$ rpki-client -vvf repo-rpki.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/34352e3131382e3131342e302f32332d3233203d3e20313331373137.roa File: 34352e3131382e3131342e302f32332d3233203d3e20313331373137.roa (raw, json) Hash identifier: MdJ8RxR8ZYDVXBT9P8fF751Cc4xL7JgxekzcB9xdKx0= Subject key identifier: 0E:DA:CA:C9:03:4F:FF:54:B1:5E:F3:FE:07:D0:17:82:C1:56:A9:63 Certificate issuer: /CN=882209E37356E0512FBE4E81B00E4F2481865087 Certificate serial: 0D4EED274DC06F1229D5C2D91C39784A090D3A4A Authority key identifier: 88:22:09:E3:73:56:E0:51:2F:BE:4E:81:B0:0E:4F:24:81:86:50:87 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/882209E37356E0512FBE4E81B00E4F2481865087.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/34352e3131382e3131342e302f32332d3233203d3e20313331373137.roa Signing time: Mon 02 Jun 2025 01:02:51 +0000 ROA not before: Mon 02 Jun 2025 00:57:51 +0000 ROA not after: Mon 01 Jun 2026 01:02:51 +0000 asID: 131717 IP address blocks: 45.118.114.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/882209E37356E0512FBE4E81B00E4F2481865087.crl rsync://repo-rpki.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/882209E37356E0512FBE4E81B00E4F2481865087.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/882209E37356E0512FBE4E81B00E4F2481865087.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 21:40:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:4e:ed:27:4d:c0:6f:12:29:d5:c2:d9:1c:39:78:4a:09:0d:3a:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=882209E37356E0512FBE4E81B00E4F2481865087 Validity Not Before: Jun 2 00:57:51 2025 GMT Not After : Jun 1 01:02:51 2026 GMT Subject: CN=0EDACAC9034FFF54B15EF3FE07D01782C156A963 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:9a:74:d1:cd:26:5c:e5:18:3b:5a:f1:20:9b: 57:4b:99:c5:8c:bc:5c:69:c7:9a:dc:f9:13:5f:81: 97:4e:b4:81:d4:a0:c6:36:cb:0b:10:87:e3:09:7a: 2b:41:72:f1:d4:58:2c:87:b9:33:88:50:77:f8:2a: 78:1d:24:4c:aa:d0:96:4f:f5:e2:e9:63:b7:80:c2: 0b:66:1f:53:ae:86:0d:51:15:0a:38:15:ba:f0:93: 31:e0:d2:8e:fd:6c:61:c6:ee:f5:81:3b:04:e1:de: 5c:21:6d:3f:16:5f:f7:33:f6:d2:a4:70:57:b5:98: 70:0c:c5:2b:13:fe:0b:43:cb:a2:78:8b:69:5d:1b: ea:ab:f1:d0:b0:95:60:6c:20:a3:44:45:4a:24:61: b9:25:83:14:b5:96:2e:d8:02:85:2b:49:bd:3e:b6: 3e:8b:37:4f:34:0a:30:80:66:b6:68:cd:f2:b3:47: 1f:89:3b:a2:d8:f8:37:34:aa:80:74:6b:59:42:3e: 53:c0:1d:55:17:c6:d0:17:09:73:35:94:b8:aa:8d: 22:ec:8e:4d:f1:89:51:b8:88:73:e4:9f:5c:b5:a5: 7f:30:29:44:53:12:3f:e8:c3:27:f9:b9:09:ca:70: 1d:9b:21:ea:34:44:08:e8:da:c5:be:8f:7b:02:b8: 66:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:DA:CA:C9:03:4F:FF:54:B1:5E:F3:FE:07:D0:17:82:C1:56:A9:63 X509v3 Authority Key Identifier: keyid:88:22:09:E3:73:56:E0:51:2F:BE:4E:81:B0:0E:4F:24:81:86:50:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/882209E37356E0512FBE4E81B00E4F2481865087.