$ rpki-client -vvf repo-rpki.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/34332e3235322e3133392e302f32342d3234203d3e203538343034.roa File: 34332e3235322e3133392e302f32342d3234203d3e203538343034.roa (raw, json) Hash identifier: ZQ63p3M+wzXAXpgNpBD0Iq30pmnSOSGVBCaMjIYT+N8= Subject key identifier: 06:6F:E7:7C:B0:D4:40:19:85:76:12:26:4E:B6:36:70:0C:62:DE:1A Certificate issuer: /CN=C2544A0C1EE8ABF9DA0614500930012FFB48871A Certificate serial: 0BB098127F54C12F4E045764E35644319EDC09B2 Authority key identifier: C2:54:4A:0C:1E:E8:AB:F9:DA:06:14:50:09:30:01:2F:FB:48:87:1A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2544A0C1EE8ABF9DA0614500930012FFB48871A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/34332e3235322e3133392e302f32342d3234203d3e203538343034.roa Signing time: Sun 28 Sep 2025 14:00:01 +0000 ROA not before: Sun 28 Sep 2025 13:55:01 +0000 ROA not after: Sun 27 Sep 2026 14:00:01 +0000 asID: 58404 IP address blocks: 43.252.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/C2544A0C1EE8ABF9DA0614500930012FFB48871A.crl rsync://repo-rpki.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/C2544A0C1EE8ABF9DA0614500930012FFB48871A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2544A0C1EE8ABF9DA0614500930012FFB48871A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Nov 2025 04:22:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:b0:98:12:7f:54:c1:2f:4e:04:57:64:e3:56:44:31:9e:dc:09:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C2544A0C1EE8ABF9DA0614500930012FFB48871A Validity Not Before: Sep 28 13:55:01 2025 GMT Not After : Sep 27 14:00:01 2026 GMT Subject: CN=066FE77CB0D44019857612264EB636700C62DE1A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:dd:13:28:77:cb:df:d5:35:2c:33:39:4a:43: 4a:d6:00:27:cb:d2:76:28:27:2c:ff:11:76:35:62: 19:16:3a:8d:fc:75:fc:ea:73:d9:48:87:b8:18:4e: 14:6a:2d:9b:39:b3:be:62:5f:7d:4d:69:ca:7b:bd: 36:4a:2e:9d:19:d8:ed:3e:96:91:ca:28:a8:bb:df: da:0a:a2:63:c9:cc:c6:15:9e:0f:25:49:f7:72:72: 2a:f4:69:fd:eb:e0:3e:4f:5b:0c:f0:ca:5c:7a:b6: 1a:79:09:57:e8:4d:3e:03:77:82:56:17:29:39:1b: 58:2f:c4:20:f9:43:4e:0c:1f:7c:24:16:ce:0d:00: 1d:d6:71:f9:81:fc:e5:e2:f7:e6:1f:49:00:07:99: 92:a1:7d:41:dc:b1:68:75:a4:eb:b6:a9:8d:ef:5e: b8:07:0e:b4:c1:af:0a:5e:f7:eb:90:44:38:1e:10: de:7a:dd:b2:6d:11:c7:26:d7:ff:01:95:0b:aa:d9: 4d:48:80:ae:3b:26:12:1c:19:51:d1:69:88:3c:31: 2f:b7:07:06:91:3d:3a:73:25:3d:c2:3b:e6:75:ed: a3:ce:d5:ec:e1:f1:d7:9e:33:5e:f1:b6:91:d2:cb: b0:e4:e1:50:cd:29:32:35:02:59:01:97:a2:aa:7e: 6b:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:6F:E7:7C:B0:D4:40:19:85:76:12:26:4E:B6:36:70:0C:62:DE:1A X509v3 Authority Key Identifier: keyid:C2:54:4A:0C:1E:E8:AB:F9:DA:06:14:50:09:30:01:2F:FB:48:87:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/C2544A0C1EE8ABF9DA0614500930012FFB48871A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2544A0C1EE8ABF9DA0614500930012FFB48871A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/34332e3235322e3133392e302f32342d3234203d3e203538343034.