$ rpki-client -vvf rpki-rsync.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/3131342e33302e38382e302f32312d3234203d3e203338313635.roa File: 3131342e33302e38382e302f32312d3234203d3e203338313635.roa (raw, json) Hash identifier: PbHEb+XaCGRxOonc9+PyBhvmLickz9HVhiTfl0wL8wY= Subject key identifier: 85:A3:B6:16:0C:AA:27:7A:5A:87:75:FA:2C:16:4C:43:EA:9D:7C:9D Certificate issuer: /CN=A9DFB6024D05A37CA0C756EC747E898140885BC9 Certificate serial: 61B0CC364318018F2445D8475119E524211C230E Authority key identifier: A9:DF:B6:02:4D:05:A3:7C:A0:C7:56:EC:74:7E:89:81:40:88:5B:C9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9DFB6024D05A37CA0C756EC747E898140885BC9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/3131342e33302e38382e302f32312d3234203d3e203338313635.roa Signing time: Sun 03 May 2026 03:18:11 +0000 ROA not before: Sun 03 May 2026 03:13:11 +0000 ROA not after: Sun 02 May 2027 03:18:11 +0000 asID: 38165 IP address blocks: 114.30.88.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/A9DFB6024D05A37CA0C756EC747E898140885BC9.crl rsync://rpki-rsync.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/A9DFB6024D05A37CA0C756EC747E898140885BC9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9DFB6024D05A37CA0C756EC747E898140885BC9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 01:58:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:b0:cc:36:43:18:01:8f:24:45:d8:47:51:19:e5:24:21:1c:23:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9DFB6024D05A37CA0C756EC747E898140885BC9 Validity Not Before: May 3 03:13:11 2026 GMT Not After : May 2 03:18:11 2027 GMT Subject: CN=85A3B6160CAA277A5A8775FA2C164C43EA9D7C9D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:19:67:97:14:84:11:fb:21:34:a1:dd:ad:d9: 11:5b:66:08:c0:88:49:8d:8f:6b:01:46:31:c1:4a: fa:04:08:cf:6a:2a:c0:9f:e3:ec:51:0e:3a:fc:d8: ea:c0:8f:73:1a:f0:87:2e:20:17:ba:6a:63:ec:5c: 74:fe:ab:f0:14:d2:55:6a:39:ad:9b:3e:b8:67:db: cc:e1:e8:50:f2:3a:ea:2d:36:42:a3:e2:4c:0a:2a: 7f:6f:ff:09:2e:39:b4:c5:66:bf:06:7f:95:0f:c1: 9c:c0:37:a3:b2:48:d9:14:b7:bb:1d:e7:7c:30:90: af:db:c1:b8:35:81:a4:a0:01:7e:e7:66:74:8b:0a: 61:60:7a:b9:18:9c:c2:99:47:1e:09:62:ad:59:9f: 50:42:8d:c1:ff:df:43:64:e3:4b:d8:1d:81:ea:8f: 97:e2:5d:8e:0d:13:19:85:b5:4f:45:3c:72:68:19: 59:fc:d9:7f:86:2d:44:58:80:d1:29:d0:b1:35:4b: f1:f7:cb:01:80:97:60:40:0d:42:e5:12:5d:06:5c: d6:5d:38:42:3f:3d:91:50:6d:ce:bb:b3:3f:6d:4d: 83:87:ec:7b:05:ab:04:00:37:01:a3:83:04:b9:40: d6:f2:97:17:fb:de:9a:33:e6:07:79:25:f2:9c:5f: bc:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:A3:B6:16:0C:AA:27:7A:5A:87:75:FA:2C:16:4C:43:EA:9D:7C:9D X509v3 Authority Key Identifier: keyid:A9:DF:B6:02:4D:05:A3:7C:A0:C7:56:EC:74:7E:89:81:40:88:5B:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/A9DFB6024D05A37CA0C756EC747E898140885BC9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9DFB6024D05A37CA0C756EC747E898140885BC9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/3131342e33302e38382e302f32312d3234203d3e203338313635.