$ rpki-client -vvf repo-rpki.idnic.net/repo/fc6f832b-5a9e-4caa-bdd4-2634727a9ed4/0/34332e3234352e3234382e302f32342d3234203d3e20313331373430.roa File: 34332e3234352e3234382e302f32342d3234203d3e20313331373430.roa (raw, json) Hash identifier: U53MbJZVdHMZelcGWK9+w7EaXlcDpDpc+jeZ3MbM1Kw= Subject key identifier: 81:79:6F:6F:A8:F9:F7:9E:54:77:76:B5:DA:D0:25:EE:C3:3A:14:16 Certificate issuer: /CN=AEB32FFA0007C0A067FB8CE9DD77CFEF92310504 Certificate serial: 65181198AE86A8B765A00F5872B7482B1FF56A8D Authority key identifier: AE:B3:2F:FA:00:07:C0:A0:67:FB:8C:E9:DD:77:CF:EF:92:31:05:04 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEB32FFA0007C0A067FB8CE9DD77CFEF92310504.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fc6f832b-5a9e-4caa-bdd4-2634727a9ed4/0/34332e3234352e3234382e302f32342d3234203d3e20313331373430.roa Signing time: Sat 05 Jul 2025 03:00:02 +0000 ROA not before: Sat 05 Jul 2025 02:55:02 +0000 ROA not after: Sat 04 Jul 2026 03:00:02 +0000 asID: 131740 IP address blocks: 43.245.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fc6f832b-5a9e-4caa-bdd4-2634727a9ed4/0/AEB32FFA0007C0A067FB8CE9DD77CFEF92310504.crl rsync://repo-rpki.idnic.net/repo/fc6f832b-5a9e-4caa-bdd4-2634727a9ed4/0/AEB32FFA0007C0A067FB8CE9DD77CFEF92310504.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEB32FFA0007C0A067FB8CE9DD77CFEF92310504.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 18:40:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:18:11:98:ae:86:a8:b7:65:a0:0f:58:72:b7:48:2b:1f:f5:6a:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AEB32FFA0007C0A067FB8CE9DD77CFEF92310504 Validity Not Before: Jul 5 02:55:02 2025 GMT Not After : Jul 4 03:00:02 2026 GMT Subject: CN=81796F6FA8F9F79E547776B5DAD025EEC33A1416 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:52:31:c5:09:0b:70:7a:9e:87:58:32:30:a3: dc:7c:60:d3:12:20:33:e7:71:8d:d3:63:ab:cc:f5: 94:85:10:7a:cd:b7:5d:45:7e:47:7f:bb:5f:4c:90: f1:46:f3:5d:1d:fc:8e:e0:3d:41:e8:c6:fe:71:4a: 17:be:08:e1:7d:13:6b:e4:57:7b:06:da:d5:9d:26: c6:e2:da:7a:9b:2f:3d:ee:bc:8a:36:bb:85:fc:e2: f6:44:13:f9:a7:26:a4:79:14:7c:ee:1c:ab:68:74: d8:31:2d:16:17:61:78:83:8a:88:05:7b:74:49:fa: e9:e8:db:7d:05:1d:41:b3:ac:77:e6:12:ea:fb:bd: e4:db:a6:11:d6:75:4f:76:b0:31:3a:f5:7f:88:4c: 49:76:38:c9:43:0f:47:b6:05:f7:aa:9a:cc:01:3a: 5c:40:f0:e7:ce:ec:4b:f9:e5:a4:5b:3e:4c:53:84: b0:77:d3:7c:80:d4:c2:71:95:97:8d:5f:e4:3b:5d: 58:7c:16:01:1d:bb:b5:04:51:19:62:9a:9e:a3:35: a5:89:e1:dd:98:1e:fb:f0:6d:19:93:b7:ec:0a:a9: 4b:8d:77:7b:84:7d:26:a0:bb:c5:c8:1f:44:45:d9: 79:19:9a:31:e1:c3:b6:74:12:02:32:63:12:88:8f: a1:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:79:6F:6F:A8:F9:F7:9E:54:77:76:B5:DA:D0:25:EE:C3:3A:14:16 X509v3 Authority Key Identifier: keyid:AE:B3:2F:FA:00:07:C0:A0:67:FB:8C:E9:DD:77:CF:EF:92:31:05:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fc6f832b-5a9e-4caa-bdd4-2634727a9ed4/0/AEB32FFA0007C0A067FB8CE9DD77CFEF92310504.