$ rpki-client -vvf repo-rpki.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/34332e3235342e3132372e302f32342d3234203d3e203538343832.roa File: 34332e3235342e3132372e302f32342d3234203d3e203538343832.roa (raw, json) Hash identifier: QBHhnk1VzpNswo5xP4biYnK0qXDI4z1xHEPaP9wifbk= Subject key identifier: 8C:F6:E7:60:5B:9D:50:25:45:4D:2F:88:22:15:40:8C:EA:09:81:74 Certificate issuer: /CN=CDC8674326238BE355329012E1CFDDB99EC5B6BA Certificate serial: 22A054D4D91D545DF9F4B530B3F5A85FE6C93810 Authority key identifier: CD:C8:67:43:26:23:8B:E3:55:32:90:12:E1:CF:DD:B9:9E:C5:B6:BA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CDC8674326238BE355329012E1CFDDB99EC5B6BA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/34332e3235342e3132372e302f32342d3234203d3e203538343832.roa Signing time: Wed 03 Sep 2025 12:09:57 +0000 ROA not before: Wed 03 Sep 2025 12:04:57 +0000 ROA not after: Wed 02 Sep 2026 12:09:57 +0000 asID: 58482 IP address blocks: 43.254.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/CDC8674326238BE355329012E1CFDDB99EC5B6BA.crl rsync://repo-rpki.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/CDC8674326238BE355329012E1CFDDB99EC5B6BA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CDC8674326238BE355329012E1CFDDB99EC5B6BA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Sep 2025 15:02:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:a0:54:d4:d9:1d:54:5d:f9:f4:b5:30:b3:f5:a8:5f:e6:c9:38:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDC8674326238BE355329012E1CFDDB99EC5B6BA Validity Not Before: Sep 3 12:04:57 2025 GMT Not After : Sep 2 12:09:57 2026 GMT Subject: CN=8CF6E7605B9D5025454D2F882215408CEA098174 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:dc:3e:e3:f7:a2:5d:64:b0:c0:f0:7e:8b:e0: bb:19:8e:f4:f7:bd:4e:64:8d:da:b8:98:8f:a7:82: 50:c3:56:35:8b:30:67:62:d1:14:3a:9d:27:f9:28: 83:64:46:ba:2c:e4:92:b3:ad:e3:49:46:56:f6:41: de:15:a1:d3:26:e8:be:e9:42:b4:5f:2e:ba:0a:c9: 7f:21:b8:46:e7:f0:06:24:1b:f6:1a:34:cc:37:df: f5:8e:07:65:4f:39:bb:ff:d7:ce:aa:35:74:63:ab: ef:12:60:31:db:27:fc:3f:f6:87:68:d2:3e:d5:81: 5b:c7:63:9a:4e:02:ee:29:be:53:a3:78:c3:0e:ab: ef:ca:46:9e:56:fc:bb:86:e7:18:07:39:10:4c:1e: a2:82:49:3f:3a:b2:ac:70:4d:f8:30:08:df:f3:ac: 30:1d:d9:9c:ac:e9:78:cd:b0:cf:40:91:e1:06:8d: 8a:bf:5e:cd:eb:cd:4b:6d:66:c0:80:89:9b:24:f4: 9a:af:99:0f:ee:36:1b:9e:25:8a:b2:10:3b:51:43: 9d:a2:22:f5:af:f7:69:06:10:bd:8c:79:45:5b:75: 8e:ef:a6:b7:fb:6e:8c:fa:5b:a3:f2:9f:9c:8e:e1: 36:11:0b:42:7e:55:34:fb:8d:78:57:8e:b8:5d:8c: 6e:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:F6:E7:60:5B:9D:50:25:45:4D:2F:88:22:15:40:8C:EA:09:81:74 X509v3 Authority Key Identifier: keyid:CD:C8:67:43:26:23:8B:E3:55:32:90:12:E1:CF:DD:B9:9E:C5:B6:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/CDC8674326238BE355329012E1CFDDB99EC5B6BA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CDC8674326238BE355329012E1CFDDB99EC5B6BA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/34332e3235342e3132372e302f32342d3234203d3e203538343832.