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 114.30.88.0/21 Signature Algorithm: sha256WithRSAEncryption 8d:9b:78:e7:06:b4:c9:2d:65:4a:2d:2a:e1:c6:a4:d7:3c:36: 1e:24:6b:cf:e0:27:0e:a1:cf:55:ea:d1:76:a8:02:3f:25:11: 26:9d:af:25:03:c3:6d:4d:bb:08:12:75:f9:28:64:88:f9:41: 39:4b:15:9f:97:8a:dc:d8:04:53:07:ad:02:7b:66:41:b1:d7: 1a:27:b3:3b:17:c9:1c:97:91:5d:cb:a5:f8:d7:97:c3:3e:75: 87:c3:b4:2e:07:f5:bb:2a:4e:68:a0:d5:2f:f6:2e:23:aa:f1: dd:03:6d:02:23:91:ac:ba:9d:fe:c8:a1:be:6f:aa:ad:b5:7b: e2:31:a9:88:9c:36:dd:78:05:ce:c5:aa:19:ba:c0:18:b4:4d: 2e:8a:f3:42:26:2d:ec:86:ef:e0:12:e6:32:32:56:7a:87:3a: 08:06:eb:75:04:a0:cd:71:af:52:23:ac:ff:2b:b5:f6:f9:35: 65:e7:de:3f:d9:3a:ae:bf:f0:d0:c1:e9:23:ca:dc:98:52:38: a1:ca:e3:f8:2c:49:11:51:2b:ed:07:9b:41:9c:c8:1c:ec:dd: cc:ea:ec:1a:02:a3:2f:e0:f3:44:6c:48:5d:00:9a:50:96:dd: 6b:de:a5:81:28:a8:b7:f3:4b:0f:90:68:05:42:99:51:d1:7b: 5a:50:20:2b -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUYbDMNkMYAY8kRdhHURnlJCEcIw4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTlERkI2MDI0RDA1QTM3Q0EwQzc1NkVDNzQ3RTg5ODE0 MDg4NUJDOTAeFw0yNjA1MDMwMzEzMTFaFw0yNzA1MDIwMzE4MTFaMDMxMTAvBgNV BAMTKDg1QTNCNjE2MENBQTI3N0E1QTg3NzVGQTJDMTY0QzQzRUE5RDdDOUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2GWeXFIQR+yE0od2t2RFbZgjA iEmNj2sBRjHBSvoECM9qKsCf4+xRDjr82OrAj3Ma8IcuIBe6amPsXHT+q/AU0lVq Oa2bPrhn28zh6FDyOuotNkKj4kwKKn9v/wkuObTFZr8Gf5UPwZzAN6OySNkUt7sd 53wwkK/bwbg1gaSgAX7nZnSLCmFgerkYnMKZRx4JYq1Zn1BCjcH/30Nk40vYHYHq j5fiXY4NExmFtU9FPHJoGVn82X+GLURYgNEp0LE1S/H3ywGAl2BADULlEl0GXNZd OEI/PZFQbc67sz9tTYOH7HsFqwQANwGjgwS5QNbylxf73poz5gd5JfKcX7z3AgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUhaO2FgyqJ3pah3X6LBZMQ+qdfJ0wHwYDVR0j BBgwFoAUqd+2Ak0Fo3ygx1bsdH6JgUCIW8kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Zjc0NDhjMTEtZjhkMy00NTdkLThlMjItODQ4ODdhYjIyYTMwLzAvQTlERkI2MDI0 RDA1QTM3Q0EwQzc1NkVDNzQ3RTg5ODE0MDg4NUJDOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BOURGQjYwMjREMDVBMzdDQTBDNzU2RUM3NDdFODk4MTQwODg1 QkM5LmNlcjCBoQYIKwYBBQUHAQsEgZQwgZEwgY4GCCsGAQUFBzALhoGBcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2Y3NDQ4YzExLWY4ZDMtNDU3ZC04 ZTIyLTg0ODg3YWIyMmEzMC8wLzMxMzEzNDJlMzMzMDJlMzgzODJlMzAyZjMyMzEy ZDMyMzQyMDNkM2UyMDMzMzgzMTM2MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBANyHlgwDQYJKoZIhvcN AQELBQADggEBAI2beOcGtMktZUotKuHGpNc8Nh4ka8/gJw6hz1Xq0XaoAj8lESad ryUDw21NuwgSdfkoZIj5QTlLFZ+XitzYBFMHrQJ7ZkGx1xonszsXyRyXkV3LpfjX l8M+dYfDtC4H9bsqTmig1S/2LiOq8d0DbQIjkay6nf7Iob5vqq21e+IxqYicNt14 Bc7Fqhm6wBi0TS6K80ImLeyG7+AS5jIyVnqHOggG63UEoM1xr1IjrP8rtfb5NWXn 3j/ZOq6/8NDB6SPK3JhSOKHK4/gsSRFRK+0Hm0GcyBzs3czq7BoCoy/g80RsSF0A mlCW3WvepYEoqLfzSw+QaAVCmVHRe1pQICs= -----END CERTIFICATE-----Generated at Wed May 13 04:08:57 2026 by rpki-client