$ rpki-client -vvf repo-rpki.idnic.net/repo/22e64b0d-646c-4cec-941f-743b2d1bce4e/0/34352e3131372e3133322e302f32332d3234203d3e20313432333135.roa File: 34352e3131372e3133322e302f32332d3234203d3e20313432333135.roa (raw, json) Hash identifier: fLXdX7zNaxQkd0Q8cy8I+8hSaxOk9xH8R3KSPtmEdIw= Subject key identifier: BA:9B:41:4F:23:39:D8:A7:E6:FA:F0:80:CE:D5:FA:F4:42:C3:EF:AA Certificate issuer: /CN=DD8ADB0CD599281204D387EB652787650920B6C5 Certificate serial: 05EFCB78020A807A24F65072F0D37334508A8802 Authority key identifier: DD:8A:DB:0C:D5:99:28:12:04:D3:87:EB:65:27:87:65:09:20:B6:C5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD8ADB0CD599281204D387EB652787650920B6C5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/22e64b0d-646c-4cec-941f-743b2d1bce4e/0/34352e3131372e3133322e302f32332d3234203d3e20313432333135.roa Signing time: Sun 15 Feb 2026 12:06:40 +0000 ROA not before: Sun 15 Feb 2026 12:01:40 +0000 ROA not after: Sun 14 Feb 2027 12:06:40 +0000 asID: 142315 IP address blocks: 45.117.132.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/22e64b0d-646c-4cec-941f-743b2d1bce4e/0/DD8ADB0CD599281204D387EB652787650920B6C5.crl rsync://repo-rpki.idnic.net/repo/22e64b0d-646c-4cec-941f-743b2d1bce4e/0/DD8ADB0CD599281204D387EB652787650920B6C5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD8ADB0CD599281204D387EB652787650920B6C5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 10:43:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:ef:cb:78:02:0a:80:7a:24:f6:50:72:f0:d3:73:34:50:8a:88:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DD8ADB0CD599281204D387EB652787650920B6C5 Validity Not Before: Feb 15 12:01:40 2026 GMT Not After : Feb 14 12:06:40 2027 GMT Subject: CN=BA9B414F2339D8A7E6FAF080CED5FAF442C3EFAA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:15:fa:d0:69:7f:84:4e:6a:58:65:93:f2:fc: b7:c2:e2:b6:a5:5e:98:02:4a:98:19:a3:85:92:80: d8:0f:f7:1b:9b:df:b1:98:46:f4:be:47:ee:34:a9: 7a:9b:54:ff:44:ad:48:d7:d8:7f:a8:e4:06:cf:90: 28:9d:e7:43:8c:11:23:82:88:e9:90:ee:2a:e7:da: ed:81:d7:d6:9e:f1:08:45:2f:3b:19:3e:55:22:78: 8d:46:e1:80:3d:43:b7:13:e5:4f:fd:c1:30:55:a8: f5:63:db:f8:28:fc:b8:1f:2a:1f:bf:e4:b9:44:a6: 64:52:13:98:62:44:86:1b:48:95:bd:64:cb:3a:f0: 9a:f0:ff:a9:4e:ac:a9:8f:96:60:f4:80:28:bf:6b: 0d:97:39:48:c6:88:48:a7:81:a7:0b:75:d7:55:1b: 68:38:6a:40:0b:f8:0d:9b:e0:a4:1a:4e:b8:d3:c2: f8:06:66:9b:98:84:1d:7e:df:fa:87:f1:02:fc:0e: c5:df:75:9b:26:12:7e:6b:92:9c:29:87:aa:80:d6: db:4c:aa:63:66:75:f3:6a:2e:a9:00:4a:0e:ca:69: bf:c3:ad:94:ad:0c:56:f8:28:e0:40:f8:3d:d4:b6: 84:18:1c:22:b5:87:dc:66:0a:49:66:57:02:7d:8e: db:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:9B:41:4F:23:39:D8:A7:E6:FA:F0:80:CE:D5:FA:F4:42:C3:EF:AA X509v3 Authority Key Identifier: keyid:DD:8A:DB:0C:D5:99:28:12:04:D3:87:EB:65:27:87:65:09:20:B6:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/22e64b0d-646c-4cec-941f-743b2d1bce4e/0/DD8ADB0CD599281204D387EB652787650920B6C5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD8ADB0CD599281204D387EB652787650920B6C5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/22e64b0d-646c-4cec-941f-743b2d1bce4e/0/34352e3131372e3133322e302f32332d3234203d3e20313432333135.