$ rpki-client -vvvf rpki-rsync.idnic.net/repo/fcfc2255-e4aa-43d0-899e-e44bacbb0321/0/34352e3234392e3231362e302f32342d3234203d3e20313430303331.roa File: 34352e3234392e3231362e302f32342d3234203d3e20313430303331.roa (raw, json) Hash identifier: Hsk07ZaiWixWIF+X4I8V15TEU0xBcmXxmHrSbAVgT3c= Subject key identifier: AE:6B:EA:45:80:53:D1:7B:7C:BE:F8:65:B9:B4:86:5C:AC:EB:46:7D Certificate issuer: /CN=B10811E98433E40D5FC6AFC366AA6FEE28172365 Certificate serial: 6B9CB84F540FEAD6423E12F702839B01E187CC78 Authority key identifier: B1:08:11:E9:84:33:E4:0D:5F:C6:AF:C3:66:AA:6F:EE:28:17:23:65 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B10811E98433E40D5FC6AFC366AA6FEE28172365.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/fcfc2255-e4aa-43d0-899e-e44bacbb0321/0/34352e3234392e3231362e302f32342d3234203d3e20313430303331.roa Signing time: Thu 22 Oct 2026 09:54:03 +0000 ROA not before: Thu 22 Oct 2026 09:49:03 +0000 ROA not after: Thu 21 Oct 2027 09:54:03 +0000 asID: 140031 IP address blocks: 45.249.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/fcfc2255-e4aa-43d0-899e-e44bacbb0321/0/B10811E98433E40D5FC6AFC366AA6FEE28172365.crl rsync://rpki-rsync.idnic.net/repo/fcfc2255-e4aa-43d0-899e-e44bacbb0321/0/B10811E98433E40D5FC6AFC366AA6FEE28172365.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B10811E98433E40D5FC6AFC366AA6FEE28172365.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Nov 2026 19:28:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:9c:b8:4f:54:0f:ea:d6:42:3e:12:f7:02:83:9b:01:e1:87:cc:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B10811E98433E40D5FC6AFC366AA6FEE28172365 Validity Not Before: Oct 22 09:49:03 2026 GMT Not After : Oct 21 09:54:03 2027 GMT Subject: CN=AE6BEA458053D17B7CBEF865B9B4865CACEB467D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:53:48:00:fb:26:1b:dc:8c:83:e8:56:9b:50: 61:75:17:eb:c5:86:d3:af:33:de:cc:05:0c:2e:f6: 8f:45:fc:21:e5:fb:48:bd:40:bb:56:8b:18:97:f7: 35:57:71:51:80:ed:62:72:14:4f:76:18:a0:2e:87: 9f:c2:9e:0d:f6:ac:41:04:60:fa:f7:4e:22:59:ad: cc:96:a9:30:7c:a7:97:fc:4f:a2:e8:a0:c0:d7:cd: 74:78:57:82:ae:c9:e1:66:77:14:52:68:60:a6:92: f6:51:2c:b3:d9:71:9b:fb:fc:10:f6:00:8e:0c:63: b7:a9:f7:9b:0b:68:0d:79:02:ca:8e:33:2c:61:76: 88:30:8b:56:48:78:f3:ac:73:cd:98:7b:00:6c:13: c7:e9:d8:49:c6:94:ab:b2:90:33:d5:a2:84:5e:43: 91:bc:9c:88:fd:b6:6b:3b:8e:d5:2a:12:29:52:1b: bd:4d:58:87:17:1e:32:5b:07:dd:5c:e0:b3:76:5a: 94:c0:50:a1:da:4f:67:d7:b9:43:cb:95:a5:65:7c: 4d:8f:6b:1d:57:46:ad:d4:84:de:7a:f2:6a:87:0b: e7:57:09:81:ca:8e:90:05:ce:55:e3:52:97:21:eb: 6b:4b:a6:8c:1b:62:b9:34:cd:be:74:78:cc:cb:85: 0b:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:6B:EA:45:80:53:D1:7B:7C:BE:F8:65:B9:B4:86:5C:AC:EB:46:7D X509v3 Authority Key Identifier: keyid:B1:08:11:E9:84:33:E4:0D:5F:C6:AF:C3:66:AA:6F:EE:28:17:23:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/fcfc2255-e4aa-43d0-899e-e44bacbb0321/0/B10811E98433E40D5FC6AFC366AA6FEE28172365.