$ rpki-client -vvf rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3131342e3139392e38362e302f32342d3234203d3e203137363731.roa File: 3131342e3139392e38362e302f32342d3234203d3e203137363731.roa (raw, json) Hash identifier: 2kIWVcxJiRnq7n7b/6qUTloN3RTiuJ0bVam5bS57Q8A= Subject key identifier: B4:C1:E9:65:C7:95:52:2E:FE:7F:78:7E:C3:5B:88:A1:97:88:16:EA Certificate issuer: /CN=CA547F005E84823E6A8A471723C17168E8E44644 Certificate serial: 2A44FB539628744774C85CE8FFEC17669C0316A5 Authority key identifier: CA:54:7F:00:5E:84:82:3E:6A:8A:47:17:23:C1:71:68:E8:E4:46:44 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA547F005E84823E6A8A471723C17168E8E44644.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3131342e3139392e38362e302f32342d3234203d3e203137363731.roa Signing time: Sun 03 May 2026 02:50:13 +0000 ROA not before: Sun 03 May 2026 02:45:13 +0000 ROA not after: Sun 02 May 2027 02:50:13 +0000 asID: 17671 IP address blocks: 114.199.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/CA547F005E84823E6A8A471723C17168E8E44644.crl rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/CA547F005E84823E6A8A471723C17168E8E44644.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA547F005E84823E6A8A471723C17168E8E44644.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 18:54:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:44:fb:53:96:28:74:47:74:c8:5c:e8:ff:ec:17:66:9c:03:16:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA547F005E84823E6A8A471723C17168E8E44644 Validity Not Before: May 3 02:45:13 2026 GMT Not After : May 2 02:50:13 2027 GMT Subject: CN=B4C1E965C795522EFE7F787EC35B88A1978816EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:87:0c:2b:47:29:fb:22:56:89:e4:44:2f:2c: 40:b4:28:ae:f1:f1:68:f6:37:1a:0c:d1:54:ea:b5: 32:e6:40:87:1d:f3:9f:3a:88:e0:cf:d1:93:b6:ba: fd:48:5f:c0:13:45:9a:43:5a:5a:2e:76:73:5d:25: 08:7b:2d:4d:f6:77:91:49:c1:6f:0c:aa:0d:a9:0a: 04:64:64:cb:3f:f2:78:dd:a7:f9:47:93:3c:e6:27: 39:0d:b8:b5:e5:f2:a1:ab:98:30:84:e9:91:57:4c: ba:ad:07:b1:2a:dc:e5:fc:33:2e:6f:cc:05:ce:b4: 46:95:52:0f:79:29:22:1c:13:9f:43:86:0d:c3:c6: bc:2f:15:8a:d4:8b:cc:c0:a7:b9:b9:87:51:59:94: 72:4b:a3:9d:79:05:46:89:26:fd:03:4e:70:13:9f: c0:de:d7:9f:86:e8:b1:97:56:17:09:ee:57:8e:2f: 7e:c3:ad:02:83:2e:2f:5c:fa:1d:56:05:0f:da:d6: f3:10:91:40:9e:df:f1:fe:01:3d:ad:04:83:9f:86: 30:ca:9f:1d:6e:9a:9b:3d:b2:09:d3:d3:80:80:a7: 61:0c:7c:b4:f5:65:a1:24:cf:1d:30:95:32:d6:00: 18:a4:91:b3:66:c0:fa:be:77:fb:e5:88:4a:13:cc: 1a:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:C1:E9:65:C7:95:52:2E:FE:7F:78:7E:C3:5B:88:A1:97:88:16:EA X509v3 Authority Key Identifier: keyid:CA:54:7F:00:5E:84:82:3E:6A:8A:47:17:23:C1:71:68:E8:E4:46:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/CA547F005E84823E6A8A471723C17168E8E44644.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA547F005E84823E6A8A471723C17168E8E44644.