$ rpki-client -vvf rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3131352e3137382e3134302e302f32322d3234203d3e2039373934.roa File: 3131352e3137382e3134302e302f32322d3234203d3e2039373934.roa (raw, json) Hash identifier: q9fwtYDKBUzfbk4hQFrwNXn+e1EKU4u2/9zLD8o/MtU= Subject key identifier: 1E:DA:9E:5D:A9:9A:3D:14:C8:70:27:E2:C3:02:FE:DC:CE:53:CB:92 Certificate issuer: /CN=2CB08023BB428AE4D02727C96B069C5F59CEE8A3 Certificate serial: 3FFEC82B96AA0EE1A4D23863C0D094CBD60EFC20 Authority key identifier: 2C:B0:80:23:BB:42:8A:E4:D0:27:27:C9:6B:06:9C:5F:59:CE:E8:A3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3131352e3137382e3134302e302f32322d3234203d3e2039373934.roa Signing time: Sun 03 May 2026 03:17:23 +0000 ROA not before: Sun 03 May 2026 03:12:23 +0000 ROA not after: Sun 02 May 2027 03:17:23 +0000 asID: 9794 IP address blocks: 115.178.140.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.crl rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 00:40:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:fe:c8:2b:96:aa:0e:e1:a4:d2:38:63:c0:d0:94:cb:d6:0e:fc:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2CB08023BB428AE4D02727C96B069C5F59CEE8A3 Validity Not Before: May 3 03:12:23 2026 GMT Not After : May 2 03:17:23 2027 GMT Subject: CN=1EDA9E5DA99A3D14C87027E2C302FEDCCE53CB92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:0f:2e:71:5b:94:50:10:80:b6:52:c2:95:ff: 28:ae:d9:cc:b1:2e:cd:bb:56:9e:f8:5a:3f:4d:45: d8:37:ea:2a:cd:39:38:dd:29:2d:15:5b:95:74:17: 79:68:9b:cb:0c:c9:d9:31:0d:87:06:51:85:c1:2f: f9:11:80:30:fb:f9:95:de:25:6c:33:3f:37:76:ce: 46:d1:dc:63:bc:50:76:04:f9:67:6c:34:e1:f1:7b: 57:f7:56:cb:59:28:78:1f:64:fa:46:fb:5f:25:43: 70:16:f1:41:2a:c7:34:f3:b7:1e:2a:40:67:0a:7b: d4:40:12:0d:47:bf:df:77:fd:9b:cc:bc:5c:fd:7b: 93:da:58:35:26:65:0a:bf:a5:ba:38:0a:a5:6f:7c: 62:0e:bf:ef:8f:b5:dc:86:15:92:8b:f8:ff:de:2f: 0b:fa:ce:7f:ee:fd:69:0a:df:a3:89:b2:bc:d5:71: 21:aa:b2:4a:82:91:b0:ac:76:30:85:29:44:44:e3: 25:f8:e2:ce:fd:8a:00:f8:ad:2a:58:6c:de:72:9b: 49:39:2e:09:89:1f:53:65:48:23:8b:e2:16:65:2d: c1:1b:8f:ee:d6:9a:1d:f5:ee:53:a6:32:c9:a2:a4: 68:ef:ef:62:ff:01:11:43:04:34:a8:4b:0f:6b:db: ab:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:DA:9E:5D:A9:9A:3D:14:C8:70:27:E2:C3:02:FE:DC:CE:53:CB:92 X509v3 Authority Key Identifier: keyid:2C:B0:80:23:BB:42:8A:E4:D0:27:27:C9:6B:06:9C:5F:59:CE:E8:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3131352e3137382e3134302e302f32322d3234203d3e2039373934.