$ rpki-client -vvf repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/34332e3235322e3233362e302f32332d3234203d3e203535373031.roa File: 34332e3235322e3233362e302f32332d3234203d3e203535373031.roa (raw, json) Hash identifier: Dc8BdtAPO03Z1L5MRp5Y72lj+merY2MxA64B93hGmbo= Subject key identifier: E7:2F:81:94:1D:06:0B:1F:AF:1B:64:71:6F:28:44:5A:6F:B2:78:0F Certificate issuer: /CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A Certificate serial: 6EC61FC1EA05954A964116FEDDBFFA3096496662 Authority key identifier: 8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/34332e3235322e3233362e302f32332d3234203d3e203535373031.roa Signing time: Wed 25 Jun 2025 02:49:18 +0000 ROA not before: Wed 25 Jun 2025 02:44:18 +0000 ROA not after: Wed 24 Jun 2026 02:49:18 +0000 asID: 55701 IP address blocks: 43.252.236.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 02:30:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:c6:1f:c1:ea:05:95:4a:96:41:16:fe:dd:bf:fa:30:96:49:66:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A Validity Not Before: Jun 25 02:44:18 2025 GMT Not After : Jun 24 02:49:18 2026 GMT Subject: CN=E72F81941D060B1FAF1B64716F28445A6FB2780F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:69:33:7d:38:e1:bf:bb:29:b3:87:0c:2d:2f: a1:09:bf:9b:91:cb:9b:f1:ed:2c:f5:3a:3b:88:dc: fb:7c:78:a4:40:81:24:37:eb:0a:0f:28:90:6a:d5: 3e:eb:75:07:7b:bd:23:6f:5e:c6:b0:9b:fa:cc:e9: cb:db:a3:dc:37:fc:0c:0a:88:f3:60:69:f4:e8:d6: f8:73:e1:89:da:83:02:e8:a1:24:df:da:8b:47:36: 1f:d0:7d:c7:9c:79:6f:6a:23:00:f2:10:e9:d1:bd: 82:21:99:3d:22:7e:dd:0a:f3:dc:1a:3c:da:36:0f: e2:31:51:72:ce:5d:92:fd:7a:ae:99:7c:e3:0a:39: 61:92:d5:96:6d:71:01:3a:4a:6c:ce:f7:09:9d:42: c6:78:19:f4:f8:38:2c:a1:20:f0:a5:61:8e:23:99: 2f:9e:5a:cb:c8:08:92:34:8c:47:bd:e1:42:2c:87: 41:e6:22:e7:58:fe:e8:87:47:be:7c:e1:55:98:0b: 1d:53:bc:24:c9:f0:af:74:27:73:b0:d6:37:07:75: 9a:16:b5:4a:7b:e6:32:2f:9a:1a:89:2f:4c:d8:d4: 2a:12:9f:57:c1:fd:c2:92:cc:fd:f4:c4:c4:f8:22: b9:83:eb:cb:d0:8b:1f:e4:ed:2f:94:6d:a7:d5:7b: b8:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:2F:81:94:1D:06:0B:1F:AF:1B:64:71:6F:28:44:5A:6F:B2:78:0F X509v3 Authority Key Identifier: keyid:8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/34332e3235322e3233362e302f32332d3234203d3e203535373031.