$ rpki-client -vvf repo-rpki.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/34332e3235342e3132362e302f32342d3234203d3e203538343832.roa File: 34332e3235342e3132362e302f32342d3234203d3e203538343832.roa (raw, json) Hash identifier: DbGnB1DqBC848hiKo1po0MqE4Gsa4J0OUdCykpEG2OQ= Subject key identifier: F6:22:74:9F:02:46:13:93:A8:B0:E8:10:30:F3:C4:B2:BE:9F:26:6B Certificate issuer: /CN=CDC8674326238BE355329012E1CFDDB99EC5B6BA Certificate serial: 616D3EF0FB0223CBE27414F694995E66A6D53F39 Authority key identifier: CD:C8:67:43:26:23:8B:E3:55:32:90:12:E1:CF:DD:B9:9E:C5:B6:BA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CDC8674326238BE355329012E1CFDDB99EC5B6BA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/34332e3235342e3132362e302f32342d3234203d3e203538343832.roa Signing time: Wed 03 Sep 2025 12:09:45 +0000 ROA not before: Wed 03 Sep 2025 12:04:45 +0000 ROA not after: Wed 02 Sep 2026 12:09:45 +0000 asID: 58482 IP address blocks: 43.254.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/CDC8674326238BE355329012E1CFDDB99EC5B6BA.crl rsync://repo-rpki.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/CDC8674326238BE355329012E1CFDDB99EC5B6BA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CDC8674326238BE355329012E1CFDDB99EC5B6BA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Sep 2025 15:02:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:6d:3e:f0:fb:02:23:cb:e2:74:14:f6:94:99:5e:66:a6:d5:3f:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDC8674326238BE355329012E1CFDDB99EC5B6BA Validity Not Before: Sep 3 12:04:45 2025 GMT Not After : Sep 2 12:09:45 2026 GMT Subject: CN=F622749F02461393A8B0E81030F3C4B2BE9F266B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:d3:53:d5:3f:01:70:d7:0a:aa:4e:84:eb:ad: 68:f7:1e:ba:bc:2b:1e:11:71:a5:8a:a4:eb:98:f4: b5:37:a2:0c:52:e1:bd:09:02:cc:ec:18:8f:94:bf: 22:3c:53:48:e4:99:87:c7:a8:2f:da:59:e1:a0:55: 42:c2:b7:6d:62:68:66:7d:0f:3d:a3:ae:46:1e:01: 7e:23:b9:44:fc:3e:02:83:76:2d:94:65:57:b3:aa: c2:22:17:e9:1c:f9:3c:c1:0f:11:1e:e5:43:ab:75: e6:f9:43:d8:4f:4e:ec:a0:c4:9a:9c:15:10:0c:3e: 8f:29:d0:0d:19:c2:87:fe:c8:76:dd:7e:be:26:c0: 46:6f:09:f1:5e:41:58:73:89:4b:cf:9e:7b:ad:ac: bf:29:01:5b:3d:17:5f:a1:31:43:ca:c7:17:f4:1b: b9:14:6e:50:1b:75:fb:fd:6a:f6:11:b4:b8:97:21: fe:a8:44:d1:80:a2:7a:d1:55:03:b2:1c:b6:8f:cf: 2e:24:3c:63:bd:0f:cf:88:34:98:a4:2d:91:b5:46: ce:43:f8:6a:8d:98:09:4d:0c:5f:bf:e8:5c:7b:fd: e6:10:bf:68:43:6e:f6:b4:99:db:36:31:73:2d:ce: 91:84:43:9c:d6:b9:5f:8d:19:8d:23:5c:c9:d3:06: 53:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:22:74:9F:02:46:13:93:A8:B0:E8:10:30:F3:C4:B2:BE:9F:26:6B X509v3 Authority Key Identifier: keyid:CD:C8:67:43:26:23:8B:E3:55:32:90:12:E1:CF:DD:B9:9E:C5:B6:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/CDC8674326238BE355329012E1CFDDB99EC5B6BA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CDC8674326238BE355329012E1CFDDB99EC5B6BA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/34332e3235342e3132362e302f32342d3234203d3e203538343832.