$ rpki-client -vvf rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3230322e35382e3232332e302f32342d3234203d3e203137363731.roa File: 3230322e35382e3232332e302f32342d3234203d3e203137363731.roa (raw, json) Hash identifier: ZUX42AN3ZqB4/UHLHex8hUkMqT6pWe4YycrmZqSYXus= Subject key identifier: CE:4E:9A:F1:D7:44:DE:E5:34:1B:34:DB:3D:35:88:6D:9E:64:31:3B Certificate issuer: /CN=CA547F005E84823E6A8A471723C17168E8E44644 Certificate serial: 791AC51EFD23C72E40BDD665F5F069E8BA99AB1D Authority key identifier: CA:54:7F:00:5E:84:82:3E:6A:8A:47:17:23:C1:71:68:E8:E4:46:44 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA547F005E84823E6A8A471723C17168E8E44644.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3230322e35382e3232332e302f32342d3234203d3e203137363731.roa Signing time: Sun 03 May 2026 02:50:16 +0000 ROA not before: Sun 03 May 2026 02:45:16 +0000 ROA not after: Sun 02 May 2027 02:50:16 +0000 asID: 17671 IP address blocks: 202.58.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/CA547F005E84823E6A8A471723C17168E8E44644.crl rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/CA547F005E84823E6A8A471723C17168E8E44644.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA547F005E84823E6A8A471723C17168E8E44644.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 18:54:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:1a:c5:1e:fd:23:c7:2e:40:bd:d6:65:f5:f0:69:e8:ba:99:ab:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA547F005E84823E6A8A471723C17168E8E44644 Validity Not Before: May 3 02:45:16 2026 GMT Not After : May 2 02:50:16 2027 GMT Subject: CN=CE4E9AF1D744DEE5341B34DB3D35886D9E64313B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:01:82:a4:8e:4a:44:d2:e1:50:66:26:d4:9e: 8f:14:b5:52:1b:0c:09:65:3e:c4:fd:2e:41:fa:55: 5a:20:1e:5d:be:26:08:d0:35:33:36:e3:2c:5f:5d: 77:73:17:c5:74:8e:0e:39:e0:42:85:1a:ba:b0:d9: 51:e2:d1:ef:b4:ef:24:10:47:87:1c:37:47:52:4f: c9:d0:88:ff:cd:75:ed:1e:3d:43:46:45:93:62:fc: 67:2f:c7:c8:1b:12:a5:27:de:25:3e:4a:b7:11:27: 0a:12:fa:05:d2:24:48:19:de:a8:ad:24:73:3c:35: 92:36:1d:93:19:e3:34:cf:4d:09:53:3d:13:c6:6a: 76:ad:09:cf:05:3a:53:e6:c5:67:1a:8b:e9:49:05: 02:31:de:34:ef:de:76:d9:09:e3:2e:f5:70:78:ae: 29:bb:c4:42:0e:84:a2:2d:76:f0:b7:d3:7c:ff:51: 56:78:78:2a:88:78:a7:35:a9:aa:f3:ab:d2:86:bc: 85:21:90:09:59:36:14:7b:60:d6:39:a5:5a:49:4e: 22:dd:8e:cc:b6:34:a0:99:72:fe:fe:45:31:57:ab: 67:47:38:9e:df:e0:c5:af:4d:ac:bd:94:f6:7a:a8: 15:70:69:44:b6:18:bb:e2:a8:49:4f:4b:55:f5:73: 44:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:4E:9A:F1:D7:44:DE:E5:34:1B:34:DB:3D:35:88:6D:9E:64:31:3B X509v3 Authority Key Identifier: keyid:CA:54:7F:00:5E:84:82:3E:6A:8A:47:17:23:C1:71:68:E8:E4:46:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/CA547F005E84823E6A8A471723C17168E8E44644.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA547F005E84823E6A8A471723C17168E8E44644.