$ rpki-client -vvf repo-rpki.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/34352e3131382e3131332e302f32342d3234203d3e20313331373137.roa File: 34352e3131382e3131332e302f32342d3234203d3e20313331373137.roa (raw, json) Hash identifier: fWpUZJchVDwudRJxgK1oYcEU6iSSZ9RgPdltpwuInA8= Subject key identifier: FB:A8:CA:9E:4D:00:1F:38:9E:76:12:1A:14:D1:63:22:0C:E5:42:9C Certificate issuer: /CN=882209E37356E0512FBE4E81B00E4F2481865087 Certificate serial: 7D45DCB566F9AE35FB828DBB22930B9890DCDFEA Authority key identifier: 88:22:09:E3:73:56:E0:51:2F:BE:4E:81:B0:0E:4F:24:81:86:50:87 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/882209E37356E0512FBE4E81B00E4F2481865087.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/34352e3131382e3131332e302f32342d3234203d3e20313331373137.roa Signing time: Mon 02 Jun 2025 01:02:50 +0000 ROA not before: Mon 02 Jun 2025 00:57:50 +0000 ROA not after: Mon 01 Jun 2026 01:02:50 +0000 asID: 131717 IP address blocks: 45.118.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/882209E37356E0512FBE4E81B00E4F2481865087.crl rsync://repo-rpki.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/882209E37356E0512FBE4E81B00E4F2481865087.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/882209E37356E0512FBE4E81B00E4F2481865087.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 22:09:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:45:dc:b5:66:f9:ae:35:fb:82:8d:bb:22:93:0b:98:90:dc:df:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=882209E37356E0512FBE4E81B00E4F2481865087 Validity Not Before: Jun 2 00:57:50 2025 GMT Not After : Jun 1 01:02:50 2026 GMT Subject: CN=FBA8CA9E4D001F389E76121A14D163220CE5429C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:5d:00:aa:7d:7a:6f:8f:1d:56:7a:df:30:15: de:1d:38:c1:3e:49:5e:29:e5:38:03:f1:d1:b2:dc: 98:a2:93:82:91:d6:73:88:7f:25:43:66:87:13:ad: 26:b8:a3:39:74:0a:1b:45:01:da:90:e5:24:00:75: a0:03:08:61:64:cd:1c:2f:82:76:6b:80:e4:aa:fb: 33:9f:ae:fe:19:32:7c:9b:2d:66:bf:c4:45:80:ee: 77:90:fc:02:ff:e3:d7:87:32:cd:53:5c:ff:bc:87: be:12:b9:f0:6f:49:c9:51:98:bf:b6:38:ac:7b:f0: 2b:b9:67:32:af:6e:18:1d:58:b7:46:5e:9d:a3:c3: 0d:1a:41:b0:24:73:80:cd:b5:cc:b4:94:97:c9:dd: 93:c5:00:98:99:64:36:ad:ba:6d:d8:f6:ad:8c:3f: d7:c8:b3:1f:ad:89:5b:85:2e:3b:8c:72:e4:4e:07: 62:fd:d2:9c:5b:cc:a5:f0:c7:4e:11:03:4d:82:52: f2:70:b5:e5:5f:e1:37:2b:a9:1f:a9:e7:bf:ec:31: 8c:27:cc:94:ae:d1:43:af:22:22:21:dd:03:30:3a: 37:14:e8:c3:82:e5:a6:5f:27:eb:b8:38:29:ef:f0: 87:67:39:09:56:b3:44:87:eb:21:0f:71:12:6c:06: 6e:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:A8:CA:9E:4D:00:1F:38:9E:76:12:1A:14:D1:63:22:0C:E5:42:9C X509v3 Authority Key Identifier: keyid:88:22:09:E3:73:56:E0:51:2F:BE:4E:81:B0:0E:4F:24:81:86:50:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/882209E37356E0512FBE4E81B00E4F2481865087.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/882209E37356E0512FBE4E81B00E4F2481865087.