$ rpki-client -vvf rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3131392e3131302e3132332e302f32342d3234203d3e203435313437.roa File: 3131392e3131302e3132332e302f32342d3234203d3e203435313437.roa (raw, json) Hash identifier: W0udL69RUBNsb7geckvkPM1a5CthqjcSL9gprCU+mYo= Subject key identifier: 8F:F1:6F:7C:28:03:BD:5B:A0:A8:25:BE:69:87:D3:52:56:35:21:82 Certificate issuer: /CN=EAE158B3C84D30768CBC0D1D56034E26E704B5D0 Certificate serial: 1C62D33338F84921A53521E1902AC2C663D428A3 Authority key identifier: EA:E1:58:B3:C8:4D:30:76:8C:BC:0D:1D:56:03:4E:26:E7:04:B5:D0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3131392e3131302e3132332e302f32342d3234203d3e203435313437.roa Signing time: Sun 03 May 2026 02:38:46 +0000 ROA not before: Sun 03 May 2026 02:33:46 +0000 ROA not after: Sun 02 May 2027 02:38:46 +0000 asID: 45147 IP address blocks: 119.110.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.crl rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 07 May 2026 23:33:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:62:d3:33:38:f8:49:21:a5:35:21:e1:90:2a:c2:c6:63:d4:28:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EAE158B3C84D30768CBC0D1D56034E26E704B5D0 Validity Not Before: May 3 02:33:46 2026 GMT Not After : May 2 02:38:46 2027 GMT Subject: CN=8FF16F7C2803BD5BA0A825BE6987D35256352182 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:41:09:e3:1d:f5:75:e3:86:5d:58:56:bd:c8: 31:ff:b8:31:fe:df:88:1d:99:44:0e:58:a1:37:0e: ef:fe:e8:c4:b3:79:f8:e4:a0:9f:89:72:6a:22:a3: 20:fc:39:e6:9c:7c:64:d8:33:ad:81:12:57:e8:d7: ec:ff:05:43:27:38:4a:2c:cc:0e:87:1b:58:07:0f: f5:7e:7b:50:38:79:14:b3:cc:c2:98:1a:4a:c7:7a: 30:1e:4c:3d:5e:15:3f:03:64:10:bf:bc:ce:a3:57: 50:3c:be:5c:97:00:bf:0b:8c:83:4e:5d:e6:6b:6e: 24:ab:81:f7:c8:5a:8b:85:a0:da:dc:c7:e9:f9:53: d4:77:91:f7:fd:05:99:ac:b7:f9:ef:40:90:5c:3f: 4d:5a:0e:d4:51:60:df:f0:28:b3:dd:ec:1d:00:62: 86:81:82:4a:2f:09:9d:2d:56:1b:c2:1d:88:33:20: 7b:cf:7e:71:74:ca:1f:03:10:36:6b:d6:26:81:6b: 1a:dc:4b:42:24:f9:2c:1a:4c:3b:e7:b8:96:26:59: cc:79:ef:0b:ad:9f:4c:38:aa:80:dc:8d:7f:f6:bc: af:67:29:c7:cc:ce:36:d5:f3:3e:a8:b0:d3:21:d7: 27:00:96:e6:fe:4e:69:af:4e:2e:26:69:47:8a:37: 96:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:F1:6F:7C:28:03:BD:5B:A0:A8:25:BE:69:87:D3:52:56:35:21:82 X509v3 Authority Key Identifier: keyid:EA:E1:58:B3:C8:4D:30:76:8C:BC:0D:1D:56:03:4E:26:E7:04:B5:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3131392e3131302e3132332e302f32342d3234203d3e203435313437.