$ rpki-client -vvf rpki-rsync.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3131362e3230362e3233322e302f32322d3234203d3e2034373837.roa File: 3131362e3230362e3233322e302f32322d3234203d3e2034373837.roa (raw, json) Hash identifier: wbehxlGBOFZ5POFNUace0mPfuERAJPSvGNjotR14fdE= Subject key identifier: C3:CE:1D:BA:B2:5D:CE:B4:1F:22:A3:F0:16:FC:65:6B:F4:5B:1F:85 Certificate issuer: /CN=488A458129866D0E7DBFF7668D82664F584F8541 Certificate serial: 0BF9FF1A8FEAD52EF05B6E2D07160C39C75AF3D5 Authority key identifier: 48:8A:45:81:29:86:6D:0E:7D:BF:F7:66:8D:82:66:4F:58:4F:85:41 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/488A458129866D0E7DBFF7668D82664F584F8541.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3131362e3230362e3233322e302f32322d3234203d3e2034373837.roa Signing time: Sun 03 May 2026 03:15:11 +0000 ROA not before: Sun 03 May 2026 03:10:11 +0000 ROA not after: Sun 02 May 2027 03:15:11 +0000 asID: 4787 IP address blocks: 116.206.232.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/488A458129866D0E7DBFF7668D82664F584F8541.crl rsync://rpki-rsync.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/488A458129866D0E7DBFF7668D82664F584F8541.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/488A458129866D0E7DBFF7668D82664F584F8541.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:f9:ff:1a:8f:ea:d5:2e:f0:5b:6e:2d:07:16:0c:39:c7:5a:f3:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=488A458129866D0E7DBFF7668D82664F584F8541 Validity Not Before: May 3 03:10:11 2026 GMT Not After : May 2 03:15:11 2027 GMT Subject: CN=C3CE1DBAB25DCEB41F22A3F016FC656BF45B1F85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ef:1d:1e:c6:31:b0:bd:48:89:6d:84:93:cd: 07:02:8c:65:e2:08:ca:de:9b:97:a8:e5:cd:eb:1c: 91:b4:db:22:6c:11:fb:24:75:d1:99:b6:cb:10:ce: 31:d1:af:22:49:c8:d1:f5:b9:20:a1:d9:c4:13:08: 8c:bb:55:b1:cf:93:3e:a0:b3:ce:92:79:20:6d:48: a6:ac:5a:46:af:32:68:dc:ff:ff:d9:2a:a4:7c:85: c9:40:35:11:14:c5:ac:5d:7e:5a:cd:f5:68:f7:bc: b0:95:54:84:f9:a4:20:55:67:ee:16:98:86:2e:15: 75:b0:ba:7e:53:96:cc:3b:3a:ab:e4:a8:72:bb:9c: 3b:4c:74:4e:a1:9a:67:7a:5c:04:14:23:7b:d6:f0: b1:d5:04:c2:9c:61:1e:71:55:61:bc:2e:6d:c5:96: 39:04:95:45:11:23:0d:78:6e:af:a1:15:df:0e:b1: b7:b9:03:aa:09:01:64:30:4d:ef:09:62:59:3f:90: 0d:fe:70:f1:40:d9:7c:7d:7d:34:be:65:ac:44:4d: 36:03:2c:dc:7d:30:aa:45:1f:ec:73:6d:11:23:f7: a5:59:86:9a:16:c0:49:d6:39:95:e1:3e:b3:c7:64: 86:c8:f2:65:a2:b3:c1:54:36:f7:e8:c0:61:5d:81: 39:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:CE:1D:BA:B2:5D:CE:B4:1F:22:A3:F0:16:FC:65:6B:F4:5B:1F:85 X509v3 Authority Key Identifier: keyid:48:8A:45:81:29:86:6D:0E:7D:BF:F7:66:8D:82:66:4F:58:4F:85:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/488A458129866D0E7DBFF7668D82664F584F8541.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/488A458129866D0E7DBFF7668D82664F584F8541.