$ rpki-client -vvf rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3230322e34372e37372e302f32342d3234203d3e203137363731.roa File: 3230322e34372e37372e302f32342d3234203d3e203137363731.roa (raw, json) Hash identifier: 5HRxC+eaBf7YyjPog9O9kXRIAEUgEeCy5LTscuFESwE= Subject key identifier: DA:47:23:B1:D8:D5:93:EE:73:45:6E:55:7D:C9:E9:34:6F:96:48:83 Certificate issuer: /CN=CA547F005E84823E6A8A471723C17168E8E44644 Certificate serial: 603DEB2BC2CB460B595C4A8CAFE06F29DF0C2B27 Authority key identifier: CA:54:7F:00:5E:84:82:3E:6A:8A:47:17:23:C1:71:68:E8:E4:46:44 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA547F005E84823E6A8A471723C17168E8E44644.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3230322e34372e37372e302f32342d3234203d3e203137363731.roa Signing time: Sun 03 May 2026 02:50:07 +0000 ROA not before: Sun 03 May 2026 02:45:07 +0000 ROA not after: Sun 02 May 2027 02:50:07 +0000 asID: 17671 IP address blocks: 202.47.77.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/CA547F005E84823E6A8A471723C17168E8E44644.crl rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/CA547F005E84823E6A8A471723C17168E8E44644.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA547F005E84823E6A8A471723C17168E8E44644.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 18:54:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:3d:eb:2b:c2:cb:46:0b:59:5c:4a:8c:af:e0:6f:29:df:0c:2b:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA547F005E84823E6A8A471723C17168E8E44644 Validity Not Before: May 3 02:45:07 2026 GMT Not After : May 2 02:50:07 2027 GMT Subject: CN=DA4723B1D8D593EE73456E557DC9E9346F964883 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ee:51:c7:f7:5b:6a:2f:53:85:4e:32:be:fb: 7c:5b:d5:4b:f1:67:4d:63:8e:77:e7:68:b5:f6:de: de:d1:8b:cd:17:fd:b1:78:95:51:0a:e0:5d:04:09: 0d:1e:d5:57:98:88:40:c0:f6:a8:2f:d2:d0:ba:f7: 62:3d:ab:df:da:f1:41:fc:5e:02:37:71:d1:bf:4d: f5:ca:e8:ce:43:39:23:7a:12:68:bd:68:0a:ad:0d: d3:6e:29:96:71:e3:95:4d:d5:fe:b0:6f:de:2d:e3: 7b:23:92:ab:93:3d:8d:aa:1d:11:7f:ee:44:2e:a5: 90:ba:77:58:9a:39:01:4d:f3:f8:14:e3:66:22:a2: 8a:03:31:46:a0:b2:32:07:c8:44:62:9c:03:53:fa: d4:9a:78:f2:b9:23:6f:32:a2:70:1c:63:5b:65:d3: 0e:82:a1:83:3f:7d:3d:d7:c0:a4:7f:c6:b2:0d:46: 7e:81:0a:87:0e:79:95:17:54:18:18:b4:ea:96:8c: f8:a2:90:0d:32:ab:81:6c:52:b0:33:87:e8:cc:8d: ad:aa:bf:30:25:86:1b:23:62:ee:b1:d7:39:ba:ce: 68:5e:2b:a4:c3:65:dc:a1:2b:cb:eb:9a:fe:6a:2b: f2:f0:d3:f4:29:2e:0a:47:bf:45:d7:93:80:50:b1: 96:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:47:23:B1:D8:D5:93:EE:73:45:6E:55:7D:C9:E9:34:6F:96:48:83 X509v3 Authority Key Identifier: keyid:CA:54:7F:00:5E:84:82:3E:6A:8A:47:17:23:C1:71:68:E8:E4:46:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/CA547F005E84823E6A8A471723C17168E8E44644.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA547F005E84823E6A8A471723C17168E8E44644.