$ rpki-client -vvf rpki-rsync.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3130312e3132382e36342e302f32332d3234203d3e20313335343738.roa File: 3130312e3132382e36342e302f32332d3234203d3e20313335343738.roa (raw, json) Hash identifier: cNsXz0HEcLxttb5xDjo+VflY5ICv7Vrpe3SghZW7FwU= Subject key identifier: FE:40:5A:1E:4C:F5:2A:1E:66:60:C8:2A:B4:27:6A:C0:AC:11:73:E1 Certificate issuer: /CN=488A458129866D0E7DBFF7668D82664F584F8541 Certificate serial: 35590519D2D492FB54853B52BFBCDCE1C682683B Authority key identifier: 48:8A:45:81:29:86:6D:0E:7D:BF:F7:66:8D:82:66:4F:58:4F:85:41 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/488A458129866D0E7DBFF7668D82664F584F8541.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3130312e3132382e36342e302f32332d3234203d3e20313335343738.roa Signing time: Sun 03 May 2026 03:15:13 +0000 ROA not before: Sun 03 May 2026 03:10:13 +0000 ROA not after: Sun 02 May 2027 03:15:13 +0000 asID: 135478 IP address blocks: 101.128.64.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/488A458129866D0E7DBFF7668D82664F584F8541.crl rsync://rpki-rsync.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/488A458129866D0E7DBFF7668D82664F584F8541.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/488A458129866D0E7DBFF7668D82664F584F8541.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 21:45:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:59:05:19:d2:d4:92:fb:54:85:3b:52:bf:bc:dc:e1:c6:82:68:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=488A458129866D0E7DBFF7668D82664F584F8541 Validity Not Before: May 3 03:10:13 2026 GMT Not After : May 2 03:15:13 2027 GMT Subject: CN=FE405A1E4CF52A1E6660C82AB4276AC0AC1173E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:74:3e:91:de:79:92:b3:99:ae:a7:ee:6d:77: ef:16:c3:e1:7e:11:77:42:0b:4d:58:e9:e0:46:8b: 10:26:49:d0:50:a8:85:31:e2:8f:0f:8d:06:da:2c: ec:a9:42:22:4a:8e:7e:41:cc:21:8a:b5:22:3d:cb: a3:c3:dc:33:f7:a1:4b:0e:36:d6:65:52:22:79:66: 3f:0d:4f:6b:44:5d:75:f4:67:c9:2b:36:ac:41:12: 10:c0:7a:0e:a2:8d:6d:fa:4f:c4:81:a9:29:a1:13: b0:17:db:0e:0e:59:91:8c:bb:9b:9e:7d:bd:d0:eb: 3c:bf:90:42:cc:ce:38:d9:12:6f:01:56:e8:38:89: c7:8f:fe:d3:8e:87:56:92:1b:85:5e:81:67:b7:f0: b2:1a:d5:c0:60:3f:8b:0c:d3:6c:f8:3b:b6:91:bf: 79:43:b0:46:27:3e:2a:a3:69:ee:c0:85:45:3d:4e: 49:70:2c:47:27:45:e9:89:43:64:c4:ef:84:8c:79: a8:dc:33:ff:80:99:16:8a:cf:65:47:b4:ca:fb:d9: a0:ba:18:6e:72:d4:fe:0b:ab:a0:1e:ee:38:8b:9c: 71:47:96:02:ce:88:b4:8f:49:97:9e:45:7d:3d:f2: da:79:68:1a:ee:9e:47:2b:33:b1:3f:4d:59:80:be: bc:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:40:5A:1E:4C:F5:2A:1E:66:60:C8:2A:B4:27:6A:C0:AC:11:73:E1 X509v3 Authority Key Identifier: keyid:48:8A:45:81:29:86:6D:0E:7D:BF:F7:66:8D:82:66:4F:58:4F:85:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/488A458129866D0E7DBFF7668D82664F584F8541.