$ rpki-client -vvf rpki-rsync.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3130312e3132382e36362e302f32332d3233203d3e20313335343738.roa File: 3130312e3132382e36362e302f32332d3233203d3e20313335343738.roa (raw, json) Hash identifier: KiBzwdkwkvBjgtXV0cM+MD3JNlJOyrjNhlEWrqegSSU= Subject key identifier: 87:D7:CA:8E:08:DA:B2:6B:22:D3:4B:26:44:80:A0:E9:95:6E:07:65 Certificate issuer: /CN=488A458129866D0E7DBFF7668D82664F584F8541 Certificate serial: 6408B808292EAA6FB91C010FEE9D3E7367955D3D Authority key identifier: 48:8A:45:81:29:86:6D:0E:7D:BF:F7:66:8D:82:66:4F:58:4F:85:41 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/488A458129866D0E7DBFF7668D82664F584F8541.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3130312e3132382e36362e302f32332d3233203d3e20313335343738.roa Signing time: Sun 03 May 2026 03:15:08 +0000 ROA not before: Sun 03 May 2026 03:10:08 +0000 ROA not after: Sun 02 May 2027 03:15:08 +0000 asID: 135478 IP address blocks: 101.128.66.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/488A458129866D0E7DBFF7668D82664F584F8541.crl rsync://rpki-rsync.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/488A458129866D0E7DBFF7668D82664F584F8541.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/488A458129866D0E7DBFF7668D82664F584F8541.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:08:b8:08:29:2e:aa:6f:b9:1c:01:0f:ee:9d:3e:73:67:95:5d:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=488A458129866D0E7DBFF7668D82664F584F8541 Validity Not Before: May 3 03:10:08 2026 GMT Not After : May 2 03:15:08 2027 GMT Subject: CN=87D7CA8E08DAB26B22D34B264480A0E9956E0765 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:aa:c4:a1:82:e3:fb:f7:d4:3f:8c:ab:6b:aa: bb:6e:07:e1:15:e7:79:e2:d7:cf:c2:54:4b:ae:ed: e7:9f:06:64:35:1c:9e:45:03:d5:79:90:b7:12:1d: 55:f0:eb:f7:19:f8:db:78:50:95:98:77:4d:af:e6: 57:52:a3:a5:f0:06:28:d7:ac:85:63:d1:9b:3f:fd: ec:6c:18:19:e7:c8:82:e3:a2:2c:d0:b4:25:a9:a4: 8e:20:31:4f:e3:6b:81:a9:dd:b3:50:0d:76:7f:dc: d9:ac:42:0a:2b:dd:7a:9f:9b:d9:15:98:47:f2:56: c1:04:f5:86:9c:5f:0f:42:61:09:13:35:5f:36:ae: ee:6d:03:f7:5f:ef:2f:6f:c8:c8:65:37:ab:1a:9c: 93:e0:bd:b9:41:e2:9b:3a:66:1e:81:70:54:37:67: ec:ab:8c:c5:84:72:f6:53:29:35:e3:ce:8e:44:5a: 0a:ab:a4:ee:3a:58:4d:09:ca:79:c0:44:e1:dd:f2: 5e:da:90:74:ed:ce:8d:ba:c4:1a:33:43:6b:f1:35: 92:88:ef:80:90:5d:95:fa:c7:4e:dd:b4:8a:42:76: dd:aa:e9:db:26:76:47:99:d6:a3:13:c9:dc:d9:57: 6d:db:22:fb:4a:53:a5:be:99:cc:2f:90:20:47:43: 77:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:D7:CA:8E:08:DA:B2:6B:22:D3:4B:26:44:80:A0:E9:95:6E:07:65 X509v3 Authority Key Identifier: keyid:48:8A:45:81:29:86:6D:0E:7D:BF:F7:66:8D:82:66:4F:58:4F:85:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/488A458129866D0E7DBFF7668D82664F584F8541.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/488A458129866D0E7DBFF7668D82664F584F8541.