$ rpki-client -vvf rpki-rsync.idnic.net/repo/12aec7c6-2b83-4cf0-8cd9-534ce77ff4b0/0/3231302e38372e3131382e302f32332d3234203d3e20313338383836.roa File: 3231302e38372e3131382e302f32332d3234203d3e20313338383836.roa (raw, json) Hash identifier: uVPktCZC8+f+6UT6i6M1uIRYRGCJQ3maVFAM7Hkvn3s= Subject key identifier: DA:A7:C3:67:59:47:03:56:D1:81:06:5F:AF:EC:35:5B:7F:1D:2A:A9 Certificate issuer: /CN=1344B81B970D3F90CA09A81F2EA796B9DD09D342 Certificate serial: 6761EEE985EFE89CAEDE5124273553F3F6E3675C Authority key identifier: 13:44:B8:1B:97:0D:3F:90:CA:09:A8:1F:2E:A7:96:B9:DD:09:D3:42 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1344B81B970D3F90CA09A81F2EA796B9DD09D342.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/12aec7c6-2b83-4cf0-8cd9-534ce77ff4b0/0/3231302e38372e3131382e302f32332d3234203d3e20313338383836.roa Signing time: Sun 03 May 2026 02:14:13 +0000 ROA not before: Sun 03 May 2026 02:09:13 +0000 ROA not after: Sun 02 May 2027 02:14:13 +0000 asID: 138886 IP address blocks: 210.87.118.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/12aec7c6-2b83-4cf0-8cd9-534ce77ff4b0/0/1344B81B970D3F90CA09A81F2EA796B9DD09D342.crl rsync://rpki-rsync.idnic.net/repo/12aec7c6-2b83-4cf0-8cd9-534ce77ff4b0/0/1344B81B970D3F90CA09A81F2EA796B9DD09D342.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1344B81B970D3F90CA09A81F2EA796B9DD09D342.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 May 2026 13:33:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:61:ee:e9:85:ef:e8:9c:ae:de:51:24:27:35:53:f3:f6:e3:67:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1344B81B970D3F90CA09A81F2EA796B9DD09D342 Validity Not Before: May 3 02:09:13 2026 GMT Not After : May 2 02:14:13 2027 GMT Subject: CN=DAA7C36759470356D181065FAFEC355B7F1D2AA9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:29:d8:35:c8:88:18:85:90:8e:2c:f5:9d:00: ee:19:cb:7b:28:53:1c:12:a6:43:fe:79:f9:a5:ef: 1b:43:18:71:a2:80:43:59:a2:23:6e:45:47:c5:f8: 49:9f:a8:40:c1:b5:79:41:f7:70:1b:f7:7c:43:87: 46:2f:43:8d:d2:0c:41:7a:80:06:ad:e9:b0:29:b3: 54:f9:6f:f0:bb:51:79:62:8e:7b:fa:82:f3:38:12: 68:c2:e1:f1:9a:60:15:22:b9:d4:a1:74:ee:0f:e2: cc:95:08:47:b5:c4:fc:62:95:a3:7f:66:a0:a2:2b: 91:2a:87:88:ab:35:c6:11:52:96:a5:1a:9c:e4:11: da:6a:b5:74:07:8b:8b:8b:12:c1:38:9a:c0:51:c5: 4c:4a:11:36:5a:8e:76:03:ff:67:cb:fc:59:dd:78: 29:38:af:b1:d7:f5:b0:6f:05:a9:5c:3a:29:49:85: 5a:ea:d3:a6:60:3e:ad:c4:8e:26:b8:54:54:2f:bd: 75:dc:97:44:65:ac:bc:32:be:4c:c8:f9:92:9a:35: 8c:2e:bd:78:05:1b:80:ac:ac:9e:fe:56:0d:13:9e: 62:e3:48:76:69:17:2a:7c:55:80:a0:1c:54:b6:5d: 2b:3b:ca:f8:af:49:69:28:90:dc:f7:a6:78:cf:6a: 6c:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:A7:C3:67:59:47:03:56:D1:81:06:5F:AF:EC:35:5B:7F:1D:2A:A9 X509v3 Authority Key Identifier: keyid:13:44:B8:1B:97:0D:3F:90:CA:09:A8:1F:2E:A7:96:B9:DD:09:D3:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/12aec7c6-2b83-4cf0-8cd9-534ce77ff4b0/0/1344B81B970D3F90CA09A81F2EA796B9DD09D342.