$ rpki-client -vvf rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3230322e34372e36372e302f32342d3234203d3e20313339393732.roa File: 3230322e34372e36372e302f32342d3234203d3e20313339393732.roa (raw, json) Hash identifier: qGpNH+qTsFFzzGf3GYNQd+0ttLYKbc5QRyTgJxiY0nI= Subject key identifier: BD:3B:37:D6:CE:CD:FE:AF:0A:01:F4:73:23:03:0D:C7:87:2D:67:3D Certificate issuer: /CN=CA547F005E84823E6A8A471723C17168E8E44644 Certificate serial: 0D6B7178738A79FAB6D317A8707235954BE10BFC Authority key identifier: CA:54:7F:00:5E:84:82:3E:6A:8A:47:17:23:C1:71:68:E8:E4:46:44 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA547F005E84823E6A8A471723C17168E8E44644.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3230322e34372e36372e302f32342d3234203d3e20313339393732.roa Signing time: Sun 03 May 2026 02:50:12 +0000 ROA not before: Sun 03 May 2026 02:45:12 +0000 ROA not after: Sun 02 May 2027 02:50:12 +0000 asID: 139972 IP address blocks: 202.47.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/CA547F005E84823E6A8A471723C17168E8E44644.crl rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/CA547F005E84823E6A8A471723C17168E8E44644.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA547F005E84823E6A8A471723C17168E8E44644.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:6b:71:78:73:8a:79:fa:b6:d3:17:a8:70:72:35:95:4b:e1:0b:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA547F005E84823E6A8A471723C17168E8E44644 Validity Not Before: May 3 02:45:12 2026 GMT Not After : May 2 02:50:12 2027 GMT Subject: CN=BD3B37D6CECDFEAF0A01F47323030DC7872D673D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d7:78:26:7b:a7:c2:e6:55:31:c6:38:59:29: e9:b3:43:d0:c1:c6:52:bd:5f:6f:f0:9e:28:45:0b: 21:c1:5a:30:20:b8:95:08:7c:0f:bc:fe:c3:54:ab: ee:1f:d2:24:46:93:e8:e2:9f:85:01:45:22:04:12: 13:03:e7:1d:e9:55:c0:3e:90:0d:b5:fa:0f:70:02: 0e:ce:99:42:1b:0f:2d:56:e6:eb:45:91:cd:d9:5d: 19:0f:3c:ba:22:73:34:c4:42:f4:36:ea:3b:e2:33: 44:91:57:d3:03:6d:0b:0d:46:3e:61:30:fe:25:96: 1f:f0:21:c4:95:0d:29:92:3c:b0:79:2d:96:6c:86: 0e:d0:9b:ed:14:a1:c2:96:1f:ef:92:0e:0b:a4:22: b1:e3:00:89:ca:e3:0c:11:4f:b6:8e:c1:ad:64:71: 82:bb:dd:0a:d1:c8:d9:e3:7e:b2:6b:db:85:c3:9c: ce:b6:5f:9c:50:9e:77:a2:13:b5:24:9c:67:e7:11: 53:e8:c9:be:96:96:69:a9:44:04:7e:52:c1:a1:ef: c5:73:07:70:5b:96:12:c2:a4:1d:e4:02:fd:99:42: 95:69:fc:b7:a8:22:e9:f1:a6:bb:9e:c6:f2:03:89: e1:fd:c3:b0:47:8e:6a:f2:64:56:89:be:e2:f9:4f: 3b:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:3B:37:D6:CE:CD:FE:AF:0A:01:F4:73:23:03:0D:C7:87:2D:67:3D X509v3 Authority Key Identifier: keyid:CA:54:7F:00:5E:84:82:3E:6A:8A:47:17:23:C1:71:68:E8:E4:46:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/CA547F005E84823E6A8A471723C17168E8E44644.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA547F005E84823E6A8A471723C17168E8E44644.