$ rpki-client -vvf repo-rpki.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/34352e3131362e3135362e302f32322d3234203d3e20313333383233.roa File: 34352e3131362e3135362e302f32322d3234203d3e20313333383233.roa (raw, json) Hash identifier: GS0aH+aUalB2W4NZhY06VBijkeZAuZQtiCtdElAwgAA= Subject key identifier: 3A:5A:8A:9C:E1:6B:16:FE:DB:5C:93:F0:99:F4:D6:A7:14:32:E4:B4 Certificate issuer: /CN=229F9618AE3F0667EC17C977F266B2BE74C81AB7 Certificate serial: 5BA76F45E4E2A69D2F2AF7314FF758EEA27C42B4 Authority key identifier: 22:9F:96:18:AE:3F:06:67:EC:17:C9:77:F2:66:B2:BE:74:C8:1A:B7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229F9618AE3F0667EC17C977F266B2BE74C81AB7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/34352e3131362e3135362e302f32322d3234203d3e20313333383233.roa Signing time: Mon 02 Jun 2025 02:03:25 +0000 ROA not before: Mon 02 Jun 2025 01:58:25 +0000 ROA not after: Mon 01 Jun 2026 02:03:25 +0000 asID: 133823 IP address blocks: 45.116.156.0/22 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/229F9618AE3F0667EC17C977F266B2BE74C81AB7.crl rsync://repo-rpki.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/229F9618AE3F0667EC17C977F266B2BE74C81AB7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229F9618AE3F0667EC17C977F266B2BE74C81AB7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 12:16:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:a7:6f:45:e4:e2:a6:9d:2f:2a:f7:31:4f:f7:58:ee:a2:7c:42:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=229F9618AE3F0667EC17C977F266B2BE74C81AB7 Validity Not Before: Jun 2 01:58:25 2025 GMT Not After : Jun 1 02:03:25 2026 GMT Subject: CN=3A5A8A9CE16B16FEDB5C93F099F4D6A71432E4B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:c9:bc:05:4d:ca:b4:d9:c5:f2:6a:35:3e:60: f7:04:43:5e:16:35:b5:6d:f8:ee:67:04:94:fb:3e: 02:5f:94:f0:11:d4:d7:69:16:14:91:d4:00:25:5b: 37:b6:75:ae:ef:ec:72:2a:48:e3:7c:15:08:d4:5b: 4c:0b:44:a8:f4:9b:f1:84:d0:6f:2a:a0:a9:00:ed: d5:36:b3:b9:1c:3f:b0:79:5b:16:a6:4d:fc:e7:a2: 12:44:37:c7:13:35:81:56:9f:24:76:d7:68:25:6d: bc:00:fc:2b:2e:d6:be:d5:b6:8a:62:d9:75:b0:d1: 3b:1e:76:4e:33:66:9a:ba:7d:c0:79:21:db:a9:ef: 3f:56:e7:69:dd:3f:4d:31:3d:ad:49:1a:8b:27:2c: 98:72:a4:c0:a4:ff:5b:21:2a:07:61:ab:38:fa:c0: 03:30:fd:45:ed:46:a2:78:41:92:ee:4e:67:06:15: e8:66:4b:dc:7e:7e:1b:e6:01:5c:1a:69:80:4f:18: a1:2e:6f:e4:6a:7c:51:3b:70:6d:25:a5:04:ba:b0: 6d:15:e1:98:ed:b2:6b:09:01:2d:17:dd:32:d1:0b: cb:33:3e:de:e8:8d:05:e3:c2:86:af:96:c8:d7:9e: a9:27:7e:86:f3:07:dc:a2:48:e2:b0:c6:17:cd:06: 02:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:5A:8A:9C:E1:6B:16:FE:DB:5C:93:F0:99:F4:D6:A7:14:32:E4:B4 X509v3 Authority Key Identifier: