$ rpki-client -vvf rpki-rsync.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3130312e3132382e3130382e302f32322d3234203d3e20313335343738.roa File: 3130312e3132382e3130382e302f32322d3234203d3e20313335343738.roa (raw, json) Hash identifier: +JXr82FpG/6Wt8qvldpnb4fgmcqGxYhFwHI7evACCBg= Subject key identifier: A0:F3:46:10:B8:61:97:B6:38:8C:B2:08:9D:E9:54:D4:ED:10:43:7A Certificate issuer: /CN=488A458129866D0E7DBFF7668D82664F584F8541 Certificate serial: 09875D8CD92522682A4BF3BA1DBF7401102CE6EC Authority key identifier: 48:8A:45:81:29:86:6D:0E:7D:BF:F7:66:8D:82:66:4F:58:4F:85:41 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/488A458129866D0E7DBFF7668D82664F584F8541.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3130312e3132382e3130382e302f32322d3234203d3e20313335343738.roa Signing time: Sun 03 May 2026 03:15:10 +0000 ROA not before: Sun 03 May 2026 03:10:10 +0000 ROA not after: Sun 02 May 2027 03:15:10 +0000 asID: 135478 IP address blocks: 101.128.108.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/488A458129866D0E7DBFF7668D82664F584F8541.crl rsync://rpki-rsync.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/488A458129866D0E7DBFF7668D82664F584F8541.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/488A458129866D0E7DBFF7668D82664F584F8541.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 21:45:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:87:5d:8c:d9:25:22:68:2a:4b:f3:ba:1d:bf:74:01:10:2c:e6:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=488A458129866D0E7DBFF7668D82664F584F8541 Validity Not Before: May 3 03:10:10 2026 GMT Not After : May 2 03:15:10 2027 GMT Subject: CN=A0F34610B86197B6388CB2089DE954D4ED10437A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:57:74:ad:50:43:3b:fd:48:b5:aa:77:ad:55: ec:fa:9a:50:0b:bd:b4:b0:37:b8:cc:95:4f:58:b2: a4:f0:da:f0:c8:56:95:03:b4:b0:4f:64:54:2f:a4: d3:98:e9:fc:31:4b:54:af:53:2c:ce:59:32:54:ac: 60:10:a6:b6:48:9a:61:b9:5f:41:9f:d0:9b:fd:a3: c2:42:27:c2:99:3b:31:4f:2e:97:25:eb:b9:73:cb: d5:9c:10:c2:7d:97:c3:21:55:c5:11:6a:ab:6a:fa: fa:62:25:d5:95:b0:d5:c3:f3:3c:32:b5:83:c6:81: a3:48:d6:79:68:4a:a8:f2:fc:0a:5c:3d:46:85:52: 86:b8:60:ee:65:4f:49:75:17:ff:46:50:49:ef:85: ec:79:c3:36:a1:4e:2e:99:c7:4b:c3:c5:fc:e0:13: 1c:07:e8:51:73:e3:8e:f7:16:f3:1f:c2:06:63:88: e0:e0:b3:49:4c:03:64:e1:6b:1b:a6:b7:5c:aa:49: 84:75:50:10:37:78:8b:a3:52:de:1c:12:4a:79:23: 06:4f:99:75:e2:a4:42:98:77:4f:46:32:1d:87:0f: 35:7a:95:e9:37:5d:e8:9e:6e:12:4e:f8:60:f9:b9: c9:de:2d:d1:6f:88:73:59:34:4f:2c:20:fe:0b:11: b6:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:F3:46:10:B8:61:97:B6:38:8C:B2:08:9D:E9:54:D4:ED:10:43:7A X509v3 Authority Key Identifier: keyid:48:8A:45:81:29:86:6D:0E:7D:BF:F7:66:8D:82:66:4F:58:4F:85:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/488A458129866D0E7DBFF7668D82664F584F8541.