$ rpki-client -vvf rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3131392e3131302e3132302e302f32342d3234203d3e203435313437.roa File: 3131392e3131302e3132302e302f32342d3234203d3e203435313437.roa (raw, json) Hash identifier: Jp+Fe4EQb5xQGxB/R2QcXWnaVcHX966/oIeKDNJ4vFU= Subject key identifier: 2A:72:08:32:41:CC:EB:52:15:FF:0D:4E:80:D8:65:BD:4D:13:55:D8 Certificate issuer: /CN=EAE158B3C84D30768CBC0D1D56034E26E704B5D0 Certificate serial: 52D8A0C07557EA19D33A84FCF0D13868F6DC8663 Authority key identifier: EA:E1:58:B3:C8:4D:30:76:8C:BC:0D:1D:56:03:4E:26:E7:04:B5:D0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3131392e3131302e3132302e302f32342d3234203d3e203435313437.roa Signing time: Sun 03 May 2026 02:38:39 +0000 ROA not before: Sun 03 May 2026 02:33:39 +0000 ROA not after: Sun 02 May 2027 02:38:39 +0000 asID: 45147 IP address blocks: 119.110.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.crl rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 07 May 2026 23:33:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:d8:a0:c0:75:57:ea:19:d3:3a:84:fc:f0:d1:38:68:f6:dc:86:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EAE158B3C84D30768CBC0D1D56034E26E704B5D0 Validity Not Before: May 3 02:33:39 2026 GMT Not After : May 2 02:38:39 2027 GMT Subject: CN=2A72083241CCEB5215FF0D4E80D865BD4D1355D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:7e:dd:79:63:94:73:db:0a:5c:89:cc:d4:42: b7:db:24:f4:ee:54:1a:03:0b:fa:60:23:2e:f1:9d: a9:87:63:af:ae:00:4f:ed:4e:d0:c4:67:67:24:7b: 83:f3:9c:0c:c8:05:32:e7:27:01:df:54:55:07:ca: f0:27:95:c7:87:7f:68:87:d6:b1:e7:4c:fe:d1:10: ac:79:aa:b5:a4:2d:f9:3f:d2:eb:b0:e9:98:be:50: 90:d5:a4:6c:4d:31:f7:25:e2:b6:1b:e4:db:23:53: a8:a4:9f:e5:2e:47:34:98:c8:17:f3:f4:2d:c4:3a: 8d:8f:9d:47:cd:71:52:f1:04:87:20:ce:61:f4:55: 3b:c6:d8:cf:45:f7:fe:9c:2d:91:18:e6:2a:41:5d: 4f:a9:00:54:52:67:5d:3d:55:d7:81:ba:76:bc:31: 57:6d:26:7c:50:f8:8b:2d:fa:2d:7d:19:10:a4:ad: f3:cd:ad:98:fa:ca:c7:40:48:fa:ad:f2:89:3b:42: f8:38:f2:2e:f5:9c:81:39:ac:7f:8c:59:fc:dc:85: a2:34:33:cc:e6:de:22:d1:54:f1:89:9d:36:e0:74: ee:2d:a0:62:d5:1b:89:ef:ec:e3:10:40:a2:6d:6a: 43:3d:ea:33:a8:57:84:19:da:bd:1e:74:e1:8d:96: 2b:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:72:08:32:41:CC:EB:52:15:FF:0D:4E:80:D8:65:BD:4D:13:55:D8 X509v3 Authority Key Identifier: keyid:EA:E1:58:B3:C8:4D:30:76:8C:BC:0D:1D:56:03:4E:26:E7:04:B5:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3131392e3131302e3132302e302f32342d3234203d3e203435313437.