$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3230322e35382e3232332e302f32342d3234203d3e20313338303737.roa File: 3230322e35382e3232332e302f32342d3234203d3e20313338303737.roa (raw, json) Hash identifier: jXLVbMtL76FGhPPO7eik/KLCW3Hh3qUT1ONgpEoHlkg= Subject key identifier: 6E:41:DA:64:97:CA:A5:E7:90:73:A8:5A:98:DD:45:0C:60:FA:59:B1 Certificate issuer: /CN=CA547F005E84823E6A8A471723C17168E8E44644 Certificate serial: 533AD4C73A0F46C21726A01A4D94EAF9E2C3EC39 Authority key identifier: CA:54:7F:00:5E:84:82:3E:6A:8A:47:17:23:C1:71:68:E8:E4:46:44 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA547F005E84823E6A8A471723C17168E8E44644.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3230322e35382e3232332e302f32342d3234203d3e20313338303737.roa Signing time: Thu 17 Sep 2026 03:15:29 +0000 ROA not before: Thu 17 Sep 2026 03:10:29 +0000 ROA not after: Thu 16 Sep 2027 03:15:29 +0000 asID: 138077 IP address blocks: 202.58.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/CA547F005E84823E6A8A471723C17168E8E44644.crl rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/CA547F005E84823E6A8A471723C17168E8E44644.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA547F005E84823E6A8A471723C17168E8E44644.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:3a:d4:c7:3a:0f:46:c2:17:26:a0:1a:4d:94:ea:f9:e2:c3:ec:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA547F005E84823E6A8A471723C17168E8E44644 Validity Not Before: Sep 17 03:10:29 2026 GMT Not After : Sep 16 03:15:29 2027 GMT Subject: CN=6E41DA6497CAA5E79073A85A98DD450C60FA59B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ee:be:78:29:a5:f9:44:ee:b2:31:0c:2a:08: fd:04:05:81:8a:69:c6:76:8d:3a:b8:4e:ad:a5:c7: 1f:7b:8f:d1:93:32:3d:33:ce:dc:04:7b:31:7d:7e: f9:29:20:50:35:10:ee:38:f2:09:e1:27:b0:5f:85: ff:63:bd:1b:34:27:dc:c0:5e:83:fc:04:b1:fe:ad: 31:cb:da:10:05:4f:8c:01:d1:3a:f7:01:4f:b6:33: 92:89:97:af:98:8e:5d:f3:c9:3f:7e:b8:95:ff:8d: 82:80:34:30:e3:6a:61:27:b1:73:dc:a5:83:d8:ef: f0:91:aa:c0:5a:d5:50:dd:ce:31:c1:68:41:a3:b8: 7b:7f:aa:f3:d8:e5:34:92:4f:98:fb:10:06:0f:6d: 3b:23:fb:3d:7b:de:0d:a6:69:59:78:48:54:ba:10: 39:d3:c9:87:f6:5a:d5:b0:3c:98:c3:10:4f:e1:e6: 7c:1b:3f:af:44:c3:53:bd:f0:6f:ee:48:66:e6:ce: a2:f3:d5:23:1b:17:cc:be:3b:b2:f5:ca:6f:c5:82: a7:fc:e3:8f:5f:1d:07:63:58:9e:52:e5:50:6a:da: 1d:5e:5c:6d:bc:fa:f3:ee:77:1c:b5:4e:e5:20:90: 79:6d:1e:7e:af:4e:07:ca:4c:a1:3f:25:56:65:66: eb:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:41:DA:64:97:CA:A5:E7:90:73:A8:5A:98:DD:45:0C:60:FA:59:B1 X509v3 Authority Key Identifier: keyid:CA:54:7F:00:5E:84:82:3E:6A:8A:47:17:23:C1:71:68:E8:E4:46:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/CA547F005E84823E6A8A471723C17168E8E44644.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA547F005E84823E6A8A471723C17168E8E44644.