$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3131342e3139392e38352e302f32342d3234203d3e20313338303737.roa File: 3131342e3139392e38352e302f32342d3234203d3e20313338303737.roa (raw, json) Hash identifier: qApEcjDoUkltErMAzJwwJZH2hBPdS+N9NEmj2A8R+GI= Subject key identifier: 4C:B0:8E:2A:78:12:87:0B:7B:56:AD:21:01:F1:9F:B6:33:3C:4D:B2 Certificate issuer: /CN=CA547F005E84823E6A8A471723C17168E8E44644 Certificate serial: 4D55F35103036D961A163113662EE8D577F6FA66 Authority key identifier: CA:54:7F:00:5E:84:82:3E:6A:8A:47:17:23:C1:71:68:E8:E4:46:44 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA547F005E84823E6A8A471723C17168E8E44644.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3131342e3139392e38352e302f32342d3234203d3e20313338303737.roa Signing time: Thu 17 Sep 2026 03:14:16 +0000 ROA not before: Thu 17 Sep 2026 03:09:16 +0000 ROA not after: Thu 16 Sep 2027 03:14:16 +0000 asID: 138077 IP address blocks: 114.199.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/CA547F005E84823E6A8A471723C17168E8E44644.crl rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/CA547F005E84823E6A8A471723C17168E8E44644.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA547F005E84823E6A8A471723C17168E8E44644.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 12:27:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:55:f3:51:03:03:6d:96:1a:16:31:13:66:2e:e8:d5:77:f6:fa:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA547F005E84823E6A8A471723C17168E8E44644 Validity Not Before: Sep 17 03:09:16 2026 GMT Not After : Sep 16 03:14:16 2027 GMT Subject: CN=4CB08E2A7812870B7B56AD2101F19FB6333C4DB2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:23:10:a5:4b:73:55:9a:50:1c:80:d3:87:5b: 5a:d5:8e:6f:f8:7b:0e:13:5a:5f:b4:13:43:fd:de: 1f:a9:2f:3f:b8:0a:7a:f3:79:08:6c:89:74:3c:92: b3:5c:d7:03:5e:f1:ac:80:01:32:5b:2f:98:d5:38: c4:35:11:2b:75:dc:3f:60:20:1b:07:5a:6c:cc:cf: ad:e0:99:ff:eb:14:92:8f:01:6a:60:10:59:56:cf: c9:8c:fb:e6:b2:ad:c4:4c:b6:b3:99:6b:0a:e2:82: 96:e4:49:2b:a4:7c:0d:ba:d9:b0:f3:e3:98:d2:83: df:dc:3a:8f:14:68:6b:06:2c:49:96:6e:44:04:e5: 1a:18:c3:7c:0d:ab:d3:41:64:4b:2f:bd:ca:8f:f7: b1:1f:cb:a2:69:86:b7:7d:14:ab:58:8e:32:22:35: b3:24:9c:08:9c:9d:1c:8e:8c:9b:3a:61:0e:7a:74: ac:75:b7:15:dd:2a:59:0f:4f:98:1f:dc:75:a7:6b: 43:f1:fe:48:63:73:f9:3d:ff:4d:1d:2e:5f:89:f4: 43:9e:0c:81:8e:33:0d:4b:d7:b9:e0:57:39:ed:a8: 9c:18:d6:f4:68:91:4c:50:fe:0c:7b:74:a9:bd:e4: 15:3b:22:8e:0e:93:13:e9:7e:fc:60:be:9d:ff:73: 5f:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:B0:8E:2A:78:12:87:0B:7B:56:AD:21:01:F1:9F:B6:33:3C:4D:B2 X509v3 Authority Key Identifier: keyid:CA:54:7F:00:5E:84:82:3E:6A:8A:47:17:23:C1:71:68:E8:E4:46:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/CA547F005E84823E6A8A471723C17168E8E44644.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA547F005E84823E6A8A471723C17168E8E44644.