$ rpki-client -vvf repo-rpki.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/34332e3233302e372e302f32342d3234203d3e203338373838.roa File: 34332e3233302e372e302f32342d3234203d3e203338373838.roa (raw, json) Hash identifier: i3HQaU7A5T+hugQmUCoVWplcF5RYtJ+OjDq/WGotyFM= Subject key identifier: 31:94:03:2B:03:13:F0:FD:A5:C4:68:0F:86:F4:C5:C3:81:AD:11:17 Certificate issuer: /CN=8C3E44A2E2B475D5CF4A48E52D17290001FEFECA Certificate serial: 73A629601B9DDDF5116BA1BC111A22C32F5F889C Authority key identifier: 8C:3E:44:A2:E2:B4:75:D5:CF:4A:48:E5:2D:17:29:00:01:FE:FE:CA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/34332e3233302e372e302f32342d3234203d3e203338373838.roa Signing time: Mon 02 Jun 2025 02:05:03 +0000 ROA not before: Mon 02 Jun 2025 02:00:03 +0000 ROA not after: Mon 01 Jun 2026 02:05:03 +0000 asID: 38788 IP address blocks: 43.230.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.crl rsync://repo-rpki.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 18:12:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:a6:29:60:1b:9d:dd:f5:11:6b:a1:bc:11:1a:22:c3:2f:5f:88:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8C3E44A2E2B475D5CF4A48E52D17290001FEFECA Validity Not Before: Jun 2 02:00:03 2025 GMT Not After : Jun 1 02:05:03 2026 GMT Subject: CN=3194032B0313F0FDA5C4680F86F4C5C381AD1117 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:07:8c:47:14:53:a0:a9:4b:4d:ac:64:24:de: 31:e1:ae:eb:a4:8b:f8:a9:85:26:e6:70:e2:d1:4b: 1b:18:6a:97:d9:8a:f0:8c:16:55:44:f9:cf:bf:fc: dc:ba:4a:ae:f1:da:7d:9e:b9:37:a5:ed:57:3b:27: 59:32:8d:50:2f:ea:a8:a7:5a:4c:68:2b:80:50:24: b1:2d:a2:6e:bb:89:88:cf:c2:79:2d:2c:26:56:4b: 97:41:b3:3d:ac:da:de:05:f1:8b:65:57:57:d6:69: b8:55:20:7f:58:1b:f6:c0:50:dc:42:00:37:c9:44: 61:47:e7:8b:cb:b5:1b:08:30:e1:03:c3:0c:0d:f5: 44:2a:e1:9e:e6:0b:5f:70:85:32:48:f6:19:fe:7d: 8d:47:a0:7a:aa:cf:73:54:ea:ac:8b:02:76:2f:39: 07:ab:72:08:8a:bd:90:4d:54:24:aa:af:61:4b:0c: 00:bb:6c:9b:8c:2e:76:c7:78:53:3d:6d:92:07:4e: 97:43:4b:cd:dd:0d:f8:d1:0c:26:b4:c0:82:42:b1: 24:d0:5e:41:24:4a:59:9e:c9:9a:05:d2:7e:fc:7a: 3f:72:e0:3b:a7:2f:93:a4:c9:e1:96:7c:9f:65:e1: 92:dd:f7:73:65:48:0e:4e:f0:69:a4:26:72:93:eb: 16:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:94:03:2B:03:13:F0:FD:A5:C4:68:0F:86:F4:C5:C3:81:AD:11:17 X509v3 Authority Key Identifier: keyid:8C:3E:44:A2:E2:B4:75:D5:CF:4A:48:E5:2D:17:29:00:01:FE:FE:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/34332e3233302e372e302f32342d3234203d3e203338373838.