$ rpki-client -vvf rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e39362e302f32312d3231203d3e203234353235.roa File: 3131342e3139392e39362e302f32312d3231203d3e203234353235.roa (raw, json) Hash identifier: rWf2f5avMY4GGip27kaRM0f7Q+Ch+rJxEmyuo07bYms= Subject key identifier: E7:EC:7D:99:4B:65:FE:66:91:70:26:74:95:78:BA:7D:3C:BC:55:C9 Certificate issuer: /CN=167383438D537B2E966FD22726DD3B827DF002FE Certificate serial: 18E435A74B5B40E09A1221019DAC8B7E9917C351 Authority key identifier: 16:73:83:43:8D:53:7B:2E:96:6F:D2:27:26:DD:3B:82:7D:F0:02:FE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/167383438D537B2E966FD22726DD3B827DF002FE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e39362e302f32312d3231203d3e203234353235.roa Signing time: Sun 03 May 2026 03:08:43 +0000 ROA not before: Sun 03 May 2026 03:03:43 +0000 ROA not after: Sun 02 May 2027 03:08:43 +0000 asID: 24525 IP address blocks: 114.199.96.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/167383438D537B2E966FD22726DD3B827DF002FE.crl rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/167383438D537B2E966FD22726DD3B827DF002FE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/167383438D537B2E966FD22726DD3B827DF002FE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 20:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:e4:35:a7:4b:5b:40:e0:9a:12:21:01:9d:ac:8b:7e:99:17:c3:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=167383438D537B2E966FD22726DD3B827DF002FE Validity Not Before: May 3 03:03:43 2026 GMT Not After : May 2 03:08:43 2027 GMT Subject: CN=E7EC7D994B65FE66917026749578BA7D3CBC55C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:8a:9a:7b:47:c7:ea:ec:6e:d6:d0:d6:78:fa: 29:59:c6:51:d3:55:d9:67:ec:ba:c0:70:64:6d:df: e2:e0:cf:11:2d:5a:c5:6f:72:5c:db:30:33:b7:d2: e8:3e:ac:79:36:79:e3:5c:81:27:43:17:ed:fb:0f: f5:45:e8:f0:0e:ba:fe:ae:c3:13:69:8d:d4:03:3c: 79:58:c2:fd:48:bd:b6:ff:b6:f1:9e:e5:91:5b:5b: 73:e8:b7:fd:2e:8c:77:a7:b6:71:d3:88:53:a8:04: 15:3e:67:24:e8:d5:3e:53:e0:05:2f:97:20:8c:43: 9e:bd:d1:92:12:17:39:f5:4b:f7:cd:e9:52:ae:ca: 5c:e0:9e:cb:1f:06:de:88:8b:d9:bd:80:aa:80:27: 00:22:ca:79:39:68:03:45:9d:46:e7:b4:03:2d:36: 16:fe:58:5c:91:63:50:99:1b:67:64:3f:d7:75:6d: 3e:e2:98:71:bd:3d:ca:1b:ae:1d:14:98:0e:cd:c6: 1a:0a:04:94:c8:44:08:a2:26:51:11:8e:05:a1:45: 0e:af:ae:6b:b5:3f:ab:43:16:15:c0:e1:e1:87:86: 5a:45:6d:dc:3b:ac:e6:c9:22:ee:9e:95:92:12:d0: 3d:4f:5a:27:d7:15:ea:92:40:71:ec:8a:36:e0:08: aa:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:EC:7D:99:4B:65:FE:66:91:70:26:74:95:78:BA:7D:3C:BC:55:C9 X509v3 Authority Key Identifier: keyid:16:73:83:43:8D:53:7B:2E:96:6F:D2:27:26:DD:3B:82:7D:F0:02:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/167383438D537B2E966FD22726DD3B827DF002FE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/167383438D537B2E966FD22726DD3B827DF002FE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e39362e302f32312d3231203d3e203234353235.