$ rpki-client -vvf repo-rpki.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/34332e3233312e3132382e302f32342d3234203d3e203338373838.roa File: 34332e3233312e3132382e302f32342d3234203d3e203338373838.roa (raw, json) Hash identifier: lmYVrCn9BeJjLwZ83vYZIK3fLJEIHwntZ3WH1J4i7Cc= Subject key identifier: 6A:52:F8:A6:66:69:AF:83:96:72:48:05:E8:48:B5:09:D1:07:0C:9A Certificate issuer: /CN=8C3E44A2E2B475D5CF4A48E52D17290001FEFECA Certificate serial: 430F6D3B20F840B6652523A7BEE63A612CACCF40 Authority key identifier: 8C:3E:44:A2:E2:B4:75:D5:CF:4A:48:E5:2D:17:29:00:01:FE:FE:CA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/34332e3233312e3132382e302f32342d3234203d3e203338373838.roa Signing time: Sat 14 Jun 2025 06:00:02 +0000 ROA not before: Sat 14 Jun 2025 05:55:02 +0000 ROA not after: Sat 13 Jun 2026 06:00:02 +0000 asID: 38788 IP address blocks: 43.231.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.crl rsync://repo-rpki.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Jun 2025 18:03:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:0f:6d:3b:20:f8:40:b6:65:25:23:a7:be:e6:3a:61:2c:ac:cf:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8C3E44A2E2B475D5CF4A48E52D17290001FEFECA Validity Not Before: Jun 14 05:55:02 2025 GMT Not After : Jun 13 06:00:02 2026 GMT Subject: CN=6A52F8A66669AF8396724805E848B509D1070C9A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:c4:41:05:96:07:bd:a6:ed:67:e7:9e:57:8f: 99:8e:f9:0d:03:45:1e:63:13:03:0c:ed:6e:06:2c: 8c:e2:c1:43:d5:2f:4d:da:f7:c9:2f:5a:90:67:05: b6:7e:05:fc:58:ab:c8:1e:3c:3a:3b:b1:0b:63:0c: a5:d0:78:72:31:34:15:16:e9:fd:f4:d3:2e:ad:8f: 7a:7d:1f:e9:f6:a1:df:e7:f4:d5:21:41:6e:1e:7b: 49:c4:18:89:c7:8f:e8:ad:d2:1f:49:32:9d:62:cf: ad:16:99:e2:56:e6:80:da:69:1f:3e:5e:9a:55:91: 85:bf:e9:dd:99:9e:05:33:93:2a:8a:d9:43:e5:7c: b3:e9:17:be:a8:a1:53:41:73:39:e5:ca:d6:42:9a: fa:97:80:2a:dd:cb:fb:07:de:12:be:10:4c:89:22: a5:2b:a8:ae:f5:64:ec:7d:be:df:df:ef:84:a9:65: db:c3:ea:38:4c:15:78:a2:e0:c5:7c:26:0f:2b:f2: 62:e9:90:4f:f2:21:5e:c7:85:ed:03:17:23:ec:3c: ff:b4:f1:e8:bf:64:b5:ef:59:cc:ca:bb:45:e2:ea: 31:6f:4d:03:cb:02:97:75:7e:64:9e:10:12:c5:af: 6d:38:c3:6e:e7:1d:60:2f:f5:ee:53:2a:ae:ed:38: 34:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:52:F8:A6:66:69:AF:83:96:72:48:05:E8:48:B5:09:D1:07:0C:9A X509v3 Authority Key Identifier: keyid:8C:3E:44:A2:E2:B4:75:D5:CF:4A:48:E5:2D:17:29:00:01:FE:FE:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/34332e3233312e3132382e302f32342d3234203d3e203338373838.