$ rpki-client -vvf repo-rpki.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/34332e3233302e3132382e302f32342d3234203d3e203233363739.roa File: 34332e3233302e3132382e302f32342d3234203d3e203233363739.roa (raw, json) Hash identifier: 2v9wN44Uo9Cs+bu4eyE/wLGCms0fGUP+hH0Oe6hkTeI= Subject key identifier: 8B:A1:1F:F3:A8:C1:F1:ED:FE:6E:81:D5:40:7C:B1:17:65:3F:35:03 Certificate issuer: /CN=084550E9619FF5ABD20864D9A6383053B59BF91E Certificate serial: 0748A0054DB2CDA28A3CEF9697069B4DC10EDB25 Authority key identifier: 08:45:50:E9:61:9F:F5:AB:D2:08:64:D9:A6:38:30:53:B5:9B:F9:1E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/084550E9619FF5ABD20864D9A6383053B59BF91E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/34332e3233302e3132382e302f32342d3234203d3e203233363739.roa Signing time: Tue 10 Jun 2025 18:00:01 +0000 ROA not before: Tue 10 Jun 2025 17:55:01 +0000 ROA not after: Tue 09 Jun 2026 18:00:01 +0000 asID: 23679 IP address blocks: 43.230.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/084550E9619FF5ABD20864D9A6383053B59BF91E.crl rsync://repo-rpki.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/084550E9619FF5ABD20864D9A6383053B59BF91E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/084550E9619FF5ABD20864D9A6383053B59BF91E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 13:31:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:48:a0:05:4d:b2:cd:a2:8a:3c:ef:96:97:06:9b:4d:c1:0e:db:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=084550E9619FF5ABD20864D9A6383053B59BF91E Validity Not Before: Jun 10 17:55:01 2025 GMT Not After : Jun 9 18:00:01 2026 GMT Subject: CN=8BA11FF3A8C1F1EDFE6E81D5407CB117653F3503 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:d5:3c:63:9c:42:96:2d:6e:c7:42:1c:68:cd: 10:90:56:9a:26:da:d2:2e:19:78:d5:c1:5e:37:7f: 25:19:2e:df:4e:d2:0b:44:ee:38:44:cb:cc:4e:c2: f2:c3:d4:88:7b:05:b5:02:ad:99:ab:ea:1f:b3:a1: 4e:aa:b4:d3:f0:3a:4e:34:b8:a3:c9:81:37:35:96: ef:e5:88:e8:b6:7d:84:08:23:20:9f:ab:f2:89:90: 99:d8:9e:60:61:69:79:31:0e:3f:c1:7a:34:e9:1c: 09:17:f9:94:b7:94:52:65:41:36:dd:85:a2:1f:dd: 7a:b3:93:b2:e6:9e:14:15:e7:ea:46:0c:87:a4:08: e6:c1:a5:b1:f9:13:e6:84:f4:2d:df:a4:d0:10:3e: c8:4a:3b:d2:79:6e:a6:f1:b5:d9:13:55:eb:49:fc: 67:47:cd:81:52:c9:ae:5e:ff:47:7c:9b:aa:6b:de: 98:48:b3:30:12:cb:f5:71:b6:39:b0:b5:49:9d:f8: d4:35:e4:aa:cb:05:db:08:5d:59:64:79:27:ee:a9: 04:f6:7b:36:13:fa:66:71:8e:71:f5:b1:87:f2:0e: d0:84:13:54:6b:7d:b5:1a:58:4d:06:72:ac:00:26: 10:88:d6:2c:52:a1:f9:be:b4:85:25:75:60:a1:f3: c0:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:A1:1F:F3:A8:C1:F1:ED:FE:6E:81:D5:40:7C:B1:17:65:3F:35:03 X509v3 Authority Key Identifier: keyid:08:45:50:E9:61:9F:F5:AB:D2:08:64:D9:A6:38:30:53:B5:9B:F9:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/084550E9619FF5ABD20864D9A6383053B59BF91E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/084550E9619FF5ABD20864D9A6383053B59BF91E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/34332e3233302e3132382e302f32342d3234203d3e203233363739.