$ rpki-client -vvf rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3230322e35322e31312e302f32342d3234203d3e203137363731.roa File: 3230322e35322e31312e302f32342d3234203d3e203137363731.roa (raw, json) Hash identifier: 2YvAu7wl7V5rfB4U3PYLOwl5oyswovxC99yuQczRjaI= Subject key identifier: E7:E9:B0:95:A8:99:E9:7F:08:CD:04:1E:1C:6C:16:FA:80:76:49:F7 Certificate issuer: /CN=CA547F005E84823E6A8A471723C17168E8E44644 Certificate serial: 18E16EA3EB09E2446DE832E3E22DE76FCA0245B2 Authority key identifier: CA:54:7F:00:5E:84:82:3E:6A:8A:47:17:23:C1:71:68:E8:E4:46:44 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA547F005E84823E6A8A471723C17168E8E44644.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3230322e35322e31312e302f32342d3234203d3e203137363731.roa Signing time: Sun 03 May 2026 02:50:09 +0000 ROA not before: Sun 03 May 2026 02:45:09 +0000 ROA not after: Sun 02 May 2027 02:50:09 +0000 asID: 17671 IP address blocks: 202.52.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/CA547F005E84823E6A8A471723C17168E8E44644.crl rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/CA547F005E84823E6A8A471723C17168E8E44644.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA547F005E84823E6A8A471723C17168E8E44644.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 18:54:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:e1:6e:a3:eb:09:e2:44:6d:e8:32:e3:e2:2d:e7:6f:ca:02:45:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA547F005E84823E6A8A471723C17168E8E44644 Validity Not Before: May 3 02:45:09 2026 GMT Not After : May 2 02:50:09 2027 GMT Subject: CN=E7E9B095A899E97F08CD041E1C6C16FA807649F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:4f:4b:80:fc:04:94:1b:9a:20:56:fa:cd:cc: d5:bc:55:c2:67:31:36:71:8d:c9:9c:ad:d6:af:db: 4f:30:a0:47:11:18:03:05:31:e0:0c:75:81:46:bd: 86:d4:ae:fa:53:e8:cf:c7:a7:fc:f5:55:86:bc:18: c5:8e:55:8f:32:f8:ae:7b:64:4c:39:2f:d7:6f:39: 13:8b:47:99:1f:13:17:80:d5:75:ff:5d:f8:c4:e0: 42:f8:2f:e2:25:81:9d:a9:2f:c3:c1:bb:80:eb:a2: a1:08:be:f8:84:72:f9:ac:a7:df:7c:0f:8c:78:c4: 81:07:93:06:30:1a:20:76:b1:77:ab:6d:9e:50:f8: f7:40:c4:ef:6a:b4:65:49:c4:9d:f9:a2:1e:69:74: cc:9e:19:61:24:34:e5:37:29:d5:a1:d1:d3:57:d8: a7:8c:29:12:cd:fa:52:ee:43:44:ff:96:cf:ed:c5: c4:18:55:88:ad:c2:1b:c8:92:4a:99:64:0a:02:0b: 4d:8a:d5:f5:8d:c9:9f:35:99:99:7c:65:3f:51:13: cf:c8:f7:13:88:ba:da:14:ed:8e:fe:aa:1e:d7:a5: f3:dd:a9:d3:86:9b:80:c3:6a:75:16:87:ec:b1:99: 63:9e:a9:90:ce:ea:93:bb:e2:50:d8:2f:32:b6:22: 55:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:E9:B0:95:A8:99:E9:7F:08:CD:04:1E:1C:6C:16:FA:80:76:49:F7 X509v3 Authority Key Identifier: keyid:CA:54:7F:00:5E:84:82:3E:6A:8A:47:17:23:C1:71:68:E8:E4:46:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/CA547F005E84823E6A8A471723C17168E8E44644.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA547F005E84823E6A8A471723C17168E8E44644.