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.254.126.0/24 Signature Algorithm: sha256WithRSAEncryption 6f:ea:5a:65:ab:e6:3b:8b:d8:16:4c:95:c6:87:9a:cb:f9:8a: 3f:ad:46:b0:98:66:02:49:eb:15:37:46:a6:a0:8e:e7:49:89: db:ba:3c:a0:bc:8a:88:cb:a0:31:b6:4a:f6:aa:8a:49:51:1b: 17:fd:4c:70:74:09:31:11:7a:a8:3e:9d:bf:2e:82:ac:59:d0: 0e:f4:ec:47:ef:ee:08:4b:f8:c3:c6:79:85:07:a0:f2:9d:da: b4:49:59:9a:5e:38:bb:c4:d9:0a:d3:16:98:fd:ad:b0:92:5e: 9c:cd:24:78:8f:29:06:f2:c7:76:ee:ac:ff:71:dc:1e:c1:72: a9:fa:bc:66:43:86:93:c2:5c:3d:54:78:13:c1:d9:6c:1f:5d: 26:1b:f6:92:a3:cb:99:31:8b:2e:5a:61:58:e6:94:dc:dc:dd: 4e:20:c5:21:6b:92:99:81:f8:3f:e5:d1:fb:d6:2b:ad:cd:18: 1f:48:a3:a8:13:c6:d1:23:5a:7a:ee:15:47:6a:23:6b:50:a4: a7:72:44:14:13:66:3a:05:c9:33:cd:1d:9b:fd:b0:31:9b:86: 82:50:86:d8:93:4f:0c:8b:87:12:98:46:73:7a:c4:97:56:66: 34:b0:56:0c:dc:ba:b5:1d:f7:02:15:90:0e:2e:4a:69:c8:fa: f0:87:a7:0d -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUYW0+8PsCI8vidBT2lJleZqbVPzkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RDODY3NDMyNjIzOEJFMzU1MzI5MDEyRTFDRkREQjk5 RUM1QjZCQTAeFw0yNTA5MDMxMjA0NDVaFw0yNjA5MDIxMjA5NDVaMDMxMTAvBgNV BAMTKEY2MjI3NDlGMDI0NjEzOTNBOEIwRTgxMDMwRjNDNEIyQkU5RjI2NkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDR01PVPwFw1wqqToTrrWj3Hrq8 Kx4RcaWKpOuY9LU3ogxS4b0JAszsGI+UvyI8U0jkmYfHqC/aWeGgVULCt21iaGZ9 Dz2jrkYeAX4juUT8PgKDdi2UZVezqsIiF+kc+TzBDxEe5UOrdeb5Q9hPTuygxJqc FRAMPo8p0A0Zwof+yHbdfr4mwEZvCfFeQVhziUvPnnutrL8pAVs9F1+hMUPKxxf0 G7kUblAbdfv9avYRtLiXIf6oRNGAonrRVQOyHLaPzy4kPGO9D8+INJikLZG1Rs5D +GqNmAlNDF+/6Fx7/eYQv2hDbva0mds2MXMtzpGEQ5zWuV+NGY0jXMnTBlNnAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQU9iJ0nwJGE5OosOgQMPPEsr6fJmswHwYDVR0j BBgwFoAUzchnQyYji+NVMpAS4c/duZ7FtrowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 OWUyZjNiZC1kNGVjLTQyY2ItYWFjZi1hZGMyODI1YzE4NGIvMC9DREM4Njc0MzI2 MjM4QkUzNTUzMjkwMTJFMUNGRERCOTlFQzVCNkJBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0RDODY3NDMyNjIzOEJFMzU1MzI5MDEyRTFDRkREQjk5RUM1 QjZCQS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzY5ZTJmM2JkLWQ0ZWMtNDJjYi1h YWNmLWFkYzI4MjVjMTg0Yi8wLzM0MzMyZTMyMzUzNDJlMzEzMjM2MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzUzODM0MzgzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEACv+fjANBgkqhkiG 9w0BAQsFAAOCAQEAb+paZavmO4vYFkyVxoeay/mKP61GsJhmAknrFTdGpqCO50mJ 27o8oLyKiMugMbZK9qqKSVEbF/1McHQJMRF6qD6dvy6CrFnQDvTsR+/uCEv4w8Z5 hQeg8p3atElZml44u8TZCtMWmP2tsJJenM0keI8pBvLHdu6s/3HcHsFyqfq8ZkOG k8JcPVR4E8HZbB9dJhv2kqPLmTGLLlphWOaU3NzdTiDFIWuSmYH4P+XR+9Yrrc0Y H0ijqBPG0SNaeu4VR2oja1Ckp3JEFBNmOgXJM80dm/2wMZuGglCG2JNPDIuHEphG c3rEl1ZmNLBWDNy6tR33AhWQDi5Kacj68IenDQ== -----END CERTIFICATE-----Generated at Tue Sep 9 11:29:00 2025 by rpki-client