$ rpki-client -vvf rpki-rsync.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3130312e3132382e36342e302f32332d3233203d3e20313335343738.roa File: 3130312e3132382e36342e302f32332d3233203d3e20313335343738.roa (raw, json) Hash identifier: t2MsMuM/1YQ0d1jlVRk+UQIkBTqKfcyfuzkWNhKm+2Y= Subject key identifier: 59:2B:E2:9B:96:2B:5A:6F:57:5B:47:AE:53:C6:E3:39:7E:1F:F6:72 Certificate issuer: /CN=488A458129866D0E7DBFF7668D82664F584F8541 Certificate serial: 04DA3EC1ED7CD3819FEDAAFA83E9E35BBCBDC342 Authority key identifier: 48:8A:45:81:29:86:6D:0E:7D:BF:F7:66:8D:82:66:4F:58:4F:85:41 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/488A458129866D0E7DBFF7668D82664F584F8541.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3130312e3132382e36342e302f32332d3233203d3e20313335343738.roa Signing time: Sun 03 May 2026 03:15:14 +0000 ROA not before: Sun 03 May 2026 03:10:14 +0000 ROA not after: Sun 02 May 2027 03:15:14 +0000 asID: 135478 IP address blocks: 101.128.64.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/488A458129866D0E7DBFF7668D82664F584F8541.crl rsync://rpki-rsync.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/488A458129866D0E7DBFF7668D82664F584F8541.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/488A458129866D0E7DBFF7668D82664F584F8541.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:da:3e:c1:ed:7c:d3:81:9f:ed:aa:fa:83:e9:e3:5b:bc:bd:c3:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=488A458129866D0E7DBFF7668D82664F584F8541 Validity Not Before: May 3 03:10:14 2026 GMT Not After : May 2 03:15:14 2027 GMT Subject: CN=592BE29B962B5A6F575B47AE53C6E3397E1FF672 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:20:49:66:d4:e6:6a:39:94:c3:40:77:e0:cf: 9e:37:44:d3:b5:53:f2:8e:c1:e6:b6:6e:03:90:db: db:8f:36:63:92:1c:65:8f:2f:88:aa:85:0a:54:f8: 9d:d5:da:79:bc:67:d5:4d:d5:09:b5:b1:c9:a5:3f: d2:dc:8e:9f:e9:14:c5:e4:e6:bf:a0:2c:d7:14:bf: e1:48:ec:2f:bc:23:2e:38:2c:0b:1b:2e:9c:a4:18: 14:90:03:49:0c:a6:52:17:b6:52:65:f5:e4:75:15: 95:d5:15:98:5c:24:0e:eb:ba:5a:ad:c8:53:75:06: 5d:97:da:57:c0:d7:fe:79:65:5a:4b:1a:0b:b6:0a: 4c:b4:98:b1:e2:fb:14:f3:de:7f:c2:78:f6:45:d6: 2a:69:3d:29:d6:08:40:6a:0b:64:83:de:18:00:0f: 00:b9:c3:17:66:84:03:db:eb:60:78:ed:3d:0b:d0: e0:9c:47:51:97:be:78:fc:ec:33:36:98:53:1f:7e: 1a:5f:e8:47:66:ba:e3:70:f3:98:8d:fa:d7:24:b8: ad:86:4c:25:78:75:6d:90:b2:16:5b:f7:02:92:d9: 7c:ea:59:cf:07:41:40:fb:84:70:45:2a:8c:f4:d3: 99:25:ec:e5:ff:88:e9:9c:a3:35:39:fb:31:4e:aa: e5:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:2B:E2:9B:96:2B:5A:6F:57:5B:47:AE:53:C6:E3:39:7E:1F:F6:72 X509v3 Authority Key Identifier: keyid:48:8A:45:81:29:86:6D:0E:7D:BF:F7:66:8D:82:66:4F:58:4F:85:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/488A458129866D0E7DBFF7668D82664F584F8541.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/488A458129866D0E7DBFF7668D82664F584F8541.