$ rpki-client -vvf repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/34332e3234302e3232382e302f32342d3234203d3e203538353532.roa File: 34332e3234302e3232382e302f32342d3234203d3e203538353532.roa (raw, json) Hash identifier: v4lBJWJm9F35VTT10Y8fu5ImIQm8XfKPq7gr1yu6TQU= Subject key identifier: D7:4A:90:DF:A5:2E:31:CB:A3:8D:23:DE:ED:C5:07:3F:88:B3:E4:FF Certificate issuer: /CN=AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6 Certificate serial: 1E0177D34B462C2AF46C3B12F7406C4280618B21 Authority key identifier: AF:4B:58:D4:B1:65:30:B9:F6:91:9D:BF:4F:53:DC:3A:E4:D5:FD:E6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/34332e3234302e3232382e302f32342d3234203d3e203538353532.roa Signing time: Mon 02 Jun 2025 01:03:08 +0000 ROA not before: Mon 02 Jun 2025 00:58:08 +0000 ROA not after: Mon 01 Jun 2026 01:03:08 +0000 asID: 58552 IP address blocks: 43.240.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.crl rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 07:29:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:01:77:d3:4b:46:2c:2a:f4:6c:3b:12:f7:40:6c:42:80:61:8b:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6 Validity Not Before: Jun 2 00:58:08 2025 GMT Not After : Jun 1 01:03:08 2026 GMT Subject: CN=D74A90DFA52E31CBA38D23DEEDC5073F88B3E4FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:5d:f7:da:aa:bb:c9:23:4c:23:39:4c:2b:f0: b2:07:29:e6:09:3b:bf:56:49:22:48:51:10:06:01: 50:1f:12:de:38:1e:6f:7d:41:81:d9:9c:06:cf:e3: 5d:62:67:4b:93:e6:95:07:56:94:c0:f4:6a:11:63: a8:37:de:5b:93:98:fe:c8:78:44:54:3b:53:f7:eb: 12:1d:a7:54:7d:a9:59:11:ec:9b:c6:20:5b:ea:bb: 22:aa:08:90:6c:05:31:8e:45:f0:58:77:4e:60:af: 10:d0:24:da:7c:f8:77:a7:5e:d6:24:c3:e5:ca:92: 96:57:9c:d0:38:90:cd:a9:d5:e6:e0:f9:2c:38:f0: ba:c4:12:9f:81:87:f0:fa:d5:10:6a:b8:3a:96:c4: 56:5d:3b:af:c1:77:52:79:e4:4a:2d:dd:34:f1:e3: 4b:10:00:f8:ef:5d:88:1a:5a:dc:0c:87:e6:45:7d: e0:3c:83:d4:4f:89:4a:6b:83:94:ca:82:8e:51:4e: ff:d0:0d:64:58:1e:05:dc:5f:e7:7b:83:4d:8d:44: 9e:9b:f8:2e:de:b6:1d:15:18:14:5c:6f:c3:b5:83: b4:a3:cc:6f:44:9f:37:ec:a2:e5:28:da:4b:af:70: 84:10:73:28:f2:8c:09:73:51:c8:26:ae:e2:17:3e: 58:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:4A:90:DF:A5:2E:31:CB:A3:8D:23:DE:ED:C5:07:3F:88:B3:E4:FF X509v3 Authority Key Identifier: keyid:AF:4B:58:D4:B1:65:30:B9:F6:91:9D:BF:4F:53:DC:3A:E4:D5:FD:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/34332e3234302e3232382e302f32342d3234203d3e203538353532.