$ rpki-client -vvf rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3131312e302f32342d3234203d3e203234353235.roa File: 3131342e3139392e3131312e302f32342d3234203d3e203234353235.roa (raw, json) Hash identifier: vVmiPfSwFiVUXlTXUCKqsiZn6cTbRBLuxzDpiPevk+Y= Subject key identifier: 9C:7F:62:48:64:8B:0F:E8:20:1B:0F:1F:42:12:8B:CA:4D:72:72:19 Certificate issuer: /CN=167383438D537B2E966FD22726DD3B827DF002FE Certificate serial: 38C22F02EA9AC71E20786F19016452387F93B057 Authority key identifier: 16:73:83:43:8D:53:7B:2E:96:6F:D2:27:26:DD:3B:82:7D:F0:02:FE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/167383438D537B2E966FD22726DD3B827DF002FE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3131312e302f32342d3234203d3e203234353235.roa Signing time: Sun 03 May 2026 03:08:44 +0000 ROA not before: Sun 03 May 2026 03:03:44 +0000 ROA not after: Sun 02 May 2027 03:08:44 +0000 asID: 24525 IP address blocks: 114.199.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/167383438D537B2E966FD22726DD3B827DF002FE.crl rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/167383438D537B2E966FD22726DD3B827DF002FE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/167383438D537B2E966FD22726DD3B827DF002FE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 20:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:c2:2f:02:ea:9a:c7:1e:20:78:6f:19:01:64:52:38:7f:93:b0:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=167383438D537B2E966FD22726DD3B827DF002FE Validity Not Before: May 3 03:03:44 2026 GMT Not After : May 2 03:08:44 2027 GMT Subject: CN=9C7F6248648B0FE8201B0F1F42128BCA4D727219 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:58:2b:0b:23:64:3e:70:34:e7:87:e5:5c:59: 24:2c:79:b4:ba:d6:07:6a:8c:40:81:75:ed:47:74: 39:78:14:f9:09:b6:05:fd:50:a1:6e:98:a5:af:c7: 37:c4:2c:3e:c9:53:86:e0:87:cb:33:4f:40:f4:f0: d0:58:d3:c4:3e:e0:9b:10:e3:17:48:96:a6:2e:aa: 50:5d:c4:4c:cf:52:7e:b4:e3:de:fb:f2:e4:81:b6: 66:fa:4b:74:29:72:43:2d:ff:da:cf:72:0c:df:25: 54:4f:69:e3:12:3e:65:b3:01:84:aa:be:ad:06:7d: 57:11:31:69:7f:a8:5e:75:72:15:ec:33:9c:d6:0d: 10:6b:37:05:03:f8:08:04:e6:4f:04:83:e7:b3:7a: 2c:a3:96:ca:67:9a:b2:0f:a2:2d:57:d0:c9:fe:77: 25:0e:ed:05:7d:70:48:67:60:cf:06:20:db:8c:44: a3:44:b6:db:5a:ee:0f:ea:73:a2:3e:4d:50:d5:d6: 7a:5a:b3:8d:6a:54:57:40:7e:cc:c8:56:c2:65:69: d9:aa:ab:cd:31:d1:4c:f6:07:22:64:07:77:1b:bb: f8:4c:c0:fd:fd:a9:53:0e:94:fd:30:75:7b:94:b9: d1:6f:71:06:9c:86:c0:48:15:86:a6:d5:77:e1:e1: 53:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:7F:62:48:64:8B:0F:E8:20:1B:0F:1F:42:12:8B:CA:4D:72:72:19 X509v3 Authority Key Identifier: keyid:16:73:83:43:8D:53:7B:2E:96:6F:D2:27:26:DD:3B:82:7D:F0:02:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/167383438D537B2E966FD22726DD3B827DF002FE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/167383438D537B2E966FD22726DD3B827DF002FE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3131312e302f32342d3234203d3e203234353235.