$ rpki-client -vvf rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3131392e3131302e3132352e302f32342d3234203d3e203435313437.roa File: 3131392e3131302e3132352e302f32342d3234203d3e203435313437.roa (raw, json) Hash identifier: JmYw0w6GMuhhfAqbUuLid4ekHD68RMpMEgm/4nRcalQ= Subject key identifier: 38:A3:49:72:87:3D:B3:AC:30:28:06:8F:20:8C:B6:6F:E8:98:EA:89 Certificate issuer: /CN=EAE158B3C84D30768CBC0D1D56034E26E704B5D0 Certificate serial: 23EFA8AB87770BAE0BB30D2D186D0B2ADD1EE33A Authority key identifier: EA:E1:58:B3:C8:4D:30:76:8C:BC:0D:1D:56:03:4E:26:E7:04:B5:D0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3131392e3131302e3132352e302f32342d3234203d3e203435313437.roa Signing time: Sun 03 May 2026 02:38:44 +0000 ROA not before: Sun 03 May 2026 02:33:44 +0000 ROA not after: Sun 02 May 2027 02:38:44 +0000 asID: 45147 IP address blocks: 119.110.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.crl rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 07 May 2026 23:33:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:ef:a8:ab:87:77:0b:ae:0b:b3:0d:2d:18:6d:0b:2a:dd:1e:e3:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EAE158B3C84D30768CBC0D1D56034E26E704B5D0 Validity Not Before: May 3 02:33:44 2026 GMT Not After : May 2 02:38:44 2027 GMT Subject: CN=38A34972873DB3AC3028068F208CB66FE898EA89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:45:86:8c:cc:88:13:13:76:b9:d9:ec:13:2b: 85:86:66:7c:66:cc:1a:4f:98:6e:6f:2c:2b:80:e0: 69:cf:27:03:50:fe:f8:2d:73:ed:2f:45:99:7f:d8: ef:fc:57:89:04:42:b1:9d:4d:3c:54:f6:fa:c8:8d: 29:4b:10:79:77:e1:b7:ca:96:67:00:11:f4:49:fa: 33:f7:5a:13:86:04:8c:4b:f9:2b:92:d3:75:88:99: 55:64:06:dd:50:aa:c9:87:08:24:c8:12:7e:34:22: f0:3e:f8:e0:47:b7:29:4a:75:56:a8:62:c8:b7:95: f6:51:20:6e:82:96:da:54:ac:72:4e:b2:a0:27:cc: 79:19:30:ae:72:83:87:e2:7b:4c:79:03:97:e0:13: 17:ba:bb:f3:87:94:8e:01:b9:96:d1:e7:f0:d4:2d: 10:ea:3e:85:8b:4c:a8:3b:77:c6:66:65:bc:db:c7: c6:51:91:b7:36:90:e2:40:be:0a:77:22:5c:54:95: e9:f2:8a:ab:9f:72:15:be:8c:0c:02:c7:c4:ff:ef: 2a:52:20:c8:81:a4:db:6a:35:15:7d:92:8b:8c:47: 67:89:96:b9:b6:c7:9e:7b:6e:ef:cc:fe:03:46:11: 6e:3d:58:17:b1:6a:ab:4b:f4:33:2b:d6:6a:d9:19: b5:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:A3:49:72:87:3D:B3:AC:30:28:06:8F:20:8C:B6:6F:E8:98:EA:89 X509v3 Authority Key Identifier: keyid:EA:E1:58:B3:C8:4D:30:76:8C:BC:0D:1D:56:03:4E:26:E7:04:B5:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3131392e3131302e3132352e302f32342d3234203d3e203435313437.