$ rpki-client -vvf repo-rpki.idnic.net/repo/d9b899ac-4870-4e28-8e4e-2c23752a4a60/0/34352e3234392e3232342e302f32332d3233203d3e20313532303237.roa File: 34352e3234392e3232342e302f32332d3233203d3e20313532303237.roa (raw, json) Hash identifier: dHytxOoYwuE6ev+ouL2C7HNOfk2qBxU0rZwmruiXqlc= Subject key identifier: A6:CE:14:A4:C5:1A:B1:03:09:E0:DD:8A:90:35:2D:9D:66:A7:02:A2 Certificate issuer: /CN=30D21A97E1EED902F151C3022374D979F0A4A7EF Certificate serial: 6E6995A62497B6B0FEA2BFE9EAE994C92487258F Authority key identifier: 30:D2:1A:97:E1:EE:D9:02:F1:51:C3:02:23:74:D9:79:F0:A4:A7:EF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30D21A97E1EED902F151C3022374D979F0A4A7EF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d9b899ac-4870-4e28-8e4e-2c23752a4a60/0/34352e3234392e3232342e302f32332d3233203d3e20313532303237.roa Signing time: Sat 11 Oct 2025 07:00:01 +0000 ROA not before: Sat 11 Oct 2025 06:55:01 +0000 ROA not after: Sat 10 Oct 2026 07:00:01 +0000 asID: 152027 IP address blocks: 45.249.224.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d9b899ac-4870-4e28-8e4e-2c23752a4a60/0/30D21A97E1EED902F151C3022374D979F0A4A7EF.crl rsync://repo-rpki.idnic.net/repo/d9b899ac-4870-4e28-8e4e-2c23752a4a60/0/30D21A97E1EED902F151C3022374D979F0A4A7EF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30D21A97E1EED902F151C3022374D979F0A4A7EF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 19:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:69:95:a6:24:97:b6:b0:fe:a2:bf:e9:ea:e9:94:c9:24:87:25:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30D21A97E1EED902F151C3022374D979F0A4A7EF Validity Not Before: Oct 11 06:55:01 2025 GMT Not After : Oct 10 07:00:01 2026 GMT Subject: CN=A6CE14A4C51AB10309E0DD8A90352D9D66A702A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:a2:bd:90:57:fa:c8:4e:4c:ec:a1:de:e6:75: 86:a8:c6:3e:20:3e:49:87:6e:15:de:6e:f6:86:b1: 62:78:1d:71:53:10:d1:ec:47:2e:1d:c2:12:e6:89: d7:cb:7e:93:8f:d8:47:74:49:90:69:79:d5:b1:bf: c0:e1:1c:6b:d7:34:68:25:3d:43:0a:c1:9d:00:36: 9c:02:b9:51:6e:db:af:27:e4:a1:1f:00:d5:f8:9a: ba:f6:0e:f0:2d:0f:14:6a:f7:53:b4:e7:7a:05:9a: aa:fb:e5:1b:65:81:8a:12:a5:ff:23:f2:61:b1:31: a7:29:1d:1a:d0:ac:91:b6:65:d7:b6:4e:b7:ce:5a: d5:82:47:25:7e:9c:95:ba:bf:05:29:88:bf:7d:b8: bf:25:64:65:82:9d:fa:cd:f6:cd:24:c7:f0:c6:fa: 46:00:69:96:d4:35:2b:d1:21:d0:a2:17:d2:78:b1: c0:0b:76:9c:59:e4:60:f9:f4:e4:4f:4b:38:43:f5: 9d:44:d4:13:0e:90:a1:4f:ca:11:ef:36:a0:2f:58: 8f:cc:a7:cb:e7:7c:79:46:ac:50:86:49:6c:53:2f: 7b:55:40:9c:e5:cf:5b:e3:6f:01:cf:3c:0a:86:73: 38:42:94:d9:38:21:fe:db:aa:19:be:f9:3c:3c:2f: 7f:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:CE:14:A4:C5:1A:B1:03:09:E0:DD:8A:90:35:2D:9D:66:A7:02:A2 X509v3 Authority Key Identifier: keyid:30:D2:1A:97:E1:EE:D9:02:F1:51:C3:02:23:74:D9:79:F0:A4:A7:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d9b899ac-4870-4e28-8e4e-2c23752a4a60/0/30D21A97E1EED902F151C3022374D979F0A4A7EF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30D21A97E1EED902F151C3022374D979F0A4A7EF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d9b899ac-4870-4e28-8e4e-2c23752a4a60/0/34352e3234392e3232342e302f32332d3233203d3e20313532303237.