$ rpki-client -vvf rpki-rsync.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/3131312e36372e37332e302f32342d3234203d3e203536323333.roa File: 3131312e36372e37332e302f32342d3234203d3e203536323333.roa (raw, json) Hash identifier: aMwliF8f+KJHeJLDBVlDQIRW+UpwyCDnVCmgvmDSPBs= Subject key identifier: 39:00:F6:7B:94:92:BE:34:55:C9:FE:88:3D:F4:A2:E5:D4:69:9F:8E Certificate issuer: /CN=BCD5E05E570F2280ECEF33171EB7ADC87DF556D8 Certificate serial: 09D2B7A93849121A462D9970F5BE617360C13321 Authority key identifier: BC:D5:E0:5E:57:0F:22:80:EC:EF:33:17:1E:B7:AD:C8:7D:F5:56:D8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BCD5E05E570F2280ECEF33171EB7ADC87DF556D8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/3131312e36372e37332e302f32342d3234203d3e203536323333.roa Signing time: Sun 03 May 2026 03:13:26 +0000 ROA not before: Sun 03 May 2026 03:08:26 +0000 ROA not after: Sun 02 May 2027 03:13:26 +0000 asID: 56233 IP address blocks: 111.67.73.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BCD5E05E570F2280ECEF33171EB7ADC87DF556D8.crl rsync://rpki-rsync.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BCD5E05E570F2280ECEF33171EB7ADC87DF556D8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BCD5E05E570F2280ECEF33171EB7ADC87DF556D8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 19:00:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:d2:b7:a9:38:49:12:1a:46:2d:99:70:f5:be:61:73:60:c1:33:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCD5E05E570F2280ECEF33171EB7ADC87DF556D8 Validity Not Before: May 3 03:08:26 2026 GMT Not After : May 2 03:13:26 2027 GMT Subject: CN=3900F67B9492BE3455C9FE883DF4A2E5D4699F8E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:b7:11:cb:4b:34:96:55:6c:6d:a8:bb:f1:ea: 79:3c:ae:99:68:ae:f0:aa:ab:92:68:b3:5f:29:27: d7:1e:19:83:ca:49:8b:09:54:60:6d:03:ce:3c:e7: c0:24:51:f4:1c:42:dd:6e:3b:44:49:d4:20:aa:0d: c5:0e:98:ba:e7:06:27:41:7c:9b:3b:81:cc:04:76: f0:e8:d3:73:5b:5b:8a:42:ee:12:e5:0e:6f:fe:20: 79:7c:d9:80:66:95:cc:7b:06:69:a0:f7:25:8e:f1: 1e:68:55:52:09:a6:5f:3c:ca:26:f6:ec:8f:f0:44: f6:3e:46:44:cc:93:7c:1c:a1:aa:fb:08:78:2a:58: 47:40:58:db:43:c6:df:f6:34:2d:71:14:47:31:d1: 60:52:25:b0:90:0c:55:f8:f2:e4:66:82:03:80:21: 69:78:89:b0:af:96:fe:37:4b:ec:be:69:51:3f:c0: 1a:c6:fa:3a:56:44:66:c2:73:2d:97:ad:89:15:e5: 76:9b:16:e0:b2:39:a7:be:ab:eb:6b:8b:1a:d6:0f: 2f:1e:29:c5:27:3f:63:d6:7c:52:32:26:d6:83:dc: e5:71:33:90:f5:98:49:3c:fa:af:c2:ea:83:88:3a: f6:a2:aa:a8:31:46:a0:a8:6e:3e:6b:37:6e:d9:0a: 77:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:00:F6:7B:94:92:BE:34:55:C9:FE:88:3D:F4:A2:E5:D4:69:9F:8E X509v3 Authority Key Identifier: keyid:BC:D5:E0:5E:57:0F:22:80:EC:EF:33:17:1E:B7:AD:C8:7D:F5:56:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BCD5E05E570F2280ECEF33171EB7ADC87DF556D8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BCD5E05E570F2280ECEF33171EB7ADC87DF556D8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/3131312e36372e37332e302f32342d3234203d3e203536323333.