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.231.128.0/24 Signature Algorithm: sha256WithRSAEncryption 81:4b:b2:62:e3:6c:de:fc:20:f8:00:a2:78:15:ea:30:69:b7: c9:fb:7a:07:1b:e5:c3:a5:b2:b4:ed:c1:9f:bb:0a:62:1b:2f: 34:22:8e:8d:66:4c:bd:2c:50:f0:1e:9c:7f:dc:c1:8f:29:27: 82:71:21:dc:7d:d0:9c:32:0d:b8:70:78:01:cf:97:4c:b3:c6: 6c:49:99:af:29:f6:f2:ff:19:00:24:fa:75:fa:a5:cb:4a:c0: 45:6d:ee:eb:86:92:50:ff:4f:c0:f9:ad:b7:2b:cb:a0:1d:78: 5b:5c:47:f2:a0:03:4c:c2:cd:a2:0e:bd:56:23:d2:7a:d5:4d: 51:d4:41:b9:95:69:46:9e:9b:74:32:1d:fa:86:9d:5e:d6:26: 4d:96:06:32:2c:18:23:1b:ac:26:1d:44:eb:29:5e:cd:a2:7e: bc:12:5c:f6:36:87:9f:0c:1f:7b:04:5e:e8:db:f7:a3:dc:2a: 1c:b5:b9:a4:26:fd:58:a2:40:a6:bc:7f:d8:2c:d8:af:13:ea: a5:ab:b8:2a:a0:cd:e3:3a:78:52:1c:52:c3:43:3c:1e:c6:fb: 2f:8d:be:f4:b0:74:90:cd:03:95:e2:93:b9:04:bd:62:5f:2c: d9:4d:ac:6f:55:70:18:fd:ad:0a:e1:51:73:57:7f:23:ba:a0: 17:e3:8f:a7 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUQw9tOyD4QLZlJSOnvuY6YSysz0AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEMzRTQ0QTJFMkI0NzVENUNGNEE0OEU1MkQxNzI5MDAw MUZFRkVDQTAeFw0yNTA2MTQwNTU1MDJaFw0yNjA2MTMwNjAwMDJaMDMxMTAvBgNV BAMTKDZBNTJGOEE2NjY2OUFGODM5NjcyNDgwNUU4NDhCNTA5RDEwNzBDOUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkxEEFlge9pu1n555Xj5mO+Q0D RR5jEwMM7W4GLIziwUPVL03a98kvWpBnBbZ+BfxYq8gePDo7sQtjDKXQeHIxNBUW 6f300y6tj3p9H+n2od/n9NUhQW4ee0nEGInHj+it0h9JMp1iz60WmeJW5oDaaR8+ XppVkYW/6d2ZngUzkyqK2UPlfLPpF76ooVNBcznlytZCmvqXgCrdy/sH3hK+EEyJ IqUrqK71ZOx9vt/f74SpZdvD6jhMFXii4MV8Jg8r8mLpkE/yIV7Hhe0DFyPsPP+0 8ei/ZLXvWczKu0Xi6jFvTQPLApd1fmSeEBLFr204w27nHWAv9e5TKq7tODSdAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUalL4pmZpr4OWckgF6Ei1CdEHDJowHwYDVR0j BBgwFoAUjD5EouK0ddXPSkjlLRcpAAH+/sowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NGUyYmYwOS01ZjQyLTRiNjUtYTQyZC02M2QwNzk2ZDIwNmMvMC84QzNFNDRBMkUy QjQ3NUQ1Q0Y0QTQ4RTUyRDE3MjkwMDAxRkVGRUNBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEMzRTQ0QTJFMkI0NzVENUNGNEE0OEU1MkQxNzI5MDAwMUZF RkVDQS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzM0ZTJiZjA5LTVmNDItNGI2NS1h NDJkLTYzZDA3OTZkMjA2Yy8wLzM0MzMyZTMyMzMzMTJlMzEzMjM4MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzMzODM3MzgzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEACvngDANBgkqhkiG 9w0BAQsFAAOCAQEAgUuyYuNs3vwg+ACieBXqMGm3yft6Bxvlw6WytO3Bn7sKYhsv NCKOjWZMvSxQ8B6cf9zBjykngnEh3H3QnDINuHB4Ac+XTLPGbEmZryn28v8ZACT6 dfqly0rARW3u64aSUP9PwPmttyvLoB14W1xH8qADTMLNog69ViPSetVNUdRBuZVp Rp6bdDId+oadXtYmTZYGMiwYIxusJh1E6ylezaJ+vBJc9jaHnwwfewRe6Nv3o9wq HLW5pCb9WKJAprx/2CzYrxPqpau4KqDN4zp4UhxSw0M8Hsb7L42+9LB0kM0DleKT uQS9Yl8s2U2sb1VwGP2tCuFRc1d/I7qgF+OPpw== -----END CERTIFICATE-----Generated at Mon Jun 16 06:22:53 2025 by rpki-client