$ rpki-client -vvf repo-rpki.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/34332e3235322e3138362e302f32342d3234203d3e203538383136.roa File: 34332e3235322e3138362e302f32342d3234203d3e203538383136.roa (raw, json) Hash identifier: NEMz93mwD3naCevcMJlDXLjtSbxK/YWuzVt1EzrH4HQ= Subject key identifier: D6:AA:11:B6:C1:3F:A9:DE:AC:D9:AB:D8:89:33:29:7C:38:17:D1:A7 Certificate issuer: /CN=2042008AEC80152F373D2A04DFD3893EE2F92166 Certificate serial: 52ABA695DA0864B09B2A5AF8D7D5D653C610D394 Authority key identifier: 20:42:00:8A:EC:80:15:2F:37:3D:2A:04:DF:D3:89:3E:E2:F9:21:66 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2042008AEC80152F373D2A04DFD3893EE2F92166.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/34332e3235322e3138362e302f32342d3234203d3e203538383136.roa Signing time: Thu 12 Feb 2026 11:02:01 +0000 ROA not before: Thu 12 Feb 2026 10:57:01 +0000 ROA not after: Thu 11 Feb 2027 11:02:01 +0000 asID: 58816 IP address blocks: 43.252.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/2042008AEC80152F373D2A04DFD3893EE2F92166.crl rsync://repo-rpki.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/2042008AEC80152F373D2A04DFD3893EE2F92166.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2042008AEC80152F373D2A04DFD3893EE2F92166.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:ab:a6:95:da:08:64:b0:9b:2a:5a:f8:d7:d5:d6:53:c6:10:d3:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2042008AEC80152F373D2A04DFD3893EE2F92166 Validity Not Before: Feb 12 10:57:01 2026 GMT Not After : Feb 11 11:02:01 2027 GMT Subject: CN=D6AA11B6C13FA9DEACD9ABD88933297C3817D1A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:25:10:9c:f9:6c:68:e5:84:a5:73:7e:6f:4e: d8:30:86:67:9b:9c:87:48:0b:44:8f:83:9b:9a:2e: 77:69:ab:c1:f2:31:65:ef:9e:ef:47:5a:b0:fd:d4: 3f:f3:ce:9d:87:be:ea:8c:77:8b:21:36:74:df:0b: 2c:a4:16:05:df:2f:f7:e6:51:c4:89:2e:7a:52:c8: 5d:0f:87:28:ff:b9:5e:fa:05:3c:b9:8b:eb:ab:fc: 91:9a:46:9b:dc:0d:65:a0:54:92:ad:e3:e2:0a:11: 8c:e1:b1:9d:8a:17:40:64:62:fe:79:68:6e:06:b1: 4b:ac:7e:92:70:a6:9b:e3:5c:41:9c:18:ce:d1:ee: 20:15:76:5e:cc:18:6c:3a:e1:4d:74:91:1d:cb:1c: f0:f6:55:77:c8:58:80:09:1e:15:e4:46:a1:73:1e: a0:e5:ff:89:12:c0:09:9a:19:da:52:c3:a1:64:fb: 75:de:c3:29:4d:31:d9:09:b4:41:9e:4e:63:9e:5e: db:b3:86:c1:68:73:4f:4c:e5:34:29:db:95:16:ea: 4d:29:b0:db:41:84:d1:fb:81:8f:47:59:0e:cc:9e: 88:51:57:7c:a0:1f:4f:0b:1e:e5:85:7e:be:e5:ee: e6:e4:06:1b:d0:83:8c:77:43:c0:de:78:d3:31:72: 2f:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:AA:11:B6:C1:3F:A9:DE:AC:D9:AB:D8:89:33:29:7C:38:17:D1:A7 X509v3 Authority Key Identifier: keyid:20:42:00:8A:EC:80:15:2F:37:3D:2A:04:DF:D3:89:3E:E2:F9:21:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/2042008AEC80152F373D2A04DFD3893EE2F92166.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2042008AEC80152F373D2A04DFD3893EE2F92166.