$ rpki-client -vvf repo-rpki.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/34332e3235322e37322e302f32322d3234203d3e203338373538.roa File: 34332e3235322e37322e302f32322d3234203d3e203338373538.roa (raw, json) Hash identifier: CXQZIZNdSuRyo3numXoAqSwoFv1BpTDqqmtfJIixEeM= Subject key identifier: D4:96:1D:B9:28:A4:A4:C3:19:E0:48:DD:8D:24:60:A3:74:A9:78:2D Certificate issuer: /CN=9FEB25155CF1AFF90AE11DA0298F164D554986F4 Certificate serial: 617743BA50118F4B6CC5AD1256F3D63AC78EB22D Authority key identifier: 9F:EB:25:15:5C:F1:AF:F9:0A:E1:1D:A0:29:8F:16:4D:55:49:86:F4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FEB25155CF1AFF90AE11DA0298F164D554986F4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/34332e3235322e37322e302f32322d3234203d3e203338373538.roa Signing time: Mon 02 Jun 2025 01:00:00 +0000 ROA not before: Mon 02 Jun 2025 00:55:00 +0000 ROA not after: Mon 01 Jun 2026 01:00:00 +0000 asID: 38758 IP address blocks: 43.252.72.0/22 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/9FEB25155CF1AFF90AE11DA0298F164D554986F4.crl rsync://repo-rpki.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/9FEB25155CF1AFF90AE11DA0298F164D554986F4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FEB25155CF1AFF90AE11DA0298F164D554986F4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 03:10:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:77:43:ba:50:11:8f:4b:6c:c5:ad:12:56:f3:d6:3a:c7:8e:b2:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9FEB25155CF1AFF90AE11DA0298F164D554986F4 Validity Not Before: Jun 2 00:55:00 2025 GMT Not After : Jun 1 01:00:00 2026 GMT Subject: CN=D4961DB928A4A4C319E048DD8D2460A374A9782D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:25:b2:1d:cb:42:f1:1d:d5:97:49:27:45:db: 69:f1:8c:d0:9f:16:5a:d6:58:7d:c4:15:a3:cf:ab: 62:1d:b8:97:7b:78:78:86:90:d7:c1:65:51:dd:25: 08:58:4f:b1:b4:7a:3a:b7:49:99:c9:a5:f6:c2:c6: d7:ba:13:57:35:37:5a:24:56:a2:a7:85:8c:47:7e: a2:fa:90:0f:cd:04:79:a5:08:f9:ab:ba:34:11:80: f9:5b:7f:9a:12:29:46:64:5d:bc:0e:ce:fb:ec:27: 69:72:fa:45:53:4c:79:f3:c6:82:0c:fd:04:25:4b: 11:8b:78:4d:f4:9e:95:72:86:3f:1a:2b:52:13:39: ad:a2:a2:8f:9e:32:ee:e8:60:86:54:7f:96:1e:52: c7:ed:fb:41:ff:87:37:ce:cd:12:77:01:c6:12:47: de:da:42:8a:a0:6b:2b:15:3d:eb:7e:fb:5b:7a:89: cf:ca:7c:0a:fc:3e:75:4f:4b:77:28:9a:fc:80:89: 49:16:06:16:11:55:29:69:65:86:80:46:17:f8:96: cb:64:ae:56:be:4a:cc:72:9d:2e:91:bc:cf:0d:c2: 21:fa:ca:d6:52:c6:97:3a:94:6b:bf:31:55:25:43: 0d:30:f2:9c:9d:f2:d2:e2:2e:dd:c6:88:fa:9d:ba: 6d:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:96:1D:B9:28:A4:A4:C3:19:E0:48:DD:8D:24:60:A3:74:A9:78:2D X509v3 Authority Key Identifier: keyid:9F:EB:25:15:5C:F1:AF:F9:0A:E1:1D:A0:29:8F:16:4D:55:49:86:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/9FEB25155CF1AFF90AE11DA0298F164D554986F4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FEB25155CF1AFF90AE11DA0298F164D554986F4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/34332e3235322e37322e302f32322d3234203d3e203338373538.