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3230322e34372e36372e302f32342d3234203d3e20313339393732.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.47.67.0/24 Signature Algorithm: sha256WithRSAEncryption 5e:10:36:84:d0:92:e7:a4:4a:fa:7f:a4:d8:5b:f7:d9:31:74: 94:0f:5a:ac:7f:13:fa:3c:0b:53:e6:09:75:d0:31:b6:ef:90: 7b:1f:b1:ef:4a:69:ac:a3:89:bc:72:d8:05:f2:26:1a:40:da: 7e:cf:4f:9a:f8:b1:68:b2:5c:b1:7e:9f:f4:dd:2c:e0:0c:1f: 01:17:60:dd:e2:eb:5e:1e:7f:79:ae:4d:46:9f:2b:38:84:cb: 07:94:85:70:63:49:ce:fd:a0:cf:74:af:f2:2c:4c:6f:4d:37: 0e:fb:e7:03:44:7b:5c:20:65:ae:0d:81:b2:80:fc:f0:2d:42: 97:4e:c6:1a:69:b6:15:21:c8:8e:5d:64:e8:1b:86:8c:c9:0a: b3:f3:a7:d4:8e:fa:06:b4:7b:3b:66:9c:cb:c5:72:79:ba:ff: 74:2d:9f:d2:e9:44:cc:af:51:45:4e:1b:40:41:ca:8f:6e:0c: e1:88:2d:55:6b:28:b6:3f:63:e1:87:32:76:94:af:1e:22:5c: ef:94:ad:de:09:c2:6a:e1:e6:3a:f4:82:a1:15:3b:41:72:33: d5:3b:bc:00:ab:79:5f:f1:1f:31:0d:e0:1f:78:57:bb:3e:a6: 4c:df:00:8c:0b:fe:66:55:23:82:e4:8e:f7:f6:7a:21:8a:a4: 61:90:ec:07 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUDWtxeHOKefq20xeocHI1lUvhC/wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0E1NDdGMDA1RTg0ODIzRTZBOEE0NzE3MjNDMTcxNjhF OEU0NDY0NDAeFw0yNjA1MDMwMjQ1MTJaFw0yNzA1MDIwMjUwMTJaMDMxMTAvBgNV BAMTKEJEM0IzN0Q2Q0VDREZFQUYwQTAxRjQ3MzIzMDMwREM3ODcyRDY3M0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC413gme6fC5lUxxjhZKemzQ9DB xlK9X2/wnihFCyHBWjAguJUIfA+8/sNUq+4f0iRGk+jin4UBRSIEEhMD5x3pVcA+ kA21+g9wAg7OmUIbDy1W5utFkc3ZXRkPPLoiczTEQvQ26jviM0SRV9MDbQsNRj5h MP4llh/wIcSVDSmSPLB5LZZshg7Qm+0UocKWH++SDgukIrHjAInK4wwRT7aOwa1k cYK73QrRyNnjfrJr24XDnM62X5xQnneiE7UknGfnEVPoyb6WlmmpRAR+UsGh78Vz B3BblhLCpB3kAv2ZQpVp/LeoIunxpruexvIDieH9w7BHjmryZFaJvuL5TzuVAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUvTs31s7N/q8KAfRzIwMNx4ctZz0wHwYDVR0j BBgwFoAUylR/AF6Egj5qikcXI8FxaOjkRkQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGNlYmYxMTYtZmUyYS00OTFiLWFhYzgtMjIwZWFkMGI1NGUyLzAvQ0E1NDdGMDA1 RTg0ODIzRTZBOEE0NzE3MjNDMTcxNjhFOEU0NDY0NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQTU0N0YwMDVFODQ4MjNFNkE4QTQ3MTcyM0MxNzE2OEU4RTQ0 NjQ0LmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzhjZWJmMTE2LWZlMmEtNDkxYi1h YWM4LTIyMGVhZDBiNTRlMi8wLzMyMzAzMjJlMzQzNzJlMzYzNzJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMxMzMzOTM5MzczMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMovQzANBgkqhkiG 9w0BAQsFAAOCAQEAXhA2hNCS56RK+n+k2Fv32TF0lA9arH8T+jwLU+YJddAxtu+Q ex+x70pprKOJvHLYBfImGkDafs9PmvixaLJcsX6f9N0s4AwfARdg3eLrXh5/ea5N Rp8rOITLB5SFcGNJzv2gz3Sv8ixMb003DvvnA0R7XCBlrg2BsoD88C1Cl07GGmm2 FSHIjl1k6BuGjMkKs/On1I76BrR7O2acy8Vyebr/dC2f0ulEzK9RRU4bQEHKj24M 4YgtVWsotj9j4YcydpSvHiJc75St3gnCauHmOvSCoRU7QXIz1Tu8AKt5X/EfMQ3g H3hXuz6mTN8AjAv+ZlUjguSO9/Z6IYqkYZDsBw== -----END CERTIFICATE-----Generated at Wed May 13 02:49:01 2026 by rpki-client