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.252.139.0/24 Signature Algorithm: sha256WithRSAEncryption 86:10:62:11:23:b9:8f:9d:5d:55:17:11:2f:57:90:aa:7e:51: f9:39:e5:34:07:28:5a:95:ef:0b:cf:e7:fc:23:68:f9:97:0f: f4:8b:5c:0c:84:a1:6d:6a:15:84:22:32:6b:1e:cc:cd:47:6a: 0e:39:0f:32:26:e0:f0:75:bc:8c:a2:43:1a:43:97:03:fb:b8: 52:7a:c3:5d:13:cc:a6:14:d4:30:56:b4:79:63:88:10:85:da: cd:8e:7d:06:1f:bb:3b:e7:52:76:51:19:54:14:ca:03:87:ba: a8:c8:a1:bf:f9:e8:80:8f:46:dd:dc:4a:d1:a0:da:af:6c:8e: 0e:db:22:ae:1d:62:f3:a7:4b:40:7a:13:c9:ce:b7:7d:3b:86: 66:a0:2c:c7:f2:44:83:eb:02:49:d8:0d:9e:a2:75:37:92:7b: 19:b5:97:2d:02:9e:11:54:4d:58:b8:8d:d9:99:9e:15:55:63: d9:43:64:65:a0:7d:cf:e6:1a:66:dd:c9:25:61:3d:76:b4:b1: a0:ce:df:2b:d5:c2:b2:15:9e:3a:66:1c:ba:4d:df:0c:56:f0: 1a:f5:68:1f:94:8a:3f:f6:f5:e1:a9:16:b3:db:79:ed:33:1a: a8:a1:bd:1c:91:6c:4c:c7:45:1d:1b:aa:aa:e5:eb:7d:23:f1: fb:be:76:4c -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUC7CYEn9UwS9OBFdk41ZEMZ7cCbIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzI1NDRBMEMxRUU4QUJGOURBMDYxNDUwMDkzMDAxMkZG QjQ4ODcxQTAeFw0yNTA5MjgxMzU1MDFaFw0yNjA5MjcxNDAwMDFaMDMxMTAvBgNV BAMTKDA2NkZFNzdDQjBENDQwMTk4NTc2MTIyNjRFQjYzNjcwMEM2MkRFMUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq3RMod8vf1TUsMzlKQ0rWACfL 0nYoJyz/EXY1YhkWOo38dfzqc9lIh7gYThRqLZs5s75iX31Nacp7vTZKLp0Z2O0+ lpHKKKi739oKomPJzMYVng8lSfdycir0af3r4D5PWwzwylx6thp5CVfoTT4Dd4JW Fyk5G1gvxCD5Q04MH3wkFs4NAB3WcfmB/OXi9+YfSQAHmZKhfUHcsWh1pOu2qY3v XrgHDrTBrwpe9+uQRDgeEN563bJtEccm1/8BlQuq2U1IgK47JhIcGVHRaYg8MS+3 BwaRPTpzJT3CO+Z17aPO1ezh8deeM17xtpHSy7Dk4VDNKTI1AlkBl6Kqfms5AgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUBm/nfLDUQBmFdhImTrY2cAxi3howHwYDVR0j BBgwFoAUwlRKDB7oq/naBhRQCTABL/tIhxowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZTBmOTE2My0zZTVhLTRlZmEtOGJkOS00YWM0YmM2MzA0MTQvMC9DMjU0NEEwQzFF RThBQkY5REEwNjE0NTAwOTMwMDEyRkZCNDg4NzFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzI1NDRBMEMxRUU4QUJGOURBMDYxNDUwMDkzMDAxMkZGQjQ4 ODcxQS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzZlMGY5MTYzLTNlNWEtNGVmYS04 YmQ5LTRhYzRiYzYzMDQxNC8wLzM0MzMyZTMyMzUzMjJlMzEzMzM5MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzUzODM0MzAzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEACv8izANBgkqhkiG 9w0BAQsFAAOCAQEAhhBiESO5j51dVRcRL1eQqn5R+TnlNAcoWpXvC8/n/CNo+ZcP 9ItcDIShbWoVhCIyax7MzUdqDjkPMibg8HW8jKJDGkOXA/u4UnrDXRPMphTUMFa0 eWOIEIXazY59Bh+7O+dSdlEZVBTKA4e6qMihv/nogI9G3dxK0aDar2yODtsirh1i 86dLQHoTyc63fTuGZqAsx/JEg+sCSdgNnqJ1N5J7GbWXLQKeEVRNWLiN2ZmeFVVj 2UNkZaB9z+YaZt3JJWE9drSxoM7fK9XCshWeOmYcuk3fDFbwGvVoH5SKP/b14akW s9t57TMaqKG9HJFsTMdFHRuqquXrfSPx+752TA== -----END CERTIFICATE-----Generated at Wed Nov 5 19:20:01 2025 by rpki-client