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.252.236.0/23 Signature Algorithm: sha256WithRSAEncryption 44:1b:36:f2:60:f7:20:9d:d6:25:03:f1:ca:52:4c:8b:06:e5: 33:34:a6:45:ad:b5:e0:78:2a:9e:d1:c7:cc:c4:f5:a6:49:c7: 9d:57:0f:de:7f:d3:aa:d8:28:d0:83:d6:15:39:c1:b9:8c:32: 43:17:13:c5:93:de:88:11:c0:77:7c:7d:aa:b1:05:d9:81:73: 0b:c9:3a:d5:c4:ff:43:94:6e:20:91:3f:94:21:9f:d7:89:0b: ab:89:e4:c4:d0:3d:cc:ff:56:a8:04:76:83:bb:3b:00:05:71: 14:b4:42:d4:b9:d0:73:75:f0:a1:ac:de:9c:34:2a:79:3e:45: 3b:ea:58:40:28:58:24:2b:a1:20:85:60:41:3c:4c:eb:49:4f: 93:f7:7f:6e:3d:88:7c:87:67:99:d8:69:c5:34:92:d9:ee:b1: ba:7f:97:41:7c:9d:dc:39:c3:72:52:2e:b6:dc:79:ee:bd:eb: aa:65:d1:d5:1d:b5:33:34:31:6a:3b:57:20:26:1d:66:de:48: 0e:88:98:d4:81:7c:f7:a4:de:e3:40:16:bd:3e:9e:9f:94:3c: b0:70:03:66:83:29:32:50:96:00:18:41:93:fe:e5:33:5f:77: 82:ad:55:8e:40:e6:4a:58:96:29:dc:61:29:b3:bc:09:01:8f: bf:fb:d4:65 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUbsYfweoFlUqWQRb+3b/6MJZJZmIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBCNzU4 QkY1MEY2QTAeFw0yNTA2MjUwMjQ0MThaFw0yNjA2MjQwMjQ5MThaMDMxMTAvBgNV BAMTKEU3MkY4MTk0MUQwNjBCMUZBRjFCNjQ3MTZGMjg0NDVBNkZCMjc4MEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2aTN9OOG/uymzhwwtL6EJv5uR y5vx7Sz1OjuI3Pt8eKRAgSQ36woPKJBq1T7rdQd7vSNvXsawm/rM6cvbo9w3/AwK iPNgafTo1vhz4YnagwLooSTf2otHNh/QfceceW9qIwDyEOnRvYIhmT0ift0K89wa PNo2D+IxUXLOXZL9eq6ZfOMKOWGS1ZZtcQE6SmzO9wmdQsZ4GfT4OCyhIPClYY4j mS+eWsvICJI0jEe94UIsh0HmIudY/uiHR7584VWYCx1TvCTJ8K90J3Ow1jcHdZoW tUp75jIvmhqJL0zY1CoSn1fB/cKSzP30xMT4IrmD68vQix/k7S+UbafVe7grAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQU5y+BlB0GCx+vG2RxbyhEWm+yeA8wHwYDVR0j BBgwFoAUj4TW/ur4xdPF0T8QG8cLdYv1D2owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y N2Q5Zjg1MS03ZTczLTQzODQtOTUwZS04YmU4ZTE1ZmQzZWUvMC84Rjg0RDZGRUVB RjhDNUQzQzVEMTNGMTAxQkM3MEI3NThCRjUwRjZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBCNzU4QkY1 MEY2QS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI3ZDlmODUxLTdlNzMtNDM4NC05 NTBlLThiZThlMTVmZDNlZS8wLzM0MzMyZTMyMzUzMjJlMzIzMzM2MmUzMDJmMzIz MzJkMzIzNDIwM2QzZTIwMzUzNTM3MzAzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEASv87DANBgkqhkiG 9w0BAQsFAAOCAQEARBs28mD3IJ3WJQPxylJMiwblMzSmRa214HgqntHHzMT1pknH nVcP3n/Tqtgo0IPWFTnBuYwyQxcTxZPeiBHAd3x9qrEF2YFzC8k61cT/Q5RuIJE/ lCGf14kLq4nkxNA9zP9WqAR2g7s7AAVxFLRC1LnQc3XwoazenDQqeT5FO+pYQChY JCuhIIVgQTxM60lPk/d/bj2IfIdnmdhpxTSS2e6xun+XQXyd3DnDclIuttx57r3r qmXR1R21MzQxajtXICYdZt5IDoiY1IF896Te40AWvT6en5Q8sHADZoMpMlCWABhB k/7lM193gq1VjkDmSliWKdxhKbO8CQGPv/vUZQ== -----END CERTIFICATE-----Generated at Wed Nov 5 14:31:22 2025 by rpki-client