$ rpki-client -vvf rpki-rsync.idnic.net/repo/dd54b4e2-2e58-465b-afaa-1c9465c882e6/0/3131362e3235342e3130302e302f32322d3234203d3e203535363933.roa File: 3131362e3235342e3130302e302f32322d3234203d3e203535363933.roa (raw, json) Hash identifier: 2ZgfJvyLTSbmKyjhb50szLtpeLkF+krwXndUc1mrD0c= Subject key identifier: B3:2C:E9:4E:B0:2E:FD:93:05:AD:D9:15:41:8C:73:FE:C0:1B:AE:F5 Certificate issuer: /CN=725189DBE7D964436A85FAC1FC33E5BF5C460A97 Certificate serial: 5CC8D812E07A43CC2894635939B4DD32170A0D22 Authority key identifier: 72:51:89:DB:E7:D9:64:43:6A:85:FA:C1:FC:33:E5:BF:5C:46:0A:97 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/725189DBE7D964436A85FAC1FC33E5BF5C460A97.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dd54b4e2-2e58-465b-afaa-1c9465c882e6/0/3131362e3235342e3130302e302f32322d3234203d3e203535363933.roa Signing time: Sun 03 May 2026 03:11:30 +0000 ROA not before: Sun 03 May 2026 03:06:30 +0000 ROA not after: Sun 02 May 2027 03:11:30 +0000 asID: 55693 IP address blocks: 116.254.100.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dd54b4e2-2e58-465b-afaa-1c9465c882e6/0/725189DBE7D964436A85FAC1FC33E5BF5C460A97.crl rsync://rpki-rsync.idnic.net/repo/dd54b4e2-2e58-465b-afaa-1c9465c882e6/0/725189DBE7D964436A85FAC1FC33E5BF5C460A97.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/725189DBE7D964436A85FAC1FC33E5BF5C460A97.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:c8:d8:12:e0:7a:43:cc:28:94:63:59:39:b4:dd:32:17:0a:0d:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=725189DBE7D964436A85FAC1FC33E5BF5C460A97 Validity Not Before: May 3 03:06:30 2026 GMT Not After : May 2 03:11:30 2027 GMT Subject: CN=B32CE94EB02EFD9305ADD915418C73FEC01BAEF5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:8b:b9:66:d8:63:4a:c3:6b:81:6d:d4:e9:11: 6d:ab:bf:9e:cf:e8:35:30:ee:24:82:25:ec:eb:61: 95:19:60:42:01:69:87:bf:6a:65:d4:11:7e:ae:fa: 32:6a:b5:1b:04:00:6c:e1:b1:50:4a:63:5b:9f:38: 0e:8f:72:9b:22:c9:d2:75:41:32:ea:cb:c4:fc:02: 19:e4:9f:42:ef:ad:3b:94:97:5b:91:80:a7:4f:28: f3:63:12:c7:00:bc:ae:b6:46:54:d8:8e:1c:29:59: 55:a4:f0:0a:40:42:7b:80:fd:70:30:08:28:dc:31: d0:8e:35:2f:f0:bf:1e:1e:42:77:95:f6:ac:95:be: 63:86:01:e0:fe:76:dd:4f:1e:7d:e6:69:dd:46:cd: f6:80:8a:3a:12:f9:af:55:dd:9e:fa:3b:36:c0:05: 71:ce:39:7c:35:e1:96:14:94:e1:81:c5:5b:ac:7d: 52:fd:9d:95:98:8d:0b:b5:3c:80:d2:35:b4:d2:7c: 31:ba:16:b5:ff:a3:a6:08:61:66:ad:e0:32:ed:be: f0:a9:93:84:1d:04:68:fd:02:68:f1:f2:dd:a4:f4: e9:33:30:6c:9a:69:62:14:f5:1a:fd:54:9f:99:2f: 36:6e:ed:13:1f:4f:b4:0c:39:4d:24:41:54:e5:40: f0:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:2C:E9:4E:B0:2E:FD:93:05:AD:D9:15:41:8C:73:FE:C0:1B:AE:F5 X509v3 Authority Key Identifier: keyid:72:51:89:DB:E7:D9:64:43:6A:85:FA:C1:FC:33:E5:BF:5C:46:0A:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dd54b4e2-2e58-465b-afaa-1c9465c882e6/0/725189DBE7D964436A85FAC1FC33E5BF5C460A97.