$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3230322e35382e3231392e302f32342d3234203d3e20313338303737.roa File: 3230322e35382e3231392e302f32342d3234203d3e20313338303737.roa (raw, json) Hash identifier: lmOQRM8HZSgaWiyXE3wr3fpZMJtzMS2c5AZBJ/CEFu4= Subject key identifier: BA:19:F9:CF:14:70:98:AC:14:CD:96:C6:2B:E8:F6:56:FF:5B:22:D3 Certificate issuer: /CN=CA547F005E84823E6A8A471723C17168E8E44644 Certificate serial: 440E52A7B057CB988A6550A523EC9D2062FB52D4 Authority key identifier: CA:54:7F:00:5E:84:82:3E:6A:8A:47:17:23:C1:71:68:E8:E4:46:44 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA547F005E84823E6A8A471723C17168E8E44644.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3230322e35382e3231392e302f32342d3234203d3e20313338303737.roa Signing time: Thu 17 Sep 2026 03:15:13 +0000 ROA not before: Thu 17 Sep 2026 03:10:13 +0000 ROA not after: Thu 16 Sep 2027 03:15:13 +0000 asID: 138077 IP address blocks: 202.58.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/CA547F005E84823E6A8A471723C17168E8E44644.crl rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/CA547F005E84823E6A8A471723C17168E8E44644.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA547F005E84823E6A8A471723C17168E8E44644.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 20:04:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:0e:52:a7:b0:57:cb:98:8a:65:50:a5:23:ec:9d:20:62:fb:52:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA547F005E84823E6A8A471723C17168E8E44644 Validity Not Before: Sep 17 03:10:13 2026 GMT Not After : Sep 16 03:15:13 2027 GMT Subject: CN=BA19F9CF147098AC14CD96C62BE8F656FF5B22D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ba:cd:9e:39:bf:89:73:84:28:f4:a6:3c:0f: cf:57:3f:bb:ce:11:eb:fd:3e:05:76:fa:6f:6b:25: 00:f6:bf:d8:ca:bc:64:43:6e:f6:aa:07:a3:c6:78: d3:01:56:d1:0e:c9:57:f7:85:07:0f:36:53:f1:e5: 16:63:60:87:60:11:43:e2:0d:17:82:76:94:76:a1: 48:48:61:83:30:92:2c:06:52:62:57:77:94:15:03: 73:03:d0:f5:9e:a5:77:00:e9:85:72:cd:c7:10:46: 22:64:86:92:d7:bc:7c:3e:4c:25:68:56:73:f4:c8: b0:98:90:26:9c:63:0e:d7:09:89:ee:5e:ab:38:46: dc:b2:cb:52:27:5f:80:36:a3:a4:cc:0a:4e:e6:ad: 10:03:d2:0a:ad:ff:69:c9:63:95:eb:c5:1b:35:41: f9:64:50:2d:1b:44:c6:2f:8f:c7:9b:a3:9c:6a:9e: 7a:50:75:ce:19:da:f6:8f:e7:aa:fa:3d:33:fe:59: 28:9c:20:6a:3c:b3:c5:6f:db:e7:fe:f3:75:61:fa: 59:d0:a8:cb:fb:96:2f:62:6d:7b:ae:b2:bd:bb:77: 16:b2:3e:87:e7:e7:90:21:3c:a1:2a:20:a9:01:93: 96:32:d2:b7:9c:00:30:fa:d9:b7:22:2a:ce:c7:ac: bb:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:19:F9:CF:14:70:98:AC:14:CD:96:C6:2B:E8:F6:56:FF:5B:22:D3 X509v3 Authority Key Identifier: keyid:CA:54:7F:00:5E:84:82:3E:6A:8A:47:17:23:C1:71:68:E8:E4:46:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/CA547F005E84823E6A8A471723C17168E8E44644.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA547F005E84823E6A8A471723C17168E8E44644.