$ rpki-client -vvf repo-rpki.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/34332e3234332e3138352e302f32342d3234203d3e203633383237.roa File: 34332e3234332e3138352e302f32342d3234203d3e203633383237.roa (raw, json) Hash identifier: tPL8LGFCeScODEGc8A8pbjQLA1tS07qIShgIss5wh6Y= Subject key identifier: 3F:6C:94:49:1F:22:35:E6:66:28:F2:88:6A:C1:CF:5C:1D:68:2E:3B Certificate issuer: /CN=F69B637EA94DE4CC9150BDFD5327BE03A033784B Certificate serial: 6548DE6986924E3361FA4D9A2EA1998C4DA9B2A8 Authority key identifier: F6:9B:63:7E:A9:4D:E4:CC:91:50:BD:FD:53:27:BE:03:A0:33:78:4B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F69B637EA94DE4CC9150BDFD5327BE03A033784B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/34332e3234332e3138352e302f32342d3234203d3e203633383237.roa Signing time: Wed 22 Oct 2025 08:00:02 +0000 ROA not before: Wed 22 Oct 2025 07:55:02 +0000 ROA not after: Wed 21 Oct 2026 08:00:02 +0000 asID: 63827 IP address blocks: 43.243.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/F69B637EA94DE4CC9150BDFD5327BE03A033784B.crl rsync://repo-rpki.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/F69B637EA94DE4CC9150BDFD5327BE03A033784B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F69B637EA94DE4CC9150BDFD5327BE03A033784B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Nov 2025 10:23:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:48:de:69:86:92:4e:33:61:fa:4d:9a:2e:a1:99:8c:4d:a9:b2:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F69B637EA94DE4CC9150BDFD5327BE03A033784B Validity Not Before: Oct 22 07:55:02 2025 GMT Not After : Oct 21 08:00:02 2026 GMT Subject: CN=3F6C94491F2235E66628F2886AC1CF5C1D682E3B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:2e:f0:4b:39:dc:4b:27:f7:db:19:38:eb:cd: b9:e7:9c:e3:81:82:91:d6:ef:58:d1:ba:8a:fa:76: c5:0b:57:aa:f7:e8:f4:bd:97:3e:b5:29:9b:c2:7f: 06:9f:98:cd:9c:07:5d:1d:82:14:ee:1b:13:c1:36: 05:86:d5:32:f7:28:66:e0:bd:35:e3:9e:a1:12:48: f9:04:98:19:46:96:31:2d:ac:75:cb:ab:5a:da:03: 2b:a6:d2:0f:fc:07:38:75:1f:02:97:1c:71:16:4e: b6:66:48:9e:d7:f4:45:2e:9a:40:cc:03:f8:63:68: b5:7f:2f:a4:bc:a9:07:b5:d1:a3:cf:df:97:ab:5d: 95:67:98:aa:3f:5a:ae:9d:18:7b:42:b5:22:4b:7e: 86:a5:d3:7a:09:cc:ae:ce:cb:74:2e:05:bd:29:86: ef:f4:ac:65:ee:64:1a:80:cb:d8:9d:0c:eb:a9:35: 7a:7f:e4:6a:8e:79:98:be:4f:7d:6e:e5:f7:33:c9: 74:a5:f4:ad:6a:46:6a:4c:d7:41:29:29:7c:b8:4a: d2:cb:e5:0e:db:72:7a:20:f5:4e:f8:ff:12:ab:4f: 5e:54:73:9e:82:6e:e9:b0:2c:32:d7:56:24:34:cd: 9c:bf:cc:7e:d1:71:ae:a9:0a:eb:9b:a0:f3:f4:76: 30:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:6C:94:49:1F:22:35:E6:66:28:F2:88:6A:C1:CF:5C:1D:68:2E:3B X509v3 Authority Key Identifier: keyid:F6:9B:63:7E:A9:4D:E4:CC:91:50:BD:FD:53:27:BE:03:A0:33:78:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/F69B637EA94DE4CC9150BDFD5327BE03A033784B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F69B637EA94DE4CC9150BDFD5327BE03A033784B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/34332e3234332e3138352e302f32342d3234203d3e203633383237.