$ rpki-client -vvf rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3132352e302f32342d3234203d3e2034373837.roa File: 3131342e3139392e3132352e302f32342d3234203d3e2034373837.roa (raw, json) Hash identifier: OwvyPgm00WY3icCvXJXIEMuYe/a0q+Y+Yqu+HzpIJ5A= Subject key identifier: 9B:B1:4E:F4:C4:03:DA:72:2A:0B:B1:2A:05:AB:06:CE:FA:0F:E5:14 Certificate issuer: /CN=167383438D537B2E966FD22726DD3B827DF002FE Certificate serial: 2701A376CE7092795228A5269E3C8D93CA7CC82E Authority key identifier: 16:73:83:43:8D:53:7B:2E:96:6F:D2:27:26:DD:3B:82:7D:F0:02:FE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/167383438D537B2E966FD22726DD3B827DF002FE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3132352e302f32342d3234203d3e2034373837.roa Signing time: Sun 03 May 2026 03:08:36 +0000 ROA not before: Sun 03 May 2026 03:03:36 +0000 ROA not after: Sun 02 May 2027 03:08:36 +0000 asID: 4787 IP address blocks: 114.199.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/167383438D537B2E966FD22726DD3B827DF002FE.crl rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/167383438D537B2E966FD22726DD3B827DF002FE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/167383438D537B2E966FD22726DD3B827DF002FE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:01:a3:76:ce:70:92:79:52:28:a5:26:9e:3c:8d:93:ca:7c:c8:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=167383438D537B2E966FD22726DD3B827DF002FE Validity Not Before: May 3 03:03:36 2026 GMT Not After : May 2 03:08:36 2027 GMT Subject: CN=9BB14EF4C403DA722A0BB12A05AB06CEFA0FE514 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:38:02:89:d0:60:12:5c:69:f9:da:1d:c7:53: f7:32:ca:1d:3b:7f:be:94:ea:12:07:4f:be:c7:82: a0:0f:a5:2d:57:1f:53:65:bb:6b:cf:b1:7b:03:06: 95:fa:09:ba:ab:67:26:09:26:8a:36:9e:26:81:d7: 35:e2:72:82:20:03:00:17:aa:34:dc:2d:a1:55:ec: 26:ec:c7:2e:bc:51:19:ca:2a:e7:68:dc:4d:b5:b6: ac:40:23:98:0b:c4:3a:3a:5d:4a:8c:5d:26:08:f8: 55:31:59:6c:91:20:b5:73:12:6a:98:fb:e2:19:dd: 0d:95:f3:9e:73:8f:9f:06:cb:41:ce:cc:62:a6:81: 79:db:91:21:4f:9d:94:48:13:19:9b:7e:cc:ce:83: 43:81:53:db:21:b0:c4:70:26:cc:65:4c:8c:6b:0e: f8:53:be:be:1e:7f:48:b6:74:2a:64:86:43:af:40: 76:fb:cc:47:ba:e3:90:26:7d:57:87:45:85:cd:48: fe:f9:52:63:97:31:22:d8:39:28:9b:c1:cf:28:bb: 10:64:90:aa:34:19:14:24:fe:ee:f4:d4:ea:aa:91: 76:c1:e0:97:59:73:15:b7:ae:fd:7e:45:e2:6f:62: 91:52:24:ae:5c:8e:19:1e:ad:f3:f4:8a:70:29:52: 65:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:B1:4E:F4:C4:03:DA:72:2A:0B:B1:2A:05:AB:06:CE:FA:0F:E5:14 X509v3 Authority Key Identifier: keyid:16:73:83:43:8D:53:7B:2E:96:6F:D2:27:26:DD:3B:82:7D:F0:02:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/167383438D537B2E966FD22726DD3B827DF002FE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/167383438D537B2E966FD22726DD3B827DF002FE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3132352e302f32342d3234203d3e2034373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 