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/488A458129866D0E7DBFF7668D82664F584F8541.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3130312e3132382e36342e302f32332d3234203d3e20313335343738.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 101.128.64.0/23 Signature Algorithm: sha256WithRSAEncryption 58:d2:5e:51:0c:50:e9:20:d0:02:aa:1d:fa:b8:41:9a:32:58: 67:59:b1:08:a6:fa:f5:71:1f:b2:0e:ba:92:d1:ad:e5:df:f1: 01:d7:54:9e:ee:91:94:ba:0d:8d:8c:e4:81:b0:0f:f0:02:f0: 0a:d8:a3:2d:47:e7:60:f1:03:59:21:5d:b7:c4:98:f7:b2:3e: ee:aa:bf:e6:52:dd:91:18:46:4c:ba:ee:09:87:19:e2:a8:d8: 00:ac:15:2f:89:87:f0:1c:2b:ee:6e:cc:8e:79:01:76:ae:03: 51:6d:fe:df:d7:37:1d:c4:4f:c7:b7:3f:fc:15:1c:1e:26:40: 30:3c:6b:b9:38:c3:e2:ef:da:5c:15:c6:88:a0:9a:f0:90:29: 1a:8f:16:72:57:a9:09:28:f9:38:c4:81:68:50:e5:4f:91:b3: be:20:23:9f:f3:5e:83:26:b4:7f:5f:ac:01:98:9a:6c:af:5d: 31:0d:55:d8:fc:7a:9d:b5:24:c3:b3:9c:22:27:c9:9c:ee:fc: 83:cd:0c:07:d3:a8:73:5c:f7:38:ff:d0:86:51:56:86:48:0b: fb:78:c1:26:1d:71:07:42:e1:92:de:d8:37:d3:89:f4:a2:42: f0:4e:25:2a:20:d1:33:04:90:f0:79:41:e5:5a:97:89:bf:9e: f8:45:82:74 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUNVkFGdLUkvtUhTtSv7zc4caCaDswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDg4QTQ1ODEyOTg2NkQwRTdEQkZGNzY2OEQ4MjY2NEY1 ODRGODU0MTAeFw0yNjA1MDMwMzEwMTNaFw0yNzA1MDIwMzE1MTNaMDMxMTAvBgNV BAMTKEZFNDA1QTFFNENGNTJBMUU2NjYwQzgyQUI0Mjc2QUMwQUMxMTczRTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDudD6R3nmSs5mup+5td+8Ww+F+ EXdCC01Y6eBGixAmSdBQqIUx4o8PjQbaLOypQiJKjn5BzCGKtSI9y6PD3DP3oUsO NtZlUiJ5Zj8NT2tEXXX0Z8krNqxBEhDAeg6ijW36T8SBqSmhE7AX2w4OWZGMu5ue fb3Q6zy/kELMzjjZEm8BVug4iceP/tOOh1aSG4VegWe38LIa1cBgP4sM02z4O7aR v3lDsEYnPiqjae7AhUU9TklwLEcnRemJQ2TE74SMeajcM/+AmRaKz2VHtMr72aC6 GG5y1P4Lq6Ae7jiLnHFHlgLOiLSPSZeeRX098tp5aBrunkcrM7E/TVmAvrwXAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU/kBaHkz1Kh5mYMgqtCdqwKwRc+EwHwYDVR0j BBgwFoAUSIpFgSmGbQ59v/dmjYJmT1hPhUEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWE3MDI3MjYtYjJjNi00NmZjLTgyOTctMmRiZGVjNmQ2ZDVkLzAvNDg4QTQ1ODEy OTg2NkQwRTdEQkZGNzY2OEQ4MjY2NEY1ODRGODU0MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80ODhBNDU4MTI5ODY2RDBFN0RCRkY3NjY4RDgyNjY0RjU4NEY4 NTQxLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2VhNzAyNzI2LWIyYzYtNDZmYy04 Mjk3LTJkYmRlYzZkNmQ1ZC8wLzMxMzAzMTJlMzEzMjM4MmUzNjM0MmUzMDJmMzIz MzJkMzIzNDIwM2QzZTIwMzEzMzM1MzQzNzM4LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZYBAMA0GCSqG SIb3DQEBCwUAA4IBAQBY0l5RDFDpINACqh36uEGaMlhnWbEIpvr1cR+yDrqS0a3l 3/EB11Se7pGUug2NjOSBsA/wAvAK2KMtR+dg8QNZIV23xJj3sj7uqr/mUt2RGEZM uu4JhxniqNgArBUviYfwHCvubsyOeQF2rgNRbf7f1zcdxE/Htz/8FRweJkAwPGu5 OMPi79pcFcaIoJrwkCkajxZyV6kJKPk4xIFoUOVPkbO+ICOf816DJrR/X6wBmJps r10xDVXY/HqdtSTDs5wiJ8mc7vyDzQwH06hzXPc4/9CGUVaGSAv7eMEmHXEHQuGS 3tg304n0okLwTiUqINEzBJDweUHlWpeJv574RYJ0 -----END CERTIFICATE-----Generated at Wed May 13 03:56:15 2026 by rpki-client