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.243.185.0/24 Signature Algorithm: sha256WithRSAEncryption ab:93:ae:04:e9:44:33:1a:57:40:f0:6a:97:44:eb:8a:c1:5b: 6a:4a:b0:d7:fd:72:30:4c:f8:41:12:4a:6b:dd:13:d8:77:65: 03:36:30:bc:e0:c9:54:d8:8b:b8:a6:3a:0d:cc:e0:c9:dd:16: 2a:13:fc:d3:b1:20:5b:57:c1:21:ce:cb:e6:a4:17:bc:16:31: 04:b1:43:0b:ec:ba:d3:76:23:53:8f:d6:41:a8:d9:28:5e:ab: e0:38:1f:eb:9a:85:3a:7e:29:43:c9:04:d6:61:8f:1b:89:86: 4f:40:a1:8a:73:99:ca:f9:c9:b0:2d:f9:93:fa:6d:b8:36:82: 23:9e:41:9e:1e:7a:7a:cb:ed:dc:8c:ff:40:ac:76:3a:eb:97: c0:38:31:c2:c1:cc:55:51:31:33:6e:b3:dd:76:89:47:8f:b0: b0:1d:d6:5f:d9:fb:41:56:f2:e5:55:ea:5e:85:1b:09:b3:64: 01:38:f5:ef:17:8e:b1:6a:0d:90:63:cb:54:a1:4b:46:89:2f: 19:11:c5:bb:60:cb:a1:cc:54:12:a2:96:43:b3:c5:da:e3:ae: 1c:8f:af:53:c3:14:6d:36:e3:a7:16:0d:5d:20:cd:e7:6c:08: 68:bd:85:ea:ad:e2:23:c1:91:8c:7b:3c:ee:94:d7:96:fc:14: 8f:3e:2b:3e -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUZUjeaYaSTjNh+k2aLqGZjE2psqgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjY5QjYzN0VBOTRERTRDQzkxNTBCREZENTMyN0JFMDNB MDMzNzg0QjAeFw0yNTEwMjIwNzU1MDJaFw0yNjEwMjEwODAwMDJaMDMxMTAvBgNV BAMTKDNGNkM5NDQ5MUYyMjM1RTY2NjI4RjI4ODZBQzFDRjVDMUQ2ODJFM0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDILvBLOdxLJ/fbGTjrzbnnnOOB gpHW71jRuor6dsULV6r36PS9lz61KZvCfwafmM2cB10dghTuGxPBNgWG1TL3KGbg vTXjnqESSPkEmBlGljEtrHXLq1raAyum0g/8Bzh1HwKXHHEWTrZmSJ7X9EUumkDM A/hjaLV/L6S8qQe10aPP35erXZVnmKo/Wq6dGHtCtSJLfoal03oJzK7Oy3QuBb0p hu/0rGXuZBqAy9idDOupNXp/5GqOeZi+T31u5fczyXSl9K1qRmpM10EpKXy4StLL 5Q7bcnog9U74/xKrT15Uc56CbumwLDLXViQ0zZy/zH7Rca6pCuuboPP0djA3AgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUP2yUSR8iNeZmKPKIasHPXB1oLjswHwYDVR0j BBgwFoAU9ptjfqlN5MyRUL39Uye+A6AzeEswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MWE2ODcxMi0xZDlhLTQxNDMtODJmMS0xYzgyYzMzMTY1ZWEvMC9GNjlCNjM3RUE5 NERFNENDOTE1MEJERkQ1MzI3QkUwM0EwMzM3ODRCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjY5QjYzN0VBOTRERTRDQzkxNTBCREZENTMyN0JFMDNBMDMz Nzg0Qi5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzkxYTY4NzEyLTFkOWEtNDE0My04 MmYxLTFjODJjMzMxNjVlYS8wLzM0MzMyZTMyMzQzMzJlMzEzODM1MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzYzMzM4MzIzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEACvzuTANBgkqhkiG 9w0BAQsFAAOCAQEAq5OuBOlEMxpXQPBql0TrisFbakqw1/1yMEz4QRJKa90T2Hdl AzYwvODJVNiLuKY6Dczgyd0WKhP807EgW1fBIc7L5qQXvBYxBLFDC+y603YjU4/W QajZKF6r4Dgf65qFOn4pQ8kE1mGPG4mGT0ChinOZyvnJsC35k/ptuDaCI55Bnh56 esvt3Iz/QKx2OuuXwDgxwsHMVVExM26z3XaJR4+wsB3WX9n7QVby5VXqXoUbCbNk ATj17xeOsWoNkGPLVKFLRokvGRHFu2DLocxUEqKWQ7PF2uOuHI+vU8MUbTbjpxYN XSDN52wIaL2F6q3iI8GRjHs87pTXlvwUjz4rPg== -----END CERTIFICATE-----Generated at Wed Nov 5 20:53:23 2025 by rpki-client