$ rpki-client -vvf rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3132302e302f32342d3234203d3e2034373837.roa File: 3131342e3139392e3132302e302f32342d3234203d3e2034373837.roa (raw, json) Hash identifier: nurgw4hjLONkH3k6rApDVgf6sr6s/EgNFijsPWwojhg= Subject key identifier: 16:71:5E:53:23:1B:D3:BC:1F:17:03:68:30:51:77:1C:05:EF:5F:0E Certificate issuer: /CN=167383438D537B2E966FD22726DD3B827DF002FE Certificate serial: 762603E7A5BD20E4EA7A67DD9594D40823CF584C Authority key identifier: 16:73:83:43:8D:53:7B:2E:96:6F:D2:27:26:DD:3B:82:7D:F0:02:FE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/167383438D537B2E966FD22726DD3B827DF002FE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3132302e302f32342d3234203d3e2034373837.roa Signing time: Sun 03 May 2026 03:08:49 +0000 ROA not before: Sun 03 May 2026 03:03:49 +0000 ROA not after: Sun 02 May 2027 03:08:49 +0000 asID: 4787 IP address blocks: 114.199.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/167383438D537B2E966FD22726DD3B827DF002FE.crl rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/167383438D537B2E966FD22726DD3B827DF002FE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/167383438D537B2E966FD22726DD3B827DF002FE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:26:03:e7:a5:bd:20:e4:ea:7a:67:dd:95:94:d4:08:23:cf:58:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=167383438D537B2E966FD22726DD3B827DF002FE Validity Not Before: May 3 03:03:49 2026 GMT Not After : May 2 03:08:49 2027 GMT Subject: CN=16715E53231BD3BC1F1703683051771C05EF5F0E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ca:93:01:d8:4f:d8:21:7e:08:f9:d9:4d:f2: cb:79:2f:f3:a7:f3:b9:df:26:e2:06:3c:74:a3:28: 94:29:30:6a:17:73:d4:fa:ce:8e:65:1a:64:48:88: 80:c9:73:ba:cc:14:b9:6f:5b:bc:c5:16:dc:8c:dd: c2:a5:47:67:5c:5c:24:11:a7:e4:bf:03:d3:97:0c: 63:e1:69:36:fa:4d:ec:df:fe:ca:50:9b:9a:44:ab: cb:cf:5d:41:0e:0d:c4:62:1b:37:a2:7f:7d:53:e7: 1c:50:32:7e:ba:c1:52:3d:f2:4e:9f:dc:6d:16:4f: 15:f0:de:e0:99:fb:8a:2e:e3:a6:56:e7:99:2b:e2: cd:9a:ca:c9:d9:66:92:42:fd:02:39:9f:dc:ea:e5: 7c:56:47:9e:af:62:82:74:38:8f:0d:dc:04:07:92: b6:80:ce:da:df:aa:d0:40:83:49:c6:17:41:a3:71: 27:db:52:dc:b3:a5:5b:ec:a7:cf:3a:ed:fa:60:2a: 40:2c:b5:d3:10:4e:a3:cf:20:fd:e6:18:f4:28:2f: e2:cd:86:71:2b:70:06:62:3b:bb:72:71:c3:93:89: aa:26:dd:fa:fe:05:51:3a:36:9b:80:6d:40:51:cd: 70:ec:1f:b7:72:a1:41:e1:ee:45:23:cc:27:4c:31: 25:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:71:5E:53:23:1B:D3:BC:1F:17:03:68:30:51:77:1C:05:EF:5F:0E X509v3 Authority Key Identifier: keyid:16:73:83:43:8D:53:7B:2E:96:6F:D2:27:26:DD:3B:82:7D:F0:02:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/167383438D537B2E966FD22726DD3B827DF002FE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/167383438D537B2E966FD22726DD3B827DF002FE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3132302e302f32342d3234203d3e2034373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 