$ rpki-client -vvf repo-rpki.idnic.net/repo/3305177a-a500-4996-b3ff-70c144edfece/0/34332e3234382e3231332e302f32342d3234203d3e203538343734.roa File: 34332e3234382e3231332e302f32342d3234203d3e203538343734.roa (raw, json) Hash identifier: I3OA1TXXrn7Ho4Bbdaoik2HHmIJMRdT3vdvqOadCgWc= Subject key identifier: FA:85:41:78:6F:BA:F1:DE:9F:75:2B:C9:CF:8A:48:AE:E9:0E:63:11 Certificate issuer: /CN=95FC6072A4A690A61A0B5F14B36882B43DA2F098 Certificate serial: 30D1599B0388C37DFDA8EF6ACD916002568A7CC1 Authority key identifier: 95:FC:60:72:A4:A6:90:A6:1A:0B:5F:14:B3:68:82:B4:3D:A2:F0:98 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95FC6072A4A690A61A0B5F14B36882B43DA2F098.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3305177a-a500-4996-b3ff-70c144edfece/0/34332e3234382e3231332e302f32342d3234203d3e203538343734.roa Signing time: Sun 27 Jul 2025 06:00:03 +0000 ROA not before: Sun 27 Jul 2025 05:55:03 +0000 ROA not after: Sun 26 Jul 2026 06:00:03 +0000 asID: 58474 IP address blocks: 43.248.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3305177a-a500-4996-b3ff-70c144edfece/0/95FC6072A4A690A61A0B5F14B36882B43DA2F098.crl rsync://repo-rpki.idnic.net/repo/3305177a-a500-4996-b3ff-70c144edfece/0/95FC6072A4A690A61A0B5F14B36882B43DA2F098.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95FC6072A4A690A61A0B5F14B36882B43DA2F098.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 11:15:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:d1:59:9b:03:88:c3:7d:fd:a8:ef:6a:cd:91:60:02:56:8a:7c:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95FC6072A4A690A61A0B5F14B36882B43DA2F098 Validity Not Before: Jul 27 05:55:03 2025 GMT Not After : Jul 26 06:00:03 2026 GMT Subject: CN=FA8541786FBAF1DE9F752BC9CF8A48AEE90E6311 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:e3:fa:1d:8b:14:d1:b9:89:1c:d4:7a:4b:aa: 55:ec:86:38:fa:9b:58:d9:fb:34:3e:ed:b6:5a:f2: 5e:ad:72:44:fc:91:f9:75:ae:bb:32:b3:b1:5b:03: e0:fb:14:aa:01:ff:31:b9:44:5d:5b:07:e2:6f:1c: 46:4e:0c:a0:ad:48:da:4b:ed:ee:6c:4c:4f:36:71: 7f:09:59:74:1e:5a:11:63:76:6b:1a:42:52:7c:23: 88:78:42:63:3e:4e:8b:7d:b7:a6:47:dd:5c:69:15: 78:e0:59:b4:00:44:a1:45:eb:d9:2e:41:0f:3e:17: 9d:a9:21:77:b0:b1:f8:06:86:18:21:1f:6f:fc:f4: 61:f9:a1:6e:ad:02:87:83:df:e1:3c:60:60:4e:58: 10:6b:79:9d:a8:4b:7f:82:57:da:db:44:d6:ff:6e: a6:83:e1:cb:a2:ab:bc:29:b0:92:f9:a2:eb:0c:5a: 7f:0d:4a:d1:f7:91:c9:e5:51:6d:66:64:d4:3a:d3: 8e:de:ac:76:e6:ff:30:67:00:86:4d:07:ac:82:15: ff:72:ad:57:62:53:4c:7d:3d:57:f9:0b:bc:58:a9: ef:e7:20:15:9f:86:37:79:87:06:55:08:96:9a:d0: 60:46:83:a0:fc:95:cb:05:34:d6:32:ad:85:83:51: 87:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:85:41:78:6F:BA:F1:DE:9F:75:2B:C9:CF:8A:48:AE:E9:0E:63:11 X509v3 Authority Key Identifier: keyid:95:FC:60:72:A4:A6:90:A6:1A:0B:5F:14:B3:68:82:B4:3D:A2:F0:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3305177a-a500-4996-b3ff-70c144edfece/0/95FC6072A4A690A61A0B5F14B36882B43DA2F098.