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.240.228.0/24 Signature Algorithm: sha256WithRSAEncryption 76:f7:48:19:e6:cd:b9:96:d3:c4:db:f1:08:b0:4b:7d:38:6b: 71:2d:97:c6:c6:3a:5c:d3:5b:bf:46:9f:40:b4:ca:44:cf:08: 8b:70:30:56:b5:17:c7:29:e9:b2:9d:f9:80:eb:42:14:0b:c9: ce:d0:ee:10:6f:4a:c3:79:c9:fc:fa:12:7b:56:60:78:ef:7a: 90:ed:57:b7:da:1e:73:3a:5f:5c:82:28:47:47:6e:e2:fd:e1: 81:bc:7c:c0:92:fb:fe:3f:86:87:0b:95:3a:0e:05:22:5f:2d: 4b:ce:4a:a0:14:ba:92:3b:ca:31:db:87:f5:15:07:53:59:97: 22:53:dc:3a:12:1d:67:6f:a5:36:67:df:25:ef:b7:cd:9a:2d: 5e:41:3c:6a:91:95:b9:01:35:0b:f3:60:f5:20:6a:8c:3f:2d: d3:1e:bb:54:ae:cb:82:ff:52:09:c4:2c:eb:14:a4:6b:91:34: 43:a5:fa:90:fa:aa:f0:06:9b:34:68:c7:57:22:8f:52:86:e7: ef:21:d6:77:88:4e:e5:6c:85:c5:b1:ff:63:4f:8b:94:8c:7d: 29:e9:ea:b6:0f:0b:5d:52:d9:32:3d:af:8f:8c:a7:41:69:a2: b1:81:40:24:5a:a5:25:a0:00:c2:f1:ac:25:b6:62:a4:05:23: ea:e6:1a:de -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUHgF300tGLCr0bDsS90BsQoBhiyEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY0QjU4RDRCMTY1MzBCOUY2OTE5REJGNEY1M0RDM0FF NEQ1RkRFNjAeFw0yNTA2MDIwMDU4MDhaFw0yNjA2MDEwMTAzMDhaMDMxMTAvBgNV BAMTKEQ3NEE5MERGQTUyRTMxQ0JBMzhEMjNERUVEQzUwNzNGODhCM0U0RkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8XffaqrvJI0wjOUwr8LIHKeYJ O79WSSJIURAGAVAfEt44Hm99QYHZnAbP411iZ0uT5pUHVpTA9GoRY6g33luTmP7I eERUO1P36xIdp1R9qVkR7JvGIFvquyKqCJBsBTGORfBYd05grxDQJNp8+HenXtYk w+XKkpZXnNA4kM2p1ebg+Sw48LrEEp+Bh/D61RBquDqWxFZdO6/Bd1J55Eot3TTx 40sQAPjvXYgaWtwMh+ZFfeA8g9RPiUprg5TKgo5RTv/QDWRYHgXcX+d7g02NRJ6b +C7eth0VGBRcb8O1g7SjzG9EnzfsouUo2kuvcIQQcyjyjAlzUcgmruIXPlifAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQU10qQ36UuMcujjSPe7cUHP4iz5P8wHwYDVR0j BBgwFoAUr0tY1LFlMLn2kZ2/T1PcOuTV/eYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZDIyN2RiZS00YTFjLTQwYjAtOTRhNi03OTNiZGJkYTM3NzcvMC9BRjRCNThENEIx NjUzMEI5RjY5MTlEQkY0RjUzREMzQUU0RDVGREU2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUY0QjU4RDRCMTY1MzBCOUY2OTE5REJGNEY1M0RDM0FFNEQ1 RkRFNi5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzVkMjI3ZGJlLTRhMWMtNDBiMC05 NGE2LTc5M2JkYmRhMzc3Ny8wLzM0MzMyZTMyMzQzMDJlMzIzMjM4MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzUzODM1MzUzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEACvw5DANBgkqhkiG 9w0BAQsFAAOCAQEAdvdIGebNuZbTxNvxCLBLfThrcS2XxsY6XNNbv0afQLTKRM8I i3AwVrUXxynpsp35gOtCFAvJztDuEG9Kw3nJ/PoSe1ZgeO96kO1Xt9oeczpfXIIo R0du4v3hgbx8wJL7/j+GhwuVOg4FIl8tS85KoBS6kjvKMduH9RUHU1mXIlPcOhId Z2+lNmffJe+3zZotXkE8apGVuQE1C/Ng9SBqjD8t0x67VK7Lgv9SCcQs6xSka5E0 Q6X6kPqq8AabNGjHVyKPUobn7yHWd4hO5WyFxbH/Y0+LlIx9Kenqtg8LXVLZMj2v j4ynQWmisYFAJFqlJaAAwvGsJbZipAUj6uYa3g== -----END CERTIFICATE-----Generated at Sun Jun 8 06:37:48 2025 by rpki-client