$ rpki-client -vvf repo-rpki.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/34332e3235322e3133382e302f32342d3234203d3e203538343034.roa File: 34332e3235322e3133382e302f32342d3234203d3e203538343034.roa (raw, json) Hash identifier: 7tgGUn+YrUZ/MWVDGtrerXtqbOMhyZDoTldLslkYYTI= Subject key identifier: CA:5D:11:6B:F3:9A:55:42:AE:A5:93:C4:4F:53:4A:AA:47:54:8A:2A Certificate issuer: /CN=C2544A0C1EE8ABF9DA0614500930012FFB48871A Certificate serial: 04F9D8985E5C89E04611FBF26EF99847A960FD24 Authority key identifier: C2:54:4A:0C:1E:E8:AB:F9:DA:06:14:50:09:30:01:2F:FB:48:87:1A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2544A0C1EE8ABF9DA0614500930012FFB48871A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/34332e3235322e3133382e302f32342d3234203d3e203538343034.roa Signing time: Wed 22 Oct 2025 11:00:01 +0000 ROA not before: Wed 22 Oct 2025 10:55:01 +0000 ROA not after: Wed 21 Oct 2026 11:00:01 +0000 asID: 58404 IP address blocks: 43.252.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/C2544A0C1EE8ABF9DA0614500930012FFB48871A.crl rsync://repo-rpki.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/C2544A0C1EE8ABF9DA0614500930012FFB48871A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2544A0C1EE8ABF9DA0614500930012FFB48871A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Nov 2025 04:22:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:f9:d8:98:5e:5c:89:e0:46:11:fb:f2:6e:f9:98:47:a9:60:fd:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C2544A0C1EE8ABF9DA0614500930012FFB48871A Validity Not Before: Oct 22 10:55:01 2025 GMT Not After : Oct 21 11:00:01 2026 GMT Subject: CN=CA5D116BF39A5542AEA593C44F534AAA47548A2A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:e6:34:68:63:b3:1b:9b:50:a5:e0:4e:71:c5: b4:5e:f5:17:19:e8:8a:29:92:b1:23:6c:ef:d5:50: 6f:83:f7:b9:a0:a0:ae:22:46:22:90:2b:ac:07:78: 58:be:48:5e:d2:d8:80:0a:c0:b0:7b:44:2a:cd:3b: 53:43:40:4c:34:98:09:8c:72:b3:dc:c2:c1:cd:0a: 23:76:9a:eb:07:aa:29:b9:b7:1f:e4:95:3d:a8:8f: ec:fb:56:ce:5a:08:e6:c1:83:d2:3f:cd:cd:37:4b: d9:d7:1f:0f:7e:4e:0e:57:37:b5:2b:ba:05:9a:68: 65:5c:a6:44:4d:68:27:bf:db:b0:84:ab:c6:67:5c: 80:5c:f6:d0:04:0c:f3:8b:d7:f4:6b:4d:a0:31:8f: 8d:da:9e:8c:63:47:1b:6d:7d:37:46:79:b9:e1:c8: 1c:4c:2e:7d:b4:7a:f5:39:aa:59:e3:51:05:9c:07: 77:ac:e0:3a:5c:b1:64:28:d7:aa:79:c9:6e:81:41: fb:58:0e:3e:61:c2:a3:c2:4d:33:72:e7:79:23:60: 74:56:83:4a:d2:de:d4:27:26:e8:74:ea:bd:40:7d: f4:ae:ea:6c:a2:df:57:68:df:d9:9e:a5:8d:45:9f: 38:0d:ff:cb:da:a6:e5:78:95:39:bf:9e:59:0f:26: 83:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:5D:11:6B:F3:9A:55:42:AE:A5:93:C4:4F:53:4A:AA:47:54:8A:2A X509v3 Authority Key Identifier: keyid:C2:54:4A:0C:1E:E8:AB:F9:DA:06:14:50:09:30:01:2F:FB:48:87:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/C2544A0C1EE8ABF9DA0614500930012FFB48871A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2544A0C1EE8ABF9DA0614500930012FFB48871A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/34332e3235322e3133382e302f32342d3234203d3e203538343034.