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3230322e35322e31312e302f32342d3234203d3e203137363731.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.52.11.0/24 Signature Algorithm: sha256WithRSAEncryption 0e:c7:60:12:37:90:48:a2:9a:35:2b:aa:d6:ed:8b:51:14:e6: 77:94:21:6e:5e:22:1b:47:6e:57:9d:24:6d:d2:af:dd:40:e0: b6:2f:22:91:f4:f2:13:25:fa:35:e7:77:7e:59:c9:bc:3f:b0: 68:13:fd:5f:29:b0:ff:a7:cc:4b:8a:53:b8:db:ca:1f:bb:c4: cc:0a:8d:0d:82:63:5b:e5:bc:d8:49:dc:49:cf:fc:11:e3:18: 35:14:5b:87:12:9d:f0:36:0e:c3:41:22:b1:dd:5a:aa:d1:2a: ef:e0:ba:c7:1f:ca:f7:98:82:12:d3:cf:09:b0:1f:ba:e1:2b: 0a:f0:2b:34:8c:13:94:40:d0:75:d9:2b:24:48:7e:bd:da:e4: ef:2c:5e:03:ef:a8:95:38:5c:ed:5f:cb:95:45:3a:8e:81:87: a8:ed:52:bb:1a:33:08:20:3a:c2:9d:84:24:28:cc:34:d8:13: 3b:ce:37:f3:b4:2a:3c:33:5c:8a:0d:16:9e:08:f7:99:43:c9: bc:9e:94:71:cd:e9:1e:71:9c:c8:8a:76:23:7a:4d:13:03:20: 89:00:3b:13:9c:a4:6f:38:7e:89:b9:93:59:4a:23:dd:12:3e: 57:fa:18:98:84:52:ca:dd:c1:d3:02:4d:f5:72:30:0e:5c:ea: 23:ea:7f:0b -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUGOFuo+sJ4kRt6DLj4i3nb8oCRbIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0E1NDdGMDA1RTg0ODIzRTZBOEE0NzE3MjNDMTcxNjhF OEU0NDY0NDAeFw0yNjA1MDMwMjQ1MDlaFw0yNzA1MDIwMjUwMDlaMDMxMTAvBgNV BAMTKEU3RTlCMDk1QTg5OUU5N0YwOENEMDQxRTFDNkMxNkZBODA3NjQ5RjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnT0uA/ASUG5ogVvrNzNW8VcJn MTZxjcmcrdav208woEcRGAMFMeAMdYFGvYbUrvpT6M/Hp/z1VYa8GMWOVY8y+K57 ZEw5L9dvOROLR5kfExeA1XX/XfjE4EL4L+IlgZ2pL8PBu4DroqEIvviEcvmsp998 D4x4xIEHkwYwGiB2sXerbZ5Q+PdAxO9qtGVJxJ35oh5pdMyeGWEkNOU3KdWh0dNX 2KeMKRLN+lLuQ0T/ls/txcQYVYitwhvIkkqZZAoCC02K1fWNyZ81mZl8ZT9RE8/I 9xOIutoU7Y7+qh7XpfPdqdOGm4DDanUWh+yxmWOeqZDO6pO74lDYLzK2IlWHAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQU5+mwlaiZ6X8IzQQeHGwW+oB2SfcwHwYDVR0j BBgwFoAUylR/AF6Egj5qikcXI8FxaOjkRkQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGNlYmYxMTYtZmUyYS00OTFiLWFhYzgtMjIwZWFkMGI1NGUyLzAvQ0E1NDdGMDA1 RTg0ODIzRTZBOEE0NzE3MjNDMTcxNjhFOEU0NDY0NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQTU0N0YwMDVFODQ4MjNFNkE4QTQ3MTcyM0MxNzE2OEU4RTQ0 NjQ0LmNlcjCBoQYIKwYBBQUHAQsEgZQwgZEwgY4GCCsGAQUFBzALhoGBcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzhjZWJmMTE2LWZlMmEtNDkxYi1h YWM4LTIyMGVhZDBiNTRlMi8wLzMyMzAzMjJlMzUzMjJlMzEzMTJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMxMzczNjM3MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADKNAswDQYJKoZIhvcN AQELBQADggEBAA7HYBI3kEiimjUrqtbti1EU5neUIW5eIhtHbledJG3Sr91A4LYv IpH08hMl+jXnd35Zybw/sGgT/V8psP+nzEuKU7jbyh+7xMwKjQ2CY1vlvNhJ3EnP /BHjGDUUW4cSnfA2DsNBIrHdWqrRKu/guscfyveYghLTzwmwH7rhKwrwKzSME5RA 0HXZKyRIfr3a5O8sXgPvqJU4XO1fy5VFOo6Bh6jtUrsaMwggOsKdhCQozDTYEzvO N/O0KjwzXIoNFp4I95lDybyelHHN6R5xnMiKdiN6TRMDIIkAOxOcpG84fom5k1lK I90SPlf6GJiEUsrdwdMCTfVyMA5c6iPqfws= -----END CERTIFICATE-----Generated at Wed May 13 05:51:15 2026 by rpki-client