$ rpki-client -vvf repo-rpki.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0/34332e3234382e32342e302f32322d3234203d3e203138313033.roa File: 34332e3234382e32342e302f32322d3234203d3e203138313033.roa (raw, json) Hash identifier: RgeUIHscM2Mr9tXUcr4QUTfcftnTlsp6MIokq2QekbI= Subject key identifier: 88:1C:AA:72:2A:89:42:29:DA:73:C4:E3:4C:9E:55:DC:A7:E4:41:14 Certificate issuer: /CN=5E8D1116F8C66182B65521C899B56E89DDB84C57 Certificate serial: 1FDED78F142E55F56B2984178E887947E9191E4A Authority key identifier: 5E:8D:11:16:F8:C6:61:82:B6:55:21:C8:99:B5:6E:89:DD:B8:4C:57 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5E8D1116F8C66182B65521C899B56E89DDB84C57.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0/34332e3234382e32342e302f32322d3234203d3e203138313033.roa Signing time: Wed 23 Jul 2025 11:00:01 +0000 ROA not before: Wed 23 Jul 2025 10:55:01 +0000 ROA not after: Wed 22 Jul 2026 11:00:01 +0000 asID: 18103 IP address blocks: 43.248.24.0/22 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0/5E8D1116F8C66182B65521C899B56E89DDB84C57.crl rsync://repo-rpki.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0/5E8D1116F8C66182B65521C899B56E89DDB84C57.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5E8D1116F8C66182B65521C899B56E89DDB84C57.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 12:08:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:de:d7:8f:14:2e:55:f5:6b:29:84:17:8e:88:79:47:e9:19:1e:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5E8D1116F8C66182B65521C899B56E89DDB84C57 Validity Not Before: Jul 23 10:55:01 2025 GMT Not After : Jul 22 11:00:01 2026 GMT Subject: CN=881CAA722A894229DA73C4E34C9E55DCA7E44114 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:f8:c4:eb:be:2b:c8:b7:12:1f:54:4e:01:47: 24:22:1d:cf:80:2f:38:cf:49:7f:95:f9:cd:52:25: d7:e8:be:b2:76:31:0a:e7:47:5d:78:8a:1c:57:fd: 83:21:ec:f4:ee:28:5f:d1:cc:21:36:22:43:7a:75: ec:31:58:e8:91:bc:e4:bf:e8:88:58:9e:d2:88:21: f8:6d:40:8c:ad:4e:cc:5a:e4:12:7a:56:cc:58:77: 29:20:7c:58:ef:4f:a0:9f:4e:62:9d:40:32:b0:66: be:6f:bf:5b:b9:e0:38:9e:7d:8e:61:55:ae:5d:28: ee:a0:5c:96:ab:e0:ea:50:60:15:8b:4f:75:7d:13: 88:a8:3f:cf:56:52:a7:8f:a0:4e:b2:f3:a0:8b:2c: 83:bd:f8:e2:be:c3:50:b6:44:99:76:81:ab:4d:5c: 30:ab:33:a5:d5:6d:8a:0f:81:5a:83:2e:58:d5:c2: 44:81:74:f0:c8:21:84:cc:09:91:e8:5b:80:c6:85: 93:0a:22:c8:0d:33:f5:4a:8e:7a:30:90:e8:00:76: 03:9b:6b:da:76:83:18:0a:14:5e:9b:d2:23:bb:9f: 32:bb:44:00:aa:45:62:05:4f:fe:ca:3b:b2:35:3d: 1f:91:4e:41:e4:cb:49:48:a6:20:08:42:22:e8:3a: aa:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:1C:AA:72:2A:89:42:29:DA:73:C4:E3:4C:9E:55:DC:A7:E4:41:14 X509v3 Authority Key Identifier: keyid:5E:8D:11:16:F8:C6:61:82:B6:55:21:C8:99:B5:6E:89:DD:B8:4C:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0/5E8D1116F8C66182B65521C899B56E89DDB84C57.