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 111.67.73.0/24 Signature Algorithm: sha256WithRSAEncryption 26:61:75:37:dd:2a:11:f7:63:94:42:3e:e8:ae:f4:fe:0a:53: df:45:f9:c0:0c:61:31:5a:8c:fc:a6:77:9c:d1:6d:5f:82:b0: e6:f2:ac:dd:bb:09:c9:6b:14:c8:98:f6:76:d9:9a:99:ae:cb: 27:a8:21:b4:fb:93:43:1d:c1:5f:19:40:88:cf:27:ad:a5:1f: c8:44:42:f7:1a:c6:82:b0:bc:c7:08:65:c0:5c:7a:96:91:23: f6:fc:99:34:d2:f5:b0:ce:11:1e:01:71:7a:32:cb:d6:4c:15: 06:08:4e:84:35:6f:1b:0c:7c:4b:4f:8f:af:02:58:41:55:6c: df:98:8e:ea:aa:53:83:e1:29:a9:70:f4:94:ee:2f:30:21:ed: c5:2c:b0:84:39:5f:c8:57:38:d6:aa:e0:b5:c9:ca:25:97:a1: f6:0b:56:2c:3a:07:dd:5a:48:82:0b:61:88:c8:6b:2e:34:29: c2:3f:05:54:04:63:b1:54:f7:6c:8c:de:d3:43:f3:51:92:ea: 0a:14:00:7c:64:71:bb:22:db:d4:d9:54:9b:d7:fa:08:14:90: 90:46:32:b8:59:bd:fa:d9:a9:15:f2:38:fe:3e:86:bc:43:b0: 2d:2c:7e:f4:b9:b3:1c:f3:8e:20:58:c8:6c:86:92:fd:29:52: 32:99:ae:76 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUCdK3qThJEhpGLZlw9b5hc2DBMyEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNENUUwNUU1NzBGMjI4MEVDRUYzMzE3MUVCN0FEQzg3 REY1NTZEODAeFw0yNjA1MDMwMzA4MjZaFw0yNzA1MDIwMzEzMjZaMDMxMTAvBgNV BAMTKDM5MDBGNjdCOTQ5MkJFMzQ1NUM5RkU4ODNERjRBMkU1RDQ2OTlGOEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6txHLSzSWVWxtqLvx6nk8rplo rvCqq5Jos18pJ9ceGYPKSYsJVGBtA84858AkUfQcQt1uO0RJ1CCqDcUOmLrnBidB fJs7gcwEdvDo03NbW4pC7hLlDm/+IHl82YBmlcx7Bmmg9yWO8R5oVVIJpl88yib2 7I/wRPY+RkTMk3wcoar7CHgqWEdAWNtDxt/2NC1xFEcx0WBSJbCQDFX48uRmggOA IWl4ibCvlv43S+y+aVE/wBrG+jpWRGbCcy2XrYkV5XabFuCyOae+q+trixrWDy8e KcUnP2PWfFIyJtaD3OVxM5D1mEk8+q/C6oOIOvaiqqgxRqCobj5rN27ZCncjAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUOQD2e5SSvjRVyf6IPfSi5dRpn44wHwYDVR0j BBgwFoAUvNXgXlcPIoDs7zMXHretyH31VtgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTUwZGE0NDctYTEzOC00NjI1LWE0MjAtYTcxMWFjMjQzNTE5LzAvQkNENUUwNUU1 NzBGMjI4MEVDRUYzMzE3MUVCN0FEQzg3REY1NTZEOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQ0Q1RTA1RTU3MEYyMjgwRUNFRjMzMTcxRUI3QURDODdERjU1 NkQ4LmNlcjCBoQYIKwYBBQUHAQsEgZQwgZEwgY4GCCsGAQUFBzALhoGBcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2U1MGRhNDQ3LWExMzgtNDYyNS1h NDIwLWE3MTFhYzI0MzUxOS8wLzMxMzEzMTJlMzYzNzJlMzczMzJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDM1MzYzMjMzMzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABvQ0kwDQYJKoZIhvcN AQELBQADggEBACZhdTfdKhH3Y5RCPuiu9P4KU99F+cAMYTFajPymd5zRbV+CsOby rN27CclrFMiY9nbZmpmuyyeoIbT7k0MdwV8ZQIjPJ62lH8hEQvcaxoKwvMcIZcBc epaRI/b8mTTS9bDOER4BcXoyy9ZMFQYIToQ1bxsMfEtPj68CWEFVbN+YjuqqU4Ph Kalw9JTuLzAh7cUssIQ5X8hXONaq4LXJyiWXofYLViw6B91aSIILYYjIay40KcI/ BVQEY7FU92yM3tND81GS6goUAHxkcbsi29TZVJvX+ggUkJBGMrhZvfrZqRXyOP4+ hrxDsC0sfvS5sxzzjiBYyGyGkv0pUjKZrnY= -----END CERTIFICATE-----Generated at Wed May 13 09:12:41 2026 by rpki-client