$ rpki-client -vvf repo-rpki.idnic.net/repo/3305177a-a500-4996-b3ff-70c144edfece/0/34332e3234382e3231342e302f32342d3234203d3e203538343734.roa File: 34332e3234382e3231342e302f32342d3234203d3e203538343734.roa (raw, json) Hash identifier: KABMcwwuj0PcVg0DF+2S7mT8pkOrI1Q8USpOkuuxMXI= Subject key identifier: DF:41:84:E1:F2:1D:E0:09:3E:0C:50:F7:2A:FE:A7:CD:5E:D7:80:9E Certificate issuer: /CN=95FC6072A4A690A61A0B5F14B36882B43DA2F098 Certificate serial: 6451E66D22C07D2F6AE8824823F9F2E839980FA4 Authority key identifier: 95:FC:60:72:A4:A6:90:A6:1A:0B:5F:14:B3:68:82:B4:3D:A2:F0:98 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95FC6072A4A690A61A0B5F14B36882B43DA2F098.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3305177a-a500-4996-b3ff-70c144edfece/0/34332e3234382e3231342e302f32342d3234203d3e203538343734.roa Signing time: Sun 27 Jul 2025 05:00:03 +0000 ROA not before: Sun 27 Jul 2025 04:55:03 +0000 ROA not after: Sun 26 Jul 2026 05:00:03 +0000 asID: 58474 IP address blocks: 43.248.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3305177a-a500-4996-b3ff-70c144edfece/0/95FC6072A4A690A61A0B5F14B36882B43DA2F098.crl rsync://repo-rpki.idnic.net/repo/3305177a-a500-4996-b3ff-70c144edfece/0/95FC6072A4A690A61A0B5F14B36882B43DA2F098.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95FC6072A4A690A61A0B5F14B36882B43DA2F098.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 11:15:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:51:e6:6d:22:c0:7d:2f:6a:e8:82:48:23:f9:f2:e8:39:98:0f:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95FC6072A4A690A61A0B5F14B36882B43DA2F098 Validity Not Before: Jul 27 04:55:03 2025 GMT Not After : Jul 26 05:00:03 2026 GMT Subject: CN=DF4184E1F21DE0093E0C50F72AFEA7CD5ED7809E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:0d:77:e1:46:ec:19:d5:1d:3e:06:1e:fe:34: 39:95:8d:8e:58:ec:98:30:70:f2:19:bc:b1:f4:5f: e0:b4:70:38:f9:8f:67:49:59:9a:0d:62:c9:c8:15: 5a:d8:b5:91:08:72:65:f5:32:cf:d5:dc:9d:bd:8d: d4:f0:ba:ae:82:a7:bf:02:c4:5c:4a:4e:e2:60:93: ed:10:8b:76:85:44:1e:ad:c7:c9:56:67:99:a9:07: 52:07:21:fb:d5:94:90:22:1c:94:1b:5f:74:7d:21: 50:a1:70:43:d8:14:3c:e9:d0:d8:65:a4:91:10:de: cc:fe:74:c2:3a:c7:0d:78:91:0b:b1:95:83:b3:96: cc:6c:f8:33:97:90:75:25:95:0c:69:c6:ec:e8:85: 7a:4b:68:5d:bc:47:0f:1b:d0:7c:79:aa:fc:fb:83: 61:4c:52:e7:fb:37:dd:b7:51:8d:87:34:be:de:c7: fa:45:56:8c:9c:09:2a:3e:30:64:f8:4d:dd:84:da: 1f:6d:7e:04:66:e7:1e:90:31:01:6e:9f:b8:31:54: d2:5f:1f:46:0c:da:00:db:81:31:2f:2a:0f:aa:07: d4:7a:4b:a8:f5:c6:d0:14:82:b9:6d:64:1b:b2:25: b6:97:93:0d:ba:28:18:f3:b1:ab:9f:ad:39:93:7f: 08:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:41:84:E1:F2:1D:E0:09:3E:0C:50:F7:2A:FE:A7:CD:5E:D7:80:9E X509v3 Authority Key Identifier: keyid:95:FC:60:72:A4:A6:90:A6:1A:0B:5F:14:B3:68:82:B4:3D:A2:F0:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3305177a-a500-4996-b3ff-70c144edfece/0/95FC6072A4A690A61A0B5F14B36882B43DA2F098.