$ rpki-client -vvf repo-rpki.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/34352e3132352e37322e302f32322d3234203d3e20313335343438.roa File: 34352e3132352e37322e302f32322d3234203d3e20313335343438.roa (raw, json) Hash identifier: 0xR4iUHdKDDCOxdGEjjw5dfszyruo+MDrchNeNEqs2w= Subject key identifier: 75:E6:58:B6:1A:B6:90:14:5E:3F:50:EB:68:D6:8F:FE:74:7B:2C:40 Certificate issuer: /CN=03315D0E966A85B878EA9058B8CF03EAF2881889 Certificate serial: 6482F26E6A1A0025ABB15D1D7A474EC59F512E7A Authority key identifier: 03:31:5D:0E:96:6A:85:B8:78:EA:90:58:B8:CF:03:EA:F2:88:18:89 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03315D0E966A85B878EA9058B8CF03EAF2881889.cer Subject info access: rsync://repo-rpki.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/34352e3132352e37322e302f32322d3234203d3e20313335343438.roa Signing time: Mon 02 Jun 2025 02:03:44 +0000 ROA not before: Mon 02 Jun 2025 01:58:44 +0000 ROA not after: Mon 01 Jun 2026 02:03:44 +0000 asID: 135448 IP address blocks: 45.125.72.0/22 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/03315D0E966A85B878EA9058B8CF03EAF2881889.crl rsync://repo-rpki.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/03315D0E966A85B878EA9058B8CF03EAF2881889.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03315D0E966A85B878EA9058B8CF03EAF2881889.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 12:33:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:82:f2:6e:6a:1a:00:25:ab:b1:5d:1d:7a:47:4e:c5:9f:51:2e:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03315D0E966A85B878EA9058B8CF03EAF2881889 Validity Not Before: Jun 2 01:58:44 2025 GMT Not After : Jun 1 02:03:44 2026 GMT Subject: CN=75E658B61AB690145E3F50EB68D68FFE747B2C40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:34:2e:65:16:88:15:27:6e:43:28:c7:10:bb: c4:00:a2:ff:45:d0:d0:38:ef:eb:97:16:60:c6:1f: 11:4e:cf:ee:4d:7b:22:8d:9f:26:69:33:7a:59:15: 34:6f:7b:4f:65:97:28:b9:54:32:83:66:7f:6a:d1: e3:17:96:26:73:ef:cb:a3:f2:56:cd:c4:33:e1:18: 39:6b:65:a5:a9:08:bd:9b:9d:ca:c6:cd:36:5d:5a: c8:5c:3c:0c:46:0a:61:2b:60:5d:59:3f:38:3c:79: aa:d0:02:c1:ba:14:f4:77:3a:40:37:1f:7f:0c:0c: 60:79:7e:2a:4c:df:ee:56:f1:d7:95:05:e1:0a:cc: a9:86:65:18:f3:0a:1c:62:94:06:cc:8e:b1:91:60: f7:85:66:40:97:c0:98:0a:f9:16:65:1e:a3:d6:de: ba:d6:a7:38:96:cb:81:dd:6b:fe:21:64:c7:d8:ed: 31:dc:3c:dc:d7:f6:aa:95:f6:6a:7c:7a:8a:36:9a: 20:f7:15:56:94:7f:c7:ad:88:e4:d4:fd:2d:0a:37: 47:2a:43:8e:c5:a7:87:22:91:9f:a4:c0:55:ef:1b: 5f:d9:d7:a4:24:58:f6:db:bd:2d:11:bb:3d:45:21: 11:f2:db:35:da:cc:9d:19:39:af:61:41:fd:ce:56: 42:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:E6:58:B6:1A:B6:90:14:5E:3F:50:EB:68:D6:8F:FE:74:7B:2C:40 X509v3 Authority Key Identifier: keyid:03:31:5D:0E:96:6A:85:B8:78:EA:90:58:B8:CF:03:EA:F2:88:18:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/03315D0E966A85B878EA9058B8CF03EAF2881889.