e2:7a:bd:62: 86:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:3D:84:3A:BF:93:41:EC:B4:3E:03:60:4D:39:34:BB:4F:0E:DA:EB X509v3 Authority Key Identifier: keyid:38:D7:26:75:FC:FA:53:57:19:47:E5:87:99:34:17:F0:A2:E8:47:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/38D72675FCFA53571947E587993417F0A2E84774.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/38D72675FCFA53571947E587993417F0A2E84774.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/3131342e3134312e38392e302f32342d3234203d3e203338373733.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 114.141.89.0/24 Signature Algorithm: sha256WithRSAEncryption 8c:f1:1a:5f:bd:a8:d5:aa:48:e8:11:71:a4:cf:80:fd:b0:9b: 59:7b:b0:a0:1d:51:8d:ac:65:f2:3a:4f:6c:9e:9d:d0:72:ab: c8:92:43:19:c8:0a:77:c6:7f:8b:76:8b:fc:47:dd:18:2e:53: b6:7e:60:89:6b:0a:b0:2c:bc:f2:c9:9d:97:a1:8c:7d:7f:03: ff:31:cf:ca:16:40:5f:10:cd:f5:62:fc:5d:5b:7e:fa:f9:7e: 00:8d:2b:37:0e:ef:52:e7:62:28:8e:da:5d:10:fb:6f:98:6b: 12:0f:e8:65:e1:90:7d:28:a1:66:c4:ea:8f:56:b7:a9:b4:bf: af:d5:63:9b:63:56:44:23:a4:14:cf:66:f7:10:5c:76:19:2d: 47:4a:39:ec:95:5c:21:94:cb:68:72:7b:78:ea:60:b7:16:f1: b2:80:66:55:57:93:bf:be:57:67:14:ec:c3:f2:98:bc:c0:2c: 10:58:87:17:97:18:8a:49:bd:9a:0e:bf:44:46:c4:3d:cc:c4: 83:28:a0:e3:ca:eb:ad:24:19:bd:38:c7:e0:70:24:25:25:92: fb:d4:48:75:27:f9:7a:60:88:55:76:fc:61:42:bf:74:34:79: 11:50:3e:fc:b8:43:d3:ee:8b:16:bb:2f:b8:94:39:75:05:c8: 56:88:9f:08 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUWpbZ5JiZVrZ9Vp1poz+NK5jmKUswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzhENzI2NzVGQ0ZBNTM1NzE5NDdFNTg3OTkzNDE3RjBB MkU4NDc3NDAeFw0yNjA1MDMwMzAwNTdaFw0yNzA1MDIwMzA1NTdaMDMxMTAvBgNV BAMTKDNBM0Q4NDNBQkY5MzQxRUNCNDNFMDM2MDREMzkzNEJCNEYwRURBRUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC5n3rWA//9JWNq6ci/SylPyFD ZfY3XZsFPGhCwm6zeeXOBCKlRgruhGCs4TsuyV/MhVXOK1S0dz6K2bGRGUQ9/cPJ /Cg6T76iBxmlxxheZDYRc4hzONwejOKmeeozj0gsKyZGZUrnVeGnHpsnr8E2gxYk HR81woNfICplPkCR4n99Bd+gbRQ5JIyQ52fCChwqYXGKBcevf+vCvmxsbePgeU2T ModvFgDozizfN+DUEKA/Osx4prIzCi2xkUWrlpyOt0Fh0GPOFGa/eovyY5b00f0f bfahHOGq/fm8XjzAFkBU0//g7HNuZSWARw89IZ9crc3pkNJ7+EJI4nq9YoZZAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUOj2EOr+TQey0PgNgTTk0u08O2uswHwYDVR0j BBgwFoAUONcmdfz6U1cZR+WHmTQX8KLoR3QwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzdmYzU0ZmItNzI0ZS00MzE2LWI5YmMtMWM0YjA2ZWE1N2FlLzAvMzhENzI2NzVG Q0ZBNTM1NzE5NDdFNTg3OTkzNDE3RjBBMkU4NDc3NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zOEQ3MjY3NUZDRkE1MzU3MTk0N0U1ODc5OTM0MTdGMEEyRTg0 Nzc0LmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2M3ZmM1NGZiLTcyNGUtNDMxNi1i OWJjLTFjNGIwNmVhNTdhZS8wLzMxMzEzNDJlMzEzNDMxMmUzODM5MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzMzODM3MzczMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHKNWTANBgkqhkiG 9w0BAQsFAAOCAQEAjPEaX72o1apI6BFxpM+A/bCbWXuwoB1Rjaxl8jpPbJ6d0HKr yJJDGcgKd8Z/i3aL/EfdGC5Ttn5giWsKsCy88smdl6GMfX8D/zHPyhZAXxDN9WL8 XVt++vl+AI0rNw7vUudiKI7aXRD7b5hrEg/oZeGQfSihZsTqj1a3qbS/r9Vjm2NW RCOkFM9m9xBcdhktR0o57JVcIZTLaHJ7eOpgtxbxsoBmVVeTv75XZxTsw/KYvMAs EFiHF5cYikm9mg6/REbEPczEgyig48rrrSQZvTjH4HAkJSWS+9RIdSf5emCIVXb8 YUK/dDR5EVA+/LhD0+6LFrsvuJQ5dQXIVoifCA== -----END CERTIFICATE-----Generated at Wed May 13 00:13:50 2026 by rpki-client