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95FC6072A4A690A61A0B5F14B36882B43DA2F098.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3305177a-a500-4996-b3ff-70c144edfece/0/34332e3234382e3231332e302f32342d3234203d3e203538343734.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.248.213.0/24 Signature Algorithm: sha256WithRSAEncryption 28:64:97:f2:f1:fa:2c:47:c7:0f:58:e9:80:1c:cc:f6:c8:6e: 5e:74:f6:db:e6:96:8a:2e:08:f7:bc:4c:c8:5a:fa:46:d7:94: 3d:2e:b7:24:1e:36:03:cf:af:e7:cb:c2:9d:68:8f:22:be:46: b9:0b:1d:10:f9:69:ca:b6:3e:91:00:05:8a:a2:cc:c6:2c:10: 10:e7:4f:66:23:49:63:0a:36:0b:5c:3b:ba:34:44:91:6e:fa: e9:b7:b4:ee:7b:48:4b:16:40:dd:86:9e:be:f5:64:2d:98:95: dc:cd:31:f3:98:79:2b:03:14:08:0c:48:49:5d:7f:63:cb:31: 22:69:a4:c2:86:16:6c:f7:bd:ec:0c:e5:e3:c1:72:a5:1e:04: a3:5b:1f:b8:ba:c9:db:ea:c2:05:10:c4:df:50:3a:2a:51:8d: b3:61:a8:28:af:b3:28:e6:a1:72:48:85:cb:b5:7a:57:e6:96: ae:dc:fe:2c:34:8b:d9:63:cd:c3:b8:1b:2a:16:74:5e:fc:a8: 99:01:60:cb:01:ba:81:4d:27:02:ed:f7:72:ec:da:16:de:e8: e4:11:d3:be:ed:38:2a:a3:56:87:ad:8b:a7:67:5a:3c:06:30: 30:82:f7:87:50:58:9b:9f:20:fa:05:e2:4a:39:ec:a9:58:37: a7:76:69:f0 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUMNFZmwOIw339qO9qzZFgAlaKfMEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTVGQzYwNzJBNEE2OTBBNjFBMEI1RjE0QjM2ODgyQjQz REEyRjA5ODAeFw0yNTA3MjcwNTU1MDNaFw0yNjA3MjYwNjAwMDNaMDMxMTAvBgNV BAMTKEZBODU0MTc4NkZCQUYxREU5Rjc1MkJDOUNGOEE0OEFFRTkwRTYzMTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDU4/odixTRuYkc1HpLqlXshjj6 m1jZ+zQ+7bZa8l6tckT8kfl1rrsys7FbA+D7FKoB/zG5RF1bB+JvHEZODKCtSNpL 7e5sTE82cX8JWXQeWhFjdmsaQlJ8I4h4QmM+Tot9t6ZH3VxpFXjgWbQARKFF69ku QQ8+F52pIXewsfgGhhghH2/89GH5oW6tAoeD3+E8YGBOWBBreZ2oS3+CV9rbRNb/ bqaD4cuiq7wpsJL5ousMWn8NStH3kcnlUW1mZNQ6047erHbm/zBnAIZNB6yCFf9y rVdiU0x9PVf5C7xYqe/nIBWfhjd5hwZVCJaa0GBGg6D8lcsFNNYyrYWDUYf7AgMB AAGjggIyMIICLjAdBgNVHQ4EFgQU+oVBeG+68d6fdSvJz4pIrukOYxEwHwYDVR0j BBgwFoAUlfxgcqSmkKYaC18Us2iCtD2i8JgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MzA1MTc3YS1hNTAwLTQ5OTYtYjNmZi03MGMxNDRlZGZlY2UvMC85NUZDNjA3MkE0 QTY5MEE2MUEwQjVGMTRCMzY4ODJCNDNEQTJGMDk4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTVGQzYwNzJBNEE2OTBBNjFBMEI1RjE0QjM2ODgyQjQzREEy RjA5OC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzMzMDUxNzdhLWE1MDAtNDk5Ni1i M2ZmLTcwYzE0NGVkZmVjZS8wLzM0MzMyZTMyMzQzODJlMzIzMTMzMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzUzODM0MzczNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEACv41TANBgkqhkiG 9w0BAQsFAAOCAQEAKGSX8vH6LEfHD1jpgBzM9shuXnT22+aWii4I97xMyFr6RteU PS63JB42A8+v58vCnWiPIr5GuQsdEPlpyrY+kQAFiqLMxiwQEOdPZiNJYwo2C1w7 ujREkW766be07ntISxZA3YaevvVkLZiV3M0x85h5KwMUCAxISV1/Y8sxImmkwoYW bPe97Azl48FypR4Eo1sfuLrJ2+rCBRDE31A6KlGNs2GoKK+zKOahckiFy7V6V+aW rtz+LDSL2WPNw7gbKhZ0XvyomQFgywG6gU0nAu33cuzaFt7o5BHTvu04KqNWh62L p2daPAYwMIL3h1BYm58g+gXiSjnsqVg3p3Zp8A== -----END CERTIFICATE-----Generated at Sun Aug 10 18:19:46 2025 by rpki-client