$ rpki-client -vvf rpki-rsync.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/3231302e3234372e3234362e302f32342d3234203d3e20313331373435.roa File: 3231302e3234372e3234362e302f32342d3234203d3e20313331373435.roa (raw, json) Hash identifier: i+qtws7Oi1iB0D4v0zddm18REaIEnLKsYF0sq4QBY98= Subject key identifier: A3:65:6E:32:3B:22:F2:01:0E:A1:A6:B4:C2:19:42:85:3F:51:E0:A9 Certificate issuer: /CN=207EA811568CF1DB9A757936B650F6F68EBB08B5 Certificate serial: 58410FC5B5CFE41AFC8B690738214E3560135865 Authority key identifier: 20:7E:A8:11:56:8C:F1:DB:9A:75:79:36:B6:50:F6:F6:8E:BB:08:B5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/207EA811568CF1DB9A757936B650F6F68EBB08B5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/3231302e3234372e3234362e302f32342d3234203d3e20313331373435.roa Signing time: Sun 03 May 2026 02:53:11 +0000 ROA not before: Sun 03 May 2026 02:48:11 +0000 ROA not after: Sun 02 May 2027 02:53:11 +0000 asID: 131745 IP address blocks: 210.247.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/207EA811568CF1DB9A757936B650F6F68EBB08B5.crl rsync://rpki-rsync.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/207EA811568CF1DB9A757936B650F6F68EBB08B5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/207EA811568CF1DB9A757936B650F6F68EBB08B5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 10:27:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:41:0f:c5:b5:cf:e4:1a:fc:8b:69:07:38:21:4e:35:60:13:58:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=207EA811568CF1DB9A757936B650F6F68EBB08B5 Validity Not Before: May 3 02:48:11 2026 GMT Not After : May 2 02:53:11 2027 GMT Subject: CN=A3656E323B22F2010EA1A6B4C21942853F51E0A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:03:2e:f4:df:cb:8d:c0:95:60:77:9b:42:5a: 89:dc:f6:31:bb:02:27:be:47:4e:71:0c:2a:b2:82: ee:a9:48:66:53:e9:f5:f2:19:ba:89:b9:7d:28:dd: c6:d2:97:4d:3e:67:9f:da:c4:0b:b2:d1:70:44:a8: be:df:92:c7:2c:31:ab:f6:4b:b9:c5:14:7a:9f:1e: 14:30:be:21:ca:56:24:32:c0:cd:e5:11:eb:b1:16: 4a:14:5e:c1:04:0c:fd:e1:5e:e5:f4:eb:ee:58:44: 61:34:c5:68:fe:a1:01:9b:83:b0:93:29:b6:b5:31: 38:c3:51:f5:a6:05:7a:4a:d7:05:0c:03:c4:d4:01: 22:98:49:48:0b:72:e7:4e:77:69:d7:9c:fd:50:ef: 10:d9:2a:53:a6:31:a7:4e:3c:5e:35:4c:41:b1:37: 07:07:94:b9:99:5a:05:56:0e:8f:12:b2:de:c0:1a: 69:e8:c3:61:a9:3c:c5:ce:46:5c:ad:ce:cf:20:74: 1c:f7:54:ec:dd:f9:d5:4c:57:b9:d9:7e:32:f1:b4: ee:34:4c:84:68:e4:cc:9f:56:d9:3d:3c:9d:43:7a: 01:00:df:ff:ba:98:e2:bf:a3:4f:c7:14:10:ef:98: fd:c7:61:b7:fb:cb:00:29:fc:cb:f2:37:c5:e5:b5: a2:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:65:6E:32:3B:22:F2:01:0E:A1:A6:B4:C2:19:42:85:3F:51:E0:A9 X509v3 Authority Key Identifier: keyid:20:7E:A8:11:56:8C:F1:DB:9A:75:79:36:B6:50:F6:F6:8E:BB:08:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/207EA811568CF1DB9A757936B650F6F68EBB08B5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/207EA811568CF1DB9A757936B650F6F68EBB08B5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/3231302e3234372e3234362e302f32342d3234203d3e20313331373435.