keyid:22:9F:96:18:AE:3F:06:67:EC:17:C9:77:F2:66:B2:BE:74:C8:1A:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/229F9618AE3F0667EC17C977F266B2BE74C81AB7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229F9618AE3F0667EC17C977F266B2BE74C81AB7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/34352e3131362e3135362e302f32322d3234203d3e20313333383233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.116.156.0/22 Signature Algorithm: sha256WithRSAEncryption af:40:f0:35:08:1d:3c:03:03:41:e9:f7:56:50:8c:68:a1:fc: eb:bc:5f:b0:ca:27:78:bb:08:67:9d:f7:56:db:69:b3:6c:d1: ee:0e:62:34:e5:ba:a2:af:25:e9:a0:2d:82:d8:11:38:e9:ee: cf:ea:4c:aa:3d:08:7b:d8:8c:4b:2f:93:cf:c3:d1:b2:04:1d: 9b:1b:87:fd:9c:33:e4:87:6a:a8:fc:43:69:78:56:9a:74:c0: e6:cf:d6:55:3f:a2:b0:64:ff:5d:0d:be:a7:f0:45:a2:8d:30: cc:bf:b9:85:7a:56:35:41:ae:7c:5e:22:aa:68:ab:ae:2b:d5: ac:1a:14:ee:74:2d:cd:42:c5:f4:47:c6:73:27:da:d6:fd:5a: 74:fe:bd:0b:49:05:e9:4d:5d:32:56:a1:17:fe:95:66:08:e5: eb:c9:11:26:66:70:87:b6:20:6e:57:c8:60:c3:6f:07:a1:5e: df:92:aa:b2:13:45:33:85:19:4e:d6:8d:19:91:3f:4b:77:8f: 00:8c:f7:9e:e2:7c:7b:57:16:ae:1f:3e:be:b7:2f:2f:9b:eb: f3:99:80:57:55:d7:2e:d4:df:f5:53:53:eb:9c:31:d4:24:91: 25:36:a7:42:04:31:67:a7:41:6a:98:ab:b3:c9:e0:68:2a:82: 6f:2c:1a:46 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUW6dvReTipp0vKvcxT/dY7qJ8QrQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjI5Rjk2MThBRTNGMDY2N0VDMTdDOTc3RjI2NkIyQkU3 NEM4MUFCNzAeFw0yNTA2MDIwMTU4MjVaFw0yNjA2MDEwMjAzMjVaMDMxMTAvBgNV BAMTKDNBNUE4QTlDRTE2QjE2RkVEQjVDOTNGMDk5RjRENkE3MTQzMkU0QjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrybwFTcq02cXyajU+YPcEQ14W NbVt+O5nBJT7PgJflPAR1NdpFhSR1AAlWze2da7v7HIqSON8FQjUW0wLRKj0m/GE 0G8qoKkA7dU2s7kcP7B5WxamTfznohJEN8cTNYFWnyR212glbbwA/Csu1r7Vtopi 2XWw0Tsedk4zZpq6fcB5Idup7z9W52ndP00xPa1JGosnLJhypMCk/1shKgdhqzj6 wAMw/UXtRqJ4QZLuTmcGFehmS9x+fhvmAVwaaYBPGKEub+RqfFE7cG0lpQS6sG0V 4ZjtsmsJAS0X3TLRC8szPt7ojQXjwoavlsjXnqknfobzB9yiSOKwxhfNBgJ3AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUOlqKnOFrFv7bXJPwmfTWpxQy5LQwHwYDVR0j BBgwFoAUIp+WGK4/BmfsF8l38mayvnTIGrcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NDc5MWIxZi02ZGE5LTQwMGQtOGIxNC05OTJhYWU2Mzc0NmMvMC8yMjlGOTYxOEFF M0YwNjY3RUMxN0M5NzdGMjY2QjJCRTc0QzgxQUI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjI5Rjk2MThBRTNGMDY2N0VDMTdDOTc3RjI2NkIyQkU3NEM4 MUFCNy5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzQ0NzkxYjFmLTZkYTktNDAwZC04 YjE0LTk5MmFhZTYzNzQ2Yy8wLzM0MzUyZTMxMzEzNjJlMzEzNTM2MmUzMDJmMzIz MjJkMzIzNDIwM2QzZTIwMzEzMzMzMzgzMjMzLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLXScMA0GCSqG SIb3DQEBCwUAA4IBAQCvQPA1CB08AwNB6fdWUIxoofzrvF+wyid4uwhnnfdW22mz bNHuDmI05bqiryXpoC2C2BE46e7P6kyqPQh72IxLL5PPw9GyBB2bG4f9nDPkh2qo /ENpeFaadMDmz9ZVP6KwZP9dDb6n8EWijTDMv7mFelY1Qa58XiKqaKuuK9WsGhTu dC3NQsX0R8ZzJ9rW/Vp0/r0LSQXpTV0yVqEX/pVmCOXryREmZnCHtiBuV8hgw28H oV7fkqqyE0UzhRlO1o0ZkT9Ld48AjPee4nx7VxauHz6+ty8vm+vzmYBXVdcu1N/1 U1PrnDHUJJElNqdCBDFnp0FqmKuzyeBoKoJvLBpG -----END CERTIFICATE-----Generated at Thu Jun 5 18:46:08 2025 by rpki-client