114.199.125.0/24 Signature Algorithm: sha256WithRSAEncryption b3:d1:63:4a:6d:c1:27:a2:fc:51:b3:eb:bd:71:34:60:ee:c1: 06:a5:42:49:d9:eb:86:de:03:33:16:8e:97:6e:4d:d3:1b:17: a2:cc:86:0f:a5:e2:e0:4b:9f:f9:22:74:ac:c7:72:69:05:4f: 4b:7c:1e:4a:88:5b:c9:39:6d:ec:3b:7f:f9:d7:92:7e:75:52: a9:bc:de:4f:cf:90:9c:3a:0d:2a:75:a0:4b:d0:d7:cd:92:bb: 11:f2:10:6b:d0:b0:cf:3c:19:46:64:09:3b:65:1e:e9:32:a6: 63:d6:77:ae:1e:cf:78:42:17:cd:85:cf:16:df:7f:97:fd:0a: cb:7e:39:4b:38:9a:12:85:8c:5f:0e:b8:f2:04:6a:e5:9f:0b: 62:56:55:87:82:67:e9:57:22:37:6b:e1:4e:16:f5:61:41:86: 85:13:ab:a3:a0:ab:36:28:99:97:d1:df:e5:fd:0e:0e:03:bf: f9:ad:cd:ad:30:d5:e4:e1:8c:c7:fb:0a:f3:51:a1:53:57:f5: c0:00:ba:7d:35:7e:dd:4a:86:69:4d:45:8d:be:60:70:62:aa: 75:df:e3:f8:80:64:43:f0:ac:71:a3:ac:58:90:be:b8:64:77: 5d:f5:ef:44:e1:ef:72:34:5d:00:8c:1b:27:e9:90:e4:8a:1b: 8b:27:cf:c8 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUJwGjds5wknlSKKUmnjyNk8p8yC4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTY3MzgzNDM4RDUzN0IyRTk2NkZEMjI3MjZERDNCODI3 REYwMDJGRTAeFw0yNjA1MDMwMzAzMzZaFw0yNzA1MDIwMzA4MzZaMDMxMTAvBgNV BAMTKDlCQjE0RUY0QzQwM0RBNzIyQTBCQjEyQTA1QUIwNkNFRkEwRkU1MTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIOAKJ0GASXGn52h3HU/cyyh07 f76U6hIHT77HgqAPpS1XH1Nlu2vPsXsDBpX6CbqrZyYJJoo2niaB1zXicoIgAwAX qjTcLaFV7Cbsxy68URnKKudo3E21tqxAI5gLxDo6XUqMXSYI+FUxWWyRILVzEmqY ++IZ3Q2V855zj58Gy0HOzGKmgXnbkSFPnZRIExmbfszOg0OBU9shsMRwJsxlTIxr DvhTvr4ef0i2dCpkhkOvQHb7zEe645AmfVeHRYXNSP75UmOXMSLYOSibwc8ouxBk kKo0GRQk/u701OqqkXbB4JdZcxW3rv1+ReJvYpFSJK5cjhkerfP0inApUmUhAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUm7FO9MQD2nIqC7EqBasGzvoP5RQwHwYDVR0j BBgwFoAUFnODQ41Tey6Wb9InJt07gn3wAv4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDFmNGZkMzgtNzgyNi00MjAxLTlmOWItMWQ3Yzc2YWEyNGRkLzAvMTY3MzgzNDM4 RDUzN0IyRTk2NkZEMjI3MjZERDNCODI3REYwMDJGRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xNjczODM0MzhENTM3QjJFOTY2RkQyMjcyNkREM0I4MjdERjAw MkZFLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2QxZjRmZDM4LTc4MjYtNDIwMS05 ZjliLTFkN2M3NmFhMjRkZC8wLzMxMzEzNDJlMzEzOTM5MmUzMTMyMzUyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzNDM3MzgzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHLHfTANBgkqhkiG 9w0BAQsFAAOCAQEAs9FjSm3BJ6L8UbPrvXE0YO7BBqVCSdnrht4DMxaOl25N0xsX osyGD6Xi4Euf+SJ0rMdyaQVPS3weSohbyTlt7Dt/+deSfnVSqbzeT8+QnDoNKnWg S9DXzZK7EfIQa9CwzzwZRmQJO2Ue6TKmY9Z3rh7PeEIXzYXPFt9/l/0Ky345Szia EoWMXw648gRq5Z8LYlZVh4Jn6VciN2vhThb1YUGGhROro6CrNiiZl9Hf5f0ODgO/ +a3NrTDV5OGMx/sK81GhU1f1wAC6fTV+3UqGaU1Fjb5gcGKqdd/j+IBkQ/CscaOs WJC+uGR3XfXvROHvcjRdAIwbJ+mQ5IobiyfPyA== -----END CERTIFICATE-----Generated at Wed May 13 02:26:18 2026 by rpki-client