$ rpki-client -vvf repo-rpki.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/34352e36342e39362e302f32342d3234203d3e203538343737.roa File: 34352e36342e39362e302f32342d3234203d3e203538343737.roa (raw, json) Hash identifier: 0DSPPC3eIjICQ1QgbLgmjGB64GhEc/FiJxgxZMMi2rw= Subject key identifier: 72:47:6C:5F:63:17:28:34:D4:2D:65:DF:7B:DC:B9:CD:E0:BF:CD:99 Certificate issuer: /CN=10CA1776EFA8AF35292E76AE2B09C23427C191A6 Certificate serial: 197F8890E9D7B5CB7DF1BDE52B619F5846678193 Authority key identifier: 10:CA:17:76:EF:A8:AF:35:29:2E:76:AE:2B:09:C2:34:27:C1:91:A6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10CA1776EFA8AF35292E76AE2B09C23427C191A6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/34352e36342e39362e302f32342d3234203d3e203538343737.roa Signing time: Mon 02 Jun 2025 02:04:30 +0000 ROA not before: Mon 02 Jun 2025 01:59:30 +0000 ROA not after: Mon 01 Jun 2026 02:04:30 +0000 asID: 58477 IP address blocks: 45.64.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/10CA1776EFA8AF35292E76AE2B09C23427C191A6.crl rsync://repo-rpki.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/10CA1776EFA8AF35292E76AE2B09C23427C191A6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10CA1776EFA8AF35292E76AE2B09C23427C191A6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 20:25:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:7f:88:90:e9:d7:b5:cb:7d:f1:bd:e5:2b:61:9f:58:46:67:81:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10CA1776EFA8AF35292E76AE2B09C23427C191A6 Validity Not Before: Jun 2 01:59:30 2025 GMT Not After : Jun 1 02:04:30 2026 GMT Subject: CN=72476C5F63172834D42D65DF7BDCB9CDE0BFCD99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:41:aa:a8:a8:ce:c5:d1:dd:11:a2:49:12:2f: dc:e1:a3:e9:8f:c9:f3:6f:f0:9b:71:5b:eb:96:7e: eb:3b:cd:8e:14:48:95:07:1a:a4:09:fc:19:70:dd: 4d:ba:85:53:5c:d8:d7:63:6e:13:04:ec:d7:88:be: 60:9e:8d:1d:6f:7e:77:1a:6f:7b:98:5c:9c:8f:a7: b4:5d:b7:41:7c:a6:63:c8:f1:32:a9:10:30:16:7e: cf:d6:1a:e2:24:ee:69:d0:7e:7f:25:bc:ce:84:9e: 1a:f3:b9:15:3f:cd:c6:6d:f2:02:34:d1:ac:82:51: 36:c8:0c:fd:92:e8:40:5b:b6:aa:e1:a7:da:ee:55: 9c:ae:f4:bb:23:2e:cb:9f:57:0c:25:d4:44:5b:89: 3b:10:21:a9:9b:f6:e7:26:22:88:60:8e:e7:63:d3: 35:11:bd:69:dd:25:8f:60:6b:b0:a1:9d:cb:bc:6d: 18:15:5a:c8:41:b8:db:5b:c8:d5:79:55:ed:82:44: ea:8a:09:7d:fe:24:04:91:ed:d0:a5:94:5e:c3:a1: 36:3b:c5:17:ae:82:e2:da:cb:10:8b:f9:c3:42:32: 48:c4:fa:6e:77:9c:4c:ec:34:f6:cd:79:56:74:08: 74:0e:b2:c1:00:85:73:5d:64:4f:c5:9e:ef:1f:86: aa:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:47:6C:5F:63:17:28:34:D4:2D:65:DF:7B:DC:B9:CD:E0:BF:CD:99 X509v3 Authority Key Identifier: keyid:10:CA:17:76:EF:A8:AF:35:29:2E:76:AE:2B:09:C2:34:27:C1:91:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/10CA1776EFA8AF35292E76AE2B09C23427C191A6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10CA1776EFA8AF35292E76AE2B09C23427C191A6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/34352e36342e39362e302f32342d3234203d3e203538343737.