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3131342e3139392e38352e302f32342d3234203d3e20313338303737.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 114.199.85.0/24 Signature Algorithm: sha256WithRSAEncryption 9a:2e:68:c4:ea:73:a5:79:5d:19:72:1f:3a:d9:08:79:e1:a5: 22:cc:7a:99:f0:20:2a:cf:e5:e7:74:ef:af:6f:36:a5:fb:f2: 08:38:eb:9a:d6:40:81:10:4e:2b:09:6c:69:e6:d8:3a:73:f8: ce:77:76:62:fd:96:c5:dd:f3:7d:19:39:35:c8:ca:9b:6d:f6: 44:2e:cd:15:a0:f5:99:ee:c1:8a:f6:57:8f:a7:b9:2d:30:2f: bf:da:38:78:0d:4c:67:76:74:7b:ae:e2:1d:f4:2f:25:35:6a: 3f:0a:67:8c:39:38:8b:98:1c:12:7a:b4:0b:97:bf:d1:fc:55: 9b:ad:04:20:f8:47:ee:d1:0f:e8:06:60:0b:ef:b7:e4:35:24: 38:f1:47:a6:b5:a6:23:b4:35:22:14:d1:32:2a:e4:15:ea:01: b4:17:55:46:86:a1:16:2c:43:b2:ee:bb:64:fb:9c:3c:01:44: 96:59:3e:f6:4c:ca:4a:45:e8:32:9a:d1:77:28:ec:cd:6e:4d: c9:ac:ca:4e:c2:68:d6:10:2f:28:4d:b6:05:78:ed:99:62:d2: 94:b3:fd:5b:74:fe:94:ff:d8:cf:36:00:d5:fb:16:96:e8:d6: 44:81:a5:8c:17:33:e3:66:cd:3f:03:f0:d0:01:89:61:b2:df: 54:85:fd:3b -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUTVXzUQMDbZYaFjETZi7o1Xf2+mYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0E1NDdGMDA1RTg0ODIzRTZBOEE0NzE3MjNDMTcxNjhF OEU0NDY0NDAeFw0yNjA5MTcwMzA5MTZaFw0yNzA5MTYwMzE0MTZaMDMxMTAvBgNV BAMTKDRDQjA4RTJBNzgxMjg3MEI3QjU2QUQyMTAxRjE5RkI2MzMzQzREQjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaIxClS3NVmlAcgNOHW1rVjm/4 ew4TWl+0E0P93h+pLz+4CnrzeQhsiXQ8krNc1wNe8ayAATJbL5jVOMQ1ESt13D9g IBsHWmzMz63gmf/rFJKPAWpgEFlWz8mM++ayrcRMtrOZawrigpbkSSukfA262bDz 45jSg9/cOo8UaGsGLEmWbkQE5RoYw3wNq9NBZEsvvcqP97Efy6Jphrd9FKtYjjIi NbMknAicnRyOjJs6YQ56dKx1txXdKlkPT5gf3HWna0Px/khjc/k9/00dLl+J9EOe DIGOMw1L17ngVzntqJwY1vRokUxQ/gx7dKm95BU7Io4OkxPpfvxgvp3/c19RAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUTLCOKngShwt7Vq0hAfGftjM8TbIwHwYDVR0j BBgwFoAUylR/AF6Egj5qikcXI8FxaOjkRkQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGNlYmYxMTYtZmUyYS00OTFiLWFhYzgtMjIwZWFkMGI1NGUyLzAvQ0E1NDdGMDA1 RTg0ODIzRTZBOEE0NzE3MjNDMTcxNjhFOEU0NDY0NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQTU0N0YwMDVFODQ4MjNFNkE4QTQ3MTcyM0MxNzE2OEU4RTQ0 NjQ0LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzhjZWJmMTE2LWZlMmEtNDkxYi1h YWM4LTIyMGVhZDBiNTRlMi8wLzMxMzEzNDJlMzEzOTM5MmUzODM1MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzM4MzAzNzM3LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAcsdVMA0GCSqG SIb3DQEBCwUAA4IBAQCaLmjE6nOleV0Zch862Qh54aUizHqZ8CAqz+XndO+vbzal +/IIOOua1kCBEE4rCWxp5tg6c/jOd3Zi/ZbF3fN9GTk1yMqbbfZELs0VoPWZ7sGK 9lePp7ktMC+/2jh4DUxndnR7ruId9C8lNWo/CmeMOTiLmBwSerQLl7/R/FWbrQQg +Efu0Q/oBmAL77fkNSQ48UemtaYjtDUiFNEyKuQV6gG0F1VGhqEWLEOy7rtk+5w8 AUSWWT72TMpKRegymtF3KOzNbk3JrMpOwmjWEC8oTbYFeO2ZYtKUs/1bdP6U/9jP NgDV+xaW6NZEgaWMFzPjZs0/A/DQAYlhst9Uhf07 -----END CERTIFICATE-----Generated at Tue Sep 22 16:26:33 2026 by rpki-client