$ rpki-client -vvvf rpki-rsync.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/3132342e3130392e32302e302f32322d3234203d3e203338353237.roa File: 3132342e3130392e32302e302f32322d3234203d3e203338353237.roa (raw, json) Hash identifier: ZUtr0aSpRm1t31/oStRp0AgaY33s5oWHdknUIIZz1gM= Subject key identifier: 1C:43:A0:8A:05:E7:F9:EB:0C:0B:A4:2F:BA:D7:FF:61:8E:5F:07:44 Certificate issuer: /CN=7521EB714EF9A5F0A697E8574714A86DCF234610 Certificate serial: 079A3EE431353E15F26D519B22BB197189F0DC37 Authority key identifier: 75:21:EB:71:4E:F9:A5:F0:A6:97:E8:57:47:14:A8:6D:CF:23:46:10 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7521EB714EF9A5F0A697E8574714A86DCF234610.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/3132342e3130392e32302e302f32322d3234203d3e203338353237.roa Signing time: Wed 07 Oct 2026 20:52:31 +0000 ROA not before: Wed 07 Oct 2026 20:47:31 +0000 ROA not after: Wed 06 Oct 2027 20:52:31 +0000 asID: 38527 IP address blocks: 124.109.20.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/7521EB714EF9A5F0A697E8574714A86DCF234610.crl rsync://rpki-rsync.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/7521EB714EF9A5F0A697E8574714A86DCF234610.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7521EB714EF9A5F0A697E8574714A86DCF234610.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 Oct 2026 04:26:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:9a:3e:e4:31:35:3e:15:f2:6d:51:9b:22:bb:19:71:89:f0:dc:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7521EB714EF9A5F0A697E8574714A86DCF234610 Validity Not Before: Oct 7 20:47:31 2026 GMT Not After : Oct 6 20:52:31 2027 GMT Subject: CN=1C43A08A05E7F9EB0C0BA42FBAD7FF618E5F0744 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:0b:b1:12:4e:1d:58:ff:0f:b8:73:f2:32:0b: 23:96:8c:35:5c:2c:97:16:b7:37:64:ec:c3:51:47: d9:b4:29:b3:b8:c8:4f:97:61:f5:07:ef:b6:86:b0: 72:59:da:c1:b3:90:aa:6c:75:fe:fd:4f:f1:e0:d3: d9:be:5a:58:e4:17:c9:d9:33:c0:83:1e:dc:f2:24: e9:1f:fa:96:f0:1e:54:04:f2:e7:1c:bc:6f:c3:f9: b7:0b:f1:78:b6:06:91:c0:d4:86:c5:4b:e1:4f:3f: 6f:36:b6:5e:c2:c0:10:7c:71:11:98:a6:79:a6:7b: df:73:4e:75:0a:f7:43:ff:20:bd:a5:80:e0:bd:c4: 77:c0:73:e3:8f:8f:5e:26:ff:32:64:2c:c9:6c:f9: fa:71:0f:29:34:54:82:ab:9c:3d:de:ec:3b:15:45: bb:a8:e0:f0:80:46:bf:ae:ad:98:d3:47:a4:a7:e7: 15:83:0f:61:ab:8c:04:d6:df:01:b2:36:40:43:ca: 1f:40:57:44:f3:c0:b1:32:c0:24:97:eb:dd:10:76: 6c:99:b0:87:e5:4a:f7:3d:ce:c1:ef:71:25:9e:ff: f9:92:d8:f8:ea:4e:e6:2d:f2:3e:3a:6d:7e:be:2a: 9b:44:57:c4:44:b2:da:d0:1f:61:a8:d9:27:fa:d1: d1:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:43:A0:8A:05:E7:F9:EB:0C:0B:A4:2F:BA:D7:FF:61:8E:5F:07:44 X509v3 Authority Key Identifier: keyid:75:21:EB:71:4E:F9:A5:F0:A6:97:E8:57:47:14:A8:6D:CF:23:46:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/7521EB714EF9A5F0A697E8574714A86DCF234610.