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/488A458129866D0E7DBFF7668D82664F584F8541.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3130312e3132382e3130382e302f32322d3234203d3e20313335343738.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 101.128.108.0/22 Signature Algorithm: sha256WithRSAEncryption df:bd:9a:68:00:9c:bc:89:e9:ff:96:af:3b:0e:84:de:22:98: 47:a1:49:66:c6:e5:27:27:bc:ee:6d:f7:d0:a8:8b:60:9b:26: d1:28:4e:b5:50:ba:56:bb:b8:16:64:11:ab:e9:36:22:e5:24: 0c:b2:66:12:74:58:01:db:23:5c:af:6e:24:de:06:0e:84:35: c1:d8:02:ef:3b:8c:c0:b7:84:02:6b:cb:b0:de:91:24:7b:97: 55:a3:39:ac:e5:73:99:95:88:a4:2a:1c:4a:0b:01:9c:f6:2d: f6:45:b8:af:45:ed:d2:1c:98:e5:67:04:8e:11:d2:7a:fe:7a: 6c:53:6f:23:17:71:1b:93:86:96:a4:77:4a:09:79:16:10:44: be:fd:0c:3f:4c:f3:83:2f:47:20:15:12:75:5d:df:20:da:ca: 65:0c:1f:80:fb:ed:7f:12:ba:e4:7b:ad:8c:59:b3:ce:65:30: 19:9e:ec:72:04:c9:8f:48:60:ed:6d:cb:29:fe:e3:b0:88:77: 54:ff:9a:58:da:51:57:e2:17:fb:5f:91:b2:61:64:6e:be:14: aa:b8:29:5f:d3:0e:8c:18:51:a9:bf:fa:3c:ef:7b:68:48:53: ef:a3:86:37:59:24:2e:95:20:f9:31:92:48:7b:ab:91:c8:41: ce:86:b6:83 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUCYddjNklImgqS/O6Hb90ARAs5uwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDg4QTQ1ODEyOTg2NkQwRTdEQkZGNzY2OEQ4MjY2NEY1 ODRGODU0MTAeFw0yNjA1MDMwMzEwMTBaFw0yNzA1MDIwMzE1MTBaMDMxMTAvBgNV BAMTKEEwRjM0NjEwQjg2MTk3QjYzODhDQjIwODlERTk1NEQ0RUQxMDQzN0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgV3StUEM7/Ui1qnetVez6mlAL vbSwN7jMlU9YsqTw2vDIVpUDtLBPZFQvpNOY6fwxS1SvUyzOWTJUrGAQprZImmG5 X0Gf0Jv9o8JCJ8KZOzFPLpcl67lzy9WcEMJ9l8MhVcURaqtq+vpiJdWVsNXD8zwy tYPGgaNI1nloSqjy/ApcPUaFUoa4YO5lT0l1F/9GUEnvhex5wzahTi6Zx0vDxfzg ExwH6FFz4473FvMfwgZjiODgs0lMA2Thaxumt1yqSYR1UBA3eIujUt4cEkp5IwZP mXXipEKYd09GMh2HDzV6lek3XeiebhJO+GD5ucneLdFviHNZNE8sIP4LEbYNAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUoPNGELhhl7Y4jLIInelU1O0QQ3owHwYDVR0j BBgwFoAUSIpFgSmGbQ59v/dmjYJmT1hPhUEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWE3MDI3MjYtYjJjNi00NmZjLTgyOTctMmRiZGVjNmQ2ZDVkLzAvNDg4QTQ1ODEy OTg2NkQwRTdEQkZGNzY2OEQ4MjY2NEY1ODRGODU0MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80ODhBNDU4MTI5ODY2RDBFN0RCRkY3NjY4RDgyNjY0RjU4NEY4 NTQxLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2VhNzAyNzI2LWIyYzYtNDZmYy04 Mjk3LTJkYmRlYzZkNmQ1ZC8wLzMxMzAzMTJlMzEzMjM4MmUzMTMwMzgyZTMwMmYz MjMyMmQzMjM0MjAzZDNlMjAzMTMzMzUzNDM3Mzgucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJlgGwwDQYJ KoZIhvcNAQELBQADggEBAN+9mmgAnLyJ6f+WrzsOhN4imEehSWbG5ScnvO5t99Co i2CbJtEoTrVQula7uBZkEavpNiLlJAyyZhJ0WAHbI1yvbiTeBg6ENcHYAu87jMC3 hAJry7DekSR7l1WjOazlc5mViKQqHEoLAZz2LfZFuK9F7dIcmOVnBI4R0nr+emxT byMXcRuThpakd0oJeRYQRL79DD9M84MvRyAVEnVd3yDaymUMH4D77X8SuuR7rYxZ s85lMBme7HIEyY9IYO1tyyn+47CId1T/mljaUVfiF/tfkbJhZG6+FKq4KV/TDowY Uam/+jzve2hIU++jhjdZJC6VIPkxkkh7q5HIQc6GtoM= -----END CERTIFICATE-----Generated at Wed May 13 06:04:26 2026 by rpki-client