$ rpki-client -vvf rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3230322e34372e36342e302f32342d3234203d3e203137363731.roa File: 3230322e34372e36342e302f32342d3234203d3e203137363731.roa (raw, json) Hash identifier: tOYciJZSRafxuBerdTkaxDw+DMZNJvKBitBHZhlJoPs= Subject key identifier: C5:94:43:55:F3:7C:2F:34:9F:DF:92:D7:B0:92:F5:98:33:67:90:0E Certificate issuer: /CN=CA547F005E84823E6A8A471723C17168E8E44644 Certificate serial: 2E5BE3237048648F2BEC08E42BEB5552D332F1CB Authority key identifier: CA:54:7F:00:5E:84:82:3E:6A:8A:47:17:23:C1:71:68:E8:E4:46:44 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA547F005E84823E6A8A471723C17168E8E44644.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3230322e34372e36342e302f32342d3234203d3e203137363731.roa Signing time: Sun 03 May 2026 02:50:05 +0000 ROA not before: Sun 03 May 2026 02:45:05 +0000 ROA not after: Sun 02 May 2027 02:50:05 +0000 asID: 17671 IP address blocks: 202.47.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/CA547F005E84823E6A8A471723C17168E8E44644.crl rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/CA547F005E84823E6A8A471723C17168E8E44644.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA547F005E84823E6A8A471723C17168E8E44644.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 18:54:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:5b:e3:23:70:48:64:8f:2b:ec:08:e4:2b:eb:55:52:d3:32:f1:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA547F005E84823E6A8A471723C17168E8E44644 Validity Not Before: May 3 02:45:05 2026 GMT Not After : May 2 02:50:05 2027 GMT Subject: CN=C5944355F37C2F349FDF92D7B092F5983367900E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:bd:32:93:fb:46:55:47:11:c6:95:cd:6e:fd: 51:23:56:84:9d:07:f9:9e:fa:93:e3:34:ef:22:94: 5e:c5:4c:7a:1b:7b:50:5c:cb:a1:a2:91:45:ba:df: 35:b0:7a:42:f8:13:8f:4e:8c:93:2b:3f:43:0d:cb: 53:e0:fd:fd:f2:86:72:5b:54:b4:39:12:e2:c1:56: dc:14:ea:c4:fc:c7:02:fb:7a:32:99:b9:d8:ec:8c: c5:67:ac:4f:64:84:f9:22:9d:a9:5c:3e:6b:81:e9: 91:e8:a1:0a:4b:03:d2:0f:a2:b1:3b:a5:20:bd:f5: a4:87:63:58:b7:1f:30:30:52:b8:c3:90:7b:d4:0a: 41:d7:de:f6:69:f2:88:fe:34:c2:d7:38:a1:94:72: 50:03:20:d1:18:9c:77:c5:84:83:ae:67:19:8f:6f: 77:39:2c:3f:de:fd:cc:17:7b:e6:4f:d9:8d:fa:5e: 9e:dd:fc:55:32:e2:a7:c3:16:f9:fb:5a:06:c5:2e: b8:47:b1:69:15:c9:9b:47:f2:bc:57:69:7e:1d:f9: 16:92:53:30:d8:ab:9e:63:70:93:f9:35:40:d7:10: f1:9e:76:fb:7f:81:f2:3f:0e:dc:a2:fb:72:ca:d4: e8:20:52:37:7e:16:be:0b:03:ce:d8:bb:37:35:46: f0:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:94:43:55:F3:7C:2F:34:9F:DF:92:D7:B0:92:F5:98:33:67:90:0E X509v3 Authority Key Identifier: keyid:CA:54:7F:00:5E:84:82:3E:6A:8A:47:17:23:C1:71:68:E8:E4:46:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/CA547F005E84823E6A8A471723C17168E8E44644.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA547F005E84823E6A8A471723C17168E8E44644.