114.199.120.0/24 Signature Algorithm: sha256WithRSAEncryption 87:fd:c9:fa:62:9a:62:a4:c0:ef:37:e2:6a:61:40:bc:96:3b: 94:c5:74:ea:40:cd:1d:8c:43:df:e6:aa:2f:29:1a:3d:d5:50: bc:48:49:48:16:94:65:5d:b5:d8:90:46:a6:ef:24:55:4b:e4: 97:22:4a:ea:11:24:ed:fc:90:d1:c5:21:a2:05:4c:22:14:82: d7:e9:43:e7:ac:cf:4b:ce:c3:37:32:77:a0:87:80:0c:eb:41: 39:77:54:07:a6:d6:04:7a:25:a0:06:97:47:39:47:41:fc:c6: 4a:82:98:df:1d:8a:ac:a3:e1:dc:0b:8c:2f:7d:71:47:ee:8e: 51:f1:75:2a:ed:ed:79:d4:50:9e:bf:af:1e:47:32:fd:68:02: 9a:6e:04:c5:e9:65:62:ec:ad:72:dd:9c:a3:d0:2a:e8:93:fb: 49:18:08:b9:6e:be:0b:39:75:23:7c:90:40:01:86:55:c8:83: aa:d5:44:08:38:d5:2d:d6:74:da:b9:b1:24:11:15:90:4b:5f: 16:77:97:06:99:dd:32:98:67:ec:e2:b3:45:e2:f2:eb:5e:66: 9f:c5:72:56:59:e0:4c:da:20:f7:ab:cb:48:4c:47:73:5e:f9: b2:91:f3:bc:98:72:55:ef:3a:1d:43:60:8f:a8:8f:cf:c4:49: 75:5a:0d:cc -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUdiYD56W9IOTqemfdlZTUCCPPWEwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTY3MzgzNDM4RDUzN0IyRTk2NkZEMjI3MjZERDNCODI3 REYwMDJGRTAeFw0yNjA1MDMwMzAzNDlaFw0yNzA1MDIwMzA4NDlaMDMxMTAvBgNV BAMTKDE2NzE1RTUzMjMxQkQzQkMxRjE3MDM2ODMwNTE3NzFDMDVFRjVGMEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/ypMB2E/YIX4I+dlN8st5L/On 87nfJuIGPHSjKJQpMGoXc9T6zo5lGmRIiIDJc7rMFLlvW7zFFtyM3cKlR2dcXCQR p+S/A9OXDGPhaTb6Tezf/spQm5pEq8vPXUEODcRiGzeif31T5xxQMn66wVI98k6f 3G0WTxXw3uCZ+4ou46ZW55kr4s2aysnZZpJC/QI5n9zq5XxWR56vYoJ0OI8N3AQH kraAztrfqtBAg0nGF0GjcSfbUtyzpVvsp8867fpgKkAstdMQTqPPIP3mGPQoL+LN hnErcAZiO7tyccOTiaom3fr+BVE6NpuAbUBRzXDsH7dyoUHh7kUjzCdMMSVLAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUFnFeUyMb07wfFwNoMFF3HAXvXw4wHwYDVR0j BBgwFoAUFnODQ41Tey6Wb9InJt07gn3wAv4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDFmNGZkMzgtNzgyNi00MjAxLTlmOWItMWQ3Yzc2YWEyNGRkLzAvMTY3MzgzNDM4 RDUzN0IyRTk2NkZEMjI3MjZERDNCODI3REYwMDJGRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xNjczODM0MzhENTM3QjJFOTY2RkQyMjcyNkREM0I4MjdERjAw MkZFLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2QxZjRmZDM4LTc4MjYtNDIwMS05 ZjliLTFkN2M3NmFhMjRkZC8wLzMxMzEzNDJlMzEzOTM5MmUzMTMyMzAyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzNDM3MzgzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHLHeDANBgkqhkiG 9w0BAQsFAAOCAQEAh/3J+mKaYqTA7zfiamFAvJY7lMV06kDNHYxD3+aqLykaPdVQ vEhJSBaUZV212JBGpu8kVUvklyJK6hEk7fyQ0cUhogVMIhSC1+lD56zPS87DNzJ3 oIeADOtBOXdUB6bWBHoloAaXRzlHQfzGSoKY3x2KrKPh3AuML31xR+6OUfF1Ku3t edRQnr+vHkcy/WgCmm4ExellYuytct2co9Aq6JP7SRgIuW6+Czl1I3yQQAGGVciD qtVECDjVLdZ02rmxJBEVkEtfFneXBpndMphn7OKzReLy615mn8VyVlngTNog96vL SExHc175spHzvJhyVe86HUNgj6iPz8RJdVoNzA== -----END CERTIFICATE-----Generated at Wed May 13 02:36:43 2026 by rpki-client