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.254.127.0/24 Signature Algorithm: sha256WithRSAEncryption b6:53:c9:4f:9f:84:45:23:e8:7e:d0:d0:b1:b5:bc:43:93:86: 2f:b4:93:23:bd:e3:d3:49:59:0d:d6:16:0b:4b:da:d2:a0:9e: 39:85:83:f9:97:75:4c:81:d7:97:53:7d:77:41:9d:55:0d:23: c0:10:9a:d1:a5:4a:da:b1:07:5b:8b:df:ca:43:74:27:15:29: 6f:83:a2:f8:7f:fc:05:cd:67:4c:55:d1:c6:41:64:3a:7d:5c: 6d:1b:1c:fe:8a:72:7e:1b:86:8d:21:79:05:0c:4c:26:f8:a5: fc:36:67:c1:a0:a9:db:6b:2a:64:52:d9:7b:a6:77:fb:74:b0: 14:0f:f7:67:df:57:31:06:b2:03:27:cd:bc:06:cb:d2:31:ec: 2a:59:c0:4a:bc:bb:29:6f:bc:cb:a6:9b:2f:22:8b:3e:64:54: e8:29:58:e5:49:df:17:ae:62:07:7a:82:2c:ed:36:9f:4a:4b: 01:47:c3:b4:45:63:f2:ba:6e:12:26:a5:ce:22:0d:86:7e:3c: d2:f0:e7:9c:97:b0:b9:82:47:3c:78:f0:28:86:9d:a0:3a:ab: b1:df:a1:03:8a:24:aa:f8:a2:92:ef:ac:b9:29:c3:ba:96:96: ab:e1:05:1c:5d:3f:7c:35:a4:c2:ef:95:66:77:34:f4:a8:4c: 37:51:60:ce -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUIqBU1NkdVF359LUws/WoX+bJOBAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RDODY3NDMyNjIzOEJFMzU1MzI5MDEyRTFDRkREQjk5 RUM1QjZCQTAeFw0yNTA5MDMxMjA0NTdaFw0yNjA5MDIxMjA5NTdaMDMxMTAvBgNV BAMTKDhDRjZFNzYwNUI5RDUwMjU0NTREMkY4ODIyMTU0MDhDRUEwOTgxNzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDS3D7j96JdZLDA8H6L4LsZjvT3 vU5kjdq4mI+nglDDVjWLMGdi0RQ6nSf5KINkRros5JKzreNJRlb2Qd4VodMm6L7p QrRfLroKyX8huEbn8AYkG/YaNMw33/WOB2VPObv/186qNXRjq+8SYDHbJ/w/9odo 0j7VgVvHY5pOAu4pvlOjeMMOq+/KRp5W/LuG5xgHORBMHqKCST86sqxwTfgwCN/z rDAd2Zys6XjNsM9AkeEGjYq/Xs3rzUttZsCAiZsk9JqvmQ/uNhueJYqyEDtRQ52i IvWv92kGEL2MeUVbdY7vprf7boz6W6Pyn5yO4TYRC0J+VTT7jXhXjrhdjG5BAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUjPbnYFudUCVFTS+IIhVAjOoJgXQwHwYDVR0j BBgwFoAUzchnQyYji+NVMpAS4c/duZ7FtrowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 OWUyZjNiZC1kNGVjLTQyY2ItYWFjZi1hZGMyODI1YzE4NGIvMC9DREM4Njc0MzI2 MjM4QkUzNTUzMjkwMTJFMUNGRERCOTlFQzVCNkJBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0RDODY3NDMyNjIzOEJFMzU1MzI5MDEyRTFDRkREQjk5RUM1 QjZCQS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzY5ZTJmM2JkLWQ0ZWMtNDJjYi1h YWNmLWFkYzI4MjVjMTg0Yi8wLzM0MzMyZTMyMzUzNDJlMzEzMjM3MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzUzODM0MzgzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEACv+fzANBgkqhkiG 9w0BAQsFAAOCAQEAtlPJT5+ERSPoftDQsbW8Q5OGL7STI73j00lZDdYWC0va0qCe OYWD+Zd1TIHXl1N9d0GdVQ0jwBCa0aVK2rEHW4vfykN0JxUpb4Oi+H/8Bc1nTFXR xkFkOn1cbRsc/opyfhuGjSF5BQxMJvil/DZnwaCp22sqZFLZe6Z3+3SwFA/3Z99X MQayAyfNvAbL0jHsKlnASry7KW+8y6abLyKLPmRU6ClY5UnfF65iB3qCLO02n0pL AUfDtEVj8rpuEialziINhn480vDnnJewuYJHPHjwKIadoDqrsd+hA4okqviiku+s uSnDupaWq+EFHF0/fDWkwu+VZnc09KhMN1Fgzg== -----END CERTIFICATE-----Generated at Tue Sep 9 11:29:01 2025 by rpki-client