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 115.178.140.0/22 Signature Algorithm: sha256WithRSAEncryption 3e:0a:f2:34:61:05:95:7c:7a:3d:1b:10:d4:4c:98:f7:a6:39: e3:4e:4f:6d:40:31:e8:fa:04:e5:92:a1:71:20:09:f8:bd:89: 95:dd:23:7f:65:94:06:6d:c9:37:4d:e2:39:2b:2f:c7:1d:38: ac:b8:86:be:82:3c:72:e1:33:19:49:e6:3f:21:9a:79:ce:1c: a0:10:ae:59:83:82:d2:e6:26:ce:7f:f5:1b:65:c0:41:f1:f6: be:67:99:85:7a:e9:96:f2:e8:4d:ae:19:7f:10:b2:b6:46:f4: 60:80:04:0a:c5:2e:ae:e2:d3:32:bd:a7:5d:f7:bc:15:32:12: 58:ee:75:0e:9d:c6:94:08:35:5c:e0:8d:42:57:38:c8:41:81: 58:1f:7c:15:80:d6:c6:45:7c:eb:20:96:53:fc:b8:06:a5:59: 72:88:19:58:44:c2:ce:f4:eb:08:a8:4a:59:4d:95:1f:97:4b: a4:25:db:2f:64:a8:c8:da:4c:b2:63:69:14:e4:ef:11:17:00: 42:b8:c0:53:15:2a:6e:6e:08:8f:ed:9d:f6:0b:a1:ae:9d:4f: 12:ce:09:f6:36:33:28:f7:6d:7e:91:a0:b6:b7:bd:92:7b:56: b8:23:65:76:e0:20:63:b0:71:9c:67:3e:ce:fe:fe:0f:27:ca: b3:ce:10:dd -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUP/7IK5aqDuGk0jhjwNCUy9YO/CAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkNCMDgwMjNCQjQyOEFFNEQwMjcyN0M5NkIwNjlDNUY1 OUNFRThBMzAeFw0yNjA1MDMwMzEyMjNaFw0yNzA1MDIwMzE3MjNaMDMxMTAvBgNV BAMTKDFFREE5RTVEQTk5QTNEMTRDODcwMjdFMkMzMDJGRURDQ0U1M0NCOTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2Dy5xW5RQEIC2UsKV/yiu2cyx Ls27Vp74Wj9NRdg36irNOTjdKS0VW5V0F3lom8sMydkxDYcGUYXBL/kRgDD7+ZXe JWwzPzd2zkbR3GO8UHYE+WdsNOHxe1f3VstZKHgfZPpG+18lQ3AW8UEqxzTztx4q QGcKe9RAEg1Hv993/ZvMvFz9e5PaWDUmZQq/pbo4CqVvfGIOv++PtdyGFZKL+P/e Lwv6zn/u/WkK36OJsrzVcSGqskqCkbCsdjCFKURE4yX44s79igD4rSpYbN5ym0k5 LgmJH1NlSCOL4hZlLcEbj+7Wmh317lOmMsmipGjv72L/ARFDBDSoSw9r26uhAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUHtqeXamaPRTIcCfiwwL+3M5Ty5IwHwYDVR0j BBgwFoAULLCAI7tCiuTQJyfJawacX1nO6KMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjM0ZWNjNDAtNmI4NC00OWU4LWI2MGItNmU5OTA0MTI4Y2E4LzAvMkNCMDgwMjNC QjQyOEFFNEQwMjcyN0M5NkIwNjlDNUY1OUNFRThBMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yQ0IwODAyM0JCNDI4QUU0RDAyNzI3Qzk2QjA2OUM1RjU5Q0VF OEEzLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2YzNGVjYzQwLTZiODQtNDllOC1i NjBiLTZlOTkwNDEyOGNhOC8wLzMxMzEzNTJlMzEzNzM4MmUzMTM0MzAyZTMwMmYz MjMyMmQzMjM0MjAzZDNlMjAzOTM3MzkzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAnOyjDANBgkqhkiG 9w0BAQsFAAOCAQEAPgryNGEFlXx6PRsQ1EyY96Y5405PbUAx6PoE5ZKhcSAJ+L2J ld0jf2WUBm3JN03iOSsvxx04rLiGvoI8cuEzGUnmPyGaec4coBCuWYOC0uYmzn/1 G2XAQfH2vmeZhXrplvLoTa4ZfxCytkb0YIAECsUuruLTMr2nXfe8FTISWO51Dp3G lAg1XOCNQlc4yEGBWB98FYDWxkV86yCWU/y4BqVZcogZWETCzvTrCKhKWU2VH5dL pCXbL2SoyNpMsmNpFOTvERcAQrjAUxUqbm4Ij+2d9guhrp1PEs4J9jYzKPdtfpGg tre9kntWuCNlduAgY7BxnGc+zv7+DyfKs84Q3Q== -----END CERTIFICATE-----Generated at Wed May 13 05:55:21 2026 by rpki-client