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 210.247.246.0/24 Signature Algorithm: sha256WithRSAEncryption 68:2c:a7:59:db:d1:af:18:6b:fb:54:11:f5:4b:52:cd:0e:48: 6f:7b:fe:d7:df:2e:19:46:55:41:3c:63:0f:aa:f9:0b:65:a9: 2d:2f:75:19:3b:4a:41:ce:e3:95:61:fb:5d:ac:86:2e:f7:ec: a0:45:ab:a5:00:80:18:49:13:d7:a3:8d:ff:76:16:81:17:b4: 87:7e:f0:79:ab:13:8a:1e:41:85:25:fe:31:b4:63:2d:ae:d5: d8:8c:70:ca:52:09:1d:1e:35:5a:8e:e9:9c:42:b1:63:0a:e8: 18:7f:c7:72:f4:ad:bf:dc:17:dd:66:4c:01:10:66:a3:5a:16: 47:f0:dd:d6:4b:0c:9e:d8:80:b7:9c:82:0b:86:cd:16:1b:a5: 9d:4c:d8:cf:30:7c:90:f8:d6:da:d1:81:5d:e2:f7:08:e5:84: 0d:ed:2b:09:b4:a5:94:4e:fb:14:af:94:17:80:1e:38:7b:ff: d2:7c:8a:94:4e:ac:d0:10:a5:89:60:62:44:b3:15:a9:15:4a: 4b:39:ed:96:18:e4:20:6d:7b:2f:92:cb:eb:de:e0:a1:91:06: 66:19:aa:e8:c2:ab:31:79:38:2b:fe:b8:27:99:a3:5d:90:65: 09:92:ee:0b:86:04:11:f5:39:1b:0f:c0:42:2f:fe:4d:fd:47: 3b:45:60:35 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUWEEPxbXP5Br8i2kHOCFONWATWGUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjA3RUE4MTE1NjhDRjFEQjlBNzU3OTM2QjY1MEY2RjY4 RUJCMDhCNTAeFw0yNjA1MDMwMjQ4MTFaFw0yNzA1MDIwMjUzMTFaMDMxMTAvBgNV BAMTKEEzNjU2RTMyM0IyMkYyMDEwRUExQTZCNEMyMTk0Mjg1M0Y1MUUwQTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwAy7038uNwJVgd5tCWonc9jG7 Aie+R05xDCqygu6pSGZT6fXyGbqJuX0o3cbSl00+Z5/axAuy0XBEqL7fkscsMav2 S7nFFHqfHhQwviHKViQywM3lEeuxFkoUXsEEDP3hXuX06+5YRGE0xWj+oQGbg7CT Kba1MTjDUfWmBXpK1wUMA8TUASKYSUgLcudOd2nXnP1Q7xDZKlOmMadOPF41TEGx NwcHlLmZWgVWDo8Sst7AGmnow2GpPMXORlytzs8gdBz3VOzd+dVMV7nZfjLxtO40 TIRo5MyfVtk9PJ1DegEA3/+6mOK/o0/HFBDvmP3HYbf7ywAp/MvyN8XltaIDAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUo2VuMjsi8gEOoaa0whlChT9R4KkwHwYDVR0j BBgwFoAUIH6oEVaM8duadXk2tlD29o67CLUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTYxMjQzMjktZWMyMC00NDYwLWFjMzEtOWMzNmNmOTRmM2ZiLzAvMjA3RUE4MTE1 NjhDRjFEQjlBNzU3OTM2QjY1MEY2RjY4RUJCMDhCNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yMDdFQTgxMTU2OENGMURCOUE3NTc5MzZCNjUwRjZGNjhFQkIw OEI1LmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzk2MTI0MzI5LWVjMjAtNDQ2MC1h YzMxLTljMzZjZjk0ZjNmYi8wLzMyMzEzMDJlMzIzNDM3MmUzMjM0MzYyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzEzNzM0MzUucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADS9/YwDQYJ KoZIhvcNAQELBQADggEBAGgsp1nb0a8Ya/tUEfVLUs0OSG97/tffLhlGVUE8Yw+q +QtlqS0vdRk7SkHO45Vh+12shi737KBFq6UAgBhJE9ejjf92FoEXtId+8HmrE4oe QYUl/jG0Yy2u1diMcMpSCR0eNVqO6ZxCsWMK6Bh/x3L0rb/cF91mTAEQZqNaFkfw 3dZLDJ7YgLecgguGzRYbpZ1M2M8wfJD41trRgV3i9wjlhA3tKwm0pZRO+xSvlBeA Hjh7/9J8ipROrNAQpYlgYkSzFakVSks57ZYY5CBtey+Sy+ve4KGRBmYZqujCqzF5 OCv+uCeZo12QZQmS7guGBBH1ORsPwEIv/k39RztFYDU= -----END CERTIFICATE-----Generated at Wed May 13 12:18:24 2026 by rpki-client