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3130312e3132382e36362e302f32332d3233203d3e20313335343738.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 101.128.66.0/23 Signature Algorithm: sha256WithRSAEncryption d9:22:67:70:7e:7e:15:b4:55:92:e9:84:9e:64:f3:2f:bf:49: c4:87:48:3e:c9:aa:ba:15:6a:92:d3:e6:77:f3:d0:7c:8d:ca: 36:df:fb:6f:89:81:24:b6:44:6d:25:88:7d:06:1b:48:19:a8: b2:90:0d:e0:94:c1:e7:28:b2:d2:28:35:1c:d2:92:80:0f:e4: d9:19:48:d4:0e:03:2c:ed:27:b4:82:72:dc:2b:79:c8:8f:12: 58:ec:91:2b:6e:f5:6b:82:7e:97:b4:a9:ca:bf:d2:91:63:67: 38:da:84:21:da:f5:73:0c:5b:4b:26:cb:b1:67:cc:9b:8a:fb: 10:b1:41:bc:3f:ca:78:56:8f:b2:6b:89:d8:d7:80:d6:7c:a9: a5:80:00:f2:0f:a9:37:a8:62:19:04:d2:e5:a5:b0:d3:bf:eb: ef:97:de:da:a3:ba:54:c3:d4:da:3c:66:bc:5c:dc:5a:64:36: 51:c6:87:77:43:80:83:61:f9:e8:c3:f4:68:b7:ad:62:5c:f1: 47:43:5a:4c:80:e6:8c:af:a2:88:86:bf:e0:6f:fc:19:97:3d: e6:7b:c0:87:59:9c:20:3b:65:fc:40:7d:f2:3a:7e:de:0b:cf: ca:78:50:4e:7d:c6:df:76:cd:9b:5b:8f:be:4a:8d:a0:63:e3: 84:e6:f8:ce -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUZAi4CCkuqm+5HAEP7p0+c2eVXT0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDg4QTQ1ODEyOTg2NkQwRTdEQkZGNzY2OEQ4MjY2NEY1 ODRGODU0MTAeFw0yNjA1MDMwMzEwMDhaFw0yNzA1MDIwMzE1MDhaMDMxMTAvBgNV BAMTKDg3RDdDQThFMDhEQUIyNkIyMkQzNEIyNjQ0ODBBMEU5OTU2RTA3NjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2qsShguP799Q/jKtrqrtuB+EV 53ni18/CVEuu7eefBmQ1HJ5FA9V5kLcSHVXw6/cZ+Nt4UJWYd02v5ldSo6XwBijX rIVj0Zs//exsGBnnyILjoizQtCWppI4gMU/ja4Gp3bNQDXZ/3NmsQgor3Xqfm9kV mEfyVsEE9YacXw9CYQkTNV82ru5tA/df7y9vyMhlN6sanJPgvblB4ps6Zh6BcFQ3 Z+yrjMWEcvZTKTXjzo5EWgqrpO46WE0JynnAROHd8l7akHTtzo26xBozQ2vxNZKI 74CQXZX6x07dtIpCdt2q6dsmdkeZ1qMTydzZV23bIvtKU6W+mcwvkCBHQ3eBAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUh9fKjgjasmsi00smRICg6ZVuB2UwHwYDVR0j BBgwFoAUSIpFgSmGbQ59v/dmjYJmT1hPhUEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWE3MDI3MjYtYjJjNi00NmZjLTgyOTctMmRiZGVjNmQ2ZDVkLzAvNDg4QTQ1ODEy OTg2NkQwRTdEQkZGNzY2OEQ4MjY2NEY1ODRGODU0MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80ODhBNDU4MTI5ODY2RDBFN0RCRkY3NjY4RDgyNjY0RjU4NEY4 NTQxLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2VhNzAyNzI2LWIyYzYtNDZmYy04 Mjk3LTJkYmRlYzZkNmQ1ZC8wLzMxMzAzMTJlMzEzMjM4MmUzNjM2MmUzMDJmMzIz MzJkMzIzMzIwM2QzZTIwMzEzMzM1MzQzNzM4LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZYBCMA0GCSqG SIb3DQEBCwUAA4IBAQDZImdwfn4VtFWS6YSeZPMvv0nEh0g+yaq6FWqS0+Z389B8 jco23/tviYEktkRtJYh9BhtIGaiykA3glMHnKLLSKDUc0pKAD+TZGUjUDgMs7Se0 gnLcK3nIjxJY7JErbvVrgn6XtKnKv9KRY2c42oQh2vVzDFtLJsuxZ8ybivsQsUG8 P8p4Vo+ya4nY14DWfKmlgADyD6k3qGIZBNLlpbDTv+vvl97ao7pUw9TaPGa8XNxa ZDZRxod3Q4CDYfnow/Rot61iXPFHQ1pMgOaMr6KIhr/gb/wZlz3me8CHWZwgO2X8 QH3yOn7eC8/KeFBOfcbfds2bW4++So2gY+OE5vjO -----END CERTIFICATE-----Generated at Wed May 13 02:47:17 2026 by rpki-client