$ rpki-client -vvf repo-rpki.idnic.net/repo/00a985b0-e17a-421b-9655-03245a01aef8/0/34332e3235322e392e302f32342d3234203d3e203436303233.roa File: 34332e3235322e392e302f32342d3234203d3e203436303233.roa (raw, json) Hash identifier: to/mu6NEC+VgYXIYqUqeGeZXt110gpC9r+Amh1BFayY= Subject key identifier: EA:47:51:A0:0F:BF:7F:31:D3:C1:E1:99:92:BE:EF:2D:44:B5:31:19 Certificate issuer: /CN=7DF6602C113DDEE922AA019C74EF4283764A4695 Certificate serial: 727F287AFFB2EC0A6A76D93757790ED4AF2674EA Authority key identifier: 7D:F6:60:2C:11:3D:DE:E9:22:AA:01:9C:74:EF:42:83:76:4A:46:95 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7DF6602C113DDEE922AA019C74EF4283764A4695.cer Subject info access: rsync://repo-rpki.idnic.net/repo/00a985b0-e17a-421b-9655-03245a01aef8/0/34332e3235322e392e302f32342d3234203d3e203436303233.roa Signing time: Mon 14 Jul 2025 16:00:03 +0000 ROA not before: Mon 14 Jul 2025 15:55:03 +0000 ROA not after: Mon 13 Jul 2026 16:00:03 +0000 asID: 46023 IP address blocks: 43.252.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/00a985b0-e17a-421b-9655-03245a01aef8/0/7DF6602C113DDEE922AA019C74EF4283764A4695.crl rsync://repo-rpki.idnic.net/repo/00a985b0-e17a-421b-9655-03245a01aef8/0/7DF6602C113DDEE922AA019C74EF4283764A4695.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7DF6602C113DDEE922AA019C74EF4283764A4695.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 10:41:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:7f:28:7a:ff:b2:ec:0a:6a:76:d9:37:57:79:0e:d4:af:26:74:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7DF6602C113DDEE922AA019C74EF4283764A4695 Validity Not Before: Jul 14 15:55:03 2025 GMT Not After : Jul 13 16:00:03 2026 GMT Subject: CN=EA4751A00FBF7F31D3C1E19992BEEF2D44B53119 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:fc:ca:2c:15:08:dc:b7:c9:b7:31:c4:ed:1b: e1:af:3f:a6:a7:98:06:84:53:48:f3:e8:b8:1d:d9: ca:e0:1d:61:ef:6d:79:6b:f9:55:7a:8e:a3:32:0f: 31:9e:c4:c8:69:a5:fe:31:ee:f7:e1:48:cf:91:69: 1e:41:35:79:b7:6d:19:ab:b2:2f:b7:e1:6f:04:45: d3:98:ab:66:78:03:f9:40:20:af:4f:d8:d2:7a:45: 41:7d:83:b1:2a:06:57:84:5f:9f:1d:d9:43:b6:1e: 56:4f:2c:42:78:3b:2c:ec:fa:bc:34:2d:a6:25:40: 1a:11:e3:14:fa:31:83:c5:b8:26:d8:50:f3:4d:10: 7a:51:a6:36:bc:84:0e:51:91:1e:45:64:9a:f0:55: 2d:80:d0:9e:b5:de:1c:0a:05:1c:2b:38:26:ab:e3: 2c:2f:85:6f:fd:cf:28:50:28:c4:5e:94:78:86:0a: 8d:44:f7:66:f5:bd:02:e0:c2:6d:6f:ab:0a:11:ad: 4b:37:db:92:6b:1d:f3:3c:25:e7:0f:4d:5c:46:50: bc:99:03:93:bc:d7:77:81:1d:d9:59:af:54:5f:c2: 05:f2:c5:05:0d:28:a3:2a:50:70:f7:b6:79:36:2c: 23:ea:4d:38:18:a4:1c:aa:6c:f7:72:a9:20:35:ec: f8:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:47:51:A0:0F:BF:7F:31:D3:C1:E1:99:92:BE:EF:2D:44:B5:31:19 X509v3 Authority Key Identifier: keyid:7D:F6:60:2C:11:3D:DE:E9:22:AA:01:9C:74:EF:42:83:76:4A:46:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/00a985b0-e17a-421b-9655-03245a01aef8/0/7DF6602C113DDEE922AA019C74EF4283764A4695.