$ rpki-client -vvf rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3230322e35382e3231362e302f32312d3234203d3e203137363731.roa File: 3230322e35382e3231362e302f32312d3234203d3e203137363731.roa (raw, json) Hash identifier: iepgjhjfAaL//AfY/NbzbR2h60MUHzvbMX20VPk5/eA= Subject key identifier: AC:08:7C:4F:63:1A:4E:F6:9E:8D:10:C8:D0:5C:C2:3E:F9:74:BC:88 Certificate issuer: /CN=CA547F005E84823E6A8A471723C17168E8E44644 Certificate serial: 2B4FFD4F1000F095CA5D386DE10426573C56720A Authority key identifier: CA:54:7F:00:5E:84:82:3E:6A:8A:47:17:23:C1:71:68:E8:E4:46:44 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA547F005E84823E6A8A471723C17168E8E44644.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3230322e35382e3231362e302f32312d3234203d3e203137363731.roa Signing time: Sun 03 May 2026 02:50:21 +0000 ROA not before: Sun 03 May 2026 02:45:21 +0000 ROA not after: Sun 02 May 2027 02:50:21 +0000 asID: 17671 IP address blocks: 202.58.216.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/CA547F005E84823E6A8A471723C17168E8E44644.crl rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/CA547F005E84823E6A8A471723C17168E8E44644.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA547F005E84823E6A8A471723C17168E8E44644.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 18:54:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:4f:fd:4f:10:00:f0:95:ca:5d:38:6d:e1:04:26:57:3c:56:72:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA547F005E84823E6A8A471723C17168E8E44644 Validity Not Before: May 3 02:45:21 2026 GMT Not After : May 2 02:50:21 2027 GMT Subject: CN=AC087C4F631A4EF69E8D10C8D05CC23EF974BC88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:b8:1a:c5:d2:1b:85:22:b4:2b:c7:f4:69:ee: c9:70:df:a0:37:51:cf:fb:20:14:68:2e:59:31:7e: a4:1d:2c:3e:71:de:be:f4:65:ae:2b:83:e9:e7:d0: 8b:d0:66:62:aa:72:c4:2e:8f:8d:b9:24:d8:9e:cf: 46:31:4c:da:60:a3:3b:34:83:a4:a9:d5:96:43:9e: 61:b8:9a:d4:ff:a1:34:94:4a:1e:81:1b:f8:d3:6d: cc:00:7a:8e:1f:03:a0:5f:9a:c8:79:a6:19:3d:a7: c7:1e:1a:1a:28:67:b5:98:46:f5:db:ee:ec:d8:92: 5a:06:ab:55:9d:57:8e:aa:24:c1:35:72:79:6c:7b: af:5f:9b:de:5a:1b:f0:1e:70:24:0a:4e:94:e6:fd: 46:ea:89:84:b5:33:ce:6f:f4:d0:40:cd:d1:90:b0: 78:e5:f0:cc:2b:ec:53:09:ed:71:b6:5b:92:71:78: 53:a3:e3:89:3a:71:48:4c:ee:8d:de:a6:08:e7:fe: 5a:87:42:a2:c5:63:4a:f1:b2:b8:3a:af:eb:bd:7b: 28:0b:a0:ee:f2:63:7d:91:94:6f:e0:64:25:2a:8f: 06:57:07:d3:97:4d:39:32:e7:11:ad:fe:f2:72:7c: f7:00:4a:b2:3c:1a:8d:a8:e4:32:d1:ab:a3:0a:e4: b6:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:08:7C:4F:63:1A:4E:F6:9E:8D:10:C8:D0:5C:C2:3E:F9:74:BC:88 X509v3 Authority Key Identifier: keyid:CA:54:7F:00:5E:84:82:3E:6A:8A:47:17:23:C1:71:68:E8:E4:46:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/CA547F005E84823E6A8A471723C17168E8E44644.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA547F005E84823E6A8A471723C17168E8E44644.