$ rpki-client -vvf rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3130382e302f32342d3234203d3e203234353235.roa File: 3131342e3139392e3130382e302f32342d3234203d3e203234353235.roa (raw, json) Hash identifier: QX02NTGXFI1zmVoD/mFZvT68cbLrl9WxSX6DZ+ZtAkE= Subject key identifier: 40:76:29:91:33:1B:D1:BF:1B:C4:96:3B:81:AE:42:CE:A2:68:D8:7C Certificate issuer: /CN=167383438D537B2E966FD22726DD3B827DF002FE Certificate serial: 75963FDF59A801A4D44462628494CD8D02962FD3 Authority key identifier: 16:73:83:43:8D:53:7B:2E:96:6F:D2:27:26:DD:3B:82:7D:F0:02:FE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/167383438D537B2E966FD22726DD3B827DF002FE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3130382e302f32342d3234203d3e203234353235.roa Signing time: Sun 03 May 2026 03:08:42 +0000 ROA not before: Sun 03 May 2026 03:03:42 +0000 ROA not after: Sun 02 May 2027 03:08:42 +0000 asID: 24525 IP address blocks: 114.199.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/167383438D537B2E966FD22726DD3B827DF002FE.crl rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/167383438D537B2E966FD22726DD3B827DF002FE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/167383438D537B2E966FD22726DD3B827DF002FE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 20:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:96:3f:df:59:a8:01:a4:d4:44:62:62:84:94:cd:8d:02:96:2f:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=167383438D537B2E966FD22726DD3B827DF002FE Validity Not Before: May 3 03:03:42 2026 GMT Not After : May 2 03:08:42 2027 GMT Subject: CN=40762991331BD1BF1BC4963B81AE42CEA268D87C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:03:a8:d1:62:60:7c:10:3d:e5:a2:ff:e4:00: 32:b9:49:61:84:16:9a:e2:f4:44:61:16:35:50:cc: 52:75:11:e6:50:51:ea:3e:fb:4c:03:7a:fc:48:52: 8a:b2:75:48:d9:12:95:d7:da:8f:46:25:a5:1b:35: e4:e4:f2:3c:ec:fe:74:5f:ee:b5:73:58:49:e8:72: 6b:7a:64:e5:cc:98:94:7b:8c:6a:77:0c:47:91:f2: fd:32:33:10:af:69:0b:87:db:76:65:a5:42:2d:0d: 04:5e:4a:d8:5e:bd:f7:b9:70:0d:af:84:d3:dc:67: 12:c2:73:90:5a:6a:87:3f:a2:1c:d6:a5:81:25:91: 2c:4c:53:02:3c:17:a7:17:1e:23:3b:7a:2b:4b:e3: ce:a7:c4:dd:db:da:e0:5e:86:62:5a:ed:00:30:1e: 3d:10:d4:fc:c0:c4:4f:9a:35:3c:e1:2e:a4:35:85: c3:fd:80:b0:ee:06:30:a2:ee:81:56:c6:de:1f:7b: bc:cc:19:e5:a2:4e:aa:bd:40:69:9a:ff:75:02:a5: a7:55:8c:76:5e:98:35:8a:50:65:6a:36:61:89:6c: b3:ca:07:b3:62:88:e6:bf:74:e4:68:d5:db:33:ee: 21:a3:11:b4:4b:a9:71:1e:84:65:02:ae:4d:1d:6c: 00:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:76:29:91:33:1B:D1:BF:1B:C4:96:3B:81:AE:42:CE:A2:68:D8:7C X509v3 Authority Key Identifier: keyid:16:73:83:43:8D:53:7B:2E:96:6F:D2:27:26:DD:3B:82:7D:F0:02:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/167383438D537B2E966FD22726DD3B827DF002FE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/167383438D537B2E966FD22726DD3B827DF002FE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3130382e302f32342d3234203d3e203234353235.