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7DF6602C113DDEE922AA019C74EF4283764A4695.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/00a985b0-e17a-421b-9655-03245a01aef8/0/34332e3235322e392e302f32342d3234203d3e203436303233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.252.9.0/24 Signature Algorithm: sha256WithRSAEncryption 46:2e:ce:f8:d6:c4:ec:44:a6:1e:bd:8c:0e:d0:3f:5a:e9:09: 7d:67:f8:01:e1:a9:c8:95:80:c7:8a:7e:f8:b6:38:62:24:6b: 58:80:e3:02:71:4b:e1:74:bb:34:7b:9b:07:eb:59:c3:21:cc: 77:41:02:69:95:35:85:c8:6b:7c:c9:bc:7c:52:02:dc:e0:a3: a1:cd:3c:6a:88:ba:fc:20:d4:0a:dc:07:24:6c:cd:99:7f:87: 97:19:9f:3b:f2:db:4a:5d:21:90:0a:85:e2:43:da:96:be:92: 73:7c:cb:55:12:54:8f:82:99:3a:9d:21:86:30:bd:09:08:fb: da:f5:78:93:d8:b8:33:2c:c0:4a:58:b8:cc:d4:b2:11:92:f4: a3:1f:a9:37:d3:32:13:29:da:03:7e:2c:fa:4d:18:0f:d0:11: 20:f3:13:dc:4f:69:48:f6:d4:3d:7b:3e:7c:12:7a:4d:2b:3a: 62:b2:bc:ea:c1:6d:a2:c2:93:9e:3e:58:90:e9:fa:ad:67:de: af:d3:e8:d6:3a:90:6f:e3:99:a2:46:58:ea:cd:43:dd:d0:61: 9e:05:4c:4e:e3:79:1b:ed:ea:ad:b5:8d:3f:1c:ef:80:fd:1d: 61:d5:ef:f5:09:a8:17:48:b8:a4:dd:b0:cf:05:51:d8:6a:13: 04:3a:18:ed -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgIUcn8oev+y7Apqdtk3V3kO1K8mdOowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0RGNjYwMkMxMTNEREVFOTIyQUEwMTlDNzRFRjQyODM3 NjRBNDY5NTAeFw0yNTA3MTQxNTU1MDNaFw0yNjA3MTMxNjAwMDNaMDMxMTAvBgNV BAMTKEVBNDc1MUEwMEZCRjdGMzFEM0MxRTE5OTkyQkVFRjJENDRCNTMxMTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDX/MosFQjct8m3McTtG+GvP6an mAaEU0jz6Lgd2crgHWHvbXlr+VV6jqMyDzGexMhppf4x7vfhSM+RaR5BNXm3bRmr si+34W8ERdOYq2Z4A/lAIK9P2NJ6RUF9g7EqBleEX58d2UO2HlZPLEJ4Oyzs+rw0 LaYlQBoR4xT6MYPFuCbYUPNNEHpRpja8hA5RkR5FZJrwVS2A0J613hwKBRwrOCar 4ywvhW/9zyhQKMRelHiGCo1E92b1vQLgwm1vqwoRrUs325JrHfM8JecPTVxGULyZ A5O813eBHdlZr1RfwgXyxQUNKKMqUHD3tnk2LCPqTTgYpByqbPdyqSA17PhFAgMB AAGjggItMIICKTAdBgNVHQ4EFgQU6kdRoA+/fzHTweGZkr7vLUS1MRkwHwYDVR0j BBgwFoAUffZgLBE93ukiqgGcdO9Cg3ZKRpUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MGE5ODViMC1lMTdhLTQyMWItOTY1NS0wMzI0NWEwMWFlZjgvMC83REY2NjAyQzEx M0RERUU5MjJBQTAxOUM3NEVGNDI4Mzc2NEE0Njk1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0RGNjYwMkMxMTNEREVFOTIyQUEwMTlDNzRFRjQyODM3NjRB NDY5NS5jZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDBhOTg1YjAtZTE3YS00MjFiLTk2 NTUtMDMyNDVhMDFhZWY4LzAvMzQzMzJlMzIzNTMyMmUzOTJlMzAyZjMyMzQyZDMy MzQyMDNkM2UyMDM0MzYzMDMyMzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAr/AkwDQYJKoZIhvcNAQEL BQADggEBAEYuzvjWxOxEph69jA7QP1rpCX1n+AHhqciVgMeKfvi2OGIka1iA4wJx S+F0uzR7mwfrWcMhzHdBAmmVNYXIa3zJvHxSAtzgo6HNPGqIuvwg1ArcByRszZl/ h5cZnzvy20pdIZAKheJD2pa+knN8y1USVI+CmTqdIYYwvQkI+9r1eJPYuDMswEpY uMzUshGS9KMfqTfTMhMp2gN+LPpNGA/QESDzE9xPaUj21D17PnwSek0rOmKyvOrB baLCk54+WJDp+q1n3q/T6NY6kG/jmaJGWOrNQ93QYZ4FTE7jeRvt6q21jT8c74D9 HWHV7/UJqBdIuKTdsM8FUdhqEwQ6GO0= -----END CERTIFICATE-----Generated at Tue Nov 4 16:56:12 2025 by rpki-client