$ rpki-client -vvf rpki-rsync.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/3131312e39322e3137302e302f32342d3234203d3e203233363731.roa File: 3131312e39322e3137302e302f32342d3234203d3e203233363731.roa (raw, json) Hash identifier: UwBVAcKHZ4f4hQBOzL0Sd4Fm5LmC4c+ionV2pYmo7/o= Subject key identifier: 1C:8E:F3:9B:11:33:2E:48:51:8D:6E:E6:AF:48:22:27:79:20:52:E4 Certificate issuer: /CN=A9BFA348A050E46482F4E00C605FF9961247FC64 Certificate serial: 3D4B8793CF9EC51D90E10E5988D510797BCCCB77 Authority key identifier: A9:BF:A3:48:A0:50:E4:64:82:F4:E0:0C:60:5F:F9:96:12:47:FC:64 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9BFA348A050E46482F4E00C605FF9961247FC64.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/3131312e39322e3137302e302f32342d3234203d3e203233363731.roa Signing time: Sun 03 May 2026 03:15:54 +0000 ROA not before: Sun 03 May 2026 03:10:54 +0000 ROA not after: Sun 02 May 2027 03:15:54 +0000 asID: 23671 IP address blocks: 111.92.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/A9BFA348A050E46482F4E00C605FF9961247FC64.crl rsync://rpki-rsync.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/A9BFA348A050E46482F4E00C605FF9961247FC64.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9BFA348A050E46482F4E00C605FF9961247FC64.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 16:58:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:4b:87:93:cf:9e:c5:1d:90:e1:0e:59:88:d5:10:79:7b:cc:cb:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9BFA348A050E46482F4E00C605FF9961247FC64 Validity Not Before: May 3 03:10:54 2026 GMT Not After : May 2 03:15:54 2027 GMT Subject: CN=1C8EF39B11332E48518D6EE6AF482227792052E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ba:24:c0:73:dd:d7:51:13:a7:a1:93:16:2a: 8e:f2:a6:5e:8d:3c:84:60:38:29:af:93:27:b0:14: 8f:1a:73:27:c9:74:3e:8f:1c:7a:cb:95:c5:a8:ac: 11:31:5c:94:e8:d0:cd:df:6b:aa:68:11:8a:bb:12: af:45:cf:4b:b6:ec:3a:79:d4:94:8c:c4:46:0c:85: 13:a0:5e:07:cd:fd:e7:3e:34:71:cb:c0:dc:a2:9c: 43:94:9a:68:04:81:68:55:4c:59:a8:cf:c4:eb:60: d4:b1:9a:96:ba:7f:ae:2b:e8:5b:ae:94:da:d9:04: 68:ea:20:4c:88:e0:61:c4:36:d0:dd:36:60:2e:f1: 88:85:2e:50:1f:29:8c:cf:5c:84:ad:ed:d3:8e:07: a0:99:4a:1e:2b:9c:e2:4c:2f:9b:2c:96:1b:a6:be: e8:39:5f:96:57:97:2d:7f:a7:7e:c6:86:47:16:9a: 2d:4e:4b:1d:8e:5c:9e:af:4b:23:ae:70:70:48:ab: fc:8a:e2:ed:bf:eb:a9:12:2a:46:c5:63:cb:37:2f: fc:d4:fc:0d:bd:90:0f:8d:dc:49:69:c0:bc:1c:f1: b5:77:7e:50:f7:ae:16:4c:6a:51:2d:59:23:14:6f: 9a:f9:25:ea:0d:a6:0c:bb:f8:85:79:b0:a4:1f:83: c5:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:8E:F3:9B:11:33:2E:48:51:8D:6E:E6:AF:48:22:27:79:20:52:E4 X509v3 Authority Key Identifier: keyid:A9:BF:A3:48:A0:50:E4:64:82:F4:E0:0C:60:5F:F9:96:12:47:FC:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/A9BFA348A050E46482F4E00C605FF9961247FC64.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9BFA348A050E46482F4E00C605FF9961247FC64.