$ rpki-client -vvvf rpki-rsync.idnic.net/repo/6a377989-716f-48a5-908e-1984002f323d/0/34352e3234392e3232312e302f32342d3234203d3e203535363634.roa File: 34352e3234392e3232312e302f32342d3234203d3e203535363634.roa (raw, json) Hash identifier: 0bx4MgyH2bQMlVvATWEJ5kNhaarpH5TLsN+9n5Ryu5I= Subject key identifier: 13:77:AA:52:AA:7F:0C:C9:26:CF:D0:08:F6:60:47:B9:DD:7A:05:04 Certificate issuer: /CN=CFD46F59BFCE8E07997FF388E7D3D8D6EF7E6265 Certificate serial: 2BA691006FBA0068BBF8D36FE7052778D1434794 Authority key identifier: CF:D4:6F:59:BF:CE:8E:07:99:7F:F3:88:E7:D3:D8:D6:EF:7E:62:65 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CFD46F59BFCE8E07997FF388E7D3D8D6EF7E6265.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6a377989-716f-48a5-908e-1984002f323d/0/34352e3234392e3232312e302f32342d3234203d3e203535363634.roa Signing time: Tue 20 Oct 2026 04:01:53 +0000 ROA not before: Tue 20 Oct 2026 03:56:53 +0000 ROA not after: Tue 19 Oct 2027 04:01:53 +0000 asID: 55664 IP address blocks: 45.249.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6a377989-716f-48a5-908e-1984002f323d/0/CFD46F59BFCE8E07997FF388E7D3D8D6EF7E6265.crl rsync://rpki-rsync.idnic.net/repo/6a377989-716f-48a5-908e-1984002f323d/0/CFD46F59BFCE8E07997FF388E7D3D8D6EF7E6265.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CFD46F59BFCE8E07997FF388E7D3D8D6EF7E6265.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 12:43:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:a6:91:00:6f:ba:00:68:bb:f8:d3:6f:e7:05:27:78:d1:43:47:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CFD46F59BFCE8E07997FF388E7D3D8D6EF7E6265 Validity Not Before: Oct 20 03:56:53 2026 GMT Not After : Oct 19 04:01:53 2027 GMT Subject: CN=1377AA52AA7F0CC926CFD008F66047B9DD7A0504 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:14:e5:cf:2a:d2:76:58:41:52:51:92:00:ad: 4b:2b:88:ee:28:05:06:56:67:b2:1b:d9:9b:b3:32: fb:f7:a8:ab:32:75:e0:80:50:6a:73:8c:bb:1a:7d: 67:77:9c:4a:f1:70:f5:c0:ad:e7:ce:08:d6:07:76: 25:a3:dd:cf:b8:a8:be:07:61:e5:47:7b:d3:34:a0: 05:a5:70:a1:13:6b:7c:ce:65:cc:ca:3f:c2:c2:1f: fa:57:da:1d:ac:3a:8a:9d:90:b2:32:94:7d:b0:59: 73:7e:65:be:af:32:25:77:b6:b0:47:f3:86:5d:ea: aa:98:ae:24:3a:4b:20:25:5c:c4:45:c6:9f:97:50: 35:a0:09:67:63:08:c3:a8:e5:68:4e:32:8e:66:75: 64:04:32:92:81:01:50:4c:c5:72:f7:98:0e:a5:5c: 6a:0b:a9:86:e0:d7:e3:36:9a:35:25:45:16:e1:fc: 81:56:4b:11:79:bf:9c:83:d5:23:6f:1c:2f:42:38: aa:0e:98:3b:58:de:7a:e3:16:3d:7d:01:bb:0a:a6: 4c:88:9b:53:d2:09:1c:22:a0:3a:ea:42:f6:c1:c5: dc:f0:4d:a5:2b:d4:4d:9f:2d:6d:42:ba:1e:e7:3c: 20:40:88:df:3d:d2:c7:fb:72:18:73:da:bc:8e:34: 27:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:77:AA:52:AA:7F:0C:C9:26:CF:D0:08:F6:60:47:B9:DD:7A:05:04 X509v3 Authority Key Identifier: keyid:CF:D4:6F:59:BF:CE:8E:07:99:7F:F3:88:E7:D3:D8:D6:EF:7E:62:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6a377989-716f-48a5-908e-1984002f323d/0/CFD46F59BFCE8E07997FF388E7D3D8D6EF7E6265.