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3230322e34372e36342e302f32342d3234203d3e203137363731.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.47.64.0/24 Signature Algorithm: sha256WithRSAEncryption 0b:2e:99:d9:a3:03:fd:9f:80:dc:2d:88:36:4a:23:38:06:ea: e9:ba:fd:b0:b4:92:70:8b:38:8a:a2:e7:bb:54:a0:7e:bb:e4: 50:91:79:51:90:a7:f0:00:6e:c4:b0:39:1a:48:74:aa:41:5f: 1f:f7:d0:ca:ff:b4:51:32:c7:91:04:40:bc:f2:f5:96:c8:2f: 59:ae:15:bb:ba:34:df:3e:57:d7:71:40:cf:06:c5:de:8b:40: 85:aa:88:97:8b:f9:e5:25:2c:3e:af:e9:17:fb:89:da:93:27: d6:2e:a7:e0:b0:3c:05:f1:8b:6c:b3:cf:2e:33:f2:52:72:53: c1:0d:74:1e:54:97:87:a2:56:cb:a0:85:a8:ad:80:47:99:d7: 39:2f:de:f4:a1:3d:b3:ed:a4:2e:07:f5:d9:d9:59:54:9f:19: 3f:3b:1e:60:28:e3:df:52:b8:75:47:1d:9f:df:5e:59:cb:81: ee:35:e7:4f:a0:57:87:c2:80:1a:ea:5b:c8:98:6a:ea:e3:19: e0:b7:3b:8d:0f:f2:c9:a9:ed:58:71:a2:44:a1:a8:65:e3:ae: aa:87:bb:26:fe:64:86:b7:8b:c2:4f:4d:6a:a6:66:62:06:40: e6:ff:d5:fe:bd:ae:c5:fa:04:f0:83:d3:a4:3b:9f:33:de:bb: 16:f6:66:ad -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIULlvjI3BIZI8r7AjkK+tVUtMy8cswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0E1NDdGMDA1RTg0ODIzRTZBOEE0NzE3MjNDMTcxNjhF OEU0NDY0NDAeFw0yNjA1MDMwMjQ1MDVaFw0yNzA1MDIwMjUwMDVaMDMxMTAvBgNV BAMTKEM1OTQ0MzU1RjM3QzJGMzQ5RkRGOTJEN0IwOTJGNTk4MzM2NzkwMEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYvTKT+0ZVRxHGlc1u/VEjVoSd B/me+pPjNO8ilF7FTHobe1Bcy6GikUW63zWwekL4E49OjJMrP0MNy1Pg/f3yhnJb VLQ5EuLBVtwU6sT8xwL7ejKZudjsjMVnrE9khPkinalcPmuB6ZHooQpLA9IPorE7 pSC99aSHY1i3HzAwUrjDkHvUCkHX3vZp8oj+NMLXOKGUclADINEYnHfFhIOuZxmP b3c5LD/e/cwXe+ZP2Y36Xp7d/FUy4qfDFvn7WgbFLrhHsWkVyZtH8rxXaX4d+RaS UzDYq55jcJP5NUDXEPGedvt/gfI/Dtyi+3LK1OggUjd+Fr4LA87Yuzc1RvAzAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUxZRDVfN8LzSf35LXsJL1mDNnkA4wHwYDVR0j BBgwFoAUylR/AF6Egj5qikcXI8FxaOjkRkQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGNlYmYxMTYtZmUyYS00OTFiLWFhYzgtMjIwZWFkMGI1NGUyLzAvQ0E1NDdGMDA1 RTg0ODIzRTZBOEE0NzE3MjNDMTcxNjhFOEU0NDY0NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQTU0N0YwMDVFODQ4MjNFNkE4QTQ3MTcyM0MxNzE2OEU4RTQ0 NjQ0LmNlcjCBoQYIKwYBBQUHAQsEgZQwgZEwgY4GCCsGAQUFBzALhoGBcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzhjZWJmMTE2LWZlMmEtNDkxYi1h YWM4LTIyMGVhZDBiNTRlMi8wLzMyMzAzMjJlMzQzNzJlMzYzNDJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMxMzczNjM3MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADKL0AwDQYJKoZIhvcN AQELBQADggEBAAsumdmjA/2fgNwtiDZKIzgG6um6/bC0knCLOIqi57tUoH675FCR eVGQp/AAbsSwORpIdKpBXx/30Mr/tFEyx5EEQLzy9ZbIL1muFbu6NN8+V9dxQM8G xd6LQIWqiJeL+eUlLD6v6Rf7idqTJ9Yup+CwPAXxi2yzzy4z8lJyU8ENdB5Ul4ei VsughaitgEeZ1zkv3vShPbPtpC4H9dnZWVSfGT87HmAo499SuHVHHZ/fXlnLge41 50+gV4fCgBrqW8iYaurjGeC3O40P8smp7VhxokShqGXjrqqHuyb+ZIa3i8JPTWqm ZmIGQOb/1f69rsX6BPCD06Q7nzPeuxb2Zq0= -----END CERTIFICATE-----Generated at Wed May 13 05:51:15 2026 by rpki-client