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5E8D1116F8C66182B65521C899B56E89DDB84C57.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0/34332e3234382e32342e302f32322d3234203d3e203138313033.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.248.24.0/22 Signature Algorithm: sha256WithRSAEncryption 14:35:50:8c:55:de:b1:88:6c:bc:c4:66:bf:68:72:18:e3:48: ed:e6:c0:65:85:31:12:e4:32:1d:36:3e:5d:55:4d:09:55:ee: 4d:3e:56:1a:08:34:71:5b:f6:95:80:14:2f:50:52:5b:cc:a6: f9:28:c7:a3:3e:ba:cd:78:41:df:c3:83:87:df:3d:7b:14:93: de:18:42:df:15:b1:66:6c:2c:74:f2:ea:c4:a5:a6:c3:00:7c: 10:a6:e9:f5:75:67:d9:7d:8f:f0:18:9a:5c:20:ff:c6:67:1e: ab:10:0b:3a:63:9d:13:be:25:6f:db:0a:ce:21:d0:25:70:42: 75:d5:b8:c1:59:34:7e:5c:b1:9b:c2:2a:17:93:38:85:24:83: b4:3d:c5:f3:51:9a:b6:dd:9d:f6:04:69:87:0e:1a:39:70:39: 81:54:55:65:c2:1d:eb:4c:28:69:7a:84:0f:82:f3:d1:8a:45: 2d:dd:15:47:cc:b9:04:2e:9d:89:df:c3:ba:12:8b:72:70:69: 66:69:95:15:47:03:57:9a:44:5c:f2:eb:c6:06:20:e8:b6:3e: b1:4f:ca:cb:2b:31:0f:29:61:fb:01:e7:97:6b:05:d0:75:92: cf:0a:73:cc:6b:80:24:a5:af:d7:8f:18:ba:0a:c3:12:d4:37: 70:5c:d7:19 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUH97XjxQuVfVrKYQXjoh5R+kZHkowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUU4RDExMTZGOEM2NjE4MkI2NTUyMUM4OTlCNTZFODlE REI4NEM1NzAeFw0yNTA3MjMxMDU1MDFaFw0yNjA3MjIxMTAwMDFaMDMxMTAvBgNV BAMTKDg4MUNBQTcyMkE4OTQyMjlEQTczQzRFMzRDOUU1NURDQTdFNDQxMTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2+MTrvivItxIfVE4BRyQiHc+A LzjPSX+V+c1SJdfovrJ2MQrnR114ihxX/YMh7PTuKF/RzCE2IkN6dewxWOiRvOS/ 6IhYntKIIfhtQIytTsxa5BJ6VsxYdykgfFjvT6CfTmKdQDKwZr5vv1u54DiefY5h Va5dKO6gXJar4OpQYBWLT3V9E4ioP89WUqePoE6y86CLLIO9+OK+w1C2RJl2gatN XDCrM6XVbYoPgVqDLljVwkSBdPDIIYTMCZHoW4DGhZMKIsgNM/VKjnowkOgAdgOb a9p2gxgKFF6b0iO7nzK7RACqRWIFT/7KO7I1PR+RTkHky0lIpiAIQiLoOqoLAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUiByqciqJQinac8TjTJ5V3KfkQRQwHwYDVR0j BBgwFoAUXo0RFvjGYYK2VSHImbVuid24TFcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MTk5YzFhZi1kOWM3LTRmZmQtYmEwMy1hM2UxY2RkOGFlZTAvMC81RThEMTExNkY4 QzY2MTgyQjY1NTIxQzg5OUI1NkU4OUREQjg0QzU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUU4RDExMTZGOEM2NjE4MkI2NTUyMUM4OTlCNTZFODlEREI4 NEM1Ny5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2IxOTljMWFmLWQ5YzctNGZmZC1i YTAzLWEzZTFjZGQ4YWVlMC8wLzM0MzMyZTMyMzQzODJlMzIzNDJlMzAyZjMyMzIy ZDMyMzQyMDNkM2UyMDMxMzgzMTMwMzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIr+BgwDQYJKoZIhvcN AQELBQADggEBABQ1UIxV3rGIbLzEZr9ochjjSO3mwGWFMRLkMh02Pl1VTQlV7k0+ VhoINHFb9pWAFC9QUlvMpvkox6M+us14Qd/Dg4ffPXsUk94YQt8VsWZsLHTy6sSl psMAfBCm6fV1Z9l9j/AYmlwg/8ZnHqsQCzpjnRO+JW/bCs4h0CVwQnXVuMFZNH5c sZvCKheTOIUkg7Q9xfNRmrbdnfYEaYcOGjlwOYFUVWXCHetMKGl6hA+C89GKRS3d FUfMuQQunYnfw7oSi3JwaWZplRVHA1eaRFzy68YGIOi2PrFPyssrMQ8pYfsB55dr BdB1ks8Kc8xrgCSlr9ePGLoKwxLUN3Bc1xk= -----END CERTIFICATE-----Generated at Fri Nov 7 12:25:53 2025 by rpki-client