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3230322e35382e3232332e302f32342d3234203d3e20313338303737.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.58.223.0/24 Signature Algorithm: sha256WithRSAEncryption 17:91:7c:06:3e:e3:17:52:ac:73:3f:b1:84:fd:12:56:4f:f3: f9:b4:f6:4e:19:fb:9e:87:94:54:a5:a8:4e:55:06:6a:dd:23: 8e:94:72:14:19:d9:cc:0d:bc:08:b7:1e:47:2e:7f:3f:19:7f: fe:77:1b:26:07:05:e8:b8:14:e9:c0:f0:29:65:e2:8b:f1:a0: bc:a8:ea:e4:8e:51:6b:b1:85:07:b5:b4:0e:ec:1d:4e:2a:6e: 58:35:4b:b1:c0:5c:70:b3:98:d5:e8:3f:99:b8:ad:42:43:c1: 42:98:ad:7d:c9:a7:80:72:b9:fd:b3:35:17:5a:9f:9d:f9:22: 34:41:ab:bc:84:c3:c4:0b:c5:b2:8c:b5:eb:2e:8b:d7:de:a6: 78:6a:a2:e2:4c:6f:de:eb:63:ed:8d:24:80:0c:69:c6:aa:7c: 5a:11:66:41:f3:de:b7:fc:59:cf:30:61:e8:ee:74:f0:b4:4a: 96:be:de:e3:07:c3:2c:4f:f4:e0:0b:a7:ce:99:85:f5:a1:bc: eb:8e:3e:f1:d8:65:b9:a9:10:a9:f4:bb:66:81:20:7e:ad:24: 36:2a:95:84:2d:63:49:b3:aa:9f:fc:08:26:6d:6f:52:34:cf: c9:22:49:56:83:38:7c:0e:7b:d0:a2:2b:2e:d5:53:4c:c5:8c: 52:ac:ce:88 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUUzrUxzoPRsIXJqAaTZTq+eLD7DkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0E1NDdGMDA1RTg0ODIzRTZBOEE0NzE3MjNDMTcxNjhF OEU0NDY0NDAeFw0yNjA5MTcwMzEwMjlaFw0yNzA5MTYwMzE1MjlaMDMxMTAvBgNV BAMTKDZFNDFEQTY0OTdDQUE1RTc5MDczQTg1QTk4REQ0NTBDNjBGQTU5QjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn7r54KaX5RO6yMQwqCP0EBYGK acZ2jTq4Tq2lxx97j9GTMj0zztwEezF9fvkpIFA1EO448gnhJ7Bfhf9jvRs0J9zA XoP8BLH+rTHL2hAFT4wB0Tr3AU+2M5KJl6+Yjl3zyT9+uJX/jYKANDDjamEnsXPc pYPY7/CRqsBa1VDdzjHBaEGjuHt/qvPY5TSST5j7EAYPbTsj+z173g2maVl4SFS6 EDnTyYf2WtWwPJjDEE/h5nwbP69Ew1O98G/uSGbmzqLz1SMbF8y+O7L1ym/Fgqf8 449fHQdjWJ5S5VBq2h1eXG28+vPudxy1TuUgkHltHn6vTgfKTKE/JVZlZutlAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUbkHaZJfKpeeQc6hamN1FDGD6WbEwHwYDVR0j BBgwFoAUylR/AF6Egj5qikcXI8FxaOjkRkQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGNlYmYxMTYtZmUyYS00OTFiLWFhYzgtMjIwZWFkMGI1NGUyLzAvQ0E1NDdGMDA1 RTg0ODIzRTZBOEE0NzE3MjNDMTcxNjhFOEU0NDY0NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQTU0N0YwMDVFODQ4MjNFNkE4QTQ3MTcyM0MxNzE2OEU4RTQ0 NjQ0LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzhjZWJmMTE2LWZlMmEtNDkxYi1h YWM4LTIyMGVhZDBiNTRlMi8wLzMyMzAzMjJlMzUzODJlMzIzMjMzMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzM4MzAzNzM3LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyjrfMA0GCSqG SIb3DQEBCwUAA4IBAQAXkXwGPuMXUqxzP7GE/RJWT/P5tPZOGfueh5RUpahOVQZq 3SOOlHIUGdnMDbwItx5HLn8/GX/+dxsmBwXouBTpwPApZeKL8aC8qOrkjlFrsYUH tbQO7B1OKm5YNUuxwFxws5jV6D+ZuK1CQ8FCmK19yaeAcrn9szUXWp+d+SI0Qau8 hMPEC8WyjLXrLovX3qZ4aqLiTG/e62PtjSSADGnGqnxaEWZB8963/FnPMGHo7nTw tEqWvt7jB8MsT/TgC6fOmYX1obzrjj7x2GW5qRCp9LtmgSB+rSQ2KpWELWNJs6qf /AgmbW9SNM/JIklWgzh8DnvQoisu1VNMxYxSrM6I -----END CERTIFICATE-----Generated at Mon Sep 21 20:28:55 2026 by rpki-client