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3230322e35382e3232332e302f32342d3234203d3e203137363731.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.58.223.0/24 Signature Algorithm: sha256WithRSAEncryption 92:29:3b:de:a3:6a:78:7e:d3:d0:cc:ee:bc:43:57:0a:23:5e: 78:72:44:68:c5:e8:85:26:e0:37:04:49:43:70:4b:6a:33:cc: 30:10:d6:ca:0b:36:49:5e:77:02:5e:a9:03:6b:21:19:2f:64: 86:1c:77:c8:d5:18:1a:ba:bf:c2:6e:ed:bb:4b:a8:d8:15:5e: 3c:04:29:75:72:05:d1:bc:ac:d3:5d:d7:f0:9e:cf:48:cf:40: 29:14:79:0e:da:2b:79:a6:d3:1a:ce:2d:ac:d3:fa:2b:8d:38: 94:4d:e6:12:ae:c3:a5:4d:28:9d:de:68:a5:b8:0e:a4:ad:75: 21:d5:f8:c8:90:db:1e:45:1c:ec:ab:a5:4e:7d:62:e4:f0:5e: 3a:8c:46:46:49:55:d3:e4:f4:3a:b5:ff:00:72:2f:c1:b1:f4: 8a:b1:86:8f:0d:23:80:f1:2d:99:29:24:39:38:09:60:29:9e: 6a:4b:0d:98:36:de:46:cd:56:99:61:c0:ab:97:ad:d8:4b:8d: 3f:75:32:1a:45:99:8e:c9:a0:c0:85:5c:41:87:14:02:ce:45: d4:2f:de:e7:bd:b8:e7:73:8e:c0:b5:2e:fb:11:b7:36:ba:d5: 83:a0:a3:0d:42:2e:cb:af:f4:2b:11:f5:11:c5:06:a1:fb:14: b9:39:5e:f3 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUeRrFHv0jxy5AvdZl9fBp6LqZqx0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0E1NDdGMDA1RTg0ODIzRTZBOEE0NzE3MjNDMTcxNjhF OEU0NDY0NDAeFw0yNjA1MDMwMjQ1MTZaFw0yNzA1MDIwMjUwMTZaMDMxMTAvBgNV BAMTKENFNEU5QUYxRDc0NERFRTUzNDFCMzREQjNEMzU4ODZEOUU2NDMxM0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeAYKkjkpE0uFQZibUno8UtVIb DAllPsT9LkH6VVogHl2+JgjQNTM24yxfXXdzF8V0jg454EKFGrqw2VHi0e+07yQQ R4ccN0dST8nQiP/Nde0ePUNGRZNi/Gcvx8gbEqUn3iU+SrcRJwoS+gXSJEgZ3qit JHM8NZI2HZMZ4zTPTQlTPRPGanatCc8FOlPmxWcai+lJBQIx3jTv3nbZCeMu9XB4 rim7xEIOhKItdvC303z/UVZ4eCqIeKc1qarzq9KGvIUhkAlZNhR7YNY5pVpJTiLd jsy2NKCZcv7+RTFXq2dHOJ7f4MWvTay9lPZ6qBVwaUS2GLviqElPS1X1c0TzAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUzk6a8ddE3uU0GzTbPTWIbZ5kMTswHwYDVR0j BBgwFoAUylR/AF6Egj5qikcXI8FxaOjkRkQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGNlYmYxMTYtZmUyYS00OTFiLWFhYzgtMjIwZWFkMGI1NGUyLzAvQ0E1NDdGMDA1 RTg0ODIzRTZBOEE0NzE3MjNDMTcxNjhFOEU0NDY0NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQTU0N0YwMDVFODQ4MjNFNkE4QTQ3MTcyM0MxNzE2OEU4RTQ0 NjQ0LmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzhjZWJmMTE2LWZlMmEtNDkxYi1h YWM4LTIyMGVhZDBiNTRlMi8wLzMyMzAzMjJlMzUzODJlMzIzMjMzMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNzM2MzczMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMo63zANBgkqhkiG 9w0BAQsFAAOCAQEAkik73qNqeH7T0MzuvENXCiNeeHJEaMXohSbgNwRJQ3BLajPM MBDWygs2SV53Al6pA2shGS9khhx3yNUYGrq/wm7tu0uo2BVePAQpdXIF0bys013X 8J7PSM9AKRR5DtoreabTGs4trNP6K404lE3mEq7DpU0ond5opbgOpK11IdX4yJDb HkUc7KulTn1i5PBeOoxGRklV0+T0OrX/AHIvwbH0irGGjw0jgPEtmSkkOTgJYCme aksNmDbeRs1WmWHAq5et2EuNP3UyGkWZjsmgwIVcQYcUAs5F1C/e572453OOwLUu +xG3NrrVg6CjDUIuy6/0KxH1EcUGofsUuTle8w== -----END CERTIFICATE-----Generated at Wed May 13 05:51:11 2026 by rpki-client