$ rpki-client -vvf repo-rpki.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/34332e3235322e3138352e302f32342d3234203d3e203538383136.roa File: 34332e3235322e3138352e302f32342d3234203d3e203538383136.roa (raw, json) Hash identifier: 6BAqv/xiDIdcXbsrmi/VI3hokjpdNRLqss/M7jAv0Ng= Subject key identifier: 5B:9A:85:9A:27:7F:4B:66:A6:41:F4:FD:13:B2:57:31:F2:AB:D8:6F Certificate issuer: /CN=2042008AEC80152F373D2A04DFD3893EE2F92166 Certificate serial: 0AD2896F28B675268C877A2B8D18490F25CA0685 Authority key identifier: 20:42:00:8A:EC:80:15:2F:37:3D:2A:04:DF:D3:89:3E:E2:F9:21:66 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2042008AEC80152F373D2A04DFD3893EE2F92166.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/34332e3235322e3138352e302f32342d3234203d3e203538383136.roa Signing time: Thu 12 Feb 2026 11:02:01 +0000 ROA not before: Thu 12 Feb 2026 10:57:01 +0000 ROA not after: Thu 11 Feb 2027 11:02:01 +0000 asID: 58816 IP address blocks: 43.252.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/2042008AEC80152F373D2A04DFD3893EE2F92166.crl rsync://repo-rpki.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/2042008AEC80152F373D2A04DFD3893EE2F92166.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2042008AEC80152F373D2A04DFD3893EE2F92166.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 00:52:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:d2:89:6f:28:b6:75:26:8c:87:7a:2b:8d:18:49:0f:25:ca:06:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2042008AEC80152F373D2A04DFD3893EE2F92166 Validity Not Before: Feb 12 10:57:01 2026 GMT Not After : Feb 11 11:02:01 2027 GMT Subject: CN=5B9A859A277F4B66A641F4FD13B25731F2ABD86F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:1e:af:1d:5b:09:f2:b7:f9:6c:0b:26:83:44: 97:bb:ed:1d:82:8a:e8:ca:68:64:08:94:28:f1:b1: 33:62:a7:9a:df:a7:ad:4a:5c:a0:11:e6:a7:38:21: c1:95:f2:ca:d2:aa:af:c8:f7:da:b1:0d:91:d3:2c: 15:97:fd:f4:6b:c1:be:fa:5f:7d:72:e9:71:b6:58: 7b:95:20:53:68:7e:4e:d4:2b:50:ec:a4:ab:44:e7: 05:e4:e8:9e:26:e9:d2:8a:53:9f:89:cf:74:9a:79: da:51:cd:ff:98:2e:e2:3b:3a:fe:48:96:a8:a9:1d: c9:52:c8:6a:9c:1b:8e:d4:d3:c9:41:cf:68:a9:78: dd:59:eb:60:ae:bc:76:bf:93:c1:f7:07:a4:c8:c1: db:cf:0e:d8:c2:37:d7:5d:bd:c8:46:02:ca:eb:d7: c7:54:fa:cc:f9:05:29:80:87:cc:fd:f8:5b:d4:c9: 21:f1:9b:20:eb:32:b6:ba:98:f9:2d:cb:21:93:29: 21:ab:32:dd:e5:d9:8c:a8:6a:9d:42:b7:10:d1:e7: 91:13:93:39:1c:12:f0:82:84:f7:dc:2c:d1:37:fe: 39:47:5d:6c:64:e4:21:09:8d:57:db:a7:2f:61:28: c5:12:5e:41:d3:bf:bb:f4:7c:8e:8c:2b:98:0a:aa: 65:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:9A:85:9A:27:7F:4B:66:A6:41:F4:FD:13:B2:57:31:F2:AB:D8:6F X509v3 Authority Key Identifier: keyid:20:42:00:8A:EC:80:15:2F:37:3D:2A:04:DF:D3:89:3E:E2:F9:21:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/2042008AEC80152F373D2A04DFD3893EE2F92166.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2042008AEC80152F373D2A04DFD3893EE2F92166.