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/34332e3235322e3138362e302f32342d3234203d3e203538383136.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.252.186.0/24 Signature Algorithm: sha256WithRSAEncryption 03:84:e0:bb:24:e2:cd:12:9f:f8:5b:a2:ed:e2:d9:f1:79:6c: 7e:12:e5:72:26:e0:43:ca:78:98:00:1a:57:86:0a:41:f7:c4: a8:83:5c:94:4a:63:07:6b:e1:4b:bb:cc:a5:8f:f3:d2:9c:e2: db:24:c0:b3:79:82:85:52:9e:3a:8c:c2:6d:62:25:c4:7d:3b: e5:7e:8c:c9:52:48:95:0a:f0:d7:ab:14:61:32:b1:b8:7c:28: 35:5f:bf:b7:4c:ff:29:48:9c:01:cf:af:0f:df:1a:e5:4c:37: b4:1b:0e:38:d6:21:41:29:a5:40:d0:bb:75:3b:84:e4:a1:dc: e2:36:ce:e9:32:b1:c9:c2:17:8c:27:9f:d7:c2:57:a8:a2:2b: f5:cc:da:97:b3:99:40:2d:09:f0:df:23:71:c3:63:82:9f:14: c4:c4:6b:2a:06:4f:86:b3:4c:3b:f1:da:9d:75:55:b9:78:a9: 85:ba:dd:39:0b:a4:33:92:f0:51:ea:ab:fa:c0:0c:c8:e3:ad: ff:94:49:85:f2:f0:9d:6f:da:7e:3c:7e:e4:a8:a6:24:2f:9b: 3e:c3:cb:6d:2d:0a:ee:2b:64:ef:24:ff:b1:f5:95:16:e0:80: ac:0d:3f:99:84:a6:6b:e5:9a:b3:26:87:a4:2f:7c:67:2e:49: 89:c3:36:32 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUUqumldoIZLCbKlr419XWU8YQ05QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjA0MjAwOEFFQzgwMTUyRjM3M0QyQTA0REZEMzg5M0VF MkY5MjE2NjAeFw0yNjAyMTIxMDU3MDFaFw0yNzAyMTExMTAyMDFaMDMxMTAvBgNV BAMTKEQ2QUExMUI2QzEzRkE5REVBQ0Q5QUJEODg5MzMyOTdDMzgxN0QxQTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBJRCc+Wxo5YSlc35vTtgwhmeb nIdIC0SPg5uaLndpq8HyMWXvnu9HWrD91D/zzp2HvuqMd4shNnTfCyykFgXfL/fm UcSJLnpSyF0Phyj/uV76BTy5i+ur/JGaRpvcDWWgVJKt4+IKEYzhsZ2KF0BkYv55 aG4GsUusfpJwppvjXEGcGM7R7iAVdl7MGGw64U10kR3LHPD2VXfIWIAJHhXkRqFz HqDl/4kSwAmaGdpSw6Fk+3XewylNMdkJtEGeTmOeXtuzhsFoc09M5TQp25UW6k0p sNtBhNH7gY9HWQ7MnohRV3ygH08LHuWFfr7l7ubkBhvQg4x3Q8DeeNMxci91AgMB AAGjggIyMIICLjAdBgNVHQ4EFgQU1qoRtsE/qd6s2avYiTMpfDgX0acwHwYDVR0j BBgwFoAUIEIAiuyAFS83PSoE39OJPuL5IWYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZmMzY2JjNC04ODgzLTQxMWMtODc2ZS1lOWUyM2E4ZDhhZDkvMC8yMDQyMDA4QUVD ODAxNTJGMzczRDJBMDRERkQzODkzRUUyRjkyMTY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjA0MjAwOEFFQzgwMTUyRjM3M0QyQTA0REZEMzg5M0VFMkY5 MjE2Ni5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzZmYzNjYmM0LTg4ODMtNDExYy04 NzZlLWU5ZTIzYThkOGFkOS8wLzM0MzMyZTMyMzUzMjJlMzEzODM2MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzUzODM4MzEzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEACv8ujANBgkqhkiG 9w0BAQsFAAOCAQEAA4TguyTizRKf+Fui7eLZ8XlsfhLlcibgQ8p4mAAaV4YKQffE qINclEpjB2vhS7vMpY/z0pzi2yTAs3mChVKeOozCbWIlxH075X6MyVJIlQrw16sU YTKxuHwoNV+/t0z/KUicAc+vD98a5Uw3tBsOONYhQSmlQNC7dTuE5KHc4jbO6TKx ycIXjCef18JXqKIr9czal7OZQC0J8N8jccNjgp8UxMRrKgZPhrNMO/HanXVVuXip hbrdOQukM5LwUeqr+sAMyOOt/5RJhfLwnW/afjx+5KimJC+bPsPLbS0K7itk7yT/ sfWVFuCArA0/mYSma+WasyaHpC98Zy5JicM2Mg== -----END CERTIFICATE-----Generated at Mon Mar 2 06:05:53 2026 by rpki-client