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.117.132.0/23 Signature Algorithm: sha256WithRSAEncryption 59:91:71:0c:67:3e:05:2e:cb:85:e2:a8:20:f2:7c:2d:55:7c: 78:16:a6:f4:df:df:ae:28:62:22:15:c6:df:d6:e3:70:a6:2a: 0c:44:19:9e:5f:5d:db:4c:af:da:52:5c:7f:d3:96:52:c5:77: 9c:7a:d9:7c:9c:4a:9b:13:83:62:c3:7f:2b:3b:a9:a2:41:10: f1:c5:22:c3:63:9f:89:cb:cc:ce:55:c2:a8:14:4d:f9:c8:11: d5:b4:93:48:74:de:c0:96:13:ba:db:11:dc:f9:1b:ea:95:f5: 99:03:a1:a3:97:92:fc:ee:e5:91:ad:ba:1b:5f:6d:60:01:b3: a5:32:4c:25:d2:68:32:37:00:e5:4f:da:a1:30:90:31:0d:ed: 7f:b7:b4:bc:0a:85:f5:ff:69:e0:c3:9f:08:4a:50:33:03:7d: ea:33:4e:a5:08:80:62:bf:03:48:1e:3f:6f:8d:f2:41:ce:c5: ae:af:28:d3:5f:5d:ea:62:e3:2c:94:a9:47:c2:b4:7d:18:a5: b2:b5:22:3f:7b:27:e7:76:00:f9:aa:25:6c:d9:d0:a6:30:bd: 5f:7d:76:f9:2b:15:d4:51:63:fc:76:a8:0f:92:aa:7c:77:38: 9b:3a:35:2c:b8:66:30:c9:cb:ec:f5:1c:a1:a6:c5:a4:6c:ba: 7c:de:dc:10 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUBe/LeAIKgHok9lBy8NNzNFCKiAIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREQ4QURCMENENTk5MjgxMjA0RDM4N0VCNjUyNzg3NjUw OTIwQjZDNTAeFw0yNjAyMTUxMjAxNDBaFw0yNzAyMTQxMjA2NDBaMDMxMTAvBgNV BAMTKEJBOUI0MTRGMjMzOUQ4QTdFNkZBRjA4MENFRDVGQUY0NDJDM0VGQUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7FfrQaX+ETmpYZZPy/LfC4ral XpgCSpgZo4WSgNgP9xub37GYRvS+R+40qXqbVP9ErUjX2H+o5AbPkCid50OMESOC iOmQ7irn2u2B19ae8QhFLzsZPlUieI1G4YA9Q7cT5U/9wTBVqPVj2/go/LgfKh+/ 5LlEpmRSE5hiRIYbSJW9ZMs68Jrw/6lOrKmPlmD0gCi/aw2XOUjGiEingacLdddV G2g4akAL+A2b4KQaTrjTwvgGZpuYhB1+3/qH8QL8DsXfdZsmEn5rkpwph6qA1ttM qmNmdfNqLqkASg7Kab/DrZStDFb4KOBA+D3UtoQYHCK1h9xmCklmVwJ9jtttAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUuptBTyM52Kfm+vCAztX69ELD76owHwYDVR0j BBgwFoAU3YrbDNWZKBIE04frZSeHZQkgtsUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MmU2NGIwZC02NDZjLTRjZWMtOTQxZi03NDNiMmQxYmNlNGUvMC9ERDhBREIwQ0Q1 OTkyODEyMDREMzg3RUI2NTI3ODc2NTA5MjBCNkM1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREQ4QURCMENENTk5MjgxMjA0RDM4N0VCNjUyNzg3NjUwOTIw QjZDNS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzIyZTY0YjBkLTY0NmMtNGNlYy05 NDFmLTc0M2IyZDFiY2U0ZS8wLzM0MzUyZTMxMzEzNzJlMzEzMzMyMmUzMDJmMzIz MzJkMzIzNDIwM2QzZTIwMzEzNDMyMzMzMTM1LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLXWEMA0GCSqG SIb3DQEBCwUAA4IBAQBZkXEMZz4FLsuF4qgg8nwtVXx4Fqb039+uKGIiFcbf1uNw pioMRBmeX13bTK/aUlx/05ZSxXecetl8nEqbE4Niw38rO6miQRDxxSLDY5+Jy8zO VcKoFE35yBHVtJNIdN7AlhO62xHc+RvqlfWZA6Gjl5L87uWRrbobX21gAbOlMkwl 0mgyNwDlT9qhMJAxDe1/t7S8CoX1/2ngw58ISlAzA33qM06lCIBivwNIHj9vjfJB zsWuryjTX13qYuMslKlHwrR9GKWytSI/eyfndgD5qiVs2dCmML1ffXb5KxXUUWP8 dqgPkqp8dzibOjUsuGYwycvs9RyhpsWkbLp83twQ -----END CERTIFICATE-----Generated at Mon Mar 2 12:06:26 2026 by rpki-client