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1344B81B970D3F90CA09A81F2EA796B9DD09D342.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/12aec7c6-2b83-4cf0-8cd9-534ce77ff4b0/0/3231302e38372e3131382e302f32332d3234203d3e20313338383836.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 210.87.118.0/23 Signature Algorithm: sha256WithRSAEncryption 36:79:7f:68:0b:84:5a:3f:ce:8f:d8:64:ab:a5:13:27:a6:d4: 00:27:98:5f:d4:80:4a:31:0a:f0:a8:86:2c:ce:a1:43:ba:c3: e3:1b:7a:46:e5:47:3d:1f:d3:69:63:cc:19:51:89:f5:4d:50: f6:e6:a8:57:3c:4a:9c:0e:cb:2e:13:ce:b1:6e:0d:ac:ad:df: 4d:59:4b:13:c6:a5:55:f1:78:9b:de:dd:a8:2a:1e:61:13:af: d3:e5:fd:87:fe:ac:04:00:f6:56:73:29:c2:b2:62:eb:8a:b9: a7:6f:2b:fe:c4:bb:af:4c:1a:1e:e0:4f:5c:66:66:b9:4c:10: 47:a1:0e:0f:d6:f1:a6:28:33:08:18:96:14:ab:1d:1b:08:7f: 3b:ef:a8:2f:54:84:84:77:0d:4e:62:6c:61:98:d3:a7:12:55: c4:26:5c:3e:a6:83:a4:7d:32:74:09:5e:3a:25:61:0b:67:2a: 14:b2:ef:fd:77:70:85:c5:81:1b:e7:2e:34:47:53:f0:4e:25: 63:5d:96:fb:3f:f5:32:10:11:29:05:0f:f5:ea:3a:9c:2a:4b: 59:20:5d:d1:93:d1:c4:a5:8c:ee:51:a6:19:8a:01:ed:64:fa: 31:6b:5c:d5:54:5b:e7:4f:36:3b:80:74:31:ca:e3:e1:2a:58: d0:04:10:89 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUZ2Hu6YXv6Jyu3lEkJzVT8/bjZ1wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTM0NEI4MUI5NzBEM0Y5MENBMDlBODFGMkVBNzk2QjlE RDA5RDM0MjAeFw0yNjA1MDMwMjA5MTNaFw0yNzA1MDIwMjE0MTNaMDMxMTAvBgNV BAMTKERBQTdDMzY3NTk0NzAzNTZEMTgxMDY1RkFGRUMzNTVCN0YxRDJBQTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCJKdg1yIgYhZCOLPWdAO4Zy3so UxwSpkP+efml7xtDGHGigENZoiNuRUfF+EmfqEDBtXlB93Ab93xDh0YvQ43SDEF6 gAat6bAps1T5b/C7UXlijnv6gvM4EmjC4fGaYBUiudShdO4P4syVCEe1xPxilaN/ ZqCiK5Eqh4irNcYRUpalGpzkEdpqtXQHi4uLEsE4msBRxUxKETZajnYD/2fL/Fnd eCk4r7HX9bBvBalcOilJhVrq06ZgPq3Ejia4VFQvvXXcl0RlrLwyvkzI+ZKaNYwu vXgFG4CsrJ7+Vg0TnmLjSHZpFyp8VYCgHFS2XSs7yvivSWkokNz3pnjPamx1AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU2qfDZ1lHA1bRgQZfr+w1W38dKqkwHwYDVR0j BBgwFoAUE0S4G5cNP5DKCagfLqeWud0J00IwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTJhZWM3YzYtMmI4My00Y2YwLThjZDktNTM0Y2U3N2ZmNGIwLzAvMTM0NEI4MUI5 NzBEM0Y5MENBMDlBODFGMkVBNzk2QjlERDA5RDM0Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xMzQ0QjgxQjk3MEQzRjkwQ0EwOUE4MUYyRUE3OTZCOUREMDlE MzQyLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzEyYWVjN2M2LTJiODMtNGNmMC04 Y2Q5LTUzNGNlNzdmZjRiMC8wLzMyMzEzMDJlMzgzNzJlMzEzMTM4MmUzMDJmMzIz MzJkMzIzNDIwM2QzZTIwMzEzMzM4MzgzODM2LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0ld2MA0GCSqG SIb3DQEBCwUAA4IBAQA2eX9oC4RaP86P2GSrpRMnptQAJ5hf1IBKMQrwqIYszqFD usPjG3pG5Uc9H9NpY8wZUYn1TVD25qhXPEqcDssuE86xbg2srd9NWUsTxqVV8Xib 3t2oKh5hE6/T5f2H/qwEAPZWcynCsmLrirmnbyv+xLuvTBoe4E9cZma5TBBHoQ4P 1vGmKDMIGJYUqx0bCH8776gvVISEdw1OYmxhmNOnElXEJlw+poOkfTJ0CV46JWEL ZyoUsu/9d3CFxYEb5y40R1PwTiVjXZb7P/UyEBEpBQ/16jqcKktZIF3Rk9HEpYzu UaYZigHtZPoxa1zVVFvnTzY7gHQxyuPhKljQBBCJ -----END CERTIFICATE-----Generated at Tue May 5 16:49:02 2026 by rpki-client