$ rpki-client -vvf rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3230322e34372e37342e302f32342d3234203d3e203137363731.roa File: 3230322e34372e37342e302f32342d3234203d3e203137363731.roa (raw, json) Hash identifier: sYXKuI3xnZzEQCtSWiBwdNuT14zFdwQ6YxBaEV1K3lM= Subject key identifier: E2:37:71:74:0E:7B:D8:CE:1E:10:A5:79:4B:14:DB:94:25:C4:1A:07 Certificate issuer: /CN=CA547F005E84823E6A8A471723C17168E8E44644 Certificate serial: 3D88BD0A8B9980440B83E4FF9D23265A4F02CE1D Authority key identifier: CA:54:7F:00:5E:84:82:3E:6A:8A:47:17:23:C1:71:68:E8:E4:46:44 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA547F005E84823E6A8A471723C17168E8E44644.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3230322e34372e37342e302f32342d3234203d3e203137363731.roa Signing time: Sun 03 May 2026 02:50:11 +0000 ROA not before: Sun 03 May 2026 02:45:11 +0000 ROA not after: Sun 02 May 2027 02:50:11 +0000 asID: 17671 IP address blocks: 202.47.74.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/CA547F005E84823E6A8A471723C17168E8E44644.crl rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/CA547F005E84823E6A8A471723C17168E8E44644.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA547F005E84823E6A8A471723C17168E8E44644.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 18:54:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:88:bd:0a:8b:99:80:44:0b:83:e4:ff:9d:23:26:5a:4f:02:ce:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA547F005E84823E6A8A471723C17168E8E44644 Validity Not Before: May 3 02:45:11 2026 GMT Not After : May 2 02:50:11 2027 GMT Subject: CN=E23771740E7BD8CE1E10A5794B14DB9425C41A07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:e4:e1:35:dc:77:cd:2a:17:5d:df:65:53:12: c1:17:55:bc:95:0f:5e:99:18:5d:66:d3:be:50:21: 44:d6:66:9e:55:0a:28:3d:30:12:cb:84:dd:ff:a5: fe:35:6d:3c:1f:25:5e:5b:0a:ed:73:de:8e:bd:71: fd:ef:7d:c8:15:2f:18:c2:fc:87:f8:21:bb:1d:2d: 49:c0:05:8b:95:d7:ea:c8:70:6e:88:6b:6b:bc:9c: f3:a5:08:65:d5:82:16:a8:9f:40:23:ed:a4:25:32: e9:e3:27:da:3e:1c:a1:3d:3c:2d:08:03:a2:dd:9a: 69:c8:c7:11:d5:93:e6:18:92:aa:23:59:9b:96:56: 68:98:08:e7:a0:1d:fd:b2:43:e0:47:40:21:2f:9f: e0:6d:33:ee:e3:27:36:29:00:a0:c3:ee:b6:57:e9: bc:cd:b2:0a:52:c6:48:73:f7:9e:cc:20:9e:5c:54: a1:42:f7:67:f4:f1:0a:97:93:df:89:75:cc:80:cc: ff:50:db:55:c0:dc:01:5c:28:21:05:9d:08:23:cb: 71:04:08:da:ff:61:b6:7a:1d:7e:0f:00:85:0c:18: f7:2d:a8:41:0b:aa:15:29:89:74:f6:2c:2d:e4:b0: 6b:0e:ed:98:b1:95:4f:3f:a6:b3:e9:5e:1b:f8:a1: 87:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:37:71:74:0E:7B:D8:CE:1E:10:A5:79:4B:14:DB:94:25:C4:1A:07 X509v3 Authority Key Identifier: keyid:CA:54:7F:00:5E:84:82:3E:6A:8A:47:17:23:C1:71:68:E8:E4:46:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/CA547F005E84823E6A8A471723C17168E8E44644.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA547F005E84823E6A8A471723C17168E8E44644.