$ rpki-client -vvf repo-rpki.idnic.net/repo/19205e7c-a881-4873-9188-e521b6af529c/0/34332e3234332e3134302e302f32322d3234203d3e20313331313131.roa File: 34332e3234332e3134302e302f32322d3234203d3e20313331313131.roa (raw, json) Hash identifier: Ln/zBXifrR3kRN5QO8V+SWT6tpUWR1WnEob5sCVgP4s= Subject key identifier: F5:0E:0B:4E:DB:2C:80:E1:57:F8:5C:8F:AA:EE:C9:14:04:8F:27:68 Certificate issuer: /CN=C1AF8C999E9D06DADEBC387D78B305AB8716DC2F Certificate serial: 7154B0EF2960D098678410C04CF3EC315A045289 Authority key identifier: C1:AF:8C:99:9E:9D:06:DA:DE:BC:38:7D:78:B3:05:AB:87:16:DC:2F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/19205e7c-a881-4873-9188-e521b6af529c/0/34332e3234332e3134302e302f32322d3234203d3e20313331313131.roa Signing time: Tue 10 Jun 2025 16:00:01 +0000 ROA not before: Tue 10 Jun 2025 15:55:01 +0000 ROA not after: Tue 09 Jun 2026 16:00:01 +0000 asID: 131111 IP address blocks: 43.243.140.0/22 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/19205e7c-a881-4873-9188-e521b6af529c/0/C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.crl rsync://repo-rpki.idnic.net/repo/19205e7c-a881-4873-9188-e521b6af529c/0/C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Jun 2025 21:41:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:54:b0:ef:29:60:d0:98:67:84:10:c0:4c:f3:ec:31:5a:04:52:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C1AF8C999E9D06DADEBC387D78B305AB8716DC2F Validity Not Before: Jun 10 15:55:01 2025 GMT Not After : Jun 9 16:00:01 2026 GMT Subject: CN=F50E0B4EDB2C80E157F85C8FAAEEC914048F2768 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:bc:5a:b0:6e:c9:a2:d4:81:1c:aa:5f:47:a5: d3:63:8f:bc:74:da:97:5f:90:3c:26:3b:7c:2d:41: 86:b7:77:61:6f:2a:25:27:fd:04:57:85:d6:0a:d4: 62:fb:99:69:9b:e7:bc:3a:72:7c:a2:27:f3:05:2e: 62:f0:4f:15:4b:ce:6d:c6:25:77:96:ae:71:92:0d: cd:bb:41:08:35:ac:d5:fc:e5:d8:22:97:8d:0c:e9: c7:22:80:af:a3:35:46:68:4e:ba:1f:2d:18:82:d6: 64:26:9c:d4:11:b1:69:57:6b:16:ed:fa:e4:aa:0e: 85:89:53:73:55:c4:d7:f5:f1:17:20:fc:be:20:9b: 8d:10:e5:3d:ad:04:6c:3b:91:b6:6b:a8:15:6f:72: 40:97:b7:1b:63:30:de:99:fe:df:6e:eb:4b:96:b6: 32:f9:57:d6:52:5a:87:e0:e4:10:84:bf:65:43:87: 38:71:54:35:6c:c5:c1:bc:b5:4f:50:60:62:99:23: 0c:1b:c7:2d:d9:b9:db:0d:2a:d9:c6:f7:2c:db:f9: d5:03:36:18:e6:28:a9:af:bd:ac:29:30:16:e8:78: 93:41:af:75:6c:4f:7b:e7:f8:d0:12:5b:8c:36:4e: b2:43:55:4f:8f:ce:80:c2:6f:3d:8e:02:b6:56:b7: 83:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:0E:0B:4E:DB:2C:80:E1:57:F8:5C:8F:AA:EE:C9:14:04:8F:27:68 X509v3 Authority Key Identifier: keyid:C1:AF:8C:99:9E:9D:06:DA:DE:BC:38:7D:78:B3:05:AB:87:16:DC:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/19205e7c-a881-4873-9188-e521b6af529c/0/C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/19205e7c-a881-4873-9188-e521b6af529c/0/34332e3234332e3134302e302f32322d3234203d3e20313331313131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.243.140.0/22 