$ rpki-client -vvf rpki-rsync.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3130312e35302e32312e302f32342d3234203d3e20313338313338.roa File: 3130312e35302e32312e302f32342d3234203d3e20313338313338.roa (raw, json) Hash identifier: oYKv/Tz7NXAZVTkC/rNO1pYrMZcGeymiJs7AyGifqxg= Subject key identifier: 00:E3:8A:A6:06:53:43:89:53:E4:7C:E8:83:F5:A2:B4:A2:CB:6F:1C Certificate issuer: /CN=488A458129866D0E7DBFF7668D82664F584F8541 Certificate serial: 4B8F7E7816F73BA7BD5A63D8BCB123DEB6E4A5CA Authority key identifier: 48:8A:45:81:29:86:6D:0E:7D:BF:F7:66:8D:82:66:4F:58:4F:85:41 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/488A458129866D0E7DBFF7668D82664F584F8541.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3130312e35302e32312e302f32342d3234203d3e20313338313338.roa Signing time: Sun 03 May 2026 03:15:12 +0000 ROA not before: Sun 03 May 2026 03:10:12 +0000 ROA not after: Sun 02 May 2027 03:15:12 +0000 asID: 138138 IP address blocks: 101.50.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/488A458129866D0E7DBFF7668D82664F584F8541.crl rsync://rpki-rsync.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/488A458129866D0E7DBFF7668D82664F584F8541.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/488A458129866D0E7DBFF7668D82664F584F8541.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:8f:7e:78:16:f7:3b:a7:bd:5a:63:d8:bc:b1:23:de:b6:e4:a5:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=488A458129866D0E7DBFF7668D82664F584F8541 Validity Not Before: May 3 03:10:12 2026 GMT Not After : May 2 03:15:12 2027 GMT Subject: CN=00E38AA60653438953E47CE883F5A2B4A2CB6F1C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:42:1b:69:ad:eb:d8:7e:8f:9d:97:2a:bc:b1: a0:89:aa:d9:eb:07:13:cb:b1:34:e9:cb:a8:b3:32: 59:3b:f5:f3:4f:ee:54:1e:bb:88:b3:66:3b:d8:85: cd:0e:1b:dc:3b:dc:d9:a0:3e:4d:a6:15:e2:5f:ce: 39:e1:00:5e:16:b2:63:8d:12:18:0a:66:0d:6f:3d: d0:d9:83:1c:3c:24:34:ef:63:55:63:09:9f:69:ea: 8e:09:b1:de:d8:13:b2:66:ff:d6:65:a9:d0:23:d7: d8:a3:dc:ff:bd:c9:44:4d:3c:2c:89:c9:3e:c3:d3: 44:e3:1b:2b:a8:9c:7b:d4:7f:74:fa:f8:8c:5c:84: fb:2e:d7:31:7a:cd:fd:3b:a1:72:d4:81:23:fb:9e: 69:22:8a:52:7f:86:b8:ee:5b:6f:f2:bd:27:2d:82: 9f:82:fe:1a:36:ff:15:a2:68:f5:d3:5a:b9:c6:81: d3:dd:c1:6a:00:74:a7:ad:62:79:c4:f3:81:10:4a: fc:52:bb:10:20:15:cd:73:b0:5b:19:d7:bb:09:48: 36:2a:a4:fd:28:62:e3:e8:e6:c4:15:73:b5:77:05: a1:6c:e6:1c:73:91:1f:38:d3:bf:3a:9f:40:8d:54: 93:36:66:de:7f:a4:8c:93:a4:b1:44:49:83:11:68: fb:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:E3:8A:A6:06:53:43:89:53:E4:7C:E8:83:F5:A2:B4:A2:CB:6F:1C X509v3 Authority Key Identifier: keyid:48:8A:45:81:29:86:6D:0E:7D:BF:F7:66:8D:82:66:4F:58:4F:85:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/488A458129866D0E7DBFF7668D82664F584F8541.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/488A458129866D0E7DBFF7668D82664F584F8541.