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3230322e34372e37342e302f32342d3234203d3e203137363731.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.47.74.0/24 Signature Algorithm: sha256WithRSAEncryption 8f:31:7f:1c:75:32:02:da:83:f9:aa:53:02:0f:ab:50:b3:14: 21:b5:6f:15:8e:24:8f:4d:fa:9a:9a:5b:4e:09:d8:13:17:45: eb:3f:94:c8:57:c6:0c:81:6c:29:1b:f0:88:32:44:79:30:d2: aa:13:87:9d:36:2c:52:e8:67:55:ea:de:76:a9:14:66:21:70: 97:27:a2:fb:af:9b:84:f1:3d:cc:39:53:cf:89:86:01:03:c6: 62:d0:d4:01:82:e2:c3:49:3d:a2:10:e8:f4:db:b4:c6:93:de: 7d:9f:2e:df:de:d3:45:6d:17:09:96:09:59:15:56:0b:a8:71: 5d:1f:8f:66:9d:52:97:7e:70:15:4e:3c:e6:59:c6:25:3d:fa: c7:0e:71:5e:1a:e6:c2:9c:2e:06:f0:21:88:a7:e2:e8:06:5f: 5d:74:d9:50:b3:99:d7:1a:f4:c9:58:b4:d9:f6:f1:62:69:75: 23:16:85:e4:2a:f2:bf:a4:9e:0d:54:1c:ff:56:f8:41:61:5c: da:a1:c1:ad:f3:b1:55:32:44:e5:b5:ef:56:17:ca:bb:d7:c7: 18:43:df:eb:b0:6a:f8:6a:49:a6:2e:58:37:ef:14:55:2d:b0: 0c:74:59:13:ca:ca:4e:3f:ba:bb:9e:15:47:a3:9e:ea:47:0c: 22:93:40:94 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUPYi9CouZgEQLg+T/nSMmWk8Czh0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0E1NDdGMDA1RTg0ODIzRTZBOEE0NzE3MjNDMTcxNjhF OEU0NDY0NDAeFw0yNjA1MDMwMjQ1MTFaFw0yNzA1MDIwMjUwMTFaMDMxMTAvBgNV BAMTKEUyMzc3MTc0MEU3QkQ4Q0UxRTEwQTU3OTRCMTREQjk0MjVDNDFBMDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk5OE13HfNKhdd32VTEsEXVbyV D16ZGF1m075QIUTWZp5VCig9MBLLhN3/pf41bTwfJV5bCu1z3o69cf3vfcgVLxjC /If4IbsdLUnABYuV1+rIcG6Ia2u8nPOlCGXVghaon0Aj7aQlMunjJ9o+HKE9PC0I A6LdmmnIxxHVk+YYkqojWZuWVmiYCOegHf2yQ+BHQCEvn+BtM+7jJzYpAKDD7rZX 6bzNsgpSxkhz957MIJ5cVKFC92f08QqXk9+JdcyAzP9Q21XA3AFcKCEFnQgjy3EE CNr/YbZ6HX4PAIUMGPctqEELqhUpiXT2LC3ksGsO7ZixlU8/prPpXhv4oYctAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQU4jdxdA572M4eEKV5SxTblCXEGgcwHwYDVR0j BBgwFoAUylR/AF6Egj5qikcXI8FxaOjkRkQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGNlYmYxMTYtZmUyYS00OTFiLWFhYzgtMjIwZWFkMGI1NGUyLzAvQ0E1NDdGMDA1 RTg0ODIzRTZBOEE0NzE3MjNDMTcxNjhFOEU0NDY0NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQTU0N0YwMDVFODQ4MjNFNkE4QTQ3MTcyM0MxNzE2OEU4RTQ0 NjQ0LmNlcjCBoQYIKwYBBQUHAQsEgZQwgZEwgY4GCCsGAQUFBzALhoGBcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzhjZWJmMTE2LWZlMmEtNDkxYi1h YWM4LTIyMGVhZDBiNTRlMi8wLzMyMzAzMjJlMzQzNzJlMzczNDJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMxMzczNjM3MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADKL0owDQYJKoZIhvcN AQELBQADggEBAI8xfxx1MgLag/mqUwIPq1CzFCG1bxWOJI9N+pqaW04J2BMXRes/ lMhXxgyBbCkb8IgyRHkw0qoTh502LFLoZ1Xq3napFGYhcJcnovuvm4TxPcw5U8+J hgEDxmLQ1AGC4sNJPaIQ6PTbtMaT3n2fLt/e00VtFwmWCVkVVguocV0fj2adUpd+ cBVOPOZZxiU9+scOcV4a5sKcLgbwIYin4ugGX1102VCzmdca9MlYtNn28WJpdSMW heQq8r+kng1UHP9W+EFhXNqhwa3zsVUyROW171YXyrvXxxhD3+uwavhqSaYuWDfv FFUtsAx0WRPKyk4/urueFUejnupHDCKTQJQ= -----END CERTIFICATE-----Generated at Wed May 13 05:51:15 2026 by rpki-client