$ rpki-client -vvf rpki-rsync.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3130312e35302e31362e302f32342d3234203d3e20313331313137.roa File: 3130312e35302e31362e302f32342d3234203d3e20313331313137.roa (raw, json) Hash identifier: oN+sl0Dox7b9G17/qNLZ11JOxDe7lTDnIlNYUqfGpaY= Subject key identifier: 33:9A:42:69:85:34:67:03:9B:F5:87:FF:1D:AB:5B:18:99:EB:17:C4 Certificate issuer: /CN=488A458129866D0E7DBFF7668D82664F584F8541 Certificate serial: 0C02107C043F52FF3D164120CC9441C5127EA105 Authority key identifier: 48:8A:45:81:29:86:6D:0E:7D:BF:F7:66:8D:82:66:4F:58:4F:85:41 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/488A458129866D0E7DBFF7668D82664F584F8541.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3130312e35302e31362e302f32342d3234203d3e20313331313137.roa Signing time: Sun 03 May 2026 03:15:12 +0000 ROA not before: Sun 03 May 2026 03:10:12 +0000 ROA not after: Sun 02 May 2027 03:15:12 +0000 asID: 131117 IP address blocks: 101.50.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/488A458129866D0E7DBFF7668D82664F584F8541.crl rsync://rpki-rsync.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/488A458129866D0E7DBFF7668D82664F584F8541.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/488A458129866D0E7DBFF7668D82664F584F8541.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 21:45:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:02:10:7c:04:3f:52:ff:3d:16:41:20:cc:94:41:c5:12:7e:a1:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=488A458129866D0E7DBFF7668D82664F584F8541 Validity Not Before: May 3 03:10:12 2026 GMT Not After : May 2 03:15:12 2027 GMT Subject: CN=339A4269853467039BF587FF1DAB5B1899EB17C4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:d8:ba:df:97:34:86:6b:2b:3b:76:d6:b8:76: c2:8f:be:bc:3a:44:09:39:ad:01:a4:fe:6f:24:76: fe:1d:81:5a:29:f6:a4:d4:b4:5b:a3:66:8b:80:d3: 63:db:54:2d:ab:4a:38:1b:f6:27:78:70:52:f9:b2: 80:0a:16:2d:5c:f7:97:fb:1c:5b:63:97:36:08:6d: fc:27:c5:5c:2a:b7:3f:e7:c5:34:c4:96:17:c4:ca: 90:e7:ba:78:79:2c:c7:75:5a:35:88:cc:ed:a3:ec: f4:be:bf:c5:6f:80:f9:6e:bd:e3:be:60:c9:cd:d1: 3f:76:a6:76:56:a4:46:fa:95:32:ed:1e:33:7b:f0: 44:a1:b1:34:ba:1e:b5:1e:42:d5:8e:66:bb:dd:18: 29:ac:f0:fc:f4:ee:d9:70:dd:89:7e:69:59:7d:cf: 69:c3:da:65:72:26:be:9b:d2:f9:2a:0c:de:ad:26: 19:bd:59:e2:92:64:b6:bd:3b:48:7f:7c:37:7d:cd: 63:8b:00:4f:4c:25:5a:26:79:8e:dd:0b:46:58:5b: 82:1c:84:6f:d0:36:4b:bc:96:06:a7:a6:f6:26:0a: ec:dc:ba:f3:70:16:50:15:e2:92:05:a6:02:60:da: a5:2e:92:9c:4b:21:8f:24:71:66:59:f8:6a:df:ef: af:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:9A:42:69:85:34:67:03:9B:F5:87:FF:1D:AB:5B:18:99:EB:17:C4 X509v3 Authority Key Identifier: keyid:48:8A:45:81:29:86:6D:0E:7D:BF:F7:66:8D:82:66:4F:58:4F:85:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/488A458129866D0E7DBFF7668D82664F584F8541.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/488A458129866D0E7DBFF7668D82664F584F8541.