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 114.199.108.0/24 Signature Algorithm: sha256WithRSAEncryption 24:3b:dc:27:ab:36:7d:03:41:3b:26:37:2e:86:68:df:10:6f: 8a:9c:b4:96:95:1b:aa:7a:ba:76:f9:82:73:3c:c8:60:d7:a0: 29:51:95:14:e0:9d:ad:12:e8:7c:21:1a:e4:d7:7b:df:4b:97: 9b:18:7c:75:62:a1:7a:39:f3:b2:2f:94:8d:d2:05:ed:ee:c5: 11:cb:28:cd:54:d7:37:e7:04:90:f2:31:3b:9e:3d:6c:e8:44: 7f:01:89:eb:14:a9:91:2e:b5:3a:c1:c1:42:e8:40:28:af:2e: 2e:3c:d9:05:84:69:35:37:e0:a4:1d:ee:fb:0a:62:cb:00:b4: 49:87:e5:8a:59:f3:80:8f:f7:d6:b0:3c:1c:e9:46:c5:47:c6: 85:7e:b8:7e:5f:f6:e2:c9:f6:4f:50:26:5a:e7:dd:45:c4:8e: 1d:ee:36:33:a9:c8:d8:b8:89:92:d8:00:5c:a1:f9:6b:5c:32: 8f:f3:4e:29:77:70:fc:41:b3:3b:9c:59:23:20:ff:eb:8f:c5: c4:aa:85:c4:ee:66:e9:50:05:c8:95:b0:68:9e:6d:75:5a:11: 9f:d5:10:e6:80:5c:4f:76:f7:ed:03:bc:14:b5:4f:7f:3e:59: 38:a6:09:bb:54:2c:9f:3d:d1:07:3d:2f:a5:30:ff:8f:89:7b: d7:da:7a:96 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUdZY/31moAaTURGJihJTNjQKWL9MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTY3MzgzNDM4RDUzN0IyRTk2NkZEMjI3MjZERDNCODI3 REYwMDJGRTAeFw0yNjA1MDMwMzAzNDJaFw0yNzA1MDIwMzA4NDJaMDMxMTAvBgNV BAMTKDQwNzYyOTkxMzMxQkQxQkYxQkM0OTYzQjgxQUU0MkNFQTI2OEQ4N0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzA6jRYmB8ED3lov/kADK5SWGE Fpri9ERhFjVQzFJ1EeZQUeo++0wDevxIUoqydUjZEpXX2o9GJaUbNeTk8jzs/nRf 7rVzWEnocmt6ZOXMmJR7jGp3DEeR8v0yMxCvaQuH23ZlpUItDQReSthevfe5cA2v hNPcZxLCc5Baaoc/ohzWpYElkSxMUwI8F6cXHiM7eitL486nxN3b2uBehmJa7QAw Hj0Q1PzAxE+aNTzhLqQ1hcP9gLDuBjCi7oFWxt4fe7zMGeWiTqq9QGma/3UCpadV jHZemDWKUGVqNmGJbLPKB7NiiOa/dORo1dsz7iGjEbRLqXEehGUCrk0dbABJAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUQHYpkTMb0b8bxJY7ga5CzqJo2HwwHwYDVR0j BBgwFoAUFnODQ41Tey6Wb9InJt07gn3wAv4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDFmNGZkMzgtNzgyNi00MjAxLTlmOWItMWQ3Yzc2YWEyNGRkLzAvMTY3MzgzNDM4 RDUzN0IyRTk2NkZEMjI3MjZERDNCODI3REYwMDJGRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xNjczODM0MzhENTM3QjJFOTY2RkQyMjcyNkREM0I4MjdERjAw MkZFLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2QxZjRmZDM4LTc4MjYtNDIwMS05 ZjliLTFkN2M3NmFhMjRkZC8wLzMxMzEzNDJlMzEzOTM5MmUzMTMwMzgyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMjM0MzUzMjM1LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAcsdsMA0GCSqG SIb3DQEBCwUAA4IBAQAkO9wnqzZ9A0E7JjcuhmjfEG+KnLSWlRuqerp2+YJzPMhg 16ApUZUU4J2tEuh8IRrk13vfS5ebGHx1YqF6OfOyL5SN0gXt7sURyyjNVNc35wSQ 8jE7nj1s6ER/AYnrFKmRLrU6wcFC6EAory4uPNkFhGk1N+CkHe77CmLLALRJh+WK WfOAj/fWsDwc6UbFR8aFfrh+X/biyfZPUCZa591FxI4d7jYzqcjYuImS2ABcoflr XDKP804pd3D8QbM7nFkjIP/rj8XEqoXE7mbpUAXIlbBonm11WhGf1RDmgFxPdvft A7wUtU9/Plk4pgm7VCyfPdEHPS+lMP+PiXvX2nqW -----END CERTIFICATE-----Generated at Wed May 13 04:51:15 2026 by rpki-client