$ rpki-client -vvvf rpki-rsync.idnic.net/repo/6a377989-716f-48a5-908e-1984002f323d/0/34352e3234392e3232302e302f32342d3234203d3e203535363634.roa File: 34352e3234392e3232302e302f32342d3234203d3e203535363634.roa (raw, json) Hash identifier: S/3Z85ZVT8UpF1rmfhz8XRxoN9/G7Zr0H741a+zttAI= Subject key identifier: 91:0B:28:80:31:F6:61:A1:F4:CA:21:5E:C3:EB:4D:64:C3:E0:EE:ED Certificate issuer: /CN=CFD46F59BFCE8E07997FF388E7D3D8D6EF7E6265 Certificate serial: 6D83A344853F6513158B1FD6CF19804800BD13FB Authority key identifier: CF:D4:6F:59:BF:CE:8E:07:99:7F:F3:88:E7:D3:D8:D6:EF:7E:62:65 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CFD46F59BFCE8E07997FF388E7D3D8D6EF7E6265.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6a377989-716f-48a5-908e-1984002f323d/0/34352e3234392e3232302e302f32342d3234203d3e203535363634.roa Signing time: Tue 20 Oct 2026 04:02:18 +0000 ROA not before: Tue 20 Oct 2026 03:57:18 +0000 ROA not after: Tue 19 Oct 2027 04:02:18 +0000 asID: 55664 IP address blocks: 45.249.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6a377989-716f-48a5-908e-1984002f323d/0/CFD46F59BFCE8E07997FF388E7D3D8D6EF7E6265.crl rsync://rpki-rsync.idnic.net/repo/6a377989-716f-48a5-908e-1984002f323d/0/CFD46F59BFCE8E07997FF388E7D3D8D6EF7E6265.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CFD46F59BFCE8E07997FF388E7D3D8D6EF7E6265.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 12:43:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:83:a3:44:85:3f:65:13:15:8b:1f:d6:cf:19:80:48:00:bd:13:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CFD46F59BFCE8E07997FF388E7D3D8D6EF7E6265 Validity Not Before: Oct 20 03:57:18 2026 GMT Not After : Oct 19 04:02:18 2027 GMT Subject: CN=910B288031F661A1F4CA215EC3EB4D64C3E0EEED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:4d:fe:3f:c4:21:3c:1e:80:0e:75:98:58:06: de:1e:0a:9d:f3:b1:19:1b:b7:39:82:1c:a2:9e:a3: 0b:a9:03:1e:88:a5:a7:a4:be:0d:8e:47:68:77:6e: e6:90:ae:5a:f8:02:f7:95:c5:75:04:42:3a:b0:2e: 10:12:62:c3:dc:53:d7:b4:0a:3c:16:ac:30:3d:63: cd:da:9c:ad:cc:82:18:fd:14:8d:c8:dd:19:74:3f: c2:94:10:1f:1f:7b:41:b4:28:a6:08:f3:5a:c4:7f: 50:04:a8:35:ac:12:70:08:5e:b2:81:d5:a1:dc:38: bc:a1:f1:14:3f:5f:7a:52:c2:fa:c7:02:1b:c8:7c: 5a:c8:d5:1c:35:b1:c8:d3:3b:fb:cc:e0:92:dc:ce: 30:db:94:b4:8c:8f:f8:76:e9:41:03:d6:f7:af:f0: 0e:0a:f3:bf:97:a0:db:8e:e5:96:f9:85:9e:6a:f9: 95:4b:e4:dc:2a:ed:53:9b:b7:ef:58:4f:cb:46:e5: f4:0f:f2:5e:76:07:fc:5d:be:e6:cf:16:37:32:77: c3:28:ba:2d:73:0c:a7:72:b4:ae:c7:da:a3:59:98: da:b7:f9:d4:9b:24:6b:87:a2:aa:dd:70:87:e5:f7: 02:b3:5f:00:7e:a7:aa:27:c1:d5:3b:58:14:d2:59: 6f:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:0B:28:80:31:F6:61:A1:F4:CA:21:5E:C3:EB:4D:64:C3:E0:EE:ED X509v3 Authority Key Identifier: keyid:CF:D4:6F:59:BF:CE:8E:07:99:7F:F3:88:E7:D3:D8:D6:EF:7E:62:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6a377989-716f-48a5-908e-1984002f323d/0/CFD46F59BFCE8E07997FF388E7D3D8D6EF7E6265.