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B10811E98433E40D5FC6AFC366AA6FEE28172365.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fcfc2255-e4aa-43d0-899e-e44bacbb0321/0/34352e3234392e3231362e302f32342d3234203d3e20313430303331.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.249.216.0/24 Signature Algorithm: sha256WithRSAEncryption 67:a5:b1:43:15:ec:60:0f:ac:de:d2:fa:af:57:50:f1:6d:0e: 82:b2:f0:96:83:c8:6c:19:ce:c7:e4:da:4c:dc:d3:26:9a:13: cb:e3:64:a9:21:ba:14:1c:c0:2a:e4:2b:7d:a0:96:4d:30:3b: b5:83:7f:33:2d:54:e9:f6:9e:32:e0:b8:de:d3:6d:ad:18:1f: 5a:d9:23:58:b7:bd:f9:e2:cf:77:22:8b:65:f9:87:18:5e:48: 10:d0:51:b7:72:6d:52:fb:dc:f1:d7:5d:b6:6e:92:3f:c6:d0: 4a:a2:9b:8f:cb:81:c0:52:8d:b6:08:e4:b9:40:75:a7:0d:1d: b9:4a:db:68:4b:be:56:c6:ef:43:84:f6:68:cf:ee:88:17:e6: 4c:58:55:43:c5:5d:30:2e:3f:7f:9a:cc:32:22:31:61:83:db: 68:bb:a1:91:15:f3:dc:99:f5:9d:5b:ec:f3:40:3f:f2:78:03: 61:75:c2:4d:ec:04:bd:38:d1:68:d9:bf:43:fe:1c:00:76:7c: cb:4f:47:8c:68:85:3c:00:c0:4a:c8:f2:28:f0:c2:62:99:83: 83:75:70:4e:56:43:09:ea:0a:d4:1b:86:cd:a2:49:ea:84:4a: 5a:a6:e5:91:57:67:26:bd:d3:ae:a2:c1:67:c5:cd:ed:36:8f: 99:eb:ef:08 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUa5y4T1QP6tZCPhL3AoObAeGHzHgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjEwODExRTk4NDMzRTQwRDVGQzZBRkMzNjZBQTZGRUUy ODE3MjM2NTAeFw0yNjEwMjIwOTQ5MDNaFw0yNzEwMjEwOTU0MDNaMDMxMTAvBgNV BAMTKEFFNkJFQTQ1ODA1M0QxN0I3Q0JFRjg2NUI5QjQ4NjVDQUNFQjQ2N0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCDU0gA+yYb3IyD6FabUGF1F+vF htOvM97MBQwu9o9F/CHl+0i9QLtWixiX9zVXcVGA7WJyFE92GKAuh5/Cng32rEEE YPr3TiJZrcyWqTB8p5f8T6LooMDXzXR4V4KuyeFmdxRSaGCmkvZRLLPZcZv7/BD2 AI4MY7ep95sLaA15AsqOMyxhdogwi1ZIePOsc82YewBsE8fp2EnGlKuykDPVooRe Q5G8nIj9tms7jtUqEilSG71NWIcXHjJbB91c4LN2WpTAUKHaT2fXuUPLlaVlfE2P ax1XRq3UhN568mqHC+dXCYHKjpAFzlXjUpch62tLpowbYrk0zb50eMzLhQs3AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUrmvqRYBT0Xt8vvhlubSGXKzrRn0wHwYDVR0j BBgwFoAUsQgR6YQz5A1fxq/DZqpv7igXI2UwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmNmYzIyNTUtZTRhYS00M2QwLTg5OWUtZTQ0YmFjYmIwMzIxLzAvQjEwODExRTk4 NDMzRTQwRDVGQzZBRkMzNjZBQTZGRUUyODE3MjM2NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CMTA4MTFFOTg0MzNFNDBENUZDNkFGQzM2NkFBNkZFRTI4MTcy MzY1LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2ZjZmMyMjU1LWU0YWEtNDNkMC04 OTllLWU0NGJhY2JiMDMyMS8wLzM0MzUyZTMyMzQzOTJlMzIzMTM2MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNDMwMzAzMzMxLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALfnYMA0GCSqG SIb3DQEBCwUAA4IBAQBnpbFDFexgD6ze0vqvV1DxbQ6CsvCWg8hsGc7H5NpM3NMm mhPL42SpIboUHMAq5Ct9oJZNMDu1g38zLVTp9p4y4Lje022tGB9a2SNYt7354s93 Iotl+YcYXkgQ0FG3cm1S+9zx1122bpI/xtBKopuPy4HAUo22COS5QHWnDR25Stto S75Wxu9DhPZoz+6IF+ZMWFVDxV0wLj9/mswyIjFhg9tou6GRFfPcmfWdW+zzQD/y eANhdcJN7AS9ONFo2b9D/hwAdnzLT0eMaIU8AMBKyPIo8MJimYODdXBOVkMJ6grU G4bNoknqhEpapuWRV2cmvdOuosFnxc3tNo+Z6+8I -----END CERTIFICATE-----Generated at Tue Nov 10 05:27:27 2026 by rpki-client