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CFD46F59BFCE8E07997FF388E7D3D8D6EF7E6265.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6a377989-716f-48a5-908e-1984002f323d/0/34352e3234392e3232312e302f32342d3234203d3e203535363634.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.249.221.0/24 Signature Algorithm: sha256WithRSAEncryption 98:dc:ea:b1:ea:1f:a5:a7:3f:32:a5:80:67:38:06:29:03:a8: 48:5f:87:e5:f0:d6:6c:f8:13:e2:2f:8b:f4:2c:f8:69:02:9b: 98:6d:c9:0f:0c:0a:52:ee:2b:8c:05:c3:75:04:8a:4f:78:66: 38:90:73:37:0f:40:b4:d2:b0:a5:39:22:e0:fd:bb:08:39:c2: d9:f2:39:ba:ea:8e:5b:de:7e:7c:01:85:18:bb:e4:7e:cb:7c: ea:5b:d5:78:ac:ab:76:f1:ca:49:c8:e8:2c:39:a5:e5:04:3a: 73:cd:b1:99:f6:8c:5c:f6:7a:e1:dd:e8:ff:31:3f:dd:4f:d9: af:25:9a:2e:4b:6d:9a:d9:bc:63:ca:b2:0a:df:ea:17:0f:ab: 10:c1:08:45:85:ee:89:96:a5:7b:31:69:5d:e5:42:86:10:1d: 42:14:1f:4f:bb:95:54:27:89:e7:e3:9d:7f:33:46:2d:c1:92: 26:0f:d6:b3:40:85:21:41:82:98:43:9e:de:0a:dc:63:07:95: 9d:86:6b:6b:1f:58:e7:20:a6:66:3c:2b:97:90:16:cd:a5:d2: 37:85:da:0f:e7:a8:93:ba:b5:30:8d:09:dc:41:82:15:35:69: 59:5f:aa:f8:c9:ed:68:97:46:5b:cd:3c:19:7f:9c:72:55:e6: 55:33:d1:01 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUK6aRAG+6AGi7+NNv5wUneNFDR5QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0ZENDZGNTlCRkNFOEUwNzk5N0ZGMzg4RTdEM0Q4RDZF RjdFNjI2NTAeFw0yNjEwMjAwMzU2NTNaFw0yNzEwMTkwNDAxNTNaMDMxMTAvBgNV BAMTKDEzNzdBQTUyQUE3RjBDQzkyNkNGRDAwOEY2NjA0N0I5REQ3QTA1MDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGFOXPKtJ2WEFSUZIArUsriO4o BQZWZ7Ib2ZuzMvv3qKsydeCAUGpzjLsafWd3nErxcPXArefOCNYHdiWj3c+4qL4H YeVHe9M0oAWlcKETa3zOZczKP8LCH/pX2h2sOoqdkLIylH2wWXN+Zb6vMiV3trBH 84Zd6qqYriQ6SyAlXMRFxp+XUDWgCWdjCMOo5WhOMo5mdWQEMpKBAVBMxXL3mA6l XGoLqYbg1+M2mjUlRRbh/IFWSxF5v5yD1SNvHC9COKoOmDtY3nrjFj19AbsKpkyI m1PSCRwioDrqQvbBxdzwTaUr1E2fLW1Cuh7nPCBAiN890sf7chhz2ryONCf9AgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUE3eqUqp/DMkmz9AI9mBHud16BQQwHwYDVR0j BBgwFoAUz9RvWb/OjgeZf/OI59PY1u9+YmUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmEzNzc5ODktNzE2Zi00OGE1LTkwOGUtMTk4NDAwMmYzMjNkLzAvQ0ZENDZGNTlC RkNFOEUwNzk5N0ZGMzg4RTdEM0Q4RDZFRjdFNjI2NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRkQ0NkY1OUJGQ0U4RTA3OTk3RkYzODhFN0QzRDhENkVGN0U2 MjY1LmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzZhMzc3OTg5LTcxNmYtNDhhNS05 MDhlLTE5ODQwMDJmMzIzZC8wLzM0MzUyZTMyMzQzOTJlMzIzMjMxMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzUzNTM2MzYzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC353TANBgkqhkiG 9w0BAQsFAAOCAQEAmNzqseofpac/MqWAZzgGKQOoSF+H5fDWbPgT4i+L9Cz4aQKb mG3JDwwKUu4rjAXDdQSKT3hmOJBzNw9AtNKwpTki4P27CDnC2fI5uuqOW95+fAGF GLvkfst86lvVeKyrdvHKScjoLDml5QQ6c82xmfaMXPZ64d3o/zE/3U/ZryWaLktt mtm8Y8qyCt/qFw+rEMEIRYXuiZalezFpXeVChhAdQhQfT7uVVCeJ5+OdfzNGLcGS Jg/Ws0CFIUGCmEOe3grcYweVnYZrax9Y5yCmZjwrl5AWzaXSN4XaD+eok7q1MI0J 3EGCFTVpWV+q+MntaJdGW808GX+cclXmVTPRAQ== -----END CERTIFICATE-----Generated at Mon Nov 2 22:08:43 2026 by rpki-client