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CFD46F59BFCE8E07997FF388E7D3D8D6EF7E6265.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6a377989-716f-48a5-908e-1984002f323d/0/34352e3234392e3232302e302f32342d3234203d3e203535363634.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.249.220.0/24 Signature Algorithm: sha256WithRSAEncryption 51:3e:64:2f:ec:98:a7:04:bb:87:1c:21:2b:ef:80:8a:8a:1b: e3:ab:79:ed:c8:df:77:30:e4:f1:54:0c:ef:9d:b2:15:af:03: 89:a3:1a:3a:fe:9e:1f:c6:a1:c6:90:a9:67:9d:e6:43:a6:f8: 1a:93:02:c4:08:f2:59:68:90:3f:e5:54:01:0c:8c:64:9b:57: 4e:05:5e:0f:3f:4a:8b:f2:2e:82:6c:e8:c4:67:3e:57:1d:cf: 32:74:37:65:56:51:0b:44:fd:a9:31:fb:ec:7b:19:aa:e2:a5: f9:27:49:07:58:df:06:d5:8f:17:96:6d:6d:ac:d1:e6:5d:e6: d4:43:37:68:d3:14:19:40:50:1c:6a:39:b6:0d:af:2c:78:6f: 79:f6:1c:7c:d7:37:5a:28:a3:a7:29:8f:ba:4d:8a:21:d5:27: 5d:06:d6:0d:15:57:bb:46:28:f2:2d:d6:b5:1c:96:bf:a6:00: a6:c5:d4:35:dd:14:60:6b:67:52:04:b4:b7:b7:7c:17:12:1f: ea:9e:5a:b0:27:ab:39:1a:bd:68:a9:02:72:1d:0c:7e:a6:75: f2:b3:a6:7b:7c:10:23:f5:01:5a:5e:4c:c1:7b:29:15:10:c5: 58:d1:91:fb:a0:9b:09:9f:ec:4a:a2:ed:ea:76:94:72:17:ee: 45:cf:bb:fd -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUbYOjRIU/ZRMVix/WzxmASAC9E/swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0ZENDZGNTlCRkNFOEUwNzk5N0ZGMzg4RTdEM0Q4RDZF RjdFNjI2NTAeFw0yNjEwMjAwMzU3MThaFw0yNzEwMTkwNDAyMThaMDMxMTAvBgNV BAMTKDkxMEIyODgwMzFGNjYxQTFGNENBMjE1RUMzRUI0RDY0QzNFMEVFRUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWTf4/xCE8HoAOdZhYBt4eCp3z sRkbtzmCHKKeowupAx6Ipaekvg2OR2h3buaQrlr4AveVxXUEQjqwLhASYsPcU9e0 CjwWrDA9Y83anK3Mghj9FI3I3Rl0P8KUEB8fe0G0KKYI81rEf1AEqDWsEnAIXrKB 1aHcOLyh8RQ/X3pSwvrHAhvIfFrI1Rw1scjTO/vM4JLczjDblLSMj/h26UED1vev 8A4K87+XoNuO5Zb5hZ5q+ZVL5Nwq7VObt+9YT8tG5fQP8l52B/xdvubPFjcyd8Mo ui1zDKdytK7H2qNZmNq3+dSbJGuHoqrdcIfl9wKzXwB+p6onwdU7WBTSWW+NAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUkQsogDH2YaH0yiFew+tNZMPg7u0wHwYDVR0j BBgwFoAUz9RvWb/OjgeZf/OI59PY1u9+YmUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmEzNzc5ODktNzE2Zi00OGE1LTkwOGUtMTk4NDAwMmYzMjNkLzAvQ0ZENDZGNTlC RkNFOEUwNzk5N0ZGMzg4RTdEM0Q4RDZFRjdFNjI2NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRkQ0NkY1OUJGQ0U4RTA3OTk3RkYzODhFN0QzRDhENkVGN0U2 MjY1LmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzZhMzc3OTg5LTcxNmYtNDhhNS05 MDhlLTE5ODQwMDJmMzIzZC8wLzM0MzUyZTMyMzQzOTJlMzIzMjMwMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzUzNTM2MzYzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC353DANBgkqhkiG 9w0BAQsFAAOCAQEAUT5kL+yYpwS7hxwhK++Aioob46t57cjfdzDk8VQM752yFa8D iaMaOv6eH8ahxpCpZ53mQ6b4GpMCxAjyWWiQP+VUAQyMZJtXTgVeDz9Ki/Iugmzo xGc+Vx3PMnQ3ZVZRC0T9qTH77HsZquKl+SdJB1jfBtWPF5ZtbazR5l3m1EM3aNMU GUBQHGo5tg2vLHhvefYcfNc3WiijpymPuk2KIdUnXQbWDRVXu0Yo8i3WtRyWv6YA psXUNd0UYGtnUgS0t7d8FxIf6p5asCerORq9aKkCch0MfqZ18rOme3wQI/UBWl5M wXspFRDFWNGR+6CbCZ/sSqLt6naUchfuRc+7/Q== -----END CERTIFICATE-----Generated at Mon Nov 2 22:08:39 2026 by rpki-client