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.64.96.0/24 Signature Algorithm: sha256WithRSAEncryption aa:eb:db:9c:7a:c5:6e:bd:34:8e:59:78:b0:47:0f:c4:fd:c2: bc:34:14:d0:7b:e8:5d:33:8e:1d:4f:60:0a:a9:ea:c1:81:90: 78:cb:d1:ac:18:7f:03:a9:b8:0c:10:46:df:a7:61:95:bd:1c: a8:cb:d2:f6:58:5d:98:92:1e:b7:b8:2c:6f:bf:b6:d9:75:00: 8a:7e:dc:0b:5d:bd:ec:53:1d:d4:31:3e:c2:09:51:4c:91:8e: e9:3a:46:77:f4:30:d5:0f:22:ce:0c:88:42:fa:c6:a6:2c:eb: 34:6c:a3:46:52:ad:26:33:ec:02:72:3f:72:19:6a:0a:0c:1e: 4f:62:eb:8a:b2:5c:ea:fc:6a:78:15:f6:71:86:b0:7a:01:ff: 54:f9:23:7c:9a:d3:03:e1:6d:3f:bc:2a:69:ee:3f:9a:2d:4a: 40:5e:ab:8c:1a:ff:0f:ab:a4:3e:f2:69:2a:0f:3c:94:73:cf: 2a:01:f7:0c:ad:58:18:38:ad:5b:b3:48:ae:41:e9:ff:0c:33: 9e:33:9e:94:26:f8:a2:e8:59:7f:ce:b1:27:c3:7f:e7:4e:2d: 7c:1a:28:00:b0:01:cd:5d:3a:9c:2d:9a:35:de:66:f6:11:08: d1:3a:9f:f0:d9:ab:75:49:0d:be:0a:20:86:e7:14:56:0e:29: 2b:57:ac:c7 -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgIUGX+IkOnXtct98b3lK2GfWEZngZMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTBDQTE3NzZFRkE4QUYzNTI5MkU3NkFFMkIwOUMyMzQy N0MxOTFBNjAeFw0yNTA2MDIwMTU5MzBaFw0yNjA2MDEwMjA0MzBaMDMxMTAvBgNV BAMTKDcyNDc2QzVGNjMxNzI4MzRENDJENjVERjdCRENCOUNERTBCRkNEOTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtQaqoqM7F0d0RokkSL9zho+mP yfNv8JtxW+uWfus7zY4USJUHGqQJ/Blw3U26hVNc2NdjbhME7NeIvmCejR1vfnca b3uYXJyPp7Rdt0F8pmPI8TKpEDAWfs/WGuIk7mnQfn8lvM6EnhrzuRU/zcZt8gI0 0ayCUTbIDP2S6EBbtqrhp9ruVZyu9LsjLsufVwwl1ERbiTsQIamb9ucmIohgjudj 0zURvWndJY9ga7Chncu8bRgVWshBuNtbyNV5Ve2CROqKCX3+JASR7dCllF7DoTY7 xReuguLayxCL+cNCMkjE+m53nEzsNPbNeVZ0CHQOssEAhXNdZE/Fnu8fhqrTAgMB AAGjggItMIICKTAdBgNVHQ4EFgQUckdsX2MXKDTULWXfe9y5zeC/zZkwHwYDVR0j BBgwFoAUEMoXdu+orzUpLnauKwnCNCfBkaYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YmM2YWEwMy0xYjRkLTQzOGUtYTlmMy1lZmVhYWU2YjA5MjEvMC8xMENBMTc3NkVG QThBRjM1MjkyRTc2QUUyQjA5QzIzNDI3QzE5MUE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTBDQTE3NzZFRkE4QUYzNTI5MkU3NkFFMkIwOUMyMzQyN0Mx OTFBNi5jZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGJjNmFhMDMtMWI0ZC00MzhlLWE5 ZjMtZWZlYWFlNmIwOTIxLzAvMzQzNTJlMzYzNDJlMzkzNjJlMzAyZjMyMzQyZDMy MzQyMDNkM2UyMDM1MzgzNDM3Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAtQGAwDQYJKoZIhvcNAQEL BQADggEBAKrr25x6xW69NI5ZeLBHD8T9wrw0FNB76F0zjh1PYAqp6sGBkHjL0awY fwOpuAwQRt+nYZW9HKjL0vZYXZiSHre4LG+/ttl1AIp+3AtdvexTHdQxPsIJUUyR juk6Rnf0MNUPIs4MiEL6xqYs6zRso0ZSrSYz7AJyP3IZagoMHk9i64qyXOr8angV 9nGGsHoB/1T5I3ya0wPhbT+8KmnuP5otSkBeq4wa/w+rpD7yaSoPPJRzzyoB9wyt WBg4rVuzSK5B6f8MM54znpQm+KLoWX/OsSfDf+dOLXwaKACwAc1dOpwtmjXeZvYR CNE6n/DZq3VJDb4KIIbnFFYOKStXrMc= -----END CERTIFICATE-----Generated at Sat Jun 7 14:10:44 2025 by rpki-client