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/882209E37356E0512FBE4E81B00E4F2481865087.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/34352e3131382e3131342e302f32332d3233203d3e20313331373137.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.118.114.0/23 Signature Algorithm: sha256WithRSAEncryption 3c:9e:1d:a9:f8:ab:ed:c1:6e:6f:a3:d8:4f:53:59:91:0d:e3: 0d:0e:22:85:c1:da:41:f1:30:c5:09:53:e1:d8:a3:cc:05:30: ec:39:d6:12:08:75:64:44:03:06:8a:66:2c:6c:20:c8:df:5b: 82:db:d6:c4:c9:a3:9f:62:bd:44:1e:6d:8d:da:d2:f6:0e:0b: 61:b3:60:e2:24:ca:71:a4:8e:46:91:79:c6:ea:40:b3:bb:5a: fd:69:19:df:47:4f:7f:16:2f:32:1a:7f:21:5f:f5:3f:4a:ed: 9d:4f:a5:8b:86:50:64:55:48:c3:73:dd:bb:d6:32:a5:36:18: b1:0b:ca:dc:fa:dd:73:12:82:fe:96:4b:2f:2f:eb:e7:ea:4d: d4:58:95:2d:a6:56:7d:7b:0d:23:98:48:df:bd:b0:a7:18:03: fe:fe:dc:9d:68:f8:79:e7:f2:8b:4c:44:79:bc:db:e3:0a:d5: 04:0c:18:d3:6e:d0:7c:9e:2f:b0:af:f8:7a:05:8f:98:43:8c: ac:9f:19:88:6a:84:c3:9e:62:2e:4e:62:e0:a6:23:24:57:2e: 48:cc:ed:53:c9:cf:ae:15:26:dd:be:a3:65:5d:0e:b2:30:84: 91:3f:be:e4:bc:8c:90:3f:71:59:b9:6a:37:fb:58:3f:18:7b: db:6b:17:a9 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUDU7tJ03AbxIp1cLZHDl4SgkNOkowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODgyMjA5RTM3MzU2RTA1MTJGQkU0RTgxQjAwRTRGMjQ4 MTg2NTA4NzAeFw0yNTA2MDIwMDU3NTFaFw0yNjA2MDEwMTAyNTFaMDMxMTAvBgNV BAMTKDBFREFDQUM5MDM0RkZGNTRCMTVFRjNGRTA3RDAxNzgyQzE1NkE5NjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpmnTRzSZc5Rg7WvEgm1dLmcWM vFxpx5rc+RNfgZdOtIHUoMY2ywsQh+MJeitBcvHUWCyHuTOIUHf4KngdJEyq0JZP 9eLpY7eAwgtmH1Ouhg1RFQo4FbrwkzHg0o79bGHG7vWBOwTh3lwhbT8WX/cz9tKk cFe1mHAMxSsT/gtDy6J4i2ldG+qr8dCwlWBsIKNERUokYbklgxS1li7YAoUrSb0+ tj6LN080CjCAZrZozfKzRx+JO6LY+Dc0qoB0a1lCPlPAHVUXxtAXCXM1lLiqjSLs jk3xiVG4iHPkn1y1pX8wKURTEj/owyf5uQnKcB2bIeo0RAjo2sW+j3sCuGa5AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUDtrKyQNP/1SxXvP+B9AXgsFWqWMwHwYDVR0j BBgwFoAUiCIJ43NW4FEvvk6BsA5PJIGGUIcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MDc0NzFhMy1lZTUzLTQ5OWMtOWYyZC1jZjE2YjFlNGEzNTMvMC84ODIyMDlFMzcz NTZFMDUxMkZCRTRFODFCMDBFNEYyNDgxODY1MDg3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODgyMjA5RTM3MzU2RTA1MTJGQkU0RTgxQjAwRTRGMjQ4MTg2 NTA4Ny5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2QwNzQ3MWEzLWVlNTMtNDk5Yy05 ZjJkLWNmMTZiMWU0YTM1My8wLzM0MzUyZTMxMzEzODJlMzEzMTM0MmUzMDJmMzIz MzJkMzIzMzIwM2QzZTIwMzEzMzMxMzczMTM3LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLXZyMA0GCSqG SIb3DQEBCwUAA4IBAQA8nh2p+KvtwW5vo9hPU1mRDeMNDiKFwdpB8TDFCVPh2KPM BTDsOdYSCHVkRAMGimYsbCDI31uC29bEyaOfYr1EHm2N2tL2Dgths2DiJMpxpI5G kXnG6kCzu1r9aRnfR09/Fi8yGn8hX/U/Su2dT6WLhlBkVUjDc9271jKlNhixC8rc +t1zEoL+lksvL+vn6k3UWJUtplZ9ew0jmEjfvbCnGAP+/tydaPh55/KLTER5vNvj CtUEDBjTbtB8ni+wr/h6BY+YQ4ysnxmIaoTDnmIuTmLgpiMkVy5IzO1Tyc+uFSbd vqNlXQ6yMISRP77kvIyQP3FZuWo3+1g/GHvbaxep -----END CERTIFICATE-----Generated at Sat Oct 25 02:00:54 2025 by rpki-client