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03315D0E966A85B878EA9058B8CF03EAF2881889.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/34352e3132352e37322e302f32322d3234203d3e20313335343438.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.125.72.0/22 Signature Algorithm: sha256WithRSAEncryption 7c:b7:4c:c8:59:68:93:6b:a5:90:b7:3a:c2:b3:ad:6f:46:f4: 71:2d:34:eb:ac:0c:d1:1c:61:64:65:2e:8c:52:24:fe:88:94: 68:0e:42:96:96:5e:1a:a3:22:e3:23:5c:d9:4a:c0:38:b6:55: 02:c7:a3:58:4d:6a:4f:4e:0b:d9:2b:f4:5c:94:53:6a:7a:c6: 1f:22:ad:d3:79:3c:9e:40:4c:d6:31:10:60:87:fd:e4:91:fe: f8:03:2e:f1:a4:76:6c:d0:88:c7:19:bc:4f:cc:1a:e5:a1:8a: 43:47:1f:86:42:6d:32:20:76:55:a0:ac:34:00:c1:3d:ab:e2: 0a:fa:57:6d:d9:4d:08:20:53:42:0c:ad:64:eb:69:7e:48:ca: 01:bd:1b:30:3a:af:e7:92:cc:18:11:f9:da:ae:be:7a:3d:41: 53:9f:6d:84:3f:37:57:8d:26:33:39:4f:d4:1a:f1:ee:87:d1: dc:82:87:2d:46:38:a0:bc:e4:cc:3f:d8:f3:02:6a:ad:58:14: 91:09:82:21:68:56:82:cf:94:42:1c:4f:74:2f:2a:2e:3f:4c: 4c:56:30:55:fc:a0:8d:1c:a8:1c:85:23:1a:16:42:3c:6e:f2: ae:5a:e4:79:17:29:a0:cb:43:bd:ee:b2:bd:06:12:37:50:99: 6d:f1:05:88 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUZILybmoaACWrsV0dekdOxZ9RLnowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDMzMTVEMEU5NjZBODVCODc4RUE5MDU4QjhDRjAzRUFG Mjg4MTg4OTAeFw0yNTA2MDIwMTU4NDRaFw0yNjA2MDEwMjAzNDRaMDMxMTAvBgNV BAMTKDc1RTY1OEI2MUFCNjkwMTQ1RTNGNTBFQjY4RDY4RkZFNzQ3QjJDNDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMNC5lFogVJ25DKMcQu8QAov9F 0NA47+uXFmDGHxFOz+5NeyKNnyZpM3pZFTRve09llyi5VDKDZn9q0eMXliZz78uj 8lbNxDPhGDlrZaWpCL2bncrGzTZdWshcPAxGCmErYF1ZPzg8earQAsG6FPR3OkA3 H38MDGB5fipM3+5W8deVBeEKzKmGZRjzChxilAbMjrGRYPeFZkCXwJgK+RZlHqPW 3rrWpziWy4Hda/4hZMfY7THcPNzX9qqV9mp8eoo2miD3FVaUf8etiOTU/S0KN0cq Q47Fp4cikZ+kwFXvG1/Z16QkWPbbvS0Ruz1FIRHy2zXazJ0ZOa9hQf3OVkLHAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUdeZYthq2kBReP1DraNaP/nR7LEAwHwYDVR0j BBgwFoAUAzFdDpZqhbh46pBYuM8D6vKIGIkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NTlhY2I5Ny02ZTg3LTRlMzEtYTU2OS1hMjY2MGRmNGYyYjgvMC8wMzMxNUQwRTk2 NkE4NUI4NzhFQTkwNThCOENGMDNFQUYyODgxODg5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDMzMTVEMEU5NjZBODVCODc4RUE5MDU4QjhDRjAzRUFGMjg4 MTg4OS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzA1OWFjYjk3LTZlODctNGUzMS1h NTY5LWEyNjYwZGY0ZjJiOC8wLzM0MzUyZTMxMzIzNTJlMzczMjJlMzAyZjMyMzIy ZDMyMzQyMDNkM2UyMDMxMzMzNTM0MzQzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi19SDANBgkqhkiG 9w0BAQsFAAOCAQEAfLdMyFlok2ulkLc6wrOtb0b0cS0066wM0RxhZGUujFIk/oiU aA5ClpZeGqMi4yNc2UrAOLZVAsejWE1qT04L2Sv0XJRTanrGHyKt03k8nkBM1jEQ YIf95JH++AMu8aR2bNCIxxm8T8wa5aGKQ0cfhkJtMiB2VaCsNADBPaviCvpXbdlN CCBTQgytZOtpfkjKAb0bMDqv55LMGBH52q6+ej1BU59thD83V40mMzlP1Brx7ofR 3IKHLUY4oLzkzD/Y8wJqrVgUkQmCIWhWgs+UQhxPdC8qLj9MTFYwVfygjRyoHIUj GhZCPG7yrlrkeRcpoMtDve6yvQYSN1CZbfEFiA== -----END CERTIFICATE-----Generated at Sat Jun 7 06:00:44 2025 by rpki-client