$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3230322e35382e3231392e302f32342d3234203d3e20323032303336.roa File: 3230322e35382e3231392e302f32342d3234203d3e20323032303336.roa (raw, json) Hash identifier: 05usQFv46xfI1QRoKu6iXaK2X7kzk5oJf7D1cY+IMjw= Subject key identifier: 61:79:1F:37:7B:2A:32:CE:A8:FF:C5:F3:FB:7B:11:9E:44:17:76:78 Certificate issuer: /CN=CA547F005E84823E6A8A471723C17168E8E44644 Certificate serial: 65B3580E0B62FF34F614A7E6A33E353264A5D34B Authority key identifier: CA:54:7F:00:5E:84:82:3E:6A:8A:47:17:23:C1:71:68:E8:E4:46:44 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA547F005E84823E6A8A471723C17168E8E44644.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3230322e35382e3231392e302f32342d3234203d3e20323032303336.roa Signing time: Mon 31 Aug 2026 10:47:43 +0000 ROA not before: Mon 31 Aug 2026 10:42:43 +0000 ROA not after: Mon 30 Aug 2027 10:47:43 +0000 asID: 202036 IP address blocks: 202.58.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/CA547F005E84823E6A8A471723C17168E8E44644.crl rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/CA547F005E84823E6A8A471723C17168E8E44644.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA547F005E84823E6A8A471723C17168E8E44644.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Sep 2026 09:04:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:b3:58:0e:0b:62:ff:34:f6:14:a7:e6:a3:3e:35:32:64:a5:d3:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA547F005E84823E6A8A471723C17168E8E44644 Validity Not Before: Aug 31 10:42:43 2026 GMT Not After : Aug 30 10:47:43 2027 GMT Subject: CN=61791F377B2A32CEA8FFC5F3FB7B119E44177678 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d3:0f:4e:69:97:12:4a:c8:49:cc:c2:b1:c3: e2:03:95:7c:8e:93:42:ff:1f:45:71:81:32:70:36: 96:38:86:60:1c:12:0f:75:09:fe:db:23:66:42:c9: d3:95:c3:36:47:fa:74:68:7a:96:b6:65:d0:95:4d: 04:5d:db:03:39:8a:82:43:e7:7f:5e:02:89:54:6d: ce:0b:de:fd:30:bc:a2:72:f1:a2:8c:54:7a:39:5c: d2:81:87:6f:5e:c7:ac:71:eb:a7:92:db:8a:ec:2a: b9:15:5c:8f:4e:95:97:80:42:4a:7e:1b:75:91:98: bb:4c:77:62:3c:5d:92:0c:a0:63:a7:5f:6f:02:d8: 65:43:f0:f3:e9:5d:e5:7f:ad:8c:08:75:0b:88:90: 30:29:51:75:ae:68:89:5e:c5:2a:af:04:3e:d9:cd: 14:2f:c6:80:b5:01:75:98:de:da:99:a1:57:09:b4: 57:26:4d:a6:36:e3:58:87:70:30:1a:ba:a3:8f:4f: 58:78:a9:5f:75:2b:60:33:4c:7a:14:74:53:51:3f: 12:73:9e:c8:51:84:d8:0a:46:51:64:80:0a:d8:b3: 49:76:50:a8:34:7a:ca:ce:89:9d:31:a6:7d:db:1d: 5b:cd:c8:d7:97:4d:b8:9c:02:2c:a5:8b:2e:93:c9: f7:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:79:1F:37:7B:2A:32:CE:A8:FF:C5:F3:FB:7B:11:9E:44:17:76:78 X509v3 Authority Key Identifier: keyid:CA:54:7F:00:5E:84:82:3E:6A:8A:47:17:23:C1:71:68:E8:E4:46:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/CA547F005E84823E6A8A471723C17168E8E44644.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA547F005E84823E6A8A471723C17168E8E44644.