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3130312e35302e31362e302f32342d3234203d3e20313331313137.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 101.50.16.0/24 Signature Algorithm: sha256WithRSAEncryption 00:6b:df:63:85:a6:c8:e6:2a:db:ae:64:cd:86:dc:e9:4c:b0: 80:47:30:a6:cb:70:fd:ef:43:5f:d1:11:2a:12:1f:22:05:76: 21:af:51:e0:d5:34:3c:0d:bd:bf:fa:94:c5:83:ad:13:b5:cf: 5e:86:ce:bb:42:2d:67:49:ca:45:91:56:65:95:5b:ca:28:1a: 12:f2:9c:d9:65:59:02:04:62:d7:b8:c2:6e:7e:c0:89:73:04: 01:38:98:65:09:cf:e5:c4:19:22:dd:f8:5b:7e:64:2d:cc:80: 94:13:0f:3a:6d:2d:bf:fc:ba:1a:2b:c8:fd:05:a3:06:ef:85: f4:6e:00:56:2a:e4:50:5e:eb:00:4f:72:44:75:c6:dd:df:34: da:5d:19:18:25:3a:bb:5f:68:49:3c:87:cd:31:ca:74:58:1f: 4b:da:6d:7b:9b:e5:f7:2e:68:85:81:76:e6:c8:9f:69:72:99: 0e:5c:15:76:f8:f9:a8:77:3f:7f:21:0d:2a:ed:81:73:03:f0: d8:5f:a9:ea:78:7f:e2:fc:70:f6:37:86:71:c8:02:04:6d:65: 08:cd:a2:11:a5:e6:43:90:d5:c0:ba:bf:86:4b:74:3d:ad:3e: 9e:13:88:da:45:8d:2f:e3:ed:bd:2f:f0:44:51:f7:10:2d:e7: 5c:b2:ca:b1 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUDAIQfAQ/Uv89FkEgzJRBxRJ+oQUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDg4QTQ1ODEyOTg2NkQwRTdEQkZGNzY2OEQ4MjY2NEY1 ODRGODU0MTAeFw0yNjA1MDMwMzEwMTJaFw0yNzA1MDIwMzE1MTJaMDMxMTAvBgNV BAMTKDMzOUE0MjY5ODUzNDY3MDM5QkY1ODdGRjFEQUI1QjE4OTlFQjE3QzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM2LrflzSGays7dta4dsKPvrw6 RAk5rQGk/m8kdv4dgVop9qTUtFujZouA02PbVC2rSjgb9id4cFL5soAKFi1c95f7 HFtjlzYIbfwnxVwqtz/nxTTElhfEypDnunh5LMd1WjWIzO2j7PS+v8VvgPluveO+ YMnN0T92pnZWpEb6lTLtHjN78EShsTS6HrUeQtWOZrvdGCms8Pz07tlw3Yl+aVl9 z2nD2mVyJr6b0vkqDN6tJhm9WeKSZLa9O0h/fDd9zWOLAE9MJVomeY7dC0ZYW4Ic hG/QNku8lganpvYmCuzcuvNwFlAV4pIFpgJg2qUukpxLIY8kcWZZ+Grf769lAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUM5pCaYU0ZwOb9Yf/HatbGJnrF8QwHwYDVR0j BBgwFoAUSIpFgSmGbQ59v/dmjYJmT1hPhUEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWE3MDI3MjYtYjJjNi00NmZjLTgyOTctMmRiZGVjNmQ2ZDVkLzAvNDg4QTQ1ODEy OTg2NkQwRTdEQkZGNzY2OEQ4MjY2NEY1ODRGODU0MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80ODhBNDU4MTI5ODY2RDBFN0RCRkY3NjY4RDgyNjY0RjU4NEY4 NTQxLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2VhNzAyNzI2LWIyYzYtNDZmYy04 Mjk3LTJkYmRlYzZkNmQ1ZC8wLzMxMzAzMTJlMzUzMDJlMzEzNjJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMxMzMzMTMxMzEzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGUyEDANBgkqhkiG 9w0BAQsFAAOCAQEAAGvfY4WmyOYq265kzYbc6UywgEcwpstw/e9DX9ERKhIfIgV2 Ia9R4NU0PA29v/qUxYOtE7XPXobOu0ItZ0nKRZFWZZVbyigaEvKc2WVZAgRi17jC bn7AiXMEATiYZQnP5cQZIt34W35kLcyAlBMPOm0tv/y6GivI/QWjBu+F9G4AVirk UF7rAE9yRHXG3d802l0ZGCU6u19oSTyHzTHKdFgfS9pte5vl9y5ohYF25sifaXKZ DlwVdvj5qHc/fyENKu2BcwPw2F+p6nh/4vxw9jeGccgCBG1lCM2iEaXmQ5DVwLq/ hkt0Pa0+nhOI2kWNL+PtvS/wRFH3EC3nXLLKsQ== -----END CERTIFICATE-----Generated at Wed May 13 03:55:49 2026 by rpki-client