$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3230322e35382e3232332e302f32342d3234203d3e20323032303336.roa File: 3230322e35382e3232332e302f32342d3234203d3e20323032303336.roa (raw, json) Hash identifier: HX0xIyW0k6qG2j/fvWf1M5+GK7grsi3Qldh16SQgEUo= Subject key identifier: CB:D7:76:27:A0:D7:21:BE:B7:32:29:5A:49:63:29:C1:C8:2E:FC:6F Certificate issuer: /CN=CA547F005E84823E6A8A471723C17168E8E44644 Certificate serial: 60CCEA92F2F4A0C212D07E0B60B9CA62637E5FD1 Authority key identifier: CA:54:7F:00:5E:84:82:3E:6A:8A:47:17:23:C1:71:68:E8:E4:46:44 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA547F005E84823E6A8A471723C17168E8E44644.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3230322e35382e3232332e302f32342d3234203d3e20323032303336.roa Signing time: Mon 31 Aug 2026 10:47:59 +0000 ROA not before: Mon 31 Aug 2026 10:42:59 +0000 ROA not after: Mon 30 Aug 2027 10:47:59 +0000 asID: 202036 IP address blocks: 202.58.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/CA547F005E84823E6A8A471723C17168E8E44644.crl rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/CA547F005E84823E6A8A471723C17168E8E44644.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA547F005E84823E6A8A471723C17168E8E44644.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Sep 2026 09:04:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:cc:ea:92:f2:f4:a0:c2:12:d0:7e:0b:60:b9:ca:62:63:7e:5f:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA547F005E84823E6A8A471723C17168E8E44644 Validity Not Before: Aug 31 10:42:59 2026 GMT Not After : Aug 30 10:47:59 2027 GMT Subject: CN=CBD77627A0D721BEB732295A496329C1C82EFC6F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:9a:ed:4f:ff:58:45:06:0b:fe:36:3b:7d:69: f7:b7:8a:cb:c6:16:a8:fc:93:95:30:4e:1c:c0:43: 46:c6:f9:0d:d9:01:1f:ce:41:b0:90:e4:9b:dc:30: c5:b8:86:b0:86:ad:6f:9c:3f:16:12:25:33:90:60: 76:6a:41:ad:6b:c1:19:35:7d:ce:5c:85:08:8b:f7: 6f:28:8a:20:73:ec:2a:d7:ea:1b:f9:6d:dc:fe:9d: 81:02:03:90:bb:cd:a1:ce:6d:f2:d5:32:a2:dc:7b: 1d:c2:50:43:e9:da:ae:87:6d:36:29:09:d7:a0:47: 4d:74:3c:1d:1a:0b:17:6c:88:4c:87:ea:c0:e0:0e: 4a:42:ac:ce:85:48:29:20:29:cc:b5:e1:42:d8:ae: d9:0f:f7:f2:ce:8f:97:57:c2:b1:42:42:4b:26:ee: 83:52:5b:5a:01:5e:5e:4f:8b:0d:48:64:5c:49:a0: 60:3d:62:9d:ab:85:56:21:d0:a1:da:71:2f:83:ea: da:39:5e:2c:05:0a:e8:3d:57:ca:bc:bf:4e:f1:ab: 0e:25:da:81:84:b8:1a:32:d5:ef:48:4a:be:31:8c: 09:37:bd:91:3e:36:22:76:2f:f5:cc:87:88:d8:3a: 01:32:8d:f8:9d:30:28:14:af:61:6b:7d:27:e3:21: 61:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:D7:76:27:A0:D7:21:BE:B7:32:29:5A:49:63:29:C1:C8:2E:FC:6F X509v3 Authority Key Identifier: keyid:CA:54:7F:00:5E:84:82:3E:6A:8A:47:17:23:C1:71:68:E8:E4:46:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/CA547F005E84823E6A8A471723C17168E8E44644.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA547F005E84823E6A8A471723C17168E8E44644.