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3230322e34372e37372e302f32342d3234203d3e203137363731.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.47.77.0/24 Signature Algorithm: sha256WithRSAEncryption 30:08:bc:05:08:6f:4d:ea:f6:22:59:23:6c:2e:d0:63:a3:cb: 50:df:3a:6a:ce:9a:8c:60:e8:a6:b0:f0:84:7d:11:c8:9f:a1: b6:45:3a:f0:bd:20:d1:49:61:63:a2:8a:cc:1c:d1:3b:c8:03: f0:69:29:62:1a:23:c3:b8:b4:79:f5:27:e6:21:2a:0f:11:8c: fb:11:1a:1f:e3:17:39:f0:6e:9a:f6:84:0b:82:b3:9a:49:3b: e1:ef:a2:35:f4:be:33:bc:7b:99:73:9f:31:cf:12:2c:4a:9d: 4c:72:a2:d1:fc:01:ac:8f:2d:1c:03:aa:09:2a:5b:a6:6f:cf: 14:63:67:50:c7:64:fd:88:b9:b5:7f:e3:8b:4e:69:08:e1:f0: b5:16:b9:1d:9c:d5:d0:c3:aa:5c:bb:83:66:19:dc:14:5a:ee: 14:89:a7:bc:09:68:b1:7a:68:1e:fe:68:59:45:73:1d:5f:fc: 81:31:65:be:d8:da:68:d4:6e:09:8b:61:af:43:4d:38:95:90: 3b:dc:fc:de:e8:f4:16:eb:42:c0:ec:33:53:3c:e3:14:17:28: b5:ea:fb:01:29:bf:45:89:d0:73:3d:89:ad:9b:d1:7d:f1:ea: 3e:01:04:dc:39:fc:f4:bb:08:3b:0b:16:6a:6b:06:1a:af:38: dc:31:cf:94 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUYD3rK8LLRgtZXEqMr+BvKd8MKycwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0E1NDdGMDA1RTg0ODIzRTZBOEE0NzE3MjNDMTcxNjhF OEU0NDY0NDAeFw0yNjA1MDMwMjQ1MDdaFw0yNzA1MDIwMjUwMDdaMDMxMTAvBgNV BAMTKERBNDcyM0IxRDhENTkzRUU3MzQ1NkU1NTdEQzlFOTM0NkY5NjQ4ODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo7lHH91tqL1OFTjK++3xb1Uvx Z01jjnfnaLX23t7Ri80X/bF4lVEK4F0ECQ0e1VeYiEDA9qgv0tC692I9q9/a8UH8 XgI3cdG/TfXK6M5DOSN6Emi9aAqtDdNuKZZx45VN1f6wb94t43sjkquTPY2qHRF/ 7kQupZC6d1iaOQFN8/gU42YioooDMUagsjIHyERinANT+tSaePK5I28yonAcY1tl 0w6CoYM/fT3XwKR/xrINRn6BCocOeZUXVBgYtOqWjPiikA0yq4FsUrAzh+jMja2q vzAlhhsjYu6x1zm6zmheK6TDZdyhK8vrmv5qK/Lw0/QpLgpHv0XXk4BQsZbvAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQU2kcjsdjVk+5zRW5VfcnpNG+WSIMwHwYDVR0j BBgwFoAUylR/AF6Egj5qikcXI8FxaOjkRkQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGNlYmYxMTYtZmUyYS00OTFiLWFhYzgtMjIwZWFkMGI1NGUyLzAvQ0E1NDdGMDA1 RTg0ODIzRTZBOEE0NzE3MjNDMTcxNjhFOEU0NDY0NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQTU0N0YwMDVFODQ4MjNFNkE4QTQ3MTcyM0MxNzE2OEU4RTQ0 NjQ0LmNlcjCBoQYIKwYBBQUHAQsEgZQwgZEwgY4GCCsGAQUFBzALhoGBcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzhjZWJmMTE2LWZlMmEtNDkxYi1h YWM4LTIyMGVhZDBiNTRlMi8wLzMyMzAzMjJlMzQzNzJlMzczNzJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMxMzczNjM3MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADKL00wDQYJKoZIhvcN AQELBQADggEBADAIvAUIb03q9iJZI2wu0GOjy1DfOmrOmoxg6Kaw8IR9EcifobZF OvC9INFJYWOiiswc0TvIA/BpKWIaI8O4tHn1J+YhKg8RjPsRGh/jFznwbpr2hAuC s5pJO+HvojX0vjO8e5lznzHPEixKnUxyotH8AayPLRwDqgkqW6ZvzxRjZ1DHZP2I ubV/44tOaQjh8LUWuR2c1dDDqly7g2YZ3BRa7hSJp7wJaLF6aB7+aFlFcx1f/IEx Zb7Y2mjUbgmLYa9DTTiVkDvc/N7o9BbrQsDsM1M84xQXKLXq+wEpv0WJ0HM9ia2b 0X3x6j4BBNw5/PS7CDsLFmprBhqvONwxz5Q= -----END CERTIFICATE-----Generated at Wed May 13 05:51:17 2026 by rpki-client