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3130312e35302e32312e302f32342d3234203d3e20313338313338.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 101.50.21.0/24 Signature Algorithm: sha256WithRSAEncryption b0:59:e4:a1:05:46:ea:13:63:4a:d5:88:5d:e4:9b:10:77:9b: 80:bf:43:c8:1c:38:a4:ce:42:07:f5:cb:0e:7a:18:1f:f9:b9: 08:f9:f0:e7:19:9c:43:21:15:c3:f5:7c:10:f8:45:35:e2:2c: b3:ea:f6:f6:04:fa:e6:13:56:65:52:9b:a7:41:2d:97:e3:6e: 5a:19:68:68:cc:4c:2a:b7:91:ab:cf:79:d8:3d:73:4b:43:65: a9:02:83:62:ae:ec:67:73:f3:94:67:f3:53:70:57:3c:1e:00: 72:00:05:2f:08:61:e2:16:92:70:db:a4:5c:cd:34:9c:44:a5: d4:70:66:59:76:c9:46:86:a2:af:4a:82:68:a3:79:6f:f3:d9: 3e:0b:fa:50:1b:23:27:90:d6:cc:1d:81:74:89:ff:25:03:84: eb:48:87:4e:ce:6f:e4:77:ca:90:40:37:bd:a4:ae:d1:2f:64: 69:86:a0:f0:0a:a2:b5:25:c7:14:19:2f:a3:3c:41:49:73:eb: be:12:80:e1:b4:b3:8d:18:20:f6:39:72:f2:bf:9e:ff:e0:21: e0:a5:56:af:97:90:c0:37:cf:8c:e0:1b:d3:22:36:04:7a:09: 73:b1:1c:f7:31:e2:54:39:5c:08:32:9d:67:ef:94:25:7e:ae: 04:d0:4a:11 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUS49+eBb3O6e9WmPYvLEj3rbkpcowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDg4QTQ1ODEyOTg2NkQwRTdEQkZGNzY2OEQ4MjY2NEY1 ODRGODU0MTAeFw0yNjA1MDMwMzEwMTJaFw0yNzA1MDIwMzE1MTJaMDMxMTAvBgNV BAMTKDAwRTM4QUE2MDY1MzQzODk1M0U0N0NFODgzRjVBMkI0QTJDQjZGMUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRQhtprevYfo+dlyq8saCJqtnr BxPLsTTpy6izMlk79fNP7lQeu4izZjvYhc0OG9w73NmgPk2mFeJfzjnhAF4WsmON EhgKZg1vPdDZgxw8JDTvY1VjCZ9p6o4Jsd7YE7Jm/9ZlqdAj19ij3P+9yURNPCyJ yT7D00TjGyuonHvUf3T6+IxchPsu1zF6zf07oXLUgSP7nmkiilJ/hrjuW2/yvSct gp+C/ho2/xWiaPXTWrnGgdPdwWoAdKetYnnE84EQSvxSuxAgFc1zsFsZ17sJSDYq pP0oYuPo5sQVc7V3BaFs5hxzkR840786n0CNVJM2Zt5/pIyTpLFESYMRaPtRAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUAOOKpgZTQ4lT5Hzog/WitKLLbxwwHwYDVR0j BBgwFoAUSIpFgSmGbQ59v/dmjYJmT1hPhUEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWE3MDI3MjYtYjJjNi00NmZjLTgyOTctMmRiZGVjNmQ2ZDVkLzAvNDg4QTQ1ODEy OTg2NkQwRTdEQkZGNzY2OEQ4MjY2NEY1ODRGODU0MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80ODhBNDU4MTI5ODY2RDBFN0RCRkY3NjY4RDgyNjY0RjU4NEY4 NTQxLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2VhNzAyNzI2LWIyYzYtNDZmYy04 Mjk3LTJkYmRlYzZkNmQ1ZC8wLzMxMzAzMTJlMzUzMDJlMzIzMTJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMxMzMzODMxMzMzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGUyFTANBgkqhkiG 9w0BAQsFAAOCAQEAsFnkoQVG6hNjStWIXeSbEHebgL9DyBw4pM5CB/XLDnoYH/m5 CPnw5xmcQyEVw/V8EPhFNeIss+r29gT65hNWZVKbp0Etl+NuWhloaMxMKreRq895 2D1zS0NlqQKDYq7sZ3PzlGfzU3BXPB4AcgAFLwhh4haScNukXM00nESl1HBmWXbJ Roair0qCaKN5b/PZPgv6UBsjJ5DWzB2BdIn/JQOE60iHTs5v5HfKkEA3vaSu0S9k aYag8AqitSXHFBkvozxBSXPrvhKA4bSzjRgg9jly8r+e/+Ah4KVWr5eQwDfPjOAb 0yI2BHoJc7Ec9zHiVDlcCDKdZ++UJX6uBNBKEQ== -----END CERTIFICATE-----Generated at Wed May 13 02:26:20 2026 by rpki-client