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.230.128.0/24 Signature Algorithm: sha256WithRSAEncryption 63:44:26:e1:ed:39:bc:a1:cb:e1:b0:7a:70:fb:77:f3:be:48: 5b:ed:4e:96:01:94:78:46:db:ab:f0:de:8f:a1:b7:9e:f5:6c: a4:0f:fb:f1:57:67:fd:69:93:7b:73:8e:f2:5a:83:94:76:03: fa:b7:04:b1:5c:2b:1a:c0:99:0a:8d:2e:b9:af:c9:93:f5:4d: 2c:98:7a:7a:d8:a2:d8:4e:6f:e2:90:35:f7:09:32:60:8a:6a: ac:5e:44:66:3f:6c:26:46:0d:1a:52:fb:d0:87:91:d4:d3:5b: 63:7e:13:f8:8c:0f:bc:50:2c:ab:90:0c:4a:6c:f7:0c:5d:0f: 14:0d:e6:11:5f:fe:f9:ba:77:9d:9a:c0:9b:6d:5d:cf:7a:fd: 60:fd:97:2b:ff:d0:04:ce:89:1d:ff:3b:ca:1f:8b:da:33:33: 0d:96:ee:7b:81:eb:fe:41:67:bd:01:81:44:56:28:8b:7d:1f: e3:3c:ad:f6:9c:b2:37:41:df:2a:24:99:84:0e:73:3f:45:82: 3a:19:2b:9f:9f:b9:6f:2b:b8:53:5c:a0:11:97:19:7d:38:a1: fa:2e:14:d9:98:f1:47:df:fd:c9:b8:3d:02:8b:a4:ec:be:1e: 2f:d7:ec:52:b5:16:f9:8b:f3:2b:f0:ed:c0:d9:61:c5:d6:b6: 70:17:52:d7 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUB0igBU2yzaKKPO+WlwabTcEO2yUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDg0NTUwRTk2MTlGRjVBQkQyMDg2NEQ5QTYzODMwNTNC NTlCRjkxRTAeFw0yNTA2MTAxNzU1MDFaFw0yNjA2MDkxODAwMDFaMDMxMTAvBgNV BAMTKDhCQTExRkYzQThDMUYxRURGRTZFODFENTQwN0NCMTE3NjUzRjM1MDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI1TxjnEKWLW7HQhxozRCQVpom 2tIuGXjVwV43fyUZLt9O0gtE7jhEy8xOwvLD1Ih7BbUCrZmr6h+zoU6qtNPwOk40 uKPJgTc1lu/liOi2fYQIIyCfq/KJkJnYnmBhaXkxDj/BejTpHAkX+ZS3lFJlQTbd haIf3Xqzk7LmnhQV5+pGDIekCObBpbH5E+aE9C3fpNAQPshKO9J5bqbxtdkTVetJ /GdHzYFSya5e/0d8m6pr3phIszASy/VxtjmwtUmd+NQ15KrLBdsIXVlkeSfuqQT2 ezYT+mZxjnH1sYfyDtCEE1RrfbUaWE0GcqwAJhCI1ixSofm+tIUldWCh88B1AgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUi6Ef86jB8e3+boHVQHyxF2U/NQMwHwYDVR0j BBgwFoAUCEVQ6WGf9avSCGTZpjgwU7Wb+R4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MTE0MTdjMC0zN2JiLTQ0NmQtODdmMi1kODE4NDE3OGMxNDkvMC8wODQ1NTBFOTYx OUZGNUFCRDIwODY0RDlBNjM4MzA1M0I1OUJGOTFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDg0NTUwRTk2MTlGRjVBQkQyMDg2NEQ5QTYzODMwNTNCNTlC RjkxRS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzkxMTQxN2MwLTM3YmItNDQ2ZC04 N2YyLWQ4MTg0MTc4YzE0OS8wLzM0MzMyZTMyMzMzMDJlMzEzMjM4MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzIzMzM2MzczOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEACvmgDANBgkqhkiG 9w0BAQsFAAOCAQEAY0Qm4e05vKHL4bB6cPt3875IW+1OlgGUeEbbq/Dej6G3nvVs pA/78Vdn/WmTe3OO8lqDlHYD+rcEsVwrGsCZCo0uua/Jk/VNLJh6etii2E5v4pA1 9wkyYIpqrF5EZj9sJkYNGlL70IeR1NNbY34T+IwPvFAsq5AMSmz3DF0PFA3mEV/+ +bp3nZrAm21dz3r9YP2XK//QBM6JHf87yh+L2jMzDZbue4Hr/kFnvQGBRFYoi30f 4zyt9pyyN0HfKiSZhA5zP0WCOhkrn5+5byu4U1ygEZcZfTih+i4U2ZjxR9/9ybg9 Aouk7L4eL9fsUrUW+YvzK/DtwNlhxda2cBdS1w== -----END CERTIFICATE-----Generated at Thu Jun 19 18:54:41 2025 by rpki-client