$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3131342e3139392e38372e302f32342d3234203d3e20313338303737.roa File: 3131342e3139392e38372e302f32342d3234203d3e20313338303737.roa (raw, json) Hash identifier: teZEH59B4Vqw7Lm4vBZJtLTY7n8yk7drRbGAebIXGTI= Subject key identifier: EC:6C:0A:4C:35:45:79:EE:19:F6:CF:B2:EA:DF:4D:8F:D9:4C:87:7B Certificate issuer: /CN=CA547F005E84823E6A8A471723C17168E8E44644 Certificate serial: 484366A988618F1A4A155B0829ECA47DB57AE660 Authority key identifier: CA:54:7F:00:5E:84:82:3E:6A:8A:47:17:23:C1:71:68:E8:E4:46:44 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA547F005E84823E6A8A471723C17168E8E44644.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3131342e3139392e38372e302f32342d3234203d3e20313338303737.roa Signing time: Thu 17 Sep 2026 03:14:46 +0000 ROA not before: Thu 17 Sep 2026 03:09:46 +0000 ROA not after: Thu 16 Sep 2027 03:14:46 +0000 asID: 138077 IP address blocks: 114.199.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/CA547F005E84823E6A8A471723C17168E8E44644.crl rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/CA547F005E84823E6A8A471723C17168E8E44644.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA547F005E84823E6A8A471723C17168E8E44644.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 20:04:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:43:66:a9:88:61:8f:1a:4a:15:5b:08:29:ec:a4:7d:b5:7a:e6:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA547F005E84823E6A8A471723C17168E8E44644 Validity Not Before: Sep 17 03:09:46 2026 GMT Not After : Sep 16 03:14:46 2027 GMT Subject: CN=EC6C0A4C354579EE19F6CFB2EADF4D8FD94C877B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:d9:7a:be:04:b2:56:3d:e9:40:53:f5:bd:fe: b5:3d:69:04:a9:6b:36:31:3c:58:df:c0:b2:fd:7a: ea:f4:fe:71:1b:f0:37:6d:0c:df:a2:47:02:d7:7d: b6:c1:90:a7:2a:c6:25:ed:f4:51:1a:ac:ef:b4:8f: 24:89:ad:73:28:67:6d:71:93:c4:22:05:71:50:49: dc:c1:9b:c1:74:f5:a9:27:ae:0c:93:cb:69:1d:8e: 22:10:d5:f2:d2:fc:60:1a:7c:ad:40:36:8d:39:d7: b5:25:99:3a:6d:b7:c2:05:49:7f:e1:77:ba:64:89: 64:04:3a:dd:13:d7:dd:f1:49:b3:89:f2:4c:e3:bc: 85:2a:05:36:f1:8b:bf:76:e5:c0:a2:cc:71:1a:ea: 43:4e:fa:a8:93:a9:55:bf:3e:dd:39:2a:9a:24:56: 09:d0:e7:84:9e:79:b9:8f:98:da:71:b5:d2:4a:96: 57:c1:0b:a7:5f:06:eb:7c:b9:78:6a:10:89:01:59: c0:ad:33:46:31:0b:ce:49:db:e9:70:79:50:c4:98: 7d:35:3e:ae:84:f6:75:13:c4:8d:4f:9c:1e:ca:37: 90:44:80:9b:db:1b:e7:ef:d5:72:d7:69:ad:04:e8: d7:77:1c:d2:1b:49:71:9e:31:ea:42:b8:85:27:58: f3:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:6C:0A:4C:35:45:79:EE:19:F6:CF:B2:EA:DF:4D:8F:D9:4C:87:7B X509v3 Authority Key Identifier: keyid:CA:54:7F:00:5E:84:82:3E:6A:8A:47:17:23:C1:71:68:E8:E4:46:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/CA547F005E84823E6A8A471723C17168E8E44644.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA547F005E84823E6A8A471723C17168E8E44644.