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/3131312e39322e3137302e302f32342d3234203d3e203233363731.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 111.92.170.0/24 Signature Algorithm: sha256WithRSAEncryption 53:3a:fd:b3:f4:d3:f7:fe:c6:ec:35:e4:e8:e3:07:4c:1c:a2: 76:16:0e:1c:96:73:f9:cc:61:c0:d2:e1:33:e7:67:a7:91:09: c1:a4:b6:a9:36:84:54:ed:34:62:be:58:6f:d9:78:55:a3:f3: 90:08:2f:f6:6b:9f:e6:ad:5d:01:d9:a7:0a:ce:1c:62:46:34: 5b:c1:d8:d4:74:17:4c:55:60:db:10:c0:46:95:eb:e7:48:f6: 95:a6:ec:32:e0:7e:e1:bb:be:d6:17:36:6e:46:3b:5a:c4:6f: cb:ef:2c:c3:7f:19:34:77:61:79:f1:fd:2f:02:78:38:51:ef: ec:84:e6:aa:c5:12:8d:44:ea:89:83:54:23:9b:58:0b:cc:14: d4:e1:b5:b2:51:57:a4:ca:5e:9d:cb:03:c7:14:c9:a1:6b:a0: 78:db:23:8f:41:83:9b:3f:6d:28:3b:63:7f:d8:02:76:2d:f6: dc:4c:f1:e1:ba:82:c3:c9:04:c0:0e:32:b6:10:46:36:88:a6: bf:0d:ae:66:0e:da:96:87:c0:21:52:86:5e:84:a3:aa:ef:cb: 6f:87:40:e0:a1:d9:91:67:1a:e7:88:98:fd:99:dc:bd:53:45: 60:45:b6:a5:55:36:c4:45:48:44:35:70:24:3f:a9:40:e6:be: 7b:45:84:d3 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUPUuHk8+exR2Q4Q5ZiNUQeXvMy3cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTlCRkEzNDhBMDUwRTQ2NDgyRjRFMDBDNjA1RkY5OTYx MjQ3RkM2NDAeFw0yNjA1MDMwMzEwNTRaFw0yNzA1MDIwMzE1NTRaMDMxMTAvBgNV BAMTKDFDOEVGMzlCMTEzMzJFNDg1MThENkVFNkFGNDgyMjI3NzkyMDUyRTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCquiTAc93XUROnoZMWKo7ypl6N PIRgOCmvkyewFI8acyfJdD6PHHrLlcWorBExXJTo0M3fa6poEYq7Eq9Fz0u27Dp5 1JSMxEYMhROgXgfN/ec+NHHLwNyinEOUmmgEgWhVTFmoz8TrYNSxmpa6f64r6Fuu lNrZBGjqIEyI4GHENtDdNmAu8YiFLlAfKYzPXISt7dOOB6CZSh4rnOJML5sslhum vug5X5ZXly1/p37GhkcWmi1OSx2OXJ6vSyOucHBIq/yK4u2/66kSKkbFY8s3L/zU /A29kA+N3ElpwLwc8bV3flD3rhZMalEtWSMUb5r5JeoNpgy7+IV5sKQfg8XPAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUHI7zmxEzLkhRjW7mr0giJ3kgUuQwHwYDVR0j BBgwFoAUqb+jSKBQ5GSC9OAMYF/5lhJH/GQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWQ5YmE5NTMtODQ4OS00NTBlLWJiZGYtNzY0NTcxZmJhY2U3LzAvQTlCRkEzNDhB MDUwRTQ2NDgyRjRFMDBDNjA1RkY5OTYxMjQ3RkM2NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BOUJGQTM0OEEwNTBFNDY0ODJGNEUwMEM2MDVGRjk5NjEyNDdG QzY0LmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2VkOWJhOTUzLTg0ODktNDUwZS1i YmRmLTc2NDU3MWZiYWNlNy8wLzMxMzEzMTJlMzkzMjJlMzEzNzMwMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzIzMzM2MzczMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAG9cqjANBgkqhkiG 9w0BAQsFAAOCAQEAUzr9s/TT9/7G7DXk6OMHTByidhYOHJZz+cxhwNLhM+dnp5EJ waS2qTaEVO00Yr5Yb9l4VaPzkAgv9muf5q1dAdmnCs4cYkY0W8HY1HQXTFVg2xDA RpXr50j2labsMuB+4bu+1hc2bkY7WsRvy+8sw38ZNHdhefH9LwJ4OFHv7ITmqsUS jUTqiYNUI5tYC8wU1OG1slFXpMpencsDxxTJoWugeNsjj0GDmz9tKDtjf9gCdi32 3Ezx4bqCw8kEwA4ythBGNoimvw2uZg7alofAIVKGXoSjqu/Lb4dA4KHZkWca54iY /ZncvVNFYEW2pVU2xEVIRDVwJD+pQOa+e0WE0w== -----END CERTIFICATE-----Generated at Wed May 13 05:47:51 2026 by rpki-client