$ rpki-client -vvf repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/34332e3232392e3235332e302f32342d3234203d3e203233363739.roa File: 34332e3232392e3235332e302f32342d3234203d3e203233363739.roa (raw, json) Hash identifier: /uWNEfwKB54kqqx0bpk2t3809zeSijK45OqlNgTjfqw= Subject key identifier: 3D:58:7F:B7:DD:F0:0D:F4:98:BE:DF:FC:4F:93:5D:0E:8F:9F:83:B7 Certificate issuer: /CN=552B31A26E92A9DD6A585B92375B7FCA4FA66984 Certificate serial: 4D3675941F082839D362D2E846EB63C892DD871E Authority key identifier: 55:2B:31:A2:6E:92:A9:DD:6A:58:5B:92:37:5B:7F:CA:4F:A6:69:84 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer Subject info access: rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/34332e3232392e3235332e302f32342d3234203d3e203233363739.roa Signing time: Fri 23 Aug 2024 06:00:02 +0000 ROA not before: Fri 23 Aug 2024 05:55:02 +0000 ROA not after: Fri 22 Aug 2025 06:00:02 +0000 asID: 23679 IP address blocks: 43.229.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.crl rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 16:59:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:36:75:94:1f:08:28:39:d3:62:d2:e8:46:eb:63:c8:92:dd:87:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=552B31A26E92A9DD6A585B92375B7FCA4FA66984 Validity Not Before: Aug 23 05:55:02 2024 GMT Not After : Aug 22 06:00:02 2025 GMT Subject: CN=3D587FB7DDF00DF498BEDFFC4F935D0E8F9F83B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:2b:99:07:a7:08:cc:79:7a:8c:f7:8d:75:60: 60:3f:70:92:f5:3f:c0:a2:06:a4:b0:aa:ab:88:dd: 96:16:f2:f8:de:e5:46:37:c6:e1:0a:10:0e:ff:69: 0a:fa:d1:2d:74:a7:b7:c4:7b:97:ed:96:d7:64:6b: cb:a7:a3:3c:e6:b7:25:65:07:de:5b:dc:18:3c:7b: ef:e7:3f:76:45:99:d8:c2:92:52:ea:13:c5:6f:ce: 37:a4:e1:67:e0:4f:3f:2d:f4:eb:0f:48:f1:30:3e: ec:1b:69:43:e9:16:4d:bc:1a:bd:c8:d0:e8:d3:22: bf:b4:01:0d:9b:bc:9d:9c:4c:74:07:9b:5e:ee:3f: bf:74:ed:8e:32:c1:f8:3c:ec:53:fc:bc:6c:71:ef: d4:4d:cc:89:25:a8:26:72:1a:ce:30:00:84:a4:9c: 12:89:f4:43:bf:b2:2f:46:04:93:f4:83:a7:7e:c6: 1b:b1:a2:54:06:21:78:ba:9d:b9:17:fc:d3:cc:dd: 5e:1c:3f:6a:b7:94:85:c8:70:93:41:b0:0e:17:21: 17:d4:7d:61:5b:da:33:7c:29:2f:a8:76:ab:0b:a1: 87:0f:89:4f:c9:39:80:59:94:85:61:bf:13:a1:2d: 92:4f:43:d0:9d:3c:d0:09:dc:17:d1:25:e8:22:24: d1:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:58:7F:B7:DD:F0:0D:F4:98:BE:DF:FC:4F:93:5D:0E:8F:9F:83:B7 X509v3 Authority Key Identifier: keyid:55:2B:31:A2:6E:92:A9:DD:6A:58:5B:92:37:5B:7F:CA:4F:A6:69:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/34332e3232392e3235332e302f32342d3234203d3e203233363739.