$ rpki-client -vvf rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3131342e3139392e38382e302f32342d3234203d3e203137363731.roa File: 3131342e3139392e38382e302f32342d3234203d3e203137363731.roa (raw, json) Hash identifier: KfaDwY75KTAglKNUQS20DXRthCeoG1s6eUodNxHE8xY= Subject key identifier: C3:DB:80:20:68:AE:E6:9D:D5:B3:D7:B0:D8:8D:DC:1F:E0:DA:A8:C1 Certificate issuer: /CN=CA547F005E84823E6A8A471723C17168E8E44644 Certificate serial: 202EBD0D88B55092E5BA689E5E450E3C64C89C85 Authority key identifier: CA:54:7F:00:5E:84:82:3E:6A:8A:47:17:23:C1:71:68:E8:E4:46:44 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA547F005E84823E6A8A471723C17168E8E44644.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3131342e3139392e38382e302f32342d3234203d3e203137363731.roa Signing time: Sun 03 May 2026 02:50:18 +0000 ROA not before: Sun 03 May 2026 02:45:18 +0000 ROA not after: Sun 02 May 2027 02:50:18 +0000 asID: 17671 IP address blocks: 114.199.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/CA547F005E84823E6A8A471723C17168E8E44644.crl rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/CA547F005E84823E6A8A471723C17168E8E44644.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA547F005E84823E6A8A471723C17168E8E44644.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 18:54:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:2e:bd:0d:88:b5:50:92:e5:ba:68:9e:5e:45:0e:3c:64:c8:9c:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA547F005E84823E6A8A471723C17168E8E44644 Validity Not Before: May 3 02:45:18 2026 GMT Not After : May 2 02:50:18 2027 GMT Subject: CN=C3DB802068AEE69DD5B3D7B0D88DDC1FE0DAA8C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:bd:fa:51:81:cb:c9:2d:29:81:60:16:88:13: e9:6e:48:90:e6:00:e7:1f:ba:da:a6:cc:0a:ca:55: f7:f8:6d:0f:ea:8b:0c:99:78:12:00:85:cd:5b:40: 09:3d:59:92:88:19:27:46:9b:af:5b:de:32:7a:9e: d6:d0:f4:39:c5:e2:e1:59:38:74:8f:bb:ff:91:ab: 75:32:20:23:25:7d:11:16:f9:7d:bc:7b:f6:af:ac: 9d:38:4a:cf:37:4d:9b:2a:40:94:a9:3c:a6:58:f0: b6:2b:4b:56:44:9e:9b:bf:3a:c8:aa:5e:30:71:d0: 88:30:e8:d9:04:c1:4a:b7:5d:b5:36:11:e9:57:f0: 46:a4:97:d7:14:cf:09:60:11:91:25:ce:ae:d7:fe: 0e:5f:f7:9a:04:e1:57:d1:cb:02:b8:8e:87:28:9a: b0:ac:4e:df:b2:2d:8c:bb:7f:0f:d7:54:31:10:9a: 94:20:c2:b2:63:6f:d4:7c:ce:e6:e6:52:79:7c:53: 01:81:ce:14:89:8b:fb:4d:6e:7e:33:cd:40:4f:f1: 4e:a5:b6:59:f4:88:33:1f:68:41:b2:f6:f5:75:5a: f2:4b:28:fc:62:e6:6e:46:13:b7:4c:b6:57:ae:de: 80:f0:9e:80:2c:15:16:42:52:48:68:ce:c4:ed:78: f4:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:DB:80:20:68:AE:E6:9D:D5:B3:D7:B0:D8:8D:DC:1F:E0:DA:A8:C1 X509v3 Authority Key Identifier: keyid:CA:54:7F:00:5E:84:82:3E:6A:8A:47:17:23:C1:71:68:E8:E4:46:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/CA547F005E84823E6A8A471723C17168E8E44644.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA547F005E84823E6A8A471723C17168E8E44644.