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.230.7.0/24 Signature Algorithm: sha256WithRSAEncryption 2f:e9:93:f2:e2:bd:a2:9b:f8:0f:9f:57:d4:03:b0:52:d5:e3: 4c:8a:5d:8c:e1:11:16:21:61:f8:84:50:98:38:28:4f:57:69: 52:1f:ef:4c:a7:d2:75:e5:b3:28:15:e0:57:08:e9:3d:b6:24: d8:d8:76:35:32:74:5b:33:b3:8d:dc:44:95:32:00:0d:99:96: 8b:a2:14:7e:0b:87:bf:51:b0:55:21:b7:83:d4:3e:01:c3:56: fc:dd:78:93:8e:d8:19:a3:35:9d:a1:cc:6d:ab:b4:a6:df:f3: e9:5f:bf:c3:2e:1b:64:00:d2:8a:07:f2:4a:e7:b0:06:61:dd: 27:18:fd:01:a4:27:bb:3f:3a:ad:bc:22:7c:8a:4b:7d:9a:ef: af:53:76:90:6a:a9:3c:71:4c:05:fb:fc:a2:53:ea:89:1b:b5: 1c:3e:d3:66:72:5d:f5:90:8d:98:8a:8a:7a:92:8b:65:f1:af: 2a:05:fb:d5:3b:4d:65:21:ed:50:be:6a:e5:2f:0c:e2:fb:c9: 61:90:f0:58:81:47:8a:51:a9:d1:03:b3:fc:59:ea:63:bf:9f: c9:3f:0d:a1:1f:d5:87:c4:e9:58:f5:df:42:d3:25:6d:99:89: 88:71:70:1c:42:b6:15:96:0a:23:83:cf:dd:46:65:43:35:bf: 4c:3f:d3:28 -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgIUc6YpYBud3fURa6G8ERoiwy9fiJwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEMzRTQ0QTJFMkI0NzVENUNGNEE0OEU1MkQxNzI5MDAw MUZFRkVDQTAeFw0yNTA2MDIwMjAwMDNaFw0yNjA2MDEwMjA1MDNaMDMxMTAvBgNV BAMTKDMxOTQwMzJCMDMxM0YwRkRBNUM0NjgwRjg2RjRDNUMzODFBRDExMTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxB4xHFFOgqUtNrGQk3jHhruuk i/iphSbmcOLRSxsYapfZivCMFlVE+c+//Ny6Sq7x2n2euTel7Vc7J1kyjVAv6qin WkxoK4BQJLEtom67iYjPwnktLCZWS5dBsz2s2t4F8YtlV1fWabhVIH9YG/bAUNxC ADfJRGFH54vLtRsIMOEDwwwN9UQq4Z7mC19whTJI9hn+fY1HoHqqz3NU6qyLAnYv OQercgiKvZBNVCSqr2FLDAC7bJuMLnbHeFM9bZIHTpdDS83dDfjRDCa0wIJCsSTQ XkEkSlmeyZoF0n78ej9y4DunL5OkyeGWfJ9l4ZLd93NlSA5O8GmkJnKT6xZbAgMB AAGjggItMIICKTAdBgNVHQ4EFgQUMZQDKwMT8P2lxGgPhvTFw4GtERcwHwYDVR0j BBgwFoAUjD5EouK0ddXPSkjlLRcpAAH+/sowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NGUyYmYwOS01ZjQyLTRiNjUtYTQyZC02M2QwNzk2ZDIwNmMvMC84QzNFNDRBMkUy QjQ3NUQ1Q0Y0QTQ4RTUyRDE3MjkwMDAxRkVGRUNBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEMzRTQ0QTJFMkI0NzVENUNGNEE0OEU1MkQxNzI5MDAwMUZF RkVDQS5jZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzRlMmJmMDktNWY0Mi00YjY1LWE0 MmQtNjNkMDc5NmQyMDZjLzAvMzQzMzJlMzIzMzMwMmUzNzJlMzAyZjMyMzQyZDMy MzQyMDNkM2UyMDMzMzgzNzM4Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAr5gcwDQYJKoZIhvcNAQEL BQADggEBAC/pk/LivaKb+A+fV9QDsFLV40yKXYzhERYhYfiEUJg4KE9XaVIf70yn 0nXlsygV4FcI6T22JNjYdjUydFszs43cRJUyAA2ZlouiFH4Lh79RsFUht4PUPgHD VvzdeJOO2BmjNZ2hzG2rtKbf8+lfv8MuG2QA0ooH8krnsAZh3ScY/QGkJ7s/Oq28 InyKS32a769TdpBqqTxxTAX7/KJT6okbtRw+02ZyXfWQjZiKinqSi2XxryoF+9U7 TWUh7VC+auUvDOL7yWGQ8FiBR4pRqdEDs/xZ6mO/n8k/DaEf1YfE6Vj130LTJW2Z iYhxcBxCthWWCiODz91GZUM1v0w/0yg= -----END CERTIFICATE-----Generated at Sat Jun 7 14:51:34 2025 by rpki-client