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3230322e35382e3231392e302f32342d3234203d3e20313338303737.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.58.219.0/24 Signature Algorithm: sha256WithRSAEncryption 38:3c:dc:b6:44:2f:60:b7:00:0c:23:3d:47:8f:c6:7c:29:4e: ea:24:23:a8:57:ed:35:c1:aa:5f:9a:01:bc:4d:4d:58:42:98: 76:b4:7f:5e:d1:64:c0:f2:10:43:83:21:f0:d9:f3:39:75:a7: 85:e1:cc:fb:fb:21:c1:d6:3f:5a:23:a3:f0:6b:49:d0:bc:88: 4b:77:f7:55:20:61:4d:52:f7:19:9d:d7:d5:55:6a:fb:8b:75: cb:2a:6b:18:41:05:d3:b2:00:eb:30:bf:51:d3:a6:cd:98:87: f5:75:56:09:f9:dc:7d:1f:bb:42:a5:00:76:8a:b0:6e:6b:52: 81:1c:21:c2:8c:74:d7:98:9d:b5:ba:8a:82:31:16:e7:6c:f5: f0:7f:54:cc:1c:ae:13:87:98:f9:76:f3:e0:f3:08:52:93:bc: da:f6:76:f1:8f:ec:9d:fd:07:5a:d2:d7:f5:3b:5f:1e:d8:9f: 50:26:66:65:84:80:01:1a:34:73:fa:40:14:86:91:9e:99:52: 25:9b:69:b9:d8:d4:01:e8:ab:a4:98:99:65:34:28:6d:e9:a6: cb:2d:72:73:d4:66:9b:d4:fe:c3:56:7b:7c:bd:77:15:71:67: de:55:66:ce:b0:ad:f4:1f:31:e7:5f:ae:d5:62:cc:25:9a:4f: 92:5f:c4:b1 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIURA5Sp7BXy5iKZVClI+ydIGL7UtQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0E1NDdGMDA1RTg0ODIzRTZBOEE0NzE3MjNDMTcxNjhF OEU0NDY0NDAeFw0yNjA5MTcwMzEwMTNaFw0yNzA5MTYwMzE1MTNaMDMxMTAvBgNV BAMTKEJBMTlGOUNGMTQ3MDk4QUMxNENEOTZDNjJCRThGNjU2RkY1QjIyRDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjus2eOb+Jc4Qo9KY8D89XP7vO Eev9PgV2+m9rJQD2v9jKvGRDbvaqB6PGeNMBVtEOyVf3hQcPNlPx5RZjYIdgEUPi DReCdpR2oUhIYYMwkiwGUmJXd5QVA3MD0PWepXcA6YVyzccQRiJkhpLXvHw+TCVo VnP0yLCYkCacYw7XCYnuXqs4Rtyyy1InX4A2o6TMCk7mrRAD0gqt/2nJY5XrxRs1 QflkUC0bRMYvj8ebo5xqnnpQdc4Z2vaP56r6PTP+WSicIGo8s8Vv2+f+83Vh+lnQ qMv7li9ibXuusr27dxayPofn55AhPKEqIKkBk5Yy0recADD62bciKs7HrLsJAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUuhn5zxRwmKwUzZbGK+j2Vv9bItMwHwYDVR0j BBgwFoAUylR/AF6Egj5qikcXI8FxaOjkRkQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGNlYmYxMTYtZmUyYS00OTFiLWFhYzgtMjIwZWFkMGI1NGUyLzAvQ0E1NDdGMDA1 RTg0ODIzRTZBOEE0NzE3MjNDMTcxNjhFOEU0NDY0NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQTU0N0YwMDVFODQ4MjNFNkE4QTQ3MTcyM0MxNzE2OEU4RTQ0 NjQ0LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzhjZWJmMTE2LWZlMmEtNDkxYi1h YWM4LTIyMGVhZDBiNTRlMi8wLzMyMzAzMjJlMzUzODJlMzIzMTM5MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzM4MzAzNzM3LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyjrbMA0GCSqG SIb3DQEBCwUAA4IBAQA4PNy2RC9gtwAMIz1Hj8Z8KU7qJCOoV+01wapfmgG8TU1Y Qph2tH9e0WTA8hBDgyHw2fM5daeF4cz7+yHB1j9aI6Pwa0nQvIhLd/dVIGFNUvcZ ndfVVWr7i3XLKmsYQQXTsgDrML9R06bNmIf1dVYJ+dx9H7tCpQB2irBua1KBHCHC jHTXmJ21uoqCMRbnbPXwf1TMHK4Th5j5dvPg8whSk7za9nbxj+yd/Qda0tf1O18e 2J9QJmZlhIABGjRz+kAUhpGemVIlm2m52NQB6KukmJllNCht6abLLXJz1Gab1P7D Vnt8vXcVcWfeVWbOsK30HzHnX67VYswlmk+SX8Sx -----END CERTIFICATE-----Generated at Tue Sep 22 08:02:38 2026 by rpki-client