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3131342e3139392e38362e302f32342d3234203d3e203137363731.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 114.199.86.0/24 Signature Algorithm: sha256WithRSAEncryption 42:58:8a:4d:e3:fe:60:7a:55:c6:2c:f7:af:c6:b9:3e:3b:37: 7c:f6:f5:0a:3e:ca:86:34:bd:b8:a4:07:bf:f5:81:e8:e0:fc: ff:a5:45:74:34:c0:97:87:6c:db:20:31:24:a9:77:24:a2:f1: fa:25:08:d4:f1:9d:89:4d:55:07:c3:fd:d5:49:69:ce:81:48: 34:5b:29:50:81:73:74:a2:17:9b:36:62:d1:bd:d1:1d:65:b8: af:81:b2:76:20:06:ed:82:bf:d0:26:7e:80:27:10:1a:ac:dd: cc:45:ad:12:4a:be:7a:bd:53:1d:fd:08:e7:1a:0c:36:ba:5c: c6:60:3c:b9:cc:3d:ef:a1:44:12:90:d9:47:ff:f3:49:77:bc: 3c:d8:94:17:74:29:15:46:2d:af:fc:5a:7e:55:63:65:d4:39: e7:8d:b4:d5:c7:02:d1:45:95:37:54:54:23:6c:59:c2:bf:d8: e8:16:3b:5c:e4:ce:a8:da:05:2b:42:98:7e:80:70:22:a6:5c: 22:8c:fb:2b:58:16:60:10:b1:90:eb:c4:37:af:6a:37:2d:5c: ab:05:e3:49:42:bb:b3:7f:e3:1b:3b:f9:bb:f7:08:3f:18:a0: 9e:da:ca:96:10:fb:63:ef:a7:27:86:6e:08:20:f0:76:c1:f9: a1:3b:eb:66 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUKkT7U5YodEd0yFzo/+wXZpwDFqUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0E1NDdGMDA1RTg0ODIzRTZBOEE0NzE3MjNDMTcxNjhF OEU0NDY0NDAeFw0yNjA1MDMwMjQ1MTNaFw0yNzA1MDIwMjUwMTNaMDMxMTAvBgNV BAMTKEI0QzFFOTY1Qzc5NTUyMkVGRTdGNzg3RUMzNUI4OEExOTc4ODE2RUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3hwwrRyn7IlaJ5EQvLEC0KK7x 8Wj2NxoM0VTqtTLmQIcd8586iODP0ZO2uv1IX8ATRZpDWloudnNdJQh7LU32d5FJ wW8Mqg2pCgRkZMs/8njdp/lHkzzmJzkNuLXl8qGrmDCE6ZFXTLqtB7Eq3OX8My5v zAXOtEaVUg95KSIcE59Dhg3DxrwvFYrUi8zAp7m5h1FZlHJLo515BUaJJv0DTnAT n8De15+G6LGXVhcJ7leOL37DrQKDLi9c+h1WBQ/a1vMQkUCe3/H+AT2tBIOfhjDK nx1umps9sgnT04CAp2EMfLT1ZaEkzx0wlTLWABikkbNmwPq+d/vliEoTzBrRAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUtMHpZceVUi7+f3h+w1uIoZeIFuowHwYDVR0j BBgwFoAUylR/AF6Egj5qikcXI8FxaOjkRkQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGNlYmYxMTYtZmUyYS00OTFiLWFhYzgtMjIwZWFkMGI1NGUyLzAvQ0E1NDdGMDA1 RTg0ODIzRTZBOEE0NzE3MjNDMTcxNjhFOEU0NDY0NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQTU0N0YwMDVFODQ4MjNFNkE4QTQ3MTcyM0MxNzE2OEU4RTQ0 NjQ0LmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzhjZWJmMTE2LWZlMmEtNDkxYi1h YWM4LTIyMGVhZDBiNTRlMi8wLzMxMzEzNDJlMzEzOTM5MmUzODM2MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNzM2MzczMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHLHVjANBgkqhkiG 9w0BAQsFAAOCAQEAQliKTeP+YHpVxiz3r8a5Pjs3fPb1Cj7KhjS9uKQHv/WB6OD8 /6VFdDTAl4ds2yAxJKl3JKLx+iUI1PGdiU1VB8P91UlpzoFINFspUIFzdKIXmzZi 0b3RHWW4r4GydiAG7YK/0CZ+gCcQGqzdzEWtEkq+er1THf0I5xoMNrpcxmA8ucw9 76FEEpDZR//zSXe8PNiUF3QpFUYtr/xaflVjZdQ554201ccC0UWVN1RUI2xZwr/Y 6BY7XOTOqNoFK0KYfoBwIqZcIoz7K1gWYBCxkOvEN69qNy1cqwXjSUK7s3/jGzv5 u/cIPxigntrKlhD7Y++nJ4ZuCCDwdsH5oTvrZg== -----END CERTIFICATE-----Generated at Wed May 13 05:51:17 2026 by rpki-client