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3131342e3139392e38372e302f32342d3234203d3e20313338303737.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 114.199.87.0/24 Signature Algorithm: sha256WithRSAEncryption 52:e0:c7:62:d2:8d:7a:86:70:08:1d:1c:98:52:9e:34:17:83: 04:46:a2:95:94:cd:78:13:bd:4f:5c:a8:d0:3a:a9:f4:58:1f: 3d:13:f1:49:2f:77:c2:6c:6a:9d:62:53:3c:e2:54:14:4a:c8: 92:5d:2f:8c:f7:16:05:3b:05:8d:0f:05:48:22:08:d6:38:9f: f1:1d:24:eb:11:5e:07:c1:7b:aa:b7:f8:94:d8:c7:04:69:7c: 8b:6e:51:c5:d4:a3:28:af:81:34:b9:f5:b3:0d:ff:6f:4f:2e: 10:17:f1:0f:de:da:1c:68:76:81:ac:81:e5:f8:17:ed:07:af: f1:9c:36:eb:a0:6c:bd:f7:06:32:ac:28:5c:85:d2:f4:b9:35: 5a:80:e9:b1:9f:51:a7:e0:87:60:96:01:fa:9a:1a:2e:e1:71: a1:e5:06:92:ce:05:0d:b0:9a:c7:15:ce:0b:2c:4f:91:c8:6e: bb:0b:e0:50:7f:83:de:d1:80:21:0c:c5:de:27:74:e6:11:56: 23:dc:ef:1a:b8:17:57:91:8c:b7:0f:7e:7f:e7:25:c0:bc:e1: 1e:ae:a0:8b:3b:a8:c5:14:9f:c1:81:e2:e4:f8:fb:b3:10:3b: 49:de:a8:2e:6c:06:00:c1:02:7d:fd:02:26:46:39:9d:64:30: e0:df:7f:18 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUSENmqYhhjxpKFVsIKeykfbV65mAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0E1NDdGMDA1RTg0ODIzRTZBOEE0NzE3MjNDMTcxNjhF OEU0NDY0NDAeFw0yNjA5MTcwMzA5NDZaFw0yNzA5MTYwMzE0NDZaMDMxMTAvBgNV BAMTKEVDNkMwQTRDMzU0NTc5RUUxOUY2Q0ZCMkVBREY0RDhGRDk0Qzg3N0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy2Xq+BLJWPelAU/W9/rU9aQSp azYxPFjfwLL9eur0/nEb8DdtDN+iRwLXfbbBkKcqxiXt9FEarO+0jySJrXMoZ21x k8QiBXFQSdzBm8F09aknrgyTy2kdjiIQ1fLS/GAafK1ANo0517UlmTptt8IFSX/h d7pkiWQEOt0T193xSbOJ8kzjvIUqBTbxi7925cCizHEa6kNO+qiTqVW/Pt05Kpok VgnQ54SeebmPmNpxtdJKllfBC6dfBut8uXhqEIkBWcCtM0YxC85J2+lweVDEmH01 Pq6E9nUTxI1PnB7KN5BEgJvbG+fv1XLXaa0E6Nd3HNIbSXGeMepCuIUnWPMZAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU7GwKTDVFee4Z9s+y6t9Nj9lMh3swHwYDVR0j BBgwFoAUylR/AF6Egj5qikcXI8FxaOjkRkQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGNlYmYxMTYtZmUyYS00OTFiLWFhYzgtMjIwZWFkMGI1NGUyLzAvQ0E1NDdGMDA1 RTg0ODIzRTZBOEE0NzE3MjNDMTcxNjhFOEU0NDY0NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQTU0N0YwMDVFODQ4MjNFNkE4QTQ3MTcyM0MxNzE2OEU4RTQ0 NjQ0LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzhjZWJmMTE2LWZlMmEtNDkxYi1h YWM4LTIyMGVhZDBiNTRlMi8wLzMxMzEzNDJlMzEzOTM5MmUzODM3MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzM4MzAzNzM3LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAcsdXMA0GCSqG SIb3DQEBCwUAA4IBAQBS4Mdi0o16hnAIHRyYUp40F4MERqKVlM14E71PXKjQOqn0 WB89E/FJL3fCbGqdYlM84lQUSsiSXS+M9xYFOwWNDwVIIgjWOJ/xHSTrEV4HwXuq t/iU2McEaXyLblHF1KMor4E0ufWzDf9vTy4QF/EP3tocaHaBrIHl+BftB6/xnDbr oGy99wYyrChchdL0uTVagOmxn1Gn4IdglgH6mhou4XGh5QaSzgUNsJrHFc4LLE+R yG67C+BQf4Pe0YAhDMXeJ3TmEVYj3O8auBdXkYy3D35/5yXAvOEerqCLO6jFFJ/B geLk+PuzEDtJ3qgubAYAwQJ9/QImRjmdZDDg338Y -----END CERTIFICATE-----Generated at Tue Sep 22 01:15:11 2026 by rpki-client