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3230322e35382e3231392e302f32342d3234203d3e20323032303336.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.58.219.0/24 Signature Algorithm: sha256WithRSAEncryption 9d:56:6b:f5:21:32:ed:14:91:53:dc:01:0e:cf:8b:81:22:34: 46:f3:38:78:25:22:94:09:29:eb:b4:92:8d:b1:78:a9:9c:cb: 1e:23:97:2e:05:a8:39:5e:24:25:93:68:71:0b:13:01:ae:91: 64:7c:ae:ca:d0:45:ce:45:4f:e0:60:f2:81:53:78:22:a7:d3: 77:b1:f7:ce:ae:e9:4a:ab:dd:2b:55:ac:ff:4a:5a:bd:07:b9: d9:a4:57:26:49:b9:ca:63:30:bf:52:e5:24:4c:e5:2e:4c:81: 3c:41:2c:87:b3:75:01:90:df:60:db:cd:df:5f:48:f3:bd:7b: 8f:97:8a:9a:6d:34:6a:52:41:a2:de:42:52:5e:51:00:ef:83: 59:53:3b:62:dd:59:f5:22:43:7b:78:0f:d8:69:a5:bc:3d:d8: 31:db:34:fb:ca:76:c6:e8:34:2e:34:0b:15:1d:5b:09:bc:31: 9e:61:aa:0a:6e:8c:df:44:ef:71:76:84:8b:1e:9e:7d:fe:a6: ae:ac:3e:2c:4f:72:be:f0:86:99:d2:5e:87:75:81:8e:4d:67: 43:4a:77:4e:c0:32:59:b3:b6:b2:17:4d:75:7b:37:8a:b6:83: 8b:bc:a0:36:33:ec:fe:01:7d:91:dc:e3:ff:8e:0d:aa:87:d5: 62:e5:d8:08 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUZbNYDgti/zT2FKfmoz41MmSl00swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0E1NDdGMDA1RTg0ODIzRTZBOEE0NzE3MjNDMTcxNjhF OEU0NDY0NDAeFw0yNjA4MzExMDQyNDNaFw0yNzA4MzAxMDQ3NDNaMDMxMTAvBgNV BAMTKDYxNzkxRjM3N0IyQTMyQ0VBOEZGQzVGM0ZCN0IxMTlFNDQxNzc2NzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/0w9OaZcSSshJzMKxw+IDlXyO k0L/H0VxgTJwNpY4hmAcEg91Cf7bI2ZCydOVwzZH+nRoepa2ZdCVTQRd2wM5ioJD 539eAolUbc4L3v0wvKJy8aKMVHo5XNKBh29ex6xx66eS24rsKrkVXI9OlZeAQkp+ G3WRmLtMd2I8XZIMoGOnX28C2GVD8PPpXeV/rYwIdQuIkDApUXWuaIlexSqvBD7Z zRQvxoC1AXWY3tqZoVcJtFcmTaY241iHcDAauqOPT1h4qV91K2AzTHoUdFNRPxJz nshRhNgKRlFkgArYs0l2UKg0esrOiZ0xpn3bHVvNyNeXTbicAiyliy6TyffhAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUYXkfN3sqMs6o/8Xz+3sRnkQXdngwHwYDVR0j BBgwFoAUylR/AF6Egj5qikcXI8FxaOjkRkQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGNlYmYxMTYtZmUyYS00OTFiLWFhYzgtMjIwZWFkMGI1NGUyLzAvQ0E1NDdGMDA1 RTg0ODIzRTZBOEE0NzE3MjNDMTcxNjhFOEU0NDY0NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQTU0N0YwMDVFODQ4MjNFNkE4QTQ3MTcyM0MxNzE2OEU4RTQ0 NjQ0LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzhjZWJmMTE2LWZlMmEtNDkxYi1h YWM4LTIyMGVhZDBiNTRlMi8wLzMyMzAzMjJlMzUzODJlMzIzMTM5MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzIzMDMyMzAzMzM2LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyjrbMA0GCSqG SIb3DQEBCwUAA4IBAQCdVmv1ITLtFJFT3AEOz4uBIjRG8zh4JSKUCSnrtJKNsXip nMseI5cuBag5XiQlk2hxCxMBrpFkfK7K0EXORU/gYPKBU3gip9N3sffOrulKq90r Vaz/Slq9B7nZpFcmSbnKYzC/UuUkTOUuTIE8QSyHs3UBkN9g283fX0jzvXuPl4qa bTRqUkGi3kJSXlEA74NZUzti3Vn1IkN7eA/YaaW8Pdgx2zT7ynbG6DQuNAsVHVsJ vDGeYaoKbozfRO9xdoSLHp59/qaurD4sT3K+8IaZ0l6HdYGOTWdDSndOwDJZs7ay F011ezeKtoOLvKA2M+z+AX2R3OP/jg2qh9Vi5dgI -----END CERTIFICATE-----Generated at Wed Sep 9 00:20:51 2026 by rpki-client