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 114.199.96.0/21 Signature Algorithm: sha256WithRSAEncryption bf:03:45:52:38:12:08:f3:81:46:53:84:ad:e9:8d:df:e2:5e: 11:cd:5b:8e:9b:6d:23:27:ec:a3:4e:2f:77:f5:05:52:07:8e: d4:6f:12:1d:de:52:bf:40:28:14:b7:e2:8c:62:ba:cd:eb:15: c9:fa:df:a8:22:bd:bb:3c:17:3b:14:eb:71:d8:30:d2:5f:99: c1:78:96:79:ae:56:f9:ba:2b:0d:ac:3d:1c:62:3d:cc:81:f9: 97:49:85:ba:95:7a:33:f8:f1:f0:d4:23:20:03:3b:8a:7d:c6: 79:aa:78:35:3e:3f:fc:10:44:58:45:b2:f7:cc:11:52:de:8e: fb:c4:6c:d3:12:be:39:06:ab:4d:73:69:98:2d:b2:de:61:93: 0a:2e:ea:2a:b7:92:e5:15:ec:96:ca:e6:88:09:7f:4b:5e:83: 68:50:bb:56:a0:4d:67:d0:b3:05:0b:20:d9:9a:9f:74:f1:14: f9:f9:74:13:c9:50:ca:1f:75:87:45:b1:96:93:1e:26:64:36: 6d:0b:f7:82:cc:fa:43:00:9d:58:a9:ae:e0:e1:cb:f7:ba:f8: ac:26:d1:d0:27:de:87:2b:44:64:db:eb:67:b5:ab:f0:58:2e: 23:d3:7a:7d:cc:72:a0:91:e7:20:a8:82:f3:33:b3:8b:7c:5d: af:de:01:71 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUGOQ1p0tbQOCaEiEBnayLfpkXw1EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTY3MzgzNDM4RDUzN0IyRTk2NkZEMjI3MjZERDNCODI3 REYwMDJGRTAeFw0yNjA1MDMwMzAzNDNaFw0yNzA1MDIwMzA4NDNaMDMxMTAvBgNV BAMTKEU3RUM3RDk5NEI2NUZFNjY5MTcwMjY3NDk1NzhCQTdEM0NCQzU1QzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDripp7R8fq7G7W0NZ4+ilZxlHT Vdln7LrAcGRt3+LgzxEtWsVvclzbMDO30ug+rHk2eeNcgSdDF+37D/VF6PAOuv6u wxNpjdQDPHlYwv1Ivbb/tvGe5ZFbW3Pot/0ujHentnHTiFOoBBU+ZyTo1T5T4AUv lyCMQ5690ZISFzn1S/fN6VKuylzgnssfBt6Ii9m9gKqAJwAiynk5aANFnUbntAMt Nhb+WFyRY1CZG2dkP9d1bT7imHG9Pcobrh0UmA7NxhoKBJTIRAiiJlERjgWhRQ6v rmu1P6tDFhXA4eGHhlpFbdw7rObJIu6elZIS0D1PWifXFeqSQHHsijbgCKpDAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQU5+x9mUtl/maRcCZ0lXi6fTy8VckwHwYDVR0j BBgwFoAUFnODQ41Tey6Wb9InJt07gn3wAv4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDFmNGZkMzgtNzgyNi00MjAxLTlmOWItMWQ3Yzc2YWEyNGRkLzAvMTY3MzgzNDM4 RDUzN0IyRTk2NkZEMjI3MjZERDNCODI3REYwMDJGRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xNjczODM0MzhENTM3QjJFOTY2RkQyMjcyNkREM0I4MjdERjAw MkZFLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2QxZjRmZDM4LTc4MjYtNDIwMS05 ZjliLTFkN2M3NmFhMjRkZC8wLzMxMzEzNDJlMzEzOTM5MmUzOTM2MmUzMDJmMzIz MTJkMzIzMTIwM2QzZTIwMzIzNDM1MzIzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA3LHYDANBgkqhkiG 9w0BAQsFAAOCAQEAvwNFUjgSCPOBRlOEremN3+JeEc1bjpttIyfso04vd/UFUgeO 1G8SHd5Sv0AoFLfijGK6zesVyfrfqCK9uzwXOxTrcdgw0l+ZwXiWea5W+borDaw9 HGI9zIH5l0mFupV6M/jx8NQjIAM7in3Geap4NT4//BBEWEWy98wRUt6O+8Rs0xK+ OQarTXNpmC2y3mGTCi7qKreS5RXslsrmiAl/S16DaFC7VqBNZ9CzBQsg2ZqfdPEU +fl0E8lQyh91h0WxlpMeJmQ2bQv3gsz6QwCdWKmu4OHL97r4rCbR0CfehytEZNvr Z7Wr8FguI9N6fcxyoJHnIKiC8zOzi3xdr94BcQ== -----END CERTIFICATE-----Generated at Wed May 13 03:56:42 2026 by rpki-client