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/34332e3235322e3138352e302f32342d3234203d3e203538383136.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.252.185.0/24 Signature Algorithm: sha256WithRSAEncryption 3f:a7:21:7d:7e:66:07:c0:f2:99:cb:59:2e:e8:99:9f:59:03: 8c:93:fc:59:3d:39:f9:2b:fb:6c:85:ac:ee:0b:d7:71:61:23: 64:f7:f7:e5:1b:ff:b3:59:9b:87:e9:f0:3f:fb:7b:61:f3:8d: a9:b6:01:77:f3:6e:d1:47:f1:d8:59:86:3d:57:f9:eb:95:7b: 70:86:20:28:a3:91:23:06:39:d2:71:02:3c:b1:a4:89:d5:84: 44:72:fe:df:6d:cf:e0:4b:b0:a0:a3:8a:48:9a:51:6a:75:7a: cf:52:d1:5e:a4:80:d0:db:76:df:bb:ff:5d:52:eb:17:17:82: e5:79:3f:36:6c:55:48:39:db:3e:4a:f7:eb:2c:ab:26:9a:e4: 06:3a:09:db:0c:5c:2d:39:8f:8f:ff:7c:97:1b:af:12:1b:65: da:01:9b:a6:95:0b:15:d0:16:ac:7c:d1:39:a1:90:69:b4:b3: 3b:47:e5:48:57:5c:0f:3f:3f:d2:d6:49:75:2e:00:4b:3f:95: 5c:01:cb:1e:78:69:c3:09:12:9d:0e:08:ae:26:f8:81:20:98: cf:33:39:1a:1d:70:31:47:d3:71:f3:8c:4d:0f:ea:fc:1b:15: a6:47:d3:0f:78:7c:3c:75:1f:63:ed:f6:d7:99:36:30:68:d2: a0:63:39:7c -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUCtKJbyi2dSaMh3orjRhJDyXKBoUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjA0MjAwOEFFQzgwMTUyRjM3M0QyQTA0REZEMzg5M0VF MkY5MjE2NjAeFw0yNjAyMTIxMDU3MDFaFw0yNzAyMTExMTAyMDFaMDMxMTAvBgNV BAMTKDVCOUE4NTlBMjc3RjRCNjZBNjQxRjRGRDEzQjI1NzMxRjJBQkQ4NkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvHq8dWwnyt/lsCyaDRJe77R2C iujKaGQIlCjxsTNip5rfp61KXKAR5qc4IcGV8srSqq/I99qxDZHTLBWX/fRrwb76 X31y6XG2WHuVIFNofk7UK1DspKtE5wXk6J4m6dKKU5+Jz3SaedpRzf+YLuI7Ov5I lqipHclSyGqcG47U08lBz2ipeN1Z62CuvHa/k8H3B6TIwdvPDtjCN9ddvchGAsrr 18dU+sz5BSmAh8z9+FvUySHxmyDrMra6mPktyyGTKSGrMt3l2Yyoap1CtxDR55ET kzkcEvCChPfcLNE3/jlHXWxk5CEJjVfbpy9hKMUSXkHTv7v0fI6MK5gKqmXfAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUW5qFmid/S2amQfT9E7JXMfKr2G8wHwYDVR0j BBgwFoAUIEIAiuyAFS83PSoE39OJPuL5IWYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZmMzY2JjNC04ODgzLTQxMWMtODc2ZS1lOWUyM2E4ZDhhZDkvMC8yMDQyMDA4QUVD ODAxNTJGMzczRDJBMDRERkQzODkzRUUyRjkyMTY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjA0MjAwOEFFQzgwMTUyRjM3M0QyQTA0REZEMzg5M0VFMkY5 MjE2Ni5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzZmYzNjYmM0LTg4ODMtNDExYy04 NzZlLWU5ZTIzYThkOGFkOS8wLzM0MzMyZTMyMzUzMjJlMzEzODM1MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzUzODM4MzEzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEACv8uTANBgkqhkiG 9w0BAQsFAAOCAQEAP6chfX5mB8DymctZLuiZn1kDjJP8WT05+Sv7bIWs7gvXcWEj ZPf35Rv/s1mbh+nwP/t7YfONqbYBd/Nu0Ufx2FmGPVf565V7cIYgKKORIwY50nEC PLGkidWERHL+323P4EuwoKOKSJpRanV6z1LRXqSA0Nt237v/XVLrFxeC5Xk/NmxV SDnbPkr36yyrJprkBjoJ2wxcLTmPj/98lxuvEhtl2gGbppULFdAWrHzROaGQabSz O0flSFdcDz8/0tZJdS4ASz+VXAHLHnhpwwkSnQ4Irib4gSCYzzM5Gh1wMUfTcfOM TQ/q/BsVpkfTD3h8PHUfY+3215k2MGjSoGM5fA== -----END CERTIFICATE-----Generated at Mon Mar 2 02:40:37 2026 by rpki-client