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 114.199.111.0/24 Signature Algorithm: sha256WithRSAEncryption b9:7f:89:c8:81:a1:3d:db:da:59:81:5e:40:ce:ed:ec:a5:b6: 90:6d:b4:ab:b2:a2:85:95:85:a4:9f:84:66:0d:d9:44:2d:80: 18:50:9c:3a:23:97:fa:2e:5f:67:9e:42:8c:66:d2:e6:f9:b6: 4e:cc:a5:19:2a:bb:cc:ad:38:83:60:1c:d6:0f:c3:e6:2c:53: 2e:05:39:fe:72:24:80:f3:f6:d4:6e:68:32:76:3a:85:c8:ce: 17:ff:b4:5c:a3:a8:53:2c:6e:2b:36:62:73:c9:5c:c6:f0:c8: c6:1e:7c:ee:df:7d:28:d2:0c:bc:04:9e:ff:10:5a:c5:d6:a9: 57:d5:a8:0f:7b:78:eb:09:33:7d:1f:48:e5:0a:6b:ba:50:33: e5:76:5f:70:a9:49:95:85:0d:39:fd:c6:d5:51:55:8e:a5:40: 0d:c2:14:d4:2f:c6:8c:62:3e:f0:92:1a:7f:68:a4:8f:74:75: f1:98:c1:ee:1e:3c:fa:5e:7e:39:96:d2:3c:eb:3f:e9:4b:8b: f3:f5:08:98:4e:df:e8:1a:2b:c6:bb:26:9e:2d:a8:4a:85:7d: da:97:54:a3:e8:ff:c1:92:80:11:c9:c2:f8:93:e9:3a:0a:e0: 42:98:ac:bb:6f:e0:07:6c:bb:c2:bb:0f:99:55:9d:ca:01:a9: 30:d2:12:32 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUOMIvAuqaxx4geG8ZAWRSOH+TsFcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTY3MzgzNDM4RDUzN0IyRTk2NkZEMjI3MjZERDNCODI3 REYwMDJGRTAeFw0yNjA1MDMwMzAzNDRaFw0yNzA1MDIwMzA4NDRaMDMxMTAvBgNV BAMTKDlDN0Y2MjQ4NjQ4QjBGRTgyMDFCMEYxRjQyMTI4QkNBNEQ3MjcyMTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAWCsLI2Q+cDTnh+VcWSQsebS6 1gdqjECBde1HdDl4FPkJtgX9UKFumKWvxzfELD7JU4bgh8szT0D08NBY08Q+4JsQ 4xdIlqYuqlBdxEzPUn6049778uSBtmb6S3QpckMt/9rPcgzfJVRPaeMSPmWzAYSq vq0GfVcRMWl/qF51chXsM5zWDRBrNwUD+AgE5k8Eg+ezeiyjlspnmrIPoi1X0Mn+ dyUO7QV9cEhnYM8GINuMRKNEttta7g/qc6I+TVDV1npas41qVFdAfszIVsJladmq q80x0Uz2ByJkB3cbu/hMwP39qVMOlP0wdXuUudFvcQachsBIFYam1Xfh4VNbAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUnH9iSGSLD+ggGw8fQhKLyk1ychkwHwYDVR0j BBgwFoAUFnODQ41Tey6Wb9InJt07gn3wAv4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDFmNGZkMzgtNzgyNi00MjAxLTlmOWItMWQ3Yzc2YWEyNGRkLzAvMTY3MzgzNDM4 RDUzN0IyRTk2NkZEMjI3MjZERDNCODI3REYwMDJGRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xNjczODM0MzhENTM3QjJFOTY2RkQyMjcyNkREM0I4MjdERjAw MkZFLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2QxZjRmZDM4LTc4MjYtNDIwMS05 ZjliLTFkN2M3NmFhMjRkZC8wLzMxMzEzNDJlMzEzOTM5MmUzMTMxMzEyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMjM0MzUzMjM1LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAcsdvMA0GCSqG SIb3DQEBCwUAA4IBAQC5f4nIgaE929pZgV5Azu3spbaQbbSrsqKFlYWkn4RmDdlE LYAYUJw6I5f6Ll9nnkKMZtLm+bZOzKUZKrvMrTiDYBzWD8PmLFMuBTn+ciSA8/bU bmgydjqFyM4X/7Rco6hTLG4rNmJzyVzG8MjGHnzu330o0gy8BJ7/EFrF1qlX1agP e3jrCTN9H0jlCmu6UDPldl9wqUmVhQ05/cbVUVWOpUANwhTUL8aMYj7wkhp/aKSP dHXxmMHuHjz6Xn45ltI86z/pS4vz9QiYTt/oGivGuyaeLahKhX3al1Sj6P/BkoAR ycL4k+k6CuBCmKy7b+AHbLvCuw+ZVZ3KAakw0hIy -----END CERTIFICATE-----Generated at Wed May 13 04:09:49 2026 by rpki-client