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 119.110.123.0/24 Signature Algorithm: sha256WithRSAEncryption 3f:0d:94:f5:28:83:be:ef:08:eb:f7:04:43:62:6d:46:03:7a: e7:20:43:6d:c4:d8:da:e9:2b:6e:52:55:04:3f:04:4f:73:80: 93:31:f4:68:8a:99:f5:c2:28:5b:69:90:0b:a1:86:d2:dd:99: 18:82:ea:4b:d6:e7:a2:3d:90:b3:7f:04:ee:45:35:78:a5:47: 0f:cb:3c:25:c8:76:4c:2f:2e:f6:fb:5e:82:4e:dc:a9:78:e1: 51:8d:d4:e6:ec:13:43:87:04:4c:57:1a:33:e0:a3:b7:91:13: 32:c4:76:b6:b8:fe:46:2a:40:7b:eb:05:ec:ff:83:d7:6d:0f: 00:e8:fa:d3:b4:94:44:44:c2:08:a8:3b:4b:0e:3c:ad:e2:ae: 30:e0:f1:e9:7c:00:2c:1e:cc:a3:46:1c:0b:a2:92:f9:74:9a: cb:d7:5d:cc:bf:55:41:85:83:b3:30:09:bc:98:da:53:2d:07: d0:86:e8:91:e0:84:89:87:20:dc:0a:f5:1e:3e:95:58:b3:2e: 45:b2:a0:a9:49:f4:97:8c:91:8d:db:6f:e9:f4:50:9d:21:16: 2d:27:28:cb:a0:3d:6d:97:62:5f:db:a3:6e:40:70:b2:ae:6d: 57:00:56:ad:c9:f6:91:98:12:e2:eb:4b:79:3d:4a:e1:99:ae: 0b:bf:f7:82 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUHGLTMzj4SSGlNSHhkCrCxmPUKKMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUFFMTU4QjNDODREMzA3NjhDQkMwRDFENTYwMzRFMjZF NzA0QjVEMDAeFw0yNjA1MDMwMjMzNDZaFw0yNzA1MDIwMjM4NDZaMDMxMTAvBgNV BAMTKDhGRjE2RjdDMjgwM0JENUJBMEE4MjVCRTY5ODdEMzUyNTYzNTIxODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjQQnjHfV144ZdWFa9yDH/uDH+ 34gdmUQOWKE3Du/+6MSzefjkoJ+JcmoioyD8OeacfGTYM62BElfo1+z/BUMnOEos zA6HG1gHD/V+e1A4eRSzzMKYGkrHejAeTD1eFT8DZBC/vM6jV1A8vlyXAL8LjINO XeZrbiSrgffIWouFoNrcx+n5U9R3kff9BZmst/nvQJBcP01aDtRRYN/wKLPd7B0A YoaBgkovCZ0tVhvCHYgzIHvPfnF0yh8DEDZr1iaBaxrcS0Ik+SwaTDvnuJYmWcx5 7wutn0w4qoDcjX/2vK9nKcfMzjbV8z6osNMh1ycAlub+TmmvTi4maUeKN5Y5AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUj/FvfCgDvVugqCW+aYfTUlY1IYIwHwYDVR0j BBgwFoAU6uFYs8hNMHaMvA0dVgNOJucEtdAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjM1ZjdhMmYtNzI1ZS00Mzk5LTg2OWEtNGIxZmNmMmM2YTBjLzAvRUFFMTU4QjND ODREMzA3NjhDQkMwRDFENTYwMzRFMjZFNzA0QjVEMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FQUUxNThCM0M4NEQzMDc2OENCQzBEMUQ1NjAzNEUyNkU3MDRC NUQwLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzYzNWY3YTJmLTcyNWUtNDM5OS04 NjlhLTRiMWZjZjJjNmEwYy8wLzMxMzEzOTJlMzEzMTMwMmUzMTMyMzMyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzNDM1MzEzNDM3LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAd257MA0GCSqG SIb3DQEBCwUAA4IBAQA/DZT1KIO+7wjr9wRDYm1GA3rnIENtxNja6StuUlUEPwRP c4CTMfRoipn1wihbaZALoYbS3ZkYgupL1ueiPZCzfwTuRTV4pUcPyzwlyHZMLy72 +16CTtypeOFRjdTm7BNDhwRMVxoz4KO3kRMyxHa2uP5GKkB76wXs/4PXbQ8A6PrT tJRERMIIqDtLDjyt4q4w4PHpfAAsHsyjRhwLopL5dJrL113Mv1VBhYOzMAm8mNpT LQfQhuiR4ISJhyDcCvUePpVYsy5FsqCpSfSXjJGN22/p9FCdIRYtJyjLoD1tl2Jf 26NuQHCyrm1XAFatyfaRmBLi60t5PUrhma4Lv/eC -----END CERTIFICATE-----Generated at Thu May 7 03:12:24 2026 by rpki-client