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3230322e35382e3232332e302f32342d3234203d3e20323032303336.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.58.223.0/24 Signature Algorithm: sha256WithRSAEncryption 4c:fb:c8:2a:d9:81:28:a6:3b:f6:9d:b8:72:fe:19:1e:36:dd: 1b:94:a3:c9:cb:b9:29:52:d1:3a:68:5c:5a:e1:0c:ef:ca:c4: 2e:13:3a:e4:ce:d8:86:8c:57:1a:22:d3:5d:d6:02:18:54:c5: 01:7c:03:4d:30:6e:03:89:52:13:72:e0:be:44:db:17:b5:06: fc:2d:4b:40:99:e8:d1:a3:d2:f2:3b:23:f2:b3:16:78:3b:a0: fd:a4:d3:cc:6f:61:e7:a2:1f:62:83:f9:70:0d:72:e6:82:e0: 95:dc:14:4b:33:5d:60:6b:88:96:23:48:d4:5e:2c:6e:83:85: 1c:6d:30:4d:ab:d6:c5:d7:4e:32:6d:85:a0:b4:bf:c1:c7:33: 92:87:15:bd:23:e4:d0:a0:92:44:c3:0d:6c:fa:7e:a5:0b:a1: a0:1b:1e:fc:ab:09:82:18:64:44:6a:c4:34:99:16:e6:a1:21: d6:c0:8e:5f:71:28:03:61:60:9b:31:85:64:e3:ae:ad:d4:d7: c1:d4:32:fc:f3:21:02:fc:8d:59:1b:6c:ff:a6:94:6f:70:e0: b3:48:79:be:71:50:63:90:66:e3:36:67:44:7e:98:54:fa:92: fd:72:0c:3d:11:99:8b:19:96:41:52:ae:d7:6b:eb:8b:d2:73: 37:2f:9a:53 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUYMzqkvL0oMIS0H4LYLnKYmN+X9EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0E1NDdGMDA1RTg0ODIzRTZBOEE0NzE3MjNDMTcxNjhF OEU0NDY0NDAeFw0yNjA4MzExMDQyNTlaFw0yNzA4MzAxMDQ3NTlaMDMxMTAvBgNV BAMTKENCRDc3NjI3QTBENzIxQkVCNzMyMjk1QTQ5NjMyOUMxQzgyRUZDNkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmmu1P/1hFBgv+Njt9afe3isvG Fqj8k5UwThzAQ0bG+Q3ZAR/OQbCQ5JvcMMW4hrCGrW+cPxYSJTOQYHZqQa1rwRk1 fc5chQiL928oiiBz7CrX6hv5bdz+nYECA5C7zaHObfLVMqLcex3CUEPp2q6HbTYp CdegR010PB0aCxdsiEyH6sDgDkpCrM6FSCkgKcy14ULYrtkP9/LOj5dXwrFCQksm 7oNSW1oBXl5Piw1IZFxJoGA9Yp2rhVYh0KHacS+D6to5XiwFCug9V8q8v07xqw4l 2oGEuBoy1e9ISr4xjAk3vZE+NiJ2L/XMh4jYOgEyjfidMCgUr2FrfSfjIWG7AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUy9d2J6DXIb63MilaSWMpwcgu/G8wHwYDVR0j BBgwFoAUylR/AF6Egj5qikcXI8FxaOjkRkQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGNlYmYxMTYtZmUyYS00OTFiLWFhYzgtMjIwZWFkMGI1NGUyLzAvQ0E1NDdGMDA1 RTg0ODIzRTZBOEE0NzE3MjNDMTcxNjhFOEU0NDY0NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQTU0N0YwMDVFODQ4MjNFNkE4QTQ3MTcyM0MxNzE2OEU4RTQ0 NjQ0LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzhjZWJmMTE2LWZlMmEtNDkxYi1h YWM4LTIyMGVhZDBiNTRlMi8wLzMyMzAzMjJlMzUzODJlMzIzMjMzMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzIzMDMyMzAzMzM2LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyjrfMA0GCSqG SIb3DQEBCwUAA4IBAQBM+8gq2YEopjv2nbhy/hkeNt0blKPJy7kpUtE6aFxa4Qzv ysQuEzrkztiGjFcaItNd1gIYVMUBfANNMG4DiVITcuC+RNsXtQb8LUtAmejRo9Ly OyPysxZ4O6D9pNPMb2Hnoh9ig/lwDXLmguCV3BRLM11ga4iWI0jUXixug4UcbTBN q9bF104ybYWgtL/BxzOShxW9I+TQoJJEww1s+n6lC6GgGx78qwmCGGREasQ0mRbm oSHWwI5fcSgDYWCbMYVk466t1NfB1DL88yEC/I1ZG2z/ppRvcOCzSHm+cVBjkGbj NmdEfphU+pL9cgw9EZmLGZZBUq7Xa+uL0nM3L5pT -----END CERTIFICATE-----Generated at Wed Sep 9 00:20:49 2026 by rpki-client