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEB32FFA0007C0A067FB8CE9DD77CFEF92310504.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fc6f832b-5a9e-4caa-bdd4-2634727a9ed4/0/34332e3234352e3234382e302f32342d3234203d3e20313331373430.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.245.248.0/24 Signature Algorithm: sha256WithRSAEncryption 5d:a7:6e:8d:b4:09:13:2e:5c:0b:a7:00:16:68:fd:b0:ae:b8: 1e:b2:14:ed:f8:25:06:1b:a5:90:67:5f:ad:9a:3c:8e:75:b6: 16:5b:22:76:44:6e:04:a4:56:b6:a4:cb:a6:2c:8b:f5:67:82: 4c:98:23:4a:3c:be:dc:1a:74:e1:be:01:fb:c3:94:77:87:41: 68:91:d6:e5:07:0c:b9:aa:86:5b:c1:01:fa:3c:44:83:25:78: c1:05:c5:68:3e:b0:48:18:cd:fd:45:61:4d:bd:f3:27:49:32: 68:04:49:ed:9d:bc:47:a2:2b:61:8b:27:52:97:aa:95:e5:5a: 15:f6:58:8a:b5:fc:fe:0d:32:2a:b7:23:c6:e4:d2:fc:4f:1a: f3:74:90:ec:f9:45:46:8d:55:44:57:b3:57:39:fc:46:4f:9b: ad:f3:11:8d:6d:59:c8:a1:54:df:f2:ef:77:a9:d7:70:45:7a: 57:9a:31:ec:0d:36:e8:b7:5c:8c:71:42:4f:aa:ed:16:56:59: 2f:ae:f5:51:4f:9a:93:15:38:56:33:1b:ee:7e:89:a8:aa:b9: af:d5:78:37:74:cf:2b:80:87:14:63:ae:b6:85:8a:cb:f6:05: e9:20:24:1d:ab:05:1b:5d:82:a0:7b:4c:fc:a5:d3:bd:8a:c0: 68:f5:5d:36 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUZRgRmK6GqLdloA9YcrdIKx/1ao0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUVCMzJGRkEwMDA3QzBBMDY3RkI4Q0U5REQ3N0NGRUY5 MjMxMDUwNDAeFw0yNTA3MDUwMjU1MDJaFw0yNjA3MDQwMzAwMDJaMDMxMTAvBgNV BAMTKDgxNzk2RjZGQThGOUY3OUU1NDc3NzZCNURBRDAyNUVFQzMzQTE0MTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcUjHFCQtwep6HWDIwo9x8YNMS IDPncY3TY6vM9ZSFEHrNt11Ffkd/u19MkPFG810d/I7gPUHoxv5xShe+COF9E2vk V3sG2tWdJsbi2nqbLz3uvIo2u4X84vZEE/mnJqR5FHzuHKtodNgxLRYXYXiDiogF e3RJ+uno230FHUGzrHfmEur7veTbphHWdU92sDE69X+ITEl2OMlDD0e2BfeqmswB OlxA8OfO7Ev55aRbPkxThLB303yA1MJxlZeNX+Q7XVh8FgEdu7UEURlimp6jNaWJ 4d2YHvvwbRmTt+wKqUuNd3uEfSagu8XIH0RF2XkZmjHhw7Z0EgIyYxKIj6G3AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUgXlvb6j5955Ud3a12tAl7sM6FBYwHwYDVR0j BBgwFoAUrrMv+gAHwKBn+4zp3XfP75IxBQQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YzZmODMyYi01YTllLTRjYWEtYmRkNC0yNjM0NzI3YTllZDQvMC9BRUIzMkZGQTAw MDdDMEEwNjdGQjhDRTlERDc3Q0ZFRjkyMzEwNTA0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUVCMzJGRkEwMDA3QzBBMDY3RkI4Q0U5REQ3N0NGRUY5MjMx MDUwNC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2ZjNmY4MzJiLTVhOWUtNGNhYS1i ZGQ0LTI2MzQ3MjdhOWVkNC8wLzM0MzMyZTMyMzQzNTJlMzIzNDM4MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzMxMzczNDMwLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAK/X4MA0GCSqG SIb3DQEBCwUAA4IBAQBdp26NtAkTLlwLpwAWaP2wrrgeshTt+CUGG6WQZ1+tmjyO dbYWWyJ2RG4EpFa2pMumLIv1Z4JMmCNKPL7cGnThvgH7w5R3h0FokdblBwy5qoZb wQH6PESDJXjBBcVoPrBIGM39RWFNvfMnSTJoBEntnbxHoithiydSl6qV5VoV9liK tfz+DTIqtyPG5NL8TxrzdJDs+UVGjVVEV7NXOfxGT5ut8xGNbVnIoVTf8u93qddw RXpXmjHsDTbot1yMcUJPqu0WVlkvrvVRT5qTFThWMxvufomoqrmv1Xg3dM8rgIcU Y662hYrL9gXpICQdqwUbXYKge0z8pdO9isBo9V02 -----END CERTIFICATE-----Generated at Wed Jul 23 23:26:57 2025 by rpki-client