$ rpki-client -vvf rpki-rsync.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/3231302e3234372e3234382e302f32342d3234203d3e20313331373435.roa File: 3231302e3234372e3234382e302f32342d3234203d3e20313331373435.roa (raw, json) Hash identifier: abkMD5Nzu85VGTPH9+F+7oClcdXwuiYFP0L9QI7125U= Subject key identifier: EF:0A:5E:B2:E3:1C:CD:6D:A9:86:59:F4:D2:C9:39:67:F6:05:8B:5C Certificate issuer: /CN=207EA811568CF1DB9A757936B650F6F68EBB08B5 Certificate serial: 2958C50D3D8BCA88D8090969E4A96EBDCE476D03 Authority key identifier: 20:7E:A8:11:56:8C:F1:DB:9A:75:79:36:B6:50:F6:F6:8E:BB:08:B5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/207EA811568CF1DB9A757936B650F6F68EBB08B5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/3231302e3234372e3234382e302f32342d3234203d3e20313331373435.roa Signing time: Sun 03 May 2026 02:53:11 +0000 ROA not before: Sun 03 May 2026 02:48:11 +0000 ROA not after: Sun 02 May 2027 02:53:11 +0000 asID: 131745 IP address blocks: 210.247.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/207EA811568CF1DB9A757936B650F6F68EBB08B5.crl rsync://rpki-rsync.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/207EA811568CF1DB9A757936B650F6F68EBB08B5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/207EA811568CF1DB9A757936B650F6F68EBB08B5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 10:27:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:58:c5:0d:3d:8b:ca:88:d8:09:09:69:e4:a9:6e:bd:ce:47:6d:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=207EA811568CF1DB9A757936B650F6F68EBB08B5 Validity Not Before: May 3 02:48:11 2026 GMT Not After : May 2 02:53:11 2027 GMT Subject: CN=EF0A5EB2E31CCD6DA98659F4D2C93967F6058B5C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:17:c2:0b:af:29:19:f2:cc:ba:be:5a:a7:ca: c0:e2:dd:f8:15:74:a8:df:b8:cd:19:ff:4f:c5:0d: a6:c5:1e:a7:83:d3:2d:92:4f:4e:09:2f:25:cd:13: 05:94:7a:c6:81:16:2b:d5:e6:0e:e5:34:83:2a:6a: fe:0c:bd:fd:43:03:2a:cc:08:ed:95:d4:3a:3d:60: c8:76:c0:f3:47:68:28:4f:ad:f8:35:2b:0f:ba:fe: 8c:52:c0:b3:45:0c:db:e4:b7:4e:59:c3:ed:dd:64: be:5e:71:0d:7d:83:76:45:9e:2a:78:84:f4:14:f0: 80:1e:71:10:e5:cf:84:e3:8d:a7:85:46:3d:07:fe: ce:e8:f5:f1:f4:c8:60:0e:1f:dd:ae:79:a8:18:ca: e7:d5:a6:2e:37:98:1b:50:55:06:91:5e:33:4d:e4: 12:ea:e3:5a:c5:06:3c:4e:26:8a:1b:fd:da:d2:47: 6d:d9:e0:17:3f:9b:76:56:19:a9:e5:71:da:2f:fb: cc:be:27:1e:f5:32:31:8f:d5:93:17:08:2f:67:b5: 61:1f:6d:00:f0:1c:18:c9:24:97:6a:f0:f9:0a:8c: ec:eb:8c:50:11:27:cc:22:25:55:52:20:ab:15:51: 3b:a7:dc:fc:25:be:b7:cc:5b:2b:6b:c0:89:e3:1e: 1b:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:0A:5E:B2:E3:1C:CD:6D:A9:86:59:F4:D2:C9:39:67:F6:05:8B:5C X509v3 Authority Key Identifier: keyid:20:7E:A8:11:56:8C:F1:DB:9A:75:79:36:B6:50:F6:F6:8E:BB:08:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/207EA811568CF1DB9A757936B650F6F68EBB08B5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/207EA811568CF1DB9A757936B650F6F68EBB08B5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/3231302e3234372e3234382e302f32342d3234203d3e20313331373435.