Signature Algorithm: sha256WithRSAEncryption 46:12:a0:88:b8:a1:23:76:c6:e2:58:2d:30:3a:a4:3d:a9:08: 8e:3b:ac:f3:20:20:91:7b:4b:b8:07:37:5e:6a:39:51:14:2a: c3:68:c2:50:78:94:76:fa:f7:ef:e1:bd:cb:be:ea:13:58:16: 98:a5:f0:c3:55:db:8f:e3:20:74:4f:83:72:8a:66:f6:87:fd: 48:1a:7f:1c:04:b7:78:23:ff:07:94:35:17:c2:4f:8d:0c:16: 84:83:ab:0e:3e:50:ad:be:4b:05:fd:8d:ea:56:4e:e2:ba:f7: 74:77:c3:fa:1c:ee:75:1d:f2:39:51:e2:52:cc:59:bc:07:57: 98:1f:bd:b2:0e:01:40:9f:bb:bf:b4:ff:88:3b:77:ad:7d:13: 25:85:7d:05:51:1b:30:0a:c1:32:89:51:da:99:dc:49:ee:93: 7e:f1:fa:95:33:fc:2a:14:89:02:ef:45:61:a5:49:12:ff:85: 40:44:59:6c:ed:50:83:47:b9:4e:3b:e2:2c:48:f0:05:8f:b9: 1b:c1:22:a1:6f:54:25:a1:69:69:e8:e9:c9:71:86:49:ec:ee: e2:15:a4:e7:e2:59:4e:71:4c:12:3b:ac:04:3d:c4:b8:78:33: 7d:ab:47:7f:1c:73:cf:51:37:d1:8d:1f:c4:ec:f8:fa:66:2d: ca:34:04:35 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUcVSw7ylg0JhnhBDATPPsMVoEUokwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzFBRjhDOTk5RTlEMDZEQURFQkMzODdENzhCMzA1QUI4 NzE2REMyRjAeFw0yNTA2MTAxNTU1MDFaFw0yNjA2MDkxNjAwMDFaMDMxMTAvBgNV BAMTKEY1MEUwQjRFREIyQzgwRTE1N0Y4NUM4RkFBRUVDOTE0MDQ4RjI3NjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNvFqwbsmi1IEcql9HpdNjj7x0 2pdfkDwmO3wtQYa3d2FvKiUn/QRXhdYK1GL7mWmb57w6cnyiJ/MFLmLwTxVLzm3G JXeWrnGSDc27QQg1rNX85dgil40M6ccigK+jNUZoTrofLRiC1mQmnNQRsWlXaxbt +uSqDoWJU3NVxNf18Rcg/L4gm40Q5T2tBGw7kbZrqBVvckCXtxtjMN6Z/t9u60uW tjL5V9ZSWofg5BCEv2VDhzhxVDVsxcG8tU9QYGKZIwwbxy3ZudsNKtnG9yzb+dUD NhjmKKmvvawpMBboeJNBr3VsT3vn+NASW4w2TrJDVU+PzoDCbz2OArZWt4PXAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU9Q4LTtssgOFX+FyPqu7JFASPJ2gwHwYDVR0j BBgwFoAUwa+MmZ6dBtrevDh9eLMFq4cW3C8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x OTIwNWU3Yy1hODgxLTQ4NzMtOTE4OC1lNTIxYjZhZjUyOWMvMC9DMUFGOEM5OTlF OUQwNkRBREVCQzM4N0Q3OEIzMDVBQjg3MTZEQzJGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzFBRjhDOTk5RTlEMDZEQURFQkMzODdENzhCMzA1QUI4NzE2 REMyRi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE5MjA1ZTdjLWE4ODEtNDg3My05 MTg4LWU1MjFiNmFmNTI5Yy8wLzM0MzMyZTMyMzQzMzJlMzEzNDMwMmUzMDJmMzIz MjJkMzIzNDIwM2QzZTIwMzEzMzMxMzEzMTMxLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCK/OMMA0GCSqG SIb3DQEBCwUAA4IBAQBGEqCIuKEjdsbiWC0wOqQ9qQiOO6zzICCRe0u4BzdeajlR FCrDaMJQeJR2+vfv4b3LvuoTWBaYpfDDVduP4yB0T4Nyimb2h/1IGn8cBLd4I/8H lDUXwk+NDBaEg6sOPlCtvksF/Y3qVk7iuvd0d8P6HO51HfI5UeJSzFm8B1eYH72y DgFAn7u/tP+IO3etfRMlhX0FURswCsEyiVHamdxJ7pN+8fqVM/wqFIkC70VhpUkS /4VARFls7VCDR7lOO+IsSPAFj7kbwSKhb1QloWlp6OnJcYZJ7O7iFaTn4llOcUwS O6wEPcS4eDN9q0d/HHPPUTfRjR/E7Pj6Zi3KNAQ1 -----END CERTIFICATE-----Generated at Sun Jun 15 23:45:25 2025 by rpki-client