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7521EB714EF9A5F0A697E8574714A86DCF234610.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/3132342e3130392e32302e302f32322d3234203d3e203338353237.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 124.109.20.0/22 Signature Algorithm: sha256WithRSAEncryption a2:66:55:2d:f1:9d:f3:8b:49:20:ec:7e:c8:06:15:82:5c:00: 0a:0d:5e:4f:06:b7:38:a5:05:67:df:0b:27:69:f0:76:92:16: ac:a0:2c:96:2c:ac:94:72:16:88:88:c7:d0:69:ec:66:1a:11: f3:70:44:64:4e:aa:a7:34:45:d2:e6:51:18:97:3c:75:a0:5a: 54:d3:b0:75:a2:16:ee:1a:5a:f3:33:77:c0:c4:6a:eb:13:df: ac:19:74:7c:73:3a:74:67:22:9d:69:d5:52:18:ce:a8:7a:ff: 76:29:ac:f8:a0:ca:96:ed:ff:7e:4d:fe:1d:63:4e:d1:c4:04: d9:ea:ee:7f:7c:7d:71:74:1a:b9:62:3b:62:33:48:eb:d5:01: 9f:77:93:ca:0f:fe:f4:05:b9:ac:7d:e9:ec:9b:4d:95:fe:bf: 59:68:37:72:0c:30:b3:1d:26:d7:c4:b6:a7:4d:05:6c:5c:b1: 7a:f7:39:91:f8:02:c9:ed:fe:fe:45:3a:ce:56:86:e3:56:a2: 9a:ea:d7:58:d8:07:f8:13:b7:b8:9f:38:8b:2f:2b:3f:be:2c: 15:b0:65:d9:1a:75:0b:08:cf:c1:ca:5f:b3:ba:85:78:06:c3: dc:7f:7d:75:d5:de:d1:4f:d4:2c:71:32:1d:bc:ae:f9:c4:b7: e8:d4:64:56 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUB5o+5DE1PhXybVGbIrsZcYnw3DcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzUyMUVCNzE0RUY5QTVGMEE2OTdFODU3NDcxNEE4NkRD RjIzNDYxMDAeFw0yNjEwMDcyMDQ3MzFaFw0yNzEwMDYyMDUyMzFaMDMxMTAvBgNV BAMTKDFDNDNBMDhBMDVFN0Y5RUIwQzBCQTQyRkJBRDdGRjYxOEU1RjA3NDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgC7ESTh1Y/w+4c/IyCyOWjDVc LJcWtzdk7MNRR9m0KbO4yE+XYfUH77aGsHJZ2sGzkKpsdf79T/Hg09m+WljkF8nZ M8CDHtzyJOkf+pbwHlQE8uccvG/D+bcL8Xi2BpHA1IbFS+FPP282tl7CwBB8cRGY pnmme99zTnUK90P/IL2lgOC9xHfAc+OPj14m/zJkLMls+fpxDyk0VIKrnD3e7DsV Rbuo4PCARr+urZjTR6Sn5xWDD2GrjATW3wGyNkBDyh9AV0TzwLEywCSX690QdmyZ sIflSvc9zsHvcSWe//mS2PjqTuYt8j46bX6+KptEV8REstrQH2Go2Sf60dEFAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUHEOgigXn+esMC6Qvutf/YY5fB0QwHwYDVR0j BBgwFoAUdSHrcU75pfCml+hXRxSobc8jRhAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzE3ZWZkMmEtMDJhYi00MjAyLTk3MGYtZjY5OWRmZjk3ZGU1LzAvNzUyMUVCNzE0 RUY5QTVGMEE2OTdFODU3NDcxNEE4NkRDRjIzNDYxMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83NTIxRUI3MTRFRjlBNUYwQTY5N0U4NTc0NzE0QTg2RENGMjM0 NjEwLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzMxN2VmZDJhLTAyYWItNDIwMi05 NzBmLWY2OTlkZmY5N2RlNS8wLzMxMzIzNDJlMzEzMDM5MmUzMjMwMmUzMDJmMzIz MjJkMzIzNDIwM2QzZTIwMzMzODM1MzIzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAnxtFDANBgkqhkiG 9w0BAQsFAAOCAQEAomZVLfGd84tJIOx+yAYVglwACg1eTwa3OKUFZ98LJ2nwdpIW rKAsliyslHIWiIjH0GnsZhoR83BEZE6qpzRF0uZRGJc8daBaVNOwdaIW7hpa8zN3 wMRq6xPfrBl0fHM6dGcinWnVUhjOqHr/dims+KDKlu3/fk3+HWNO0cQE2eruf3x9 cXQauWI7YjNI69UBn3eTyg/+9AW5rH3p7JtNlf6/WWg3cgwwsx0m18S2p00FbFyx evc5kfgCye3+/kU6zlaG41aimurXWNgH+BO3uJ84iy8rP74sFbBl2Rp1CwjPwcpf s7qFeAbD3H99ddXe0U/ULHEyHbyu+cS36NRkVg== -----END CERTIFICATE-----Generated at Thu Oct 22 20:24:11 2026 by rpki-client