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/725189DBE7D964436A85FAC1FC33E5BF5C460A97.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dd54b4e2-2e58-465b-afaa-1c9465c882e6/0/3131362e3235342e3130302e302f32322d3234203d3e203535363933.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 116.254.100.0/22 Signature Algorithm: sha256WithRSAEncryption 3f:cf:b4:3a:43:68:f4:26:54:b8:4d:e3:64:44:b0:e2:41:11: 4e:3c:06:83:fe:f1:a2:ae:7e:f8:3f:d7:7e:07:f7:1b:5d:63: ba:fe:df:f8:57:18:e7:30:c2:16:84:67:bf:45:31:93:59:df: 80:ad:0c:41:78:6f:06:60:26:36:42:1f:79:fd:b7:01:88:5a: b1:a9:76:3e:5a:80:70:a2:11:db:29:4e:ce:6f:3a:47:a2:ed: 39:c7:86:fd:19:d7:3f:b9:e7:1b:8d:ea:44:19:d7:ef:3f:30: 1a:8b:99:9f:8b:68:11:02:05:45:26:ab:a4:18:81:c6:61:1c: e8:47:fc:0d:ee:68:33:06:7e:cd:83:d0:cf:6e:95:7f:3b:71: 9a:db:77:53:b1:40:4c:99:94:49:b0:dd:22:bf:ef:9e:db:83: 44:4a:49:de:6a:a7:1c:6a:32:d1:f3:95:46:a9:24:38:dd:af: ba:9e:65:7e:d3:ee:b5:db:d7:07:23:fc:24:3b:ed:03:3c:90: 2c:d1:ca:af:74:a1:d7:f0:2e:55:4d:64:f5:00:23:be:c2:01: df:c1:0b:80:32:b8:38:a9:00:f7:8e:62:b7:c2:7c:7d:dd:9b: e8:ed:ec:86:d8:24:25:e3:45:8e:c7:2d:c0:18:62:c4:ff:5b: a5:da:15:41 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUXMjYEuB6Q8wolGNZObTdMhcKDSIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzI1MTg5REJFN0Q5NjQ0MzZBODVGQUMxRkMzM0U1QkY1 QzQ2MEE5NzAeFw0yNjA1MDMwMzA2MzBaFw0yNzA1MDIwMzExMzBaMDMxMTAvBgNV BAMTKEIzMkNFOTRFQjAyRUZEOTMwNUFERDkxNTQxOEM3M0ZFQzAxQkFFRjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9i7lm2GNKw2uBbdTpEW2rv57P 6DUw7iSCJezrYZUZYEIBaYe/amXUEX6u+jJqtRsEAGzhsVBKY1ufOA6PcpsiydJ1 QTLqy8T8Ahnkn0LvrTuUl1uRgKdPKPNjEscAvK62RlTYjhwpWVWk8ApAQnuA/XAw CCjcMdCONS/wvx4eQneV9qyVvmOGAeD+dt1PHn3mad1GzfaAijoS+a9V3Z76OzbA BXHOOXw14ZYUlOGBxVusfVL9nZWYjQu1PIDSNbTSfDG6FrX/o6YIYWat4DLtvvCp k4QdBGj9Amjx8t2k9OkzMGyaaWIU9Rr9VJ+ZLzZu7RMfT7QMOU0kQVTlQPABAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUsyzpTrAu/ZMFrdkVQYxz/sAbrvUwHwYDVR0j BBgwFoAUclGJ2+fZZENqhfrB/DPlv1xGCpcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGQ1NGI0ZTItMmU1OC00NjViLWFmYWEtMWM5NDY1Yzg4MmU2LzAvNzI1MTg5REJF N0Q5NjQ0MzZBODVGQUMxRkMzM0U1QkY1QzQ2MEE5Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83MjUxODlEQkU3RDk2NDQzNkE4NUZBQzFGQzMzRTVCRjVDNDYw QTk3LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2RkNTRiNGUyLTJlNTgtNDY1Yi1h ZmFhLTFjOTQ2NWM4ODJlNi8wLzMxMzEzNjJlMzIzNTM0MmUzMTMwMzAyZTMwMmYz MjMyMmQzMjM0MjAzZDNlMjAzNTM1MzYzOTMzLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCdP5kMA0GCSqG SIb3DQEBCwUAA4IBAQA/z7Q6Q2j0JlS4TeNkRLDiQRFOPAaD/vGirn74P9d+B/cb XWO6/t/4VxjnMMIWhGe/RTGTWd+ArQxBeG8GYCY2Qh95/bcBiFqxqXY+WoBwohHb KU7ObzpHou05x4b9Gdc/uecbjepEGdfvPzAai5mfi2gRAgVFJqukGIHGYRzoR/wN 7mgzBn7Ng9DPbpV/O3Ga23dTsUBMmZRJsN0iv++e24NESkneaqccajLR85VGqSQ4 3a+6nmV+0+6129cHI/wkO+0DPJAs0cqvdKHX8C5VTWT1ACO+wgHfwQuAMrg4qQD3 jmK3wnx93Zvo7eyG2CQl40WOxy3AGGLE/1ul2hVB -----END CERTIFICATE-----Generated at Wed May 13 02:47:49 2026 by rpki-client