$ rpki-client -vvvf rpki-rsync.idnic.net/repo/030a2b07-1aa0-4c1d-9353-f310e2d3cafd/0/3136332e3132382e3233382e302f32332d3234203d3e20313337333331.roa File: 3136332e3132382e3233382e302f32332d3234203d3e20313337333331.roa (raw, json) Hash identifier: a2/Xk8xPI0HVPamIdUMrxZoGdUzJxouU9MhiIx8nIt4= Subject key identifier: 5E:4F:4F:D2:02:50:92:2C:A0:08:A1:21:6F:22:31:F9:E9:15:54:9F Certificate issuer: /CN=E2F42EE6108075DBB8BB507BC010954A910BD079 Certificate serial: 503FEEE69FE7E33DE72F2D9E0F4A92FE76D454B2 Authority key identifier: E2:F4:2E:E6:10:80:75:DB:B8:BB:50:7B:C0:10:95:4A:91:0B:D0:79 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E2F42EE6108075DBB8BB507BC010954A910BD079.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/030a2b07-1aa0-4c1d-9353-f310e2d3cafd/0/3136332e3132382e3233382e302f32332d3234203d3e20313337333331.roa Signing time: Thu 08 Oct 2026 05:19:00 +0000 ROA not before: Thu 08 Oct 2026 05:14:00 +0000 ROA not after: Thu 07 Oct 2027 05:19:00 +0000 asID: 137331 IP address blocks: 163.128.238.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/030a2b07-1aa0-4c1d-9353-f310e2d3cafd/0/E2F42EE6108075DBB8BB507BC010954A910BD079.crl rsync://rpki-rsync.idnic.net/repo/030a2b07-1aa0-4c1d-9353-f310e2d3cafd/0/E2F42EE6108075DBB8BB507BC010954A910BD079.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E2F42EE6108075DBB8BB507BC010954A910BD079.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 Oct 2026 04:29:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:3f:ee:e6:9f:e7:e3:3d:e7:2f:2d:9e:0f:4a:92:fe:76:d4:54:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E2F42EE6108075DBB8BB507BC010954A910BD079 Validity Not Before: Oct 8 05:14:00 2026 GMT Not After : Oct 7 05:19:00 2027 GMT Subject: CN=5E4F4FD20250922CA008A1216F2231F9E915549F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:8a:55:b5:34:5c:43:ba:e7:fd:73:39:81:30: 1a:32:d1:f7:e7:67:b9:19:4d:15:52:b2:61:97:bd: 0e:92:e8:58:5c:45:e4:6c:5d:91:02:a4:7f:cf:44: b1:aa:0b:8a:b5:5e:56:be:1b:7a:94:e9:bb:d4:4c: b2:ff:0d:b0:a9:bc:4a:a3:cc:73:87:62:8f:e6:c9: fd:eb:9b:8a:15:bb:26:fa:68:e5:b2:c9:29:cf:63: da:52:2c:ba:22:ef:ba:86:3e:53:69:26:b2:5c:32: 12:89:33:ce:ac:c8:81:ae:49:c7:74:41:9c:9d:60: d7:cc:08:12:fa:27:71:06:40:63:27:fe:20:ad:06: 18:c7:dd:7e:24:da:15:e2:a9:f8:0d:0f:b1:8a:bf: 46:b7:9c:30:78:ce:90:97:f6:92:29:dd:c3:ee:a8: db:df:de:69:44:2c:ed:52:4f:aa:77:16:63:c5:fe: 05:d6:b7:29:89:5c:91:ac:12:3a:13:88:62:07:37: bf:9d:77:b3:52:15:35:d9:e5:13:42:b5:18:04:98: 39:41:74:ff:56:34:9e:dc:c8:03:37:f2:ac:f2:0d: d3:af:2e:39:cc:c2:c4:b9:99:17:e2:eb:56:a7:e9: 7b:70:4d:00:8c:b1:93:c3:4f:28:e0:6a:87:35:8d: 78:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:4F:4F:D2:02:50:92:2C:A0:08:A1:21:6F:22:31:F9:E9:15:54:9F X509v3 Authority Key Identifier: keyid:E2:F4:2E:E6:10:80:75:DB:B8:BB:50:7B:C0:10:95:4A:91:0B:D0:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/030a2b07-1aa0-4c1d-9353-f310e2d3cafd/0/E2F42EE6108075DBB8BB507BC010954A910BD079.