$ rpki-client -vvf rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3230322e35322e382e302f32322d3234203d3e203137363731.roa File: 3230322e35322e382e302f32322d3234203d3e203137363731.roa (raw, json) Hash identifier: 7Wgq/AFVBUAywc28/H4a4Wo1WGh93KU1FoWyiU7BrTk= Subject key identifier: 5D:70:00:E9:AF:9D:89:21:1C:D2:9A:EE:4A:E8:B5:F9:2E:7A:ED:1A Certificate issuer: /CN=CA547F005E84823E6A8A471723C17168E8E44644 Certificate serial: 081E058CCABE941854825CAA0F35DCAF50DBCA67 Authority key identifier: CA:54:7F:00:5E:84:82:3E:6A:8A:47:17:23:C1:71:68:E8:E4:46:44 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA547F005E84823E6A8A471723C17168E8E44644.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3230322e35322e382e302f32322d3234203d3e203137363731.roa Signing time: Sun 03 May 2026 02:50:14 +0000 ROA not before: Sun 03 May 2026 02:45:14 +0000 ROA not after: Sun 02 May 2027 02:50:14 +0000 asID: 17671 IP address blocks: 202.52.8.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/CA547F005E84823E6A8A471723C17168E8E44644.crl rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/CA547F005E84823E6A8A471723C17168E8E44644.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA547F005E84823E6A8A471723C17168E8E44644.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 18:54:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:1e:05:8c:ca:be:94:18:54:82:5c:aa:0f:35:dc:af:50:db:ca:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA547F005E84823E6A8A471723C17168E8E44644 Validity Not Before: May 3 02:45:14 2026 GMT Not After : May 2 02:50:14 2027 GMT Subject: CN=5D7000E9AF9D89211CD29AEE4AE8B5F92E7AED1A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:be:23:fa:25:c7:3f:ba:70:32:20:85:13:e1: 79:48:02:a3:dc:09:18:03:d1:dd:02:aa:8a:5f:5a: a2:0e:9f:44:1b:6b:9f:9b:47:06:9c:ce:b4:ba:58: ff:e8:75:c4:f2:a0:83:e3:9a:40:f8:85:77:51:38: a7:1d:2f:bb:e5:dd:5a:74:be:f3:7d:a0:ff:45:7b: 12:8c:c0:48:82:af:fa:01:9d:67:79:70:a8:e2:7d: 3e:40:0b:eb:38:f3:2e:a5:60:3d:fe:4e:9f:f7:9a: 2c:60:d7:66:ca:13:22:8b:db:32:0b:80:b3:c6:8d: 56:d3:e7:53:79:7c:b5:ed:f9:14:35:cb:3e:e9:5e: b9:68:1c:e4:1c:0c:e4:00:8b:54:a1:94:33:18:2b: fb:87:1a:8e:3d:c5:fc:97:40:c3:0e:20:8e:11:dd: b4:1e:29:06:eb:4b:f9:9b:0f:67:39:22:ae:bd:a3: dc:47:c4:1f:c1:c2:a3:c2:58:ed:0e:ab:d4:2e:96: 87:a5:b9:e6:11:9c:e9:b8:1c:aa:17:d2:81:81:be: 80:99:df:24:5c:d9:4a:e3:62:92:f7:f2:fa:64:ed: 9c:66:d4:a1:dd:2b:c9:f8:b7:bb:87:ba:38:82:eb: be:e9:2a:d1:e9:ef:1e:75:a7:3c:64:e8:45:c6:c2: cb:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:70:00:E9:AF:9D:89:21:1C:D2:9A:EE:4A:E8:B5:F9:2E:7A:ED:1A X509v3 Authority Key Identifier: keyid:CA:54:7F:00:5E:84:82:3E:6A:8A:47:17:23:C1:71:68:E8:E4:46:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/CA547F005E84823E6A8A471723C17168E8E44644.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA547F005E84823E6A8A471723C17168E8E44644.