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.249.224.0/23 Signature Algorithm: sha256WithRSAEncryption 2c:1c:4d:0d:bb:c1:4b:db:8d:78:9f:ce:fd:6c:aa:82:81:98: 11:89:10:81:03:da:0a:25:9b:71:6e:31:64:20:7f:62:c4:be: e9:0d:61:54:0c:be:5a:76:b3:55:40:4d:19:ff:b2:69:60:83: 8a:3b:cc:09:15:27:c3:2d:ef:81:29:12:51:d3:ee:b0:8e:ce: b7:8b:c1:d7:77:f4:30:60:d8:ec:49:5d:d6:02:85:91:d6:b1: 7c:56:67:26:30:27:7b:be:34:ec:52:fd:fc:d6:da:b4:87:24: d9:2e:b1:5e:69:e9:6f:01:f8:38:cb:4f:4e:21:b0:68:1e:8b: 69:f7:cd:0a:72:c9:73:dd:2e:9f:b3:3b:40:54:22:08:35:e4: 60:70:91:25:31:b9:a4:37:1e:a4:5c:5f:2c:10:c4:f2:de:da: 07:58:54:da:63:73:af:f6:8c:ca:40:43:9d:25:85:39:9d:e0: d1:c1:d8:1c:45:c2:12:13:e9:b9:25:af:27:b3:24:16:32:51: 05:40:e3:7b:2b:5d:11:af:c5:3e:a2:41:05:5c:09:48:b2:e9: a1:f1:cf:d7:c4:40:0c:4c:22:b6:84:ad:20:ac:77:65:27:01: 47:e5:d6:5c:e8:31:c1:4c:68:c4:ee:33:7e:36:77:d7:4a:4a: e4:55:d1:d7 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUbmmVpiSXtrD+or/p6umUySSHJY8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzBEMjFBOTdFMUVFRDkwMkYxNTFDMzAyMjM3NEQ5NzlG MEE0QTdFRjAeFw0yNTEwMTEwNjU1MDFaFw0yNjEwMTAwNzAwMDFaMDMxMTAvBgNV BAMTKEE2Q0UxNEE0QzUxQUIxMDMwOUUwREQ4QTkwMzUyRDlENjZBNzAyQTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/or2QV/rITkzsod7mdYaoxj4g PkmHbhXebvaGsWJ4HXFTENHsRy4dwhLmidfLfpOP2Ed0SZBpedWxv8DhHGvXNGgl PUMKwZ0ANpwCuVFu268n5KEfANX4mrr2DvAtDxRq91O053oFmqr75RtlgYoSpf8j 8mGxMacpHRrQrJG2Zde2TrfOWtWCRyV+nJW6vwUpiL99uL8lZGWCnfrN9s0kx/DG +kYAaZbUNSvRIdCiF9J4scALdpxZ5GD59ORPSzhD9Z1E1BMOkKFPyhHvNqAvWI/M p8vnfHlGrFCGSWxTL3tVQJzlz1vjbwHPPAqGczhClNk4If7bqhm++Tw8L39nAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUps4UpMUasQMJ4N2KkDUtnWanAqIwHwYDVR0j BBgwFoAUMNIal+Hu2QLxUcMCI3TZefCkp+8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OWI4OTlhYy00ODcwLTRlMjgtOGU0ZS0yYzIzNzUyYTRhNjAvMC8zMEQyMUE5N0Ux RUVEOTAyRjE1MUMzMDIyMzc0RDk3OUYwQTRBN0VGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzBEMjFBOTdFMUVFRDkwMkYxNTFDMzAyMjM3NEQ5NzlGMEE0 QTdFRi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Q5Yjg5OWFjLTQ4NzAtNGUyOC04 ZTRlLTJjMjM3NTJhNGE2MC8wLzM0MzUyZTMyMzQzOTJlMzIzMjM0MmUzMDJmMzIz MzJkMzIzMzIwM2QzZTIwMzEzNTMyMzAzMjM3LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLfngMA0GCSqG SIb3DQEBCwUAA4IBAQAsHE0Nu8FL2414n879bKqCgZgRiRCBA9oKJZtxbjFkIH9i xL7pDWFUDL5adrNVQE0Z/7JpYIOKO8wJFSfDLe+BKRJR0+6wjs63i8HXd/QwYNjs SV3WAoWR1rF8VmcmMCd7vjTsUv381tq0hyTZLrFeaelvAfg4y09OIbBoHotp980K cslz3S6fsztAVCIINeRgcJElMbmkNx6kXF8sEMTy3toHWFTaY3Ov9ozKQEOdJYU5 neDRwdgcRcISE+m5Ja8nsyQWMlEFQON7K10Rr8U+okEFXAlIsumh8c/XxEAMTCK2 hK0grHdlJwFH5dZc6DHBTGjE7jN+NnfXSkrkVdHX -----END CERTIFICATE-----Generated at Wed Nov 5 05:05:03 2025 by rpki-client