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.252.72.0/22 Signature Algorithm: sha256WithRSAEncryption c3:e7:e8:fa:29:18:0c:7c:48:7b:02:d6:6a:00:3d:c4:26:46: a7:a0:c9:6e:87:45:2b:ab:a9:2e:3e:96:59:75:80:1e:e4:05: 55:13:c1:cf:d2:ac:67:f3:f4:df:48:b7:11:43:c5:e3:92:3a: 88:7d:49:b5:df:2a:9d:dd:0c:1c:95:ea:9e:a1:6a:0f:0a:45: b8:3c:21:78:44:75:d8:1f:27:78:17:31:9b:3d:7a:7c:0d:8e: 03:98:c9:e4:2a:25:63:77:25:cc:c1:ed:ef:df:65:85:16:31: 12:2d:15:c4:ed:19:95:50:aa:ff:e1:c8:0b:14:f1:ae:75:05: 27:12:19:a6:22:39:40:db:3d:cc:e9:1d:0f:95:58:a5:f4:56: e5:e1:ba:0f:14:d3:f0:47:20:e0:c8:fb:ea:b4:fa:51:2f:49: 28:73:14:11:c6:82:9b:c3:33:4c:da:ee:58:b5:d4:4c:41:46: d8:87:4c:06:79:92:e5:00:7b:81:07:0a:d8:22:1f:10:9f:88: 02:be:79:a8:3e:34:58:14:3d:e4:59:a5:3b:73:e2:3f:83:76: be:66:d9:ae:32:68:b6:c5:27:48:3a:b9:94:59:f1:54:a5:e9: 9b:6b:48:13:c8:4e:5a:cc:e5:68:e9:17:9a:1b:8a:27:dc:9c: 7c:22:2a:92 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUYXdDulARj0tsxa0SVvPWOseOsi0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUZFQjI1MTU1Q0YxQUZGOTBBRTExREEwMjk4RjE2NEQ1 NTQ5ODZGNDAeFw0yNTA2MDIwMDU1MDBaFw0yNjA2MDEwMTAwMDBaMDMxMTAvBgNV BAMTKEQ0OTYxREI5MjhBNEE0QzMxOUUwNDhERDhEMjQ2MEEzNzRBOTc4MkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxJbIdy0LxHdWXSSdF22nxjNCf FlrWWH3EFaPPq2IduJd7eHiGkNfBZVHdJQhYT7G0ejq3SZnJpfbCxte6E1c1N1ok VqKnhYxHfqL6kA/NBHmlCPmrujQRgPlbf5oSKUZkXbwOzvvsJ2ly+kVTTHnzxoIM /QQlSxGLeE30npVyhj8aK1ITOa2ioo+eMu7oYIZUf5YeUsft+0H/hzfOzRJ3AcYS R97aQoqgaysVPet++1t6ic/KfAr8PnVPS3comvyAiUkWBhYRVSlpZYaARhf4lstk rla+SsxynS6RvM8NwiH6ytZSxpc6lGu/MVUlQw0w8pyd8tLiLt3GiPqdum3zAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQU1JYduSikpMMZ4EjdjSRgo3SpeC0wHwYDVR0j BBgwFoAUn+slFVzxr/kK4R2gKY8WTVVJhvQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YjRlMTk1ZS0xMmRlLTRjM2MtOTNlNS01MjJlZTU0MDE4ZDYvMC85RkVCMjUxNTVD RjFBRkY5MEFFMTFEQTAyOThGMTY0RDU1NDk4NkY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUZFQjI1MTU1Q0YxQUZGOTBBRTExREEwMjk4RjE2NEQ1NTQ5 ODZGNC5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzFiNGUxOTVlLTEyZGUtNGMzYy05 M2U1LTUyMmVlNTQwMThkNi8wLzM0MzMyZTMyMzUzMjJlMzczMjJlMzAyZjMyMzIy ZDMyMzQyMDNkM2UyMDMzMzgzNzM1Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIr/EgwDQYJKoZIhvcN AQELBQADggEBAMPn6PopGAx8SHsC1moAPcQmRqegyW6HRSurqS4+lll1gB7kBVUT wc/SrGfz9N9ItxFDxeOSOoh9SbXfKp3dDByV6p6hag8KRbg8IXhEddgfJ3gXMZs9 enwNjgOYyeQqJWN3JczB7e/fZYUWMRItFcTtGZVQqv/hyAsU8a51BScSGaYiOUDb PczpHQ+VWKX0VuXhug8U0/BHIODI++q0+lEvSShzFBHGgpvDM0za7li11ExBRtiH TAZ5kuUAe4EHCtgiHxCfiAK+eag+NFgUPeRZpTtz4j+Ddr5m2a4yaLbFJ0g6uZRZ 8VSl6ZtrSBPITlrM5WjpF5obiifcnHwiKpI= -----END CERTIFICATE-----Generated at Mon Jun 16 13:08:20 2025 by rpki-client