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3131342e3139392e38382e302f32342d3234203d3e203137363731.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 114.199.88.0/24 Signature Algorithm: sha256WithRSAEncryption b5:97:45:b8:c6:b0:36:b8:b1:ba:09:e4:33:65:65:9c:e7:19: da:1f:68:be:93:49:2c:87:37:56:9c:71:f2:7d:0e:21:9a:06: 65:90:8d:10:a0:7b:5c:78:98:90:95:50:48:44:0f:0d:31:df: b1:48:04:8b:28:93:9a:ff:75:d8:09:24:9e:6d:d2:23:94:c9: cd:e4:cd:d4:90:ec:1c:79:13:2b:6f:a8:eb:c3:7a:d2:fb:fa: 5f:18:a7:ec:cd:e4:cf:2c:f7:21:f4:e0:b0:f2:97:9d:b0:bf: b3:15:a7:d3:84:2c:cc:02:b1:6c:9e:e3:35:fd:b7:13:ef:4f: 87:8e:73:1f:30:55:61:4e:34:a0:46:19:fa:68:f7:a4:0c:2c: fa:96:52:2e:22:e2:f1:cd:e1:03:af:35:b2:09:2e:53:8c:e8: be:0d:96:53:c8:0b:40:7c:6e:f7:f8:7e:a2:12:01:10:91:54: 99:0f:72:ba:bf:24:b4:0c:2c:e8:2f:0a:d8:f2:a4:2d:16:b1: 00:99:39:1b:a7:be:ec:64:d5:ad:00:71:42:9a:57:23:c0:cf: 50:20:f9:2f:a1:e1:39:41:1f:20:a6:19:a3:28:35:1e:27:c6: 27:75:d4:6e:2e:80:46:96:73:45:81:c8:c8:76:64:e0:af:33: 25:ea:29:28 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUIC69DYi1UJLlumieXkUOPGTInIUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0E1NDdGMDA1RTg0ODIzRTZBOEE0NzE3MjNDMTcxNjhF OEU0NDY0NDAeFw0yNjA1MDMwMjQ1MThaFw0yNzA1MDIwMjUwMThaMDMxMTAvBgNV BAMTKEMzREI4MDIwNjhBRUU2OURENUIzRDdCMEQ4OEREQzFGRTBEQUE4QzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChvfpRgcvJLSmBYBaIE+luSJDm AOcfutqmzArKVff4bQ/qiwyZeBIAhc1bQAk9WZKIGSdGm69b3jJ6ntbQ9DnF4uFZ OHSPu/+Rq3UyICMlfREW+X28e/avrJ04Ss83TZsqQJSpPKZY8LYrS1ZEnpu/Osiq XjBx0Igw6NkEwUq3XbU2EelX8Eakl9cUzwlgEZElzq7X/g5f95oE4VfRywK4joco mrCsTt+yLYy7fw/XVDEQmpQgwrJjb9R8zubmUnl8UwGBzhSJi/tNbn4zzUBP8U6l tln0iDMfaEGy9vV1WvJLKPxi5m5GE7dMtleu3oDwnoAsFRZCUkhozsTtePQxAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUw9uAIGiu5p3Vs9ew2I3cH+DaqMEwHwYDVR0j BBgwFoAUylR/AF6Egj5qikcXI8FxaOjkRkQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGNlYmYxMTYtZmUyYS00OTFiLWFhYzgtMjIwZWFkMGI1NGUyLzAvQ0E1NDdGMDA1 RTg0ODIzRTZBOEE0NzE3MjNDMTcxNjhFOEU0NDY0NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQTU0N0YwMDVFODQ4MjNFNkE4QTQ3MTcyM0MxNzE2OEU4RTQ0 NjQ0LmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzhjZWJmMTE2LWZlMmEtNDkxYi1h YWM4LTIyMGVhZDBiNTRlMi8wLzMxMzEzNDJlMzEzOTM5MmUzODM4MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNzM2MzczMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHLHWDANBgkqhkiG 9w0BAQsFAAOCAQEAtZdFuMawNrixugnkM2VlnOcZ2h9ovpNJLIc3Vpxx8n0OIZoG ZZCNEKB7XHiYkJVQSEQPDTHfsUgEiyiTmv912Akknm3SI5TJzeTN1JDsHHkTK2+o 68N60vv6Xxin7M3kzyz3IfTgsPKXnbC/sxWn04QszAKxbJ7jNf23E+9Ph45zHzBV YU40oEYZ+mj3pAws+pZSLiLi8c3hA681sgkuU4zovg2WU8gLQHxu9/h+ohIBEJFU mQ9yur8ktAws6C8K2PKkLRaxAJk5G6e+7GTVrQBxQppXI8DPUCD5L6HhOUEfIKYZ oyg1HifGJ3XUbi6ARpZzRYHIyHZk4K8zJeopKA== -----END CERTIFICATE-----Generated at Wed May 13 05:51:16 2026 by rpki-client