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3131362e3230362e3233322e302f32322d3234203d3e2034373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 116.206.232.0/22 Signature Algorithm: sha256WithRSAEncryption 2c:33:1a:11:d7:c9:d6:cf:f8:4e:4f:07:5b:55:b2:e6:8d:8c: 2d:0d:85:b6:48:68:0d:e4:8f:67:7e:b9:8f:bc:aa:d7:a6:41: a9:8c:6a:75:62:d6:31:e8:d5:9f:9b:ee:89:63:1d:2b:d2:ee: 9f:a6:ff:c8:63:2d:e4:48:45:97:e4:0e:13:c9:44:15:39:28: b1:40:9e:c9:c0:24:5f:1a:f8:51:a8:47:76:16:02:95:51:08: 96:23:3a:12:dc:9c:cc:e1:16:59:21:dd:32:7a:d1:46:7a:34: 90:8a:fb:29:7e:e4:c2:ee:f3:e5:a1:0c:fa:03:6d:46:88:25: cd:67:73:d9:0b:f1:75:4b:b2:59:27:99:c0:3d:7e:7d:65:87: a6:cf:a5:ae:11:48:84:0a:71:f7:e4:9d:19:ad:3f:b7:ab:7f: be:a3:93:5e:5c:cf:d8:66:e9:bb:31:c7:5a:51:39:f8:4f:3a: 2f:ae:0a:1b:a0:53:c0:40:2d:bd:ff:b1:8c:1c:de:c6:59:32: bb:16:3c:f3:ab:65:e7:1f:d2:3c:98:4c:b6:89:db:af:e7:f5: 65:84:a3:3d:42:2c:46:fe:b4:a4:6d:3d:84:3a:61:97:c8:90: ad:bb:79:cd:8e:21:bc:56:68:78:d8:d7:3c:a2:25:13:9f:3d: 0d:00:c5:81 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUC/n/Go/q1S7wW24tBxYMOcda89UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDg4QTQ1ODEyOTg2NkQwRTdEQkZGNzY2OEQ4MjY2NEY1 ODRGODU0MTAeFw0yNjA1MDMwMzEwMTFaFw0yNzA1MDIwMzE1MTFaMDMxMTAvBgNV BAMTKEMzQ0UxREJBQjI1RENFQjQxRjIyQTNGMDE2RkM2NTZCRjQ1QjFGODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC67x0exjGwvUiJbYSTzQcCjGXi CMrem5eo5c3rHJG02yJsEfskddGZtssQzjHRryJJyNH1uSCh2cQTCIy7VbHPkz6g s86SeSBtSKasWkavMmjc///ZKqR8hclANREUxaxdflrN9Wj3vLCVVIT5pCBVZ+4W mIYuFXWwun5Tlsw7OqvkqHK7nDtMdE6hmmd6XAQUI3vW8LHVBMKcYR5xVWG8Lm3F ljkElUURIw14bq+hFd8Osbe5A6oJAWQwTe8JYlk/kA3+cPFA2Xx9fTS+ZaxETTYD LNx9MKpFH+xzbREj96VZhpoWwEnWOZXhPrPHZIbI8mWis8FUNvfowGFdgTmZAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUw84durJdzrQfIqPwFvxla/RbH4UwHwYDVR0j BBgwFoAUSIpFgSmGbQ59v/dmjYJmT1hPhUEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWE3MDI3MjYtYjJjNi00NmZjLTgyOTctMmRiZGVjNmQ2ZDVkLzAvNDg4QTQ1ODEy OTg2NkQwRTdEQkZGNzY2OEQ4MjY2NEY1ODRGODU0MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80ODhBNDU4MTI5ODY2RDBFN0RCRkY3NjY4RDgyNjY0RjU4NEY4 NTQxLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2VhNzAyNzI2LWIyYzYtNDZmYy04 Mjk3LTJkYmRlYzZkNmQ1ZC8wLzMxMzEzNjJlMzIzMDM2MmUzMjMzMzIyZTMwMmYz MjMyMmQzMjM0MjAzZDNlMjAzNDM3MzgzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAnTO6DANBgkqhkiG 9w0BAQsFAAOCAQEALDMaEdfJ1s/4Tk8HW1Wy5o2MLQ2FtkhoDeSPZ365j7yq16ZB qYxqdWLWMejVn5vuiWMdK9Lun6b/yGMt5EhFl+QOE8lEFTkosUCeycAkXxr4UahH dhYClVEIliM6EtyczOEWWSHdMnrRRno0kIr7KX7kwu7z5aEM+gNtRoglzWdz2Qvx dUuyWSeZwD1+fWWHps+lrhFIhApx9+SdGa0/t6t/vqOTXlzP2GbpuzHHWlE5+E86 L64KG6BTwEAtvf+xjBzexlkyuxY886tl5x/SPJhMtonbr+f1ZYSjPUIsRv60pG09 hDphl8iQrbt5zY4hvFZoeNjXPKIlE589DQDFgQ== -----END CERTIFICATE-----Generated at Wed May 13 02:15:14 2026 by rpki-client