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E2F42EE6108075DBB8BB507BC010954A910BD079.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/030a2b07-1aa0-4c1d-9353-f310e2d3cafd/0/3136332e3132382e3233382e302f32332d3234203d3e20313337333331.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.128.238.0/23 Signature Algorithm: sha256WithRSAEncryption 39:10:ed:3d:d5:2c:b5:8a:d7:ec:1c:ba:1a:cc:f4:f9:34:1e: 7b:e0:95:44:a9:55:e6:77:3b:8a:46:22:7a:48:96:6f:5a:3a: 53:b7:cc:d9:69:0f:79:d8:a1:d4:3f:96:de:a4:b8:35:61:68: 3f:c3:5f:5a:e0:ee:25:a7:f3:00:f6:52:e2:d4:ce:6e:cc:00: 1f:36:e3:47:ec:80:86:2d:e0:42:9d:17:cc:0c:07:0a:97:30: c2:56:19:60:0d:74:30:7f:3e:fe:44:31:71:34:00:94:38:17: d3:ee:85:c2:5f:e9:45:c7:c5:3b:49:8b:5b:0f:0d:fe:a2:11: 1e:e1:df:34:4d:1c:4e:1a:f5:e4:5c:0a:0e:99:dd:7c:94:11: e8:1b:c7:f7:be:72:e4:9c:b2:08:3a:3c:ca:ad:58:50:0c:70: d4:25:49:cf:b9:ef:6d:aa:19:20:96:d7:c2:37:a3:5a:6c:c1: 29:55:8e:aa:a8:04:81:68:21:50:63:eb:ee:0e:7b:d7:2e:ed: a5:b6:1e:2c:1e:80:23:e4:e4:28:93:5e:af:97:d4:71:58:f3: d8:09:cb:1e:06:2a:dc:32:38:fd:be:2b:79:0f:e6:a7:de:7c: 8b:f0:81:32:a9:98:10:4c:8e:5d:5c:93:fa:a2:fa:16:1e:81: 3c:84:71:d2 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUUD/u5p/n4z3nLy2eD0qS/nbUVLIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTJGNDJFRTYxMDgwNzVEQkI4QkI1MDdCQzAxMDk1NEE5 MTBCRDA3OTAeFw0yNjEwMDgwNTE0MDBaFw0yNzEwMDcwNTE5MDBaMDMxMTAvBgNV BAMTKDVFNEY0RkQyMDI1MDkyMkNBMDA4QTEyMTZGMjIzMUY5RTkxNTU0OUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCIilW1NFxDuuf9czmBMBoy0ffn Z7kZTRVSsmGXvQ6S6FhcReRsXZECpH/PRLGqC4q1Xla+G3qU6bvUTLL/DbCpvEqj zHOHYo/myf3rm4oVuyb6aOWyySnPY9pSLLoi77qGPlNpJrJcMhKJM86syIGuScd0 QZydYNfMCBL6J3EGQGMn/iCtBhjH3X4k2hXiqfgND7GKv0a3nDB4zpCX9pIp3cPu qNvf3mlELO1ST6p3FmPF/gXWtymJXJGsEjoTiGIHN7+dd7NSFTXZ5RNCtRgEmDlB dP9WNJ7cyAM38qzyDdOvLjnMwsS5mRfi61an6XtwTQCMsZPDTyjgaoc1jXgFAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUXk9P0gJQkiygCKEhbyIx+ekVVJ8wHwYDVR0j BBgwFoAU4vQu5hCAddu4u1B7wBCVSpEL0HkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDMwYTJiMDctMWFhMC00YzFkLTkzNTMtZjMxMGUyZDNjYWZkLzAvRTJGNDJFRTYx MDgwNzVEQkI4QkI1MDdCQzAxMDk1NEE5MTBCRDA3OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FMkY0MkVFNjEwODA3NURCQjhCQjUwN0JDMDEwOTU0QTkxMEJE MDc5LmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzAzMGEyYjA3LTFhYTAtNGMxZC05 MzUzLWYzMTBlMmQzY2FmZC8wLzMxMzYzMzJlMzEzMjM4MmUzMjMzMzgyZTMwMmYz MjMzMmQzMjM0MjAzZDNlMjAzMTMzMzczMzMzMzEucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGjgO4wDQYJ KoZIhvcNAQELBQADggEBADkQ7T3VLLWK1+wcuhrM9Pk0HnvglUSpVeZ3O4pGInpI lm9aOlO3zNlpD3nYodQ/lt6kuDVhaD/DX1rg7iWn8wD2UuLUzm7MAB8240fsgIYt 4EKdF8wMBwqXMMJWGWANdDB/Pv5EMXE0AJQ4F9PuhcJf6UXHxTtJi1sPDf6iER7h 3zRNHE4a9eRcCg6Z3XyUEegbx/e+cuScsgg6PMqtWFAMcNQlSc+5722qGSCW18I3 o1pswSlVjqqoBIFoIVBj6+4Oe9cu7aW2HiwegCPk5CiTXq+X1HFY89gJyx4GKtwy OP2+K3kP5qfefIvwgTKpmBBMjl1ck/qi+hYegTyEcdI= -----END CERTIFICATE-----Generated at Sat Oct 17 16:02:39 2026 by rpki-client