$ rpki-client -vvf repo-rpki.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/34352e3131362e3135382e302f32342d3234203d3e20313333383233.roa File: 34352e3131362e3135382e302f32342d3234203d3e20313333383233.roa (raw, json) Hash identifier: ULCLP9kZZOxNVrlIu58ZSD+j7UQRNK4nHv2XMRgGLuc= Subject key identifier: 9F:CF:6F:07:23:12:41:D0:61:86:3C:03:FC:23:D8:B4:45:1A:FD:E4 Certificate issuer: /CN=229F9618AE3F0667EC17C977F266B2BE74C81AB7 Certificate serial: 127235C1E33A938F98F45A322AE087A288D24C44 Authority key identifier: 22:9F:96:18:AE:3F:06:67:EC:17:C9:77:F2:66:B2:BE:74:C8:1A:B7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229F9618AE3F0667EC17C977F266B2BE74C81AB7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/34352e3131362e3135382e302f32342d3234203d3e20313333383233.roa Signing time: Fri 07 Mar 2025 07:18:20 +0000 ROA not before: Fri 07 Mar 2025 07:13:20 +0000 ROA not after: Fri 06 Mar 2026 07:18:20 +0000 asID: 133823 IP address blocks: 45.116.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/229F9618AE3F0667EC17C977F266B2BE74C81AB7.crl rsync://repo-rpki.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/229F9618AE3F0667EC17C977F266B2BE74C81AB7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229F9618AE3F0667EC17C977F266B2BE74C81AB7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Oct 2025 18:51:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:72:35:c1:e3:3a:93:8f:98:f4:5a:32:2a:e0:87:a2:88:d2:4c:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=229F9618AE3F0667EC17C977F266B2BE74C81AB7 Validity Not Before: Mar 7 07:13:20 2025 GMT Not After : Mar 6 07:18:20 2026 GMT Subject: CN=9FCF6F07231241D061863C03FC23D8B4451AFDE4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:74:3f:e2:8d:b4:e2:b3:db:11:cb:ee:5f:7a: fb:6c:c8:99:14:26:25:b1:3b:f1:40:bf:ae:6d:16: bb:74:88:e7:e2:de:42:0e:a5:20:0e:8b:af:4c:8c: ca:b6:a4:cf:c2:a1:69:5f:1e:fe:a8:84:6e:0b:84: 58:40:5e:4c:63:d5:9a:ac:b9:19:13:b2:d9:60:2a: b2:2f:b2:41:8c:54:4b:c8:20:4f:0e:ba:49:67:de: da:fb:c3:d1:f5:62:07:61:4c:9f:f4:71:ed:45:94: e1:a7:16:fa:02:b2:78:8c:44:34:a5:19:c4:40:3a: bf:7e:8f:cd:f1:67:fb:7f:6a:72:6d:82:c0:48:a4: fd:7b:71:a8:63:1d:4e:5a:1b:2c:89:26:0c:4a:b2: 48:c1:68:18:43:81:d3:e3:71:db:f9:28:54:23:08: 66:4f:57:ae:f9:8e:90:7f:9b:66:f9:9b:a2:04:c6: f9:ec:8a:bb:d8:98:db:86:0f:0e:68:6c:41:4b:c8: 65:9b:e7:32:8e:d4:ab:b9:7c:ac:dd:26:d5:d2:b1: 3a:87:3f:12:89:67:28:9d:5b:00:bc:9d:d6:c7:52: bf:0f:5c:b0:d1:46:ba:c0:ce:b6:0d:87:4d:d9:56: ee:d2:22:61:e7:69:7e:f3:8b:d1:66:81:60:fb:6c: 9d:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:CF:6F:07:23:12:41:D0:61:86:3C:03:FC:23:D8:B4:45:1A:FD:E4 X509v3 Authority Key Identifier: keyid:22:9F:96:18:AE:3F:06:67:EC:17:C9:77:F2:66:B2:BE:74:C8:1A:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/229F9618AE3F0667EC17C977F266B2BE74C81AB7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229F9618AE3F0667EC17C977F266B2BE74C81AB7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/34352e3131362e3135382e302f32342d3234203d3e20313333383233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.116.158.0/24 Signature Algorithm: sha256WithRSAEncryption 87:c7:f8:33:2a:d8:94:d3:0b:96:f8:c5:7c:22:a4:0f:84:4e: cb:2f:e8:52:44:8a:58:7e:58:93:d2:55:b9:29:f0:bf:9b:7a: 90:6c:07:15:65:71:e9:9e:a8:5e:77:5b:c9:e8:7b:fc:b1:61: e4:08:60:b9:ab:94:33:32:a2:ad:ba:a6:5a:b6:47:d2:3d:2f: fa:5b:cd:5b:48:72:65:6b:a2:f2:93:ae:a7:ef:9c:60:e2:e5: dd:fc:17:9e:21:65:e6:5b:48:0e:b4:68:1e:00:d0:65:5d:3a: 9c:09:9e:1e:bc:c2:b1:22:8c:80:3a:9c:e5:11:e0:d6:16:6e: 56:56:4f:1d:04:57:98:90:e1:d5:68:04:78:b8:e6:0d:07:00: 83:50:89:be:36:78:cd:eb:25:34:cf:3d:66:bc:c6:c1:2f:f0: 2b:c3:7b:3a:67:7a:fa:2a:0e:eb:6a:09:16:04:df:3e:62:f3: ad:c6:3b:5f:2e:55:d8:15:7a:0a:bd:8c:e6:b4:3f:8a:86:25: b3:d7:00:9d:e7:7a:37:c7:1d:04:8b:3e:a4:53:e6:8f:c1:f9: a5:08:bb:ed:d1:27:16:36:96:cb:73:c8:57:bf:a6:cb:2a:74: 6f:a5:bd:d3:db:29:40:bd:a1:24:ba:17:9d:67:fb:25:93:8d: 88:aa:78:b4 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUEnI1weM6k4+Y9FoyKuCHoojSTEQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjI5Rjk2MThBRTNGMDY2N0VDMTdDOTc3RjI2NkIyQkU3 NEM4MUFCNzAeFw0yNTAzMDcwNzEzMjBaFw0yNjAzMDYwNzE4MjBaMDMxMTAvBgNV BAMTKDlGQ0Y2RjA3MjMxMjQxRDA2MTg2M0MwM0ZDMjNEOEI0NDUxQUZERTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0dD/ijbTis9sRy+5fevtsyJkU JiWxO/FAv65tFrt0iOfi3kIOpSAOi69MjMq2pM/CoWlfHv6ohG4LhFhAXkxj1Zqs uRkTstlgKrIvskGMVEvIIE8Oukln3tr7w9H1YgdhTJ/0ce1FlOGnFvoCsniMRDSl GcRAOr9+j83xZ/t/anJtgsBIpP17cahjHU5aGyyJJgxKskjBaBhDgdPjcdv5KFQj CGZPV675jpB/m2b5m6IExvnsirvYmNuGDw5obEFLyGWb5zKO1Ku5fKzdJtXSsTqH PxKJZyidWwC8ndbHUr8PXLDRRrrAzrYNh03ZVu7SImHnaX7zi9FmgWD7bJ2hAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUn89vByMSQdBhhjwD/CPYtEUa/eQwHwYDVR0j BBgwFoAUIp+WGK4/BmfsF8l38mayvnTIGrcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NDc5MWIxZi02ZGE5LTQwMGQtOGIxNC05OTJhYWU2Mzc0NmMvMC8yMjlGOTYxOEFF M0YwNjY3RUMxN0M5NzdGMjY2QjJCRTc0QzgxQUI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjI5Rjk2MThBRTNGMDY2N0VDMTdDOTc3RjI2NkIyQkU3NEM4 MUFCNy5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzQ0NzkxYjFmLTZkYTktNDAwZC04 YjE0LTk5MmFhZTYzNzQ2Yy8wLzM0MzUyZTMxMzEzNjJlMzEzNTM4MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzMzMzgzMjMzLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALXSeMA0GCSqG SIb3DQEBCwUAA4IBAQCHx/gzKtiU0wuW+MV8IqQPhE7LL+hSRIpYfliT0lW5KfC/ m3qQbAcVZXHpnqhed1vJ6Hv8sWHkCGC5q5QzMqKtuqZatkfSPS/6W81bSHJla6Ly k66n75xg4uXd/BeeIWXmW0gOtGgeANBlXTqcCZ4evMKxIoyAOpzlEeDWFm5WVk8d BFeYkOHVaAR4uOYNBwCDUIm+NnjN6yU0zz1mvMbBL/Arw3s6Z3r6Kg7ragkWBN8+ YvOtxjtfLlXYFXoKvYzmtD+KhiWz1wCd53o3xx0Eiz6kU+aPwfmlCLvt0ScWNpbL c8hXv6bLKnRvpb3T2ylAvaEkuhedZ/slk42Iqni0 -----END CERTIFICATE-----Generated at Tue Oct 28 06:22:31 2025 by rpki-client