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 119.110.125.0/24 Signature Algorithm: sha256WithRSAEncryption 25:34:d5:99:82:e5:66:49:47:56:48:b2:5a:d7:1c:7c:dc:5c: 4a:5c:5c:93:e8:e7:ce:85:4d:70:e4:34:a1:51:50:d3:ce:e5: 72:3f:8f:a1:1a:2b:04:c7:41:0f:67:c2:a9:15:5d:52:3a:f8: f6:83:f8:aa:75:54:6c:2c:56:7f:24:7d:ac:6b:9f:16:c6:0f: 39:79:76:0d:92:fb:f4:0f:e8:51:49:e7:60:78:36:e7:35:dc: 6d:81:50:33:72:dd:cd:35:51:6b:19:77:14:80:e0:89:e5:25: 76:63:71:04:7f:78:29:9e:cd:bf:25:4b:71:f3:27:67:04:22: 3f:56:e3:c3:93:a6:2a:ee:ee:8b:75:cc:06:1e:c5:97:df:ac: 09:30:fc:dd:1f:c1:65:12:19:44:b9:6e:ec:bd:6a:62:b5:df: 9e:66:fd:1b:ad:da:31:12:b1:1b:6c:62:0f:99:f7:d9:49:31: d8:16:db:aa:4f:93:da:6e:d7:8f:bc:89:5f:91:50:30:8e:f7: 96:03:a3:20:5f:30:76:5a:35:0a:a3:ab:43:db:fb:0d:ec:cf: 88:41:d6:37:c0:36:05:91:69:61:5f:d2:a0:f0:19:e2:c8:cb: 30:07:79:9e:2e:fe:6c:2a:ce:9b:6b:ba:d6:5f:30:38:b2:3b: 21:cd:0a:00 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUI++oq4d3C64Lsw0tGG0LKt0e4zowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUFFMTU4QjNDODREMzA3NjhDQkMwRDFENTYwMzRFMjZF NzA0QjVEMDAeFw0yNjA1MDMwMjMzNDRaFw0yNzA1MDIwMjM4NDRaMDMxMTAvBgNV BAMTKDM4QTM0OTcyODczREIzQUMzMDI4MDY4RjIwOENCNjZGRTg5OEVBODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKRYaMzIgTE3a52ewTK4WGZnxm zBpPmG5vLCuA4GnPJwNQ/vgtc+0vRZl/2O/8V4kEQrGdTTxU9vrIjSlLEHl34bfK lmcAEfRJ+jP3WhOGBIxL+SuS03WImVVkBt1QqsmHCCTIEn40IvA++OBHtylKdVao Ysi3lfZRIG6CltpUrHJOsqAnzHkZMK5yg4fie0x5A5fgExe6u/OHlI4BuZbR5/DU LRDqPoWLTKg7d8ZmZbzbx8ZRkbc2kOJAvgp3IlxUlenyiqufchW+jAwCx8T/7ypS IMiBpNtqNRV9kouMR2eJlrm2x557bu/M/gNGEW49WBexaqtL9DMr1mrZGbW9AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUOKNJcoc9s6wwKAaPIIy2b+iY6okwHwYDVR0j BBgwFoAU6uFYs8hNMHaMvA0dVgNOJucEtdAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjM1ZjdhMmYtNzI1ZS00Mzk5LTg2OWEtNGIxZmNmMmM2YTBjLzAvRUFFMTU4QjND ODREMzA3NjhDQkMwRDFENTYwMzRFMjZFNzA0QjVEMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FQUUxNThCM0M4NEQzMDc2OENCQzBEMUQ1NjAzNEUyNkU3MDRC NUQwLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzYzNWY3YTJmLTcyNWUtNDM5OS04 NjlhLTRiMWZjZjJjNmEwYy8wLzMxMzEzOTJlMzEzMTMwMmUzMTMyMzUyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzNDM1MzEzNDM3LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAd259MA0GCSqG SIb3DQEBCwUAA4IBAQAlNNWZguVmSUdWSLJa1xx83FxKXFyT6OfOhU1w5DShUVDT zuVyP4+hGisEx0EPZ8KpFV1SOvj2g/iqdVRsLFZ/JH2sa58Wxg85eXYNkvv0D+hR SedgeDbnNdxtgVAzct3NNVFrGXcUgOCJ5SV2Y3EEf3gpns2/JUtx8ydnBCI/VuPD k6Yq7u6LdcwGHsWX36wJMPzdH8FlEhlEuW7svWpitd+eZv0brdoxErEbbGIPmffZ STHYFtuqT5PabtePvIlfkVAwjveWA6MgXzB2WjUKo6tD2/sN7M+IQdY3wDYFkWlh X9Kg8BniyMswB3meLv5sKs6ba7rWXzA4sjshzQoA -----END CERTIFICATE-----Generated at Thu May 7 03:12:23 2026 by rpki-client