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 119.110.120.0/24 Signature Algorithm: sha256WithRSAEncryption 34:42:e9:44:5a:92:fa:af:88:34:cf:5c:ee:42:71:f6:5b:2e: ae:55:c8:9b:8b:22:f3:19:d4:fc:22:06:8c:d0:f6:48:51:b2: dc:0b:c1:57:c7:14:fa:ca:e7:26:39:a5:a7:40:5b:ca:c7:82: f5:7a:3b:01:97:8f:7a:0d:86:4c:6a:66:23:0e:39:4e:f7:42: f1:2d:95:32:f7:ba:36:68:96:4f:32:db:08:89:da:90:d6:76: 75:1a:4b:27:3e:13:db:06:62:af:44:03:a0:ca:2b:72:ca:eb: 72:7f:df:40:05:60:b6:b1:25:3a:20:22:cf:76:ea:87:59:0d: 1f:11:f5:58:ad:87:b7:6d:6a:19:15:09:6d:1c:ca:ed:5e:b3: 52:69:f6:bf:d3:57:49:3d:14:dc:89:15:83:c7:bc:50:20:fa: a9:d3:ce:f0:1b:19:e1:9b:90:07:a9:28:2f:e6:9a:8c:1e:0c: f8:1a:d4:bc:a0:02:04:ad:0a:d8:94:1b:cb:12:95:6d:35:d6: 98:5f:83:26:c7:08:85:f6:4f:fb:d8:e0:05:79:90:11:74:36: 0d:80:a8:17:da:86:ce:01:ed:5c:08:e1:4a:ff:17:48:3f:8d: 66:5f:11:f6:a8:62:dd:d6:b7:4d:11:16:81:32:a1:2e:25:d6: 54:3d:fb:c0 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUUtigwHVX6hnTOoT88NE4aPbchmMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUFFMTU4QjNDODREMzA3NjhDQkMwRDFENTYwMzRFMjZF NzA0QjVEMDAeFw0yNjA1MDMwMjMzMzlaFw0yNzA1MDIwMjM4MzlaMDMxMTAvBgNV BAMTKDJBNzIwODMyNDFDQ0VCNTIxNUZGMEQ0RTgwRDg2NUJENEQxMzU1RDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1ft15Y5Rz2wpciczUQrfbJPTu VBoDC/pgIy7xnamHY6+uAE/tTtDEZ2cke4PznAzIBTLnJwHfVFUHyvAnlceHf2iH 1rHnTP7REKx5qrWkLfk/0uuw6Zi+UJDVpGxNMfcl4rYb5NsjU6ikn+UuRzSYyBfz 9C3EOo2PnUfNcVLxBIcgzmH0VTvG2M9F9/6cLZEY5ipBXU+pAFRSZ109VdeBuna8 MVdtJnxQ+Ist+i19GRCkrfPNrZj6ysdASPqt8ok7Qvg48i71nIE5rH+MWfzchaI0 M8zm3iLRVPGJnTbgdO4toGLVG4nv7OMQQKJtakM96jOoV4QZ2r0edOGNliutAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUKnIIMkHM61IV/w1OgNhlvU0TVdgwHwYDVR0j BBgwFoAU6uFYs8hNMHaMvA0dVgNOJucEtdAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjM1ZjdhMmYtNzI1ZS00Mzk5LTg2OWEtNGIxZmNmMmM2YTBjLzAvRUFFMTU4QjND ODREMzA3NjhDQkMwRDFENTYwMzRFMjZFNzA0QjVEMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FQUUxNThCM0M4NEQzMDc2OENCQzBEMUQ1NjAzNEUyNkU3MDRC NUQwLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzYzNWY3YTJmLTcyNWUtNDM5OS04 NjlhLTRiMWZjZjJjNmEwYy8wLzMxMzEzOTJlMzEzMTMwMmUzMTMyMzAyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzNDM1MzEzNDM3LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAd254MA0GCSqG SIb3DQEBCwUAA4IBAQA0QulEWpL6r4g0z1zuQnH2Wy6uVcibiyLzGdT8IgaM0PZI UbLcC8FXxxT6yucmOaWnQFvKx4L1ejsBl496DYZMamYjDjlO90LxLZUy97o2aJZP MtsIidqQ1nZ1GksnPhPbBmKvRAOgyityyutyf99ABWC2sSU6ICLPduqHWQ0fEfVY rYe3bWoZFQltHMrtXrNSafa/01dJPRTciRWDx7xQIPqp087wGxnhm5AHqSgv5pqM Hgz4GtS8oAIErQrYlBvLEpVtNdaYX4MmxwiF9k/72OAFeZARdDYNgKgX2obOAe1c COFK/xdIP41mXxH2qGLd1rdNERaBMqEuJdZUPfvA -----END CERTIFICATE-----Generated at Thu May 7 03:12:24 2026 by rpki-client