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95FC6072A4A690A61A0B5F14B36882B43DA2F098.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3305177a-a500-4996-b3ff-70c144edfece/0/34332e3234382e3231342e302f32342d3234203d3e203538343734.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.248.214.0/24 Signature Algorithm: sha256WithRSAEncryption 38:45:51:95:35:8e:88:2f:e6:6a:17:fb:c6:db:5f:88:82:c0: 4e:1e:43:28:ef:6b:c5:69:98:99:a3:1b:81:ac:d9:3f:e7:a4: 31:94:72:dd:ae:75:64:a9:3c:20:1d:1a:2a:e8:c5:b4:d2:fa: 8e:fb:ee:20:03:a9:38:35:33:09:63:32:8f:f8:a3:e7:56:2d: e0:c5:84:2d:cc:9e:8e:2a:7f:7e:30:71:1f:1f:0c:84:ec:bd: f8:e9:4b:d1:61:46:a5:73:7d:4d:5a:7f:7f:7a:b7:14:67:fe: c9:b4:df:ab:0b:5d:96:2d:4c:a7:16:b0:4e:af:91:27:ec:59: 81:b6:0b:3c:12:df:a5:d0:f2:07:4b:1a:e0:d1:b5:b2:26:fa: 66:ac:c2:ea:8e:0c:c6:67:c1:d3:a4:2a:10:9a:06:6b:ba:bb: 86:2c:a9:73:24:4f:6d:47:57:57:e2:90:23:a8:75:d2:2f:36: 44:3c:29:57:e3:02:e4:a9:fd:6b:27:a5:4a:ef:fe:32:48:70: f2:41:48:61:3e:41:72:dd:8c:b2:f0:72:f9:2e:7c:8c:a2:63: 54:89:51:67:8a:d4:e3:f2:00:f0:e3:66:e7:62:49:c5:82:e5: e3:18:58:a5:17:67:db:f9:1d:28:5b:a4:9a:fd:6e:27:57:ac: 9e:97:68:dd -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUZFHmbSLAfS9q6IJII/ny6DmYD6QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTVGQzYwNzJBNEE2OTBBNjFBMEI1RjE0QjM2ODgyQjQz REEyRjA5ODAeFw0yNTA3MjcwNDU1MDNaFw0yNjA3MjYwNTAwMDNaMDMxMTAvBgNV BAMTKERGNDE4NEUxRjIxREUwMDkzRTBDNTBGNzJBRkVBN0NENUVENzgwOUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeDXfhRuwZ1R0+Bh7+NDmVjY5Y 7JgwcPIZvLH0X+C0cDj5j2dJWZoNYsnIFVrYtZEIcmX1Ms/V3J29jdTwuq6Cp78C xFxKTuJgk+0Qi3aFRB6tx8lWZ5mpB1IHIfvVlJAiHJQbX3R9IVChcEPYFDzp0Nhl pJEQ3sz+dMI6xw14kQuxlYOzlsxs+DOXkHUllQxpxuzohXpLaF28Rw8b0Hx5qvz7 g2FMUuf7N923UY2HNL7ex/pFVoycCSo+MGT4Td2E2h9tfgRm5x6QMQFun7gxVNJf H0YM2gDbgTEvKg+qB9R6S6j1xtAUgrltZBuyJbaXkw26KBjzsaufrTmTfwhZAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQU30GE4fId4Ak+DFD3Kv6nzV7XgJ4wHwYDVR0j BBgwFoAUlfxgcqSmkKYaC18Us2iCtD2i8JgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MzA1MTc3YS1hNTAwLTQ5OTYtYjNmZi03MGMxNDRlZGZlY2UvMC85NUZDNjA3MkE0 QTY5MEE2MUEwQjVGMTRCMzY4ODJCNDNEQTJGMDk4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTVGQzYwNzJBNEE2OTBBNjFBMEI1RjE0QjM2ODgyQjQzREEy RjA5OC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzMzMDUxNzdhLWE1MDAtNDk5Ni1i M2ZmLTcwYzE0NGVkZmVjZS8wLzM0MzMyZTMyMzQzODJlMzIzMTM0MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzUzODM0MzczNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEACv41jANBgkqhkiG 9w0BAQsFAAOCAQEAOEVRlTWOiC/mahf7xttfiILATh5DKO9rxWmYmaMbgazZP+ek MZRy3a51ZKk8IB0aKujFtNL6jvvuIAOpODUzCWMyj/ij51Yt4MWELcyejip/fjBx Hx8MhOy9+OlL0WFGpXN9TVp/f3q3FGf+ybTfqwtdli1MpxawTq+RJ+xZgbYLPBLf pdDyB0sa4NG1sib6ZqzC6o4MxmfB06QqEJoGa7q7hiypcyRPbUdXV+KQI6h10i82 RDwpV+MC5Kn9ayelSu/+Mkhw8kFIYT5Bct2MsvBy+S58jKJjVIlRZ4rU4/IA8ONm 52JJxYLl4xhYpRdn2/kdKFukmv1uJ1esnpdo3Q== -----END CERTIFICATE-----Generated at Sun Aug 10 18:25:57 2025 by rpki-client