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.229.253.0/24 Signature Algorithm: sha256WithRSAEncryption 9f:5a:c3:9c:f7:ff:5c:fb:54:9a:a2:b1:a2:0f:18:5d:01:59: 58:1c:b7:66:77:fc:7d:7d:fc:c7:ac:26:b9:d8:3f:0e:d9:36: 5d:f3:85:5b:c7:c1:6f:c1:6c:18:85:88:88:70:96:8b:8f:88: b1:be:0b:f8:40:7d:34:b5:81:c5:3e:fe:2e:fa:cf:6d:ab:d9: b6:e3:4f:23:bc:c8:e7:0a:74:23:0a:98:4f:91:35:b9:18:27: 1e:76:99:50:33:20:36:c9:e4:a9:b1:ca:2f:d3:ce:55:c0:6b: 74:ac:53:34:d7:af:4f:44:9b:d9:db:bf:8e:f1:f0:fa:e4:f3: ad:6e:23:e0:db:f2:3b:d3:01:8c:27:61:2b:84:91:ae:1f:44: 69:55:6b:17:5e:73:37:df:07:4b:18:b3:8d:39:39:c7:2d:3e: 8e:3f:c7:30:80:10:e2:ce:17:c9:ba:8a:4e:c6:80:84:2e:6c: 72:21:31:94:73:2d:a4:c2:98:c4:de:d5:f0:01:3c:d5:e6:e1: e7:02:d0:86:1c:44:9d:18:71:0e:ce:d3:61:6e:eb:db:c5:e1: 96:43:18:32:d6:9f:49:13:fc:4e:69:48:fd:86:66:7d:09:f8: 5d:87:64:92:b6:06:55:6e:30:65:df:de:ce:97:c5:78:4d:62: a3:09:f5:8c -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUTTZ1lB8IKDnTYtLoRutjyJLdhx4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTUyQjMxQTI2RTkyQTlERDZBNTg1QjkyMzc1QjdGQ0E0 RkE2Njk4NDAeFw0yNDA4MjMwNTU1MDJaFw0yNTA4MjIwNjAwMDJaMDMxMTAvBgNV BAMTKDNENTg3RkI3RERGMDBERjQ5OEJFREZGQzRGOTM1RDBFOEY5RjgzQjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdK5kHpwjMeXqM9411YGA/cJL1 P8CiBqSwqquI3ZYW8vje5UY3xuEKEA7/aQr60S10p7fEe5ftltdka8unozzmtyVl B95b3Bg8e+/nP3ZFmdjCklLqE8Vvzjek4WfgTz8t9OsPSPEwPuwbaUPpFk28Gr3I 0OjTIr+0AQ2bvJ2cTHQHm17uP7907Y4ywfg87FP8vGxx79RNzIklqCZyGs4wAISk nBKJ9EO/si9GBJP0g6d+xhuxolQGIXi6nbkX/NPM3V4cP2q3lIXIcJNBsA4XIRfU fWFb2jN8KS+odqsLoYcPiU/JOYBZlIVhvxOhLZJPQ9CdPNAJ3BfRJegiJNGjAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUPVh/t93wDfSYvt/8T5NdDo+fg7cwHwYDVR0j BBgwFoAUVSsxom6Sqd1qWFuSN1t/yk+maYQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MDE0MzJjYy0zYmM5LTQ4NTgtYjUwNi0yMThhYWIwYjA4OWMvMC81NTJCMzFBMjZF OTJBOURENkE1ODVCOTIzNzVCN0ZDQTRGQTY2OTg0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTUyQjMxQTI2RTkyQTlERDZBNTg1QjkyMzc1QjdGQ0E0RkE2 Njk4NC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzIwMTQzMmNjLTNiYzktNDg1OC1i NTA2LTIxOGFhYjBiMDg5Yy8wLzM0MzMyZTMyMzIzOTJlMzIzNTMzMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzIzMzM2MzczOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEACvl/TANBgkqhkiG 9w0BAQsFAAOCAQEAn1rDnPf/XPtUmqKxog8YXQFZWBy3Znf8fX38x6wmudg/Dtk2 XfOFW8fBb8FsGIWIiHCWi4+Isb4L+EB9NLWBxT7+LvrPbavZtuNPI7zI5wp0IwqY T5E1uRgnHnaZUDMgNsnkqbHKL9POVcBrdKxTNNevT0Sb2du/jvHw+uTzrW4j4Nvy O9MBjCdhK4SRrh9EaVVrF15zN98HSxizjTk5xy0+jj/HMIAQ4s4XybqKTsaAhC5s ciExlHMtpMKYxN7V8AE81ebh5wLQhhxEnRhxDs7TYW7r28XhlkMYMtafSRP8TmlI /YZmfQn4XYdkkrYGVW4wZd/ezpfFeE1iown1jA== -----END CERTIFICATE-----Generated at Thu Jul 24 08:25:23 2025 by rpki-client