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 210.247.248.0/24 Signature Algorithm: sha256WithRSAEncryption c9:02:61:18:76:68:10:07:cd:2d:7e:95:6e:ca:76:a5:e8:98: 3e:5a:c0:a8:ed:5b:16:b9:0b:b0:9d:72:ec:ea:f6:fb:ca:dd: 16:f3:fb:ec:b0:d3:01:2c:0c:44:c4:e0:6e:10:e8:31:5f:69: 8d:13:3c:5c:3a:04:82:46:89:db:bf:7b:62:38:43:97:fd:4a: 98:8a:e5:c6:be:92:32:45:d3:67:fb:d5:e8:6a:ae:c0:80:a1: 96:78:6a:68:f1:a1:4f:53:c3:4b:e1:30:91:57:08:85:3b:f7: e7:d2:ea:bf:2b:19:af:bc:58:92:7c:33:38:3c:17:d9:17:30: 82:39:d6:cc:12:50:1c:6d:65:64:c5:05:8d:d6:2f:85:d4:e7: 7f:5e:0d:77:85:99:7e:b8:8c:7a:26:69:10:01:96:f1:f3:45: 6c:ab:98:13:bc:c5:ba:3c:04:e6:3a:fc:9f:40:f5:ff:b5:d8: 54:b3:e9:19:80:1f:15:3e:28:84:f2:ae:b7:9c:1b:a9:6f:a1: 32:d4:40:de:de:26:9e:fb:a9:8c:f5:53:d1:56:96:16:c5:92: 43:45:4b:e4:f2:d2:45:ba:e4:48:7e:23:d8:f5:c3:92:d6:83: 1b:74:3b:98:47:32:ee:c4:2d:0a:e0:4a:2a:5e:11:b2:da:3b: 83:ce:6a:9c -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUKVjFDT2LyojYCQlp5Kluvc5HbQMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjA3RUE4MTE1NjhDRjFEQjlBNzU3OTM2QjY1MEY2RjY4 RUJCMDhCNTAeFw0yNjA1MDMwMjQ4MTFaFw0yNzA1MDIwMjUzMTFaMDMxMTAvBgNV BAMTKEVGMEE1RUIyRTMxQ0NENkRBOTg2NTlGNEQyQzkzOTY3RjYwNThCNUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZF8ILrykZ8sy6vlqnysDi3fgV dKjfuM0Z/0/FDabFHqeD0y2ST04JLyXNEwWUesaBFivV5g7lNIMqav4Mvf1DAyrM CO2V1Do9YMh2wPNHaChPrfg1Kw+6/oxSwLNFDNvkt05Zw+3dZL5ecQ19g3ZFnip4 hPQU8IAecRDlz4TjjaeFRj0H/s7o9fH0yGAOH92ueagYyufVpi43mBtQVQaRXjNN 5BLq41rFBjxOJoob/drSR23Z4Bc/m3ZWGanlcdov+8y+Jx71MjGP1ZMXCC9ntWEf bQDwHBjJJJdq8PkKjOzrjFARJ8wiJVVSIKsVUTun3PwlvrfMWytrwInjHhsVAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQU7wpesuMczW2phln00sk5Z/YFi1wwHwYDVR0j BBgwFoAUIH6oEVaM8duadXk2tlD29o67CLUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTYxMjQzMjktZWMyMC00NDYwLWFjMzEtOWMzNmNmOTRmM2ZiLzAvMjA3RUE4MTE1 NjhDRjFEQjlBNzU3OTM2QjY1MEY2RjY4RUJCMDhCNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yMDdFQTgxMTU2OENGMURCOUE3NTc5MzZCNjUwRjZGNjhFQkIw OEI1LmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzk2MTI0MzI5LWVjMjAtNDQ2MC1h YzMxLTljMzZjZjk0ZjNmYi8wLzMyMzEzMDJlMzIzNDM3MmUzMjM0MzgyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzEzNzM0MzUucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADS9/gwDQYJ KoZIhvcNAQELBQADggEBAMkCYRh2aBAHzS1+lW7KdqXomD5awKjtWxa5C7Cdcuzq 9vvK3Rbz++yw0wEsDETE4G4Q6DFfaY0TPFw6BIJGidu/e2I4Q5f9SpiK5ca+kjJF 02f71ehqrsCAoZZ4amjxoU9Tw0vhMJFXCIU79+fS6r8rGa+8WJJ8Mzg8F9kXMII5 1swSUBxtZWTFBY3WL4XU539eDXeFmX64jHomaRABlvHzRWyrmBO8xbo8BOY6/J9A 9f+12FSz6RmAHxU+KITyrrecG6lvoTLUQN7eJp77qYz1U9FWlhbFkkNFS+Ty0kW6 5Eh+I9j1w5LWgxt0O5hHMu7ELQrgSipeEbLaO4POapw= -----END CERTIFICATE-----Generated at Wed May 13 12:42:30 2026 by rpki-client