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3130312e3132382e36342e302f32332d3233203d3e20313335343738.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 101.128.64.0/23 Signature Algorithm: sha256WithRSAEncryption 26:5a:8a:8a:f9:59:09:f3:a3:e3:e1:b8:b4:03:7b:d8:52:e5: 59:26:30:de:83:78:83:e6:f8:73:3a:b8:f9:1e:e7:85:61:2d: 66:ae:09:de:64:22:a9:64:8e:4e:7f:5c:c2:37:fb:00:cd:82: 5c:ce:28:76:35:03:a5:0b:cc:3c:09:a1:08:a3:f3:19:b6:d7: d7:8e:df:20:8e:60:22:af:8e:b2:8b:ac:e6:0c:0b:16:cc:5a: d8:e7:4b:73:33:1d:e5:75:ce:3a:7a:7d:bc:82:b9:c9:6c:e3: 9a:25:96:4c:9b:3f:d5:33:91:4c:71:2a:2f:9a:39:09:92:d3: 35:a4:f2:15:f6:6b:8c:22:14:b4:96:33:a1:95:0c:02:59:7c: 64:03:0d:3b:bd:91:1f:68:8b:bc:54:9e:c5:02:2f:32:06:a6: f2:80:dc:db:02:e0:ad:a7:8d:cc:39:27:e0:8d:60:0c:e4:31: b6:5e:2e:11:37:ff:e0:7d:73:f3:0d:2c:87:4e:16:50:10:4c: 8c:f3:22:d7:81:32:7a:6c:9f:95:5d:6a:c3:d7:a6:6d:29:2e: 9d:51:21:da:1a:49:d4:b5:dc:24:a1:9d:06:f6:1c:74:57:cd: db:da:79:bb:af:d1:a6:52:7b:4c:4a:47:18:20:06:13:0c:01: fd:54:0e:56 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUBNo+we1804Gf7ar6g+njW7y9w0IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDg4QTQ1ODEyOTg2NkQwRTdEQkZGNzY2OEQ4MjY2NEY1 ODRGODU0MTAeFw0yNjA1MDMwMzEwMTRaFw0yNzA1MDIwMzE1MTRaMDMxMTAvBgNV BAMTKDU5MkJFMjlCOTYyQjVBNkY1NzVCNDdBRTUzQzZFMzM5N0UxRkY2NzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSIElm1OZqOZTDQHfgz543RNO1 U/KOwea2bgOQ29uPNmOSHGWPL4iqhQpU+J3V2nm8Z9VN1Qm1scmlP9Lcjp/pFMXk 5r+gLNcUv+FI7C+8Iy44LAsbLpykGBSQA0kMplIXtlJl9eR1FZXVFZhcJA7rulqt yFN1Bl2X2lfA1/55ZVpLGgu2Cky0mLHi+xTz3n/CePZF1ippPSnWCEBqC2SD3hgA DwC5wxdmhAPb62B47T0L0OCcR1GXvnj87DM2mFMffhpf6EdmuuNw85iN+tckuK2G TCV4dW2QshZb9wKS2XzqWc8HQUD7hHBFKoz005kl7OX/iOmcozU5+zFOquWnAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUWSvim5YrWm9XW0euU8bjOX4f9nIwHwYDVR0j BBgwFoAUSIpFgSmGbQ59v/dmjYJmT1hPhUEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWE3MDI3MjYtYjJjNi00NmZjLTgyOTctMmRiZGVjNmQ2ZDVkLzAvNDg4QTQ1ODEy OTg2NkQwRTdEQkZGNzY2OEQ4MjY2NEY1ODRGODU0MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80ODhBNDU4MTI5ODY2RDBFN0RCRkY3NjY4RDgyNjY0RjU4NEY4 NTQxLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2VhNzAyNzI2LWIyYzYtNDZmYy04 Mjk3LTJkYmRlYzZkNmQ1ZC8wLzMxMzAzMTJlMzEzMjM4MmUzNjM0MmUzMDJmMzIz MzJkMzIzMzIwM2QzZTIwMzEzMzM1MzQzNzM4LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZYBAMA0GCSqG SIb3DQEBCwUAA4IBAQAmWoqK+VkJ86Pj4bi0A3vYUuVZJjDeg3iD5vhzOrj5HueF YS1mrgneZCKpZI5Of1zCN/sAzYJczih2NQOlC8w8CaEIo/MZttfXjt8gjmAir46y i6zmDAsWzFrY50tzMx3ldc46en28grnJbOOaJZZMmz/VM5FMcSovmjkJktM1pPIV 9muMIhS0ljOhlQwCWXxkAw07vZEfaIu8VJ7FAi8yBqbygNzbAuCtp43MOSfgjWAM 5DG2Xi4RN//gfXPzDSyHThZQEEyM8yLXgTJ6bJ+VXWrD16ZtKS6dUSHaGknUtdwk oZ0G9hx0V83b2nm7r9GmUntMSkcYIAYTDAH9VA5W -----END CERTIFICATE-----Generated at Wed May 13 02:15:38 2026 by rpki-client