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/34352e3131382e3131332e302f32342d3234203d3e20313331373137.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.118.113.0/24 Signature Algorithm: sha256WithRSAEncryption b1:cc:ac:61:6f:f2:19:58:d9:c8:45:99:06:6a:17:91:c7:ea: a3:0a:4c:f0:ef:e9:6d:59:b7:19:3f:bd:0c:36:02:e8:45:a6: b2:cf:8c:46:fc:78:69:04:96:0e:39:18:5b:2f:fc:6a:67:e2: 8e:82:87:4c:c5:5c:df:84:d8:f2:da:26:be:c3:8a:7d:04:72: 05:ef:02:df:d9:39:77:95:5a:78:73:34:3e:c6:d2:07:4e:a8: 4a:90:7c:c8:d0:0c:5c:83:24:93:39:4f:35:54:fe:44:eb:f4: aa:98:c8:f3:6a:31:34:f7:6a:08:01:7c:6d:52:1f:3a:d0:7b: b9:2f:a6:07:b6:a6:8f:a4:31:97:9d:b4:ab:ca:49:07:9e:30: dc:71:85:d7:46:50:03:ad:21:61:68:ad:24:b5:3b:d7:eb:be: 1a:dd:bf:54:e5:5c:56:d6:40:6f:ee:30:f7:ae:9a:53:ca:81: 69:b3:78:5c:04:5b:93:bb:e7:22:91:d9:39:b7:26:78:97:79: 0f:30:64:06:94:6d:b6:f8:9d:d5:49:e2:10:79:f0:2e:87:a0: 2b:fb:ee:16:ce:22:60:9c:b0:3f:8e:98:95:27:c4:f1:e1:e3: 90:12:9c:1f:e9:a4:77:e0:be:63:c1:89:7f:87:b4:13:7c:15: 35:ee:f2:39 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUfUXctWb5rjX7go27IpMLmJDc3+owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODgyMjA5RTM3MzU2RTA1MTJGQkU0RTgxQjAwRTRGMjQ4 MTg2NTA4NzAeFw0yNTA2MDIwMDU3NTBaFw0yNjA2MDEwMTAyNTBaMDMxMTAvBgNV BAMTKEZCQThDQTlFNEQwMDFGMzg5RTc2MTIxQTE0RDE2MzIyMENFNTQyOUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3XQCqfXpvjx1Wet8wFd4dOME+ SV4p5TgD8dGy3Jiik4KR1nOIfyVDZocTrSa4ozl0ChtFAdqQ5SQAdaADCGFkzRwv gnZrgOSq+zOfrv4ZMnybLWa/xEWA7neQ/AL/49eHMs1TXP+8h74SufBvSclRmL+2 OKx78Cu5ZzKvbhgdWLdGXp2jww0aQbAkc4DNtcy0lJfJ3ZPFAJiZZDatum3Y9q2M P9fIsx+tiVuFLjuMcuROB2L90pxbzKXwx04RA02CUvJwteVf4TcrqR+p57/sMYwn zJSu0UOvIiIh3QMwOjcU6MOC5aZfJ+u4OCnv8IdnOQlWs0SH6yEPcRJsBm5FAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU+6jKnk0AHziedhIaFNFjIgzlQpwwHwYDVR0j BBgwFoAUiCIJ43NW4FEvvk6BsA5PJIGGUIcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MDc0NzFhMy1lZTUzLTQ5OWMtOWYyZC1jZjE2YjFlNGEzNTMvMC84ODIyMDlFMzcz NTZFMDUxMkZCRTRFODFCMDBFNEYyNDgxODY1MDg3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODgyMjA5RTM3MzU2RTA1MTJGQkU0RTgxQjAwRTRGMjQ4MTg2 NTA4Ny5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2QwNzQ3MWEzLWVlNTMtNDk5Yy05 ZjJkLWNmMTZiMWU0YTM1My8wLzM0MzUyZTMxMzEzODJlMzEzMTMzMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzMxMzczMTM3LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALXZxMA0GCSqG SIb3DQEBCwUAA4IBAQCxzKxhb/IZWNnIRZkGaheRx+qjCkzw7+ltWbcZP70MNgLo Raayz4xG/HhpBJYOORhbL/xqZ+KOgodMxVzfhNjy2ia+w4p9BHIF7wLf2Tl3lVp4 czQ+xtIHTqhKkHzI0AxcgySTOU81VP5E6/SqmMjzajE092oIAXxtUh860Hu5L6YH tqaPpDGXnbSrykkHnjDccYXXRlADrSFhaK0ktTvX674a3b9U5VxW1kBv7jD3rppT yoFps3hcBFuTu+cikdk5tyZ4l3kPMGQGlG22+J3VSeIQefAuh6Ar++4WziJgnLA/ jpiVJ8Tx4eOQEpwf6aR34L5jwYl/h7QTfBU17vI5 -----END CERTIFICATE-----Generated at Tue Jun 17 01:56:31 2025 by rpki-client