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.252.138.0/24 Signature Algorithm: sha256WithRSAEncryption 46:83:b4:58:5f:c1:3c:3a:55:b7:57:f4:16:00:45:c4:4c:15: e8:18:5c:95:d9:a0:a3:2c:72:c7:47:73:54:5f:94:9f:9a:f3: 67:13:8b:a2:65:d0:32:f3:fd:61:58:d2:a1:8b:f4:56:f0:d4: 8c:45:0b:5d:87:dc:f1:9d:a8:ec:38:20:6b:29:24:e4:29:1b: cb:c2:55:6b:b5:74:67:d8:10:cc:24:2b:dc:f9:71:d3:18:58: 57:47:d8:b2:1b:4f:7b:e0:ac:32:81:ff:e0:66:78:58:c9:00: 4c:f8:33:55:f4:83:0b:c6:e8:77:5c:f1:06:fb:84:95:f6:0d: 9d:da:51:17:2e:7d:b1:5b:7f:98:fd:d3:09:55:1c:64:00:20: 28:bf:c8:98:b1:c2:81:79:e9:3f:bf:18:da:60:86:a0:9c:db: f7:8b:20:81:68:2e:77:80:a9:9d:75:87:e4:bf:3d:65:e5:76: 47:d0:44:92:70:34:c1:28:fe:3d:64:03:80:86:1b:5d:0c:ea: ff:6e:d8:f1:f4:59:1b:28:a5:f7:6d:2e:80:37:ef:31:07:c8: 47:aa:1c:fd:a6:c2:0d:30:76:25:4e:85:f7:63:9b:a1:df:95: 51:8c:de:c2:32:70:31:77:ec:cb:39:5a:0a:75:8a:0c:c9:54: 20:4b:c1:3f -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUBPnYmF5cieBGEfvybvmYR6lg/SQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzI1NDRBMEMxRUU4QUJGOURBMDYxNDUwMDkzMDAxMkZG QjQ4ODcxQTAeFw0yNTEwMjIxMDU1MDFaFw0yNjEwMjExMTAwMDFaMDMxMTAvBgNV BAMTKENBNUQxMTZCRjM5QTU1NDJBRUE1OTNDNDRGNTM0QUFBNDc1NDhBMkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC45jRoY7Mbm1Cl4E5xxbRe9RcZ 6IopkrEjbO/VUG+D97mgoK4iRiKQK6wHeFi+SF7S2IAKwLB7RCrNO1NDQEw0mAmM crPcwsHNCiN2musHqim5tx/klT2oj+z7Vs5aCObBg9I/zc03S9nXHw9+Tg5XN7Ur ugWaaGVcpkRNaCe/27CEq8ZnXIBc9tAEDPOL1/RrTaAxj43anoxjRxttfTdGebnh yBxMLn20evU5qlnjUQWcB3es4DpcsWQo16p5yW6BQftYDj5hwqPCTTNy53kjYHRW g0rS3tQnJuh06r1AffSu6myi31do39mepY1FnzgN/8vapuV4lTm/nlkPJoOXAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUyl0Ra/OaVUKupZPET1NKqkdUiiowHwYDVR0j BBgwFoAUwlRKDB7oq/naBhRQCTABL/tIhxowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZTBmOTE2My0zZTVhLTRlZmEtOGJkOS00YWM0YmM2MzA0MTQvMC9DMjU0NEEwQzFF RThBQkY5REEwNjE0NTAwOTMwMDEyRkZCNDg4NzFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzI1NDRBMEMxRUU4QUJGOURBMDYxNDUwMDkzMDAxMkZGQjQ4 ODcxQS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzZlMGY5MTYzLTNlNWEtNGVmYS04 YmQ5LTRhYzRiYzYzMDQxNC8wLzM0MzMyZTMyMzUzMjJlMzEzMzM4MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzUzODM0MzAzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEACv8ijANBgkqhkiG 9w0BAQsFAAOCAQEARoO0WF/BPDpVt1f0FgBFxEwV6Bhcldmgoyxyx0dzVF+Un5rz ZxOLomXQMvP9YVjSoYv0VvDUjEULXYfc8Z2o7Dggaykk5Ckby8JVa7V0Z9gQzCQr 3Plx0xhYV0fYshtPe+CsMoH/4GZ4WMkATPgzVfSDC8bod1zxBvuElfYNndpRFy59 sVt/mP3TCVUcZAAgKL/ImLHCgXnpP78Y2mCGoJzb94sggWgud4CpnXWH5L89ZeV2 R9BEknA0wSj+PWQDgIYbXQzq/27Y8fRZGyil920ugDfvMQfIR6oc/abCDTB2JU6F 92Obod+VUYzewjJwMXfsyzlaCnWKDMlUIEvBPw== -----END CERTIFICATE-----Generated at Wed Nov 5 11:15:07 2025 by rpki-client