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3230322e35382e3231362e302f32312d3234203d3e203137363731.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.58.216.0/21 Signature Algorithm: sha256WithRSAEncryption 11:dc:7f:c9:48:a6:e4:72:de:a8:0f:bb:12:92:0f:55:f8:38: 29:5a:d4:bd:38:ef:9c:ab:6c:24:db:9c:24:22:4f:a5:6c:fa: f9:0a:65:57:cd:3b:ec:84:e0:28:18:d7:29:b4:30:a0:f2:ac: 44:17:49:3b:8b:e6:6f:bd:41:63:bb:a4:87:ed:0e:f9:7e:2e: ae:5d:62:38:29:73:8c:b1:d5:f5:03:a1:ff:37:4a:1e:ee:d5: 59:82:a2:0d:0a:77:e0:18:4c:6d:f3:62:86:c2:f0:0b:7c:34: 5b:12:45:51:8f:b6:b3:72:0a:cc:46:f8:14:c9:60:1c:46:d6: f6:41:73:a0:25:ed:6a:42:80:8e:7e:b3:12:47:c2:0d:53:84: 49:db:64:95:0a:78:d0:c4:aa:28:5a:2e:ac:66:69:fd:64:ce: 9d:a9:ac:3d:e0:b3:cc:ff:92:5f:26:76:18:f8:27:5b:0f:81: ca:02:88:02:be:ac:9c:ea:31:34:87:b6:18:fb:31:e7:a3:c4: ff:3d:39:25:47:26:a5:9d:6e:2f:f6:46:8b:89:0a:0c:26:2f: f8:01:03:6f:29:bb:10:43:00:07:dd:cb:ea:44:bc:f1:c2:d5: 5a:23:a2:9d:03:5f:c3:6e:09:31:32:27:78:21:23:c7:a7:e6: dc:40:8b:3b -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUK0/9TxAA8JXKXTht4QQmVzxWcgowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0E1NDdGMDA1RTg0ODIzRTZBOEE0NzE3MjNDMTcxNjhF OEU0NDY0NDAeFw0yNjA1MDMwMjQ1MjFaFw0yNzA1MDIwMjUwMjFaMDMxMTAvBgNV BAMTKEFDMDg3QzRGNjMxQTRFRjY5RThEMTBDOEQwNUNDMjNFRjk3NEJDODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCLuBrF0huFIrQrx/Rp7slw36A3 Uc/7IBRoLlkxfqQdLD5x3r70Za4rg+nn0IvQZmKqcsQuj425JNiez0YxTNpgozs0 g6Sp1ZZDnmG4mtT/oTSUSh6BG/jTbcwAeo4fA6Bfmsh5phk9p8ceGhooZ7WYRvXb 7uzYkloGq1WdV46qJME1cnlse69fm95aG/AecCQKTpTm/UbqiYS1M85v9NBAzdGQ sHjl8Mwr7FMJ7XG2W5JxeFOj44k6cUhM7o3epgjn/lqHQqLFY0rxsrg6r+u9eygL oO7yY32RlG/gZCUqjwZXB9OXTTky5xGt/vJyfPcASrI8Go2o5DLRq6MK5LYnAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUrAh8T2MaTvaejRDI0FzCPvl0vIgwHwYDVR0j BBgwFoAUylR/AF6Egj5qikcXI8FxaOjkRkQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGNlYmYxMTYtZmUyYS00OTFiLWFhYzgtMjIwZWFkMGI1NGUyLzAvQ0E1NDdGMDA1 RTg0ODIzRTZBOEE0NzE3MjNDMTcxNjhFOEU0NDY0NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQTU0N0YwMDVFODQ4MjNFNkE4QTQ3MTcyM0MxNzE2OEU4RTQ0 NjQ0LmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzhjZWJmMTE2LWZlMmEtNDkxYi1h YWM4LTIyMGVhZDBiNTRlMi8wLzMyMzAzMjJlMzUzODJlMzIzMTM2MmUzMDJmMzIz MTJkMzIzNDIwM2QzZTIwMzEzNzM2MzczMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA8o62DANBgkqhkiG 9w0BAQsFAAOCAQEAEdx/yUim5HLeqA+7EpIPVfg4KVrUvTjvnKtsJNucJCJPpWz6 +QplV8077ITgKBjXKbQwoPKsRBdJO4vmb71BY7ukh+0O+X4url1iOClzjLHV9QOh /zdKHu7VWYKiDQp34BhMbfNihsLwC3w0WxJFUY+2s3IKzEb4FMlgHEbW9kFzoCXt akKAjn6zEkfCDVOESdtklQp40MSqKFourGZp/WTOnamsPeCzzP+SXyZ2GPgnWw+B ygKIAr6snOoxNIe2GPsx56PE/z05JUcmpZ1uL/ZGi4kKDCYv+AEDbym7EEMAB93L 6kS88cLVWiOinQNfw24JMTIneCEjx6fm3ECLOw== -----END CERTIFICATE-----Generated at Wed May 13 05:51:10 2026 by rpki-client