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3230322e35322e382e302f32322d3234203d3e203137363731.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.52.8.0/22 Signature Algorithm: sha256WithRSAEncryption 06:95:e6:54:53:19:70:7b:f9:c5:fa:00:b6:c9:e0:4f:c1:4b: 9a:da:62:42:ba:0d:74:77:f3:a3:50:74:a9:50:d2:4d:36:8b: 3a:bc:e2:95:ca:a9:15:b5:6f:a7:05:73:6c:da:31:02:9a:00: 95:94:49:ac:a2:f1:48:c5:9f:80:14:41:ab:60:cb:d4:98:c3: 13:98:72:6c:8f:e3:5a:ac:08:a4:ee:97:5f:aa:dd:d9:ff:82: 2d:bb:d8:2f:fe:3f:03:6b:bd:0f:53:f9:d3:e9:89:49:4a:99: e4:4e:a9:37:a9:06:b2:d5:2c:a1:1f:9f:3d:f6:ea:1a:84:35: 50:26:50:c0:1b:0d:48:f5:21:50:14:57:d8:ae:cd:0a:52:b3: 73:fc:ca:4b:fd:8b:c0:32:44:0f:13:d9:c5:c9:32:79:e7:0e: 6b:45:61:5c:63:46:28:0f:75:c8:8c:de:c5:5f:5b:b8:93:89: 55:05:de:02:63:62:f8:c8:5d:9d:e2:55:f2:ff:6d:4d:84:5d: ad:89:47:28:ac:31:ce:79:bd:87:d3:f2:fd:88:08:7b:c6:d6: 02:d9:e2:b9:55:29:38:8c:59:73:04:0b:bc:4b:68:44:aa:87: bf:f6:d2:e6:e9:e4:70:3b:70:bc:bb:78:f3:2e:ea:c6:d8:9d: 31:01:f3:e2 -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgIUCB4FjMq+lBhUglyqDzXcr1DbymcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0E1NDdGMDA1RTg0ODIzRTZBOEE0NzE3MjNDMTcxNjhF OEU0NDY0NDAeFw0yNjA1MDMwMjQ1MTRaFw0yNzA1MDIwMjUwMTRaMDMxMTAvBgNV BAMTKDVENzAwMEU5QUY5RDg5MjExQ0QyOUFFRTRBRThCNUY5MkU3QUVEMUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbviP6Jcc/unAyIIUT4XlIAqPc CRgD0d0CqopfWqIOn0Qba5+bRwaczrS6WP/odcTyoIPjmkD4hXdROKcdL7vl3Vp0 vvN9oP9FexKMwEiCr/oBnWd5cKjifT5AC+s48y6lYD3+Tp/3mixg12bKEyKL2zIL gLPGjVbT51N5fLXt+RQ1yz7pXrloHOQcDOQAi1ShlDMYK/uHGo49xfyXQMMOII4R 3bQeKQbrS/mbD2c5Iq69o9xHxB/BwqPCWO0Oq9QuloelueYRnOm4HKoX0oGBvoCZ 3yRc2UrjYpL38vpk7Zxm1KHdK8n4t7uHujiC677pKtHp7x51pzxk6EXGwsshAgMB AAGjggItMIICKTAdBgNVHQ4EFgQUXXAA6a+diSEc0pruSui1+S567RowHwYDVR0j BBgwFoAUylR/AF6Egj5qikcXI8FxaOjkRkQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGNlYmYxMTYtZmUyYS00OTFiLWFhYzgtMjIwZWFkMGI1NGUyLzAvQ0E1NDdGMDA1 RTg0ODIzRTZBOEE0NzE3MjNDMTcxNjhFOEU0NDY0NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQTU0N0YwMDVFODQ4MjNFNkE4QTQ3MTcyM0MxNzE2OEU4RTQ0 NjQ0LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUFBzALhn9yc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGNlYmYxMTYtZmUyYS00OTFiLWFh YzgtMjIwZWFkMGI1NGUyLzAvMzIzMDMyMmUzNTMyMmUzODJlMzAyZjMyMzIyZDMy MzQyMDNkM2UyMDMxMzczNjM3MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBALKNAgwDQYJKoZIhvcNAQEL BQADggEBAAaV5lRTGXB7+cX6ALbJ4E/BS5raYkK6DXR386NQdKlQ0k02izq84pXK qRW1b6cFc2zaMQKaAJWUSayi8UjFn4AUQatgy9SYwxOYcmyP41qsCKTul1+q3dn/ gi272C/+PwNrvQ9T+dPpiUlKmeROqTepBrLVLKEfnz326hqENVAmUMAbDUj1IVAU V9iuzQpSs3P8ykv9i8AyRA8T2cXJMnnnDmtFYVxjRigPdciM3sVfW7iTiVUF3gJj YvjIXZ3iVfL/bU2EXa2JRyisMc55vYfT8v2ICHvG1gLZ4rlVKTiMWXMEC7xLaESq h7/20ubp5HA7cLy7ePMu6sbYnTEB8+I= -----END CERTIFICATE-----Generated at Wed May 13 05:51:13 2026 by rpki-client