$ rpki-client -vvf repo-rpki.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/34352e3132362e35392e302f32342d3234203d3e20313332363437.roa File: 34352e3132362e35392e302f32342d3234203d3e20313332363437.roa (raw, json) Hash identifier: ayAqEs1b1nTm1L0OUHAQCAticCSJ6e0ze/fgkYyk4lc= Subject key identifier: 77:E4:FE:F8:A4:E1:26:4D:00:36:AE:D9:37:A7:43:BB:57:D0:16:F6 Certificate issuer: /CN=EC9D9872A710FE713DC62241D587703BDF7DC1D6 Certificate serial: 4748883406FB44BE27CF4068FD69CE8A4A6F4309 Authority key identifier: EC:9D:98:72:A7:10:FE:71:3D:C6:22:41:D5:87:70:3B:DF:7D:C1:D6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC9D9872A710FE713DC62241D587703BDF7DC1D6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/34352e3132362e35392e302f32342d3234203d3e20313332363437.roa Signing time: Mon 22 Sep 2025 02:45:00 +0000 ROA not before: Mon 22 Sep 2025 02:40:00 +0000 ROA not after: Mon 21 Sep 2026 02:45:00 +0000 asID: 132647 IP address blocks: 45.126.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/EC9D9872A710FE713DC62241D587703BDF7DC1D6.crl rsync://repo-rpki.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/EC9D9872A710FE713DC62241D587703BDF7DC1D6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC9D9872A710FE713DC62241D587703BDF7DC1D6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 06:40:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:48:88:34:06:fb:44:be:27:cf:40:68:fd:69:ce:8a:4a:6f:43:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EC9D9872A710FE713DC62241D587703BDF7DC1D6 Validity Not Before: Sep 22 02:40:00 2025 GMT Not After : Sep 21 02:45:00 2026 GMT Subject: CN=77E4FEF8A4E1264D0036AED937A743BB57D016F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:5f:a7:00:47:83:05:07:e5:7c:43:dd:bb:f2: 44:b7:5e:49:58:07:49:f0:09:54:39:68:80:bf:05: 41:5b:98:a3:f3:63:27:b4:72:dc:d0:72:16:33:99: 4b:04:e5:d5:39:63:1a:e7:de:d8:8e:37:38:5a:07: 35:62:22:f2:95:32:da:5f:d8:45:3e:3b:1e:2a:d3: c1:86:32:46:21:8d:3a:b0:d6:88:a8:f2:2c:07:bb: 8e:7d:c9:09:d4:68:c2:46:8b:bf:57:ef:a2:43:dc: 9d:df:5e:7f:9f:49:d7:ba:aa:33:dd:77:9c:40:1c: ab:14:81:ef:e5:e8:73:0a:67:1c:93:34:b9:d6:a1: 93:1f:7d:47:55:33:fc:02:a3:a7:f1:be:18:a1:f1: 0f:2f:4a:64:08:31:55:9c:d7:e5:f5:5e:3f:eb:1f: 82:9a:3f:4b:0e:28:c7:6f:1c:30:bc:0f:a9:8c:ef: 9d:63:32:4a:b1:d6:25:ca:53:49:87:6e:d9:7b:f5: 0b:a8:9f:a6:e1:96:03:5a:16:c9:84:45:84:ee:65: f9:d5:0b:ae:d4:e4:68:a1:a2:06:f8:8d:98:11:50: c7:92:fa:c1:77:27:9d:3a:59:ea:ae:56:1f:9c:64: 4b:c6:49:2f:05:fc:f8:1d:44:95:69:01:8a:74:c8: 71:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:E4:FE:F8:A4:E1:26:4D:00:36:AE:D9:37:A7:43:BB:57:D0:16:F6 X509v3 Authority Key Identifier: keyid:EC:9D:98:72:A7:10:FE:71:3D:C6:22:41:D5:87:70:3B:DF:7D:C1:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/EC9D9872A710FE713DC62241D587703BDF7DC1D6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC9D9872A710FE713DC62241D587703BDF7DC1D6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/34352e3132362e35392e302f32342d3234203d3e20313332363437.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.126.59.0/24 Signature Algorithm: sha256WithRSAEncryption 1d:d3:10:1e:75:f1:b6:0d:13:7e:d4:ab:1a:15:e6:a9:d0:74: 49:56:85:22:16:27:b6:56:7b:d7:21:2e:b1:ae:0b:4f:f8:09: 53:e6:3f:87:06:0d:44:18:0c:83:59:01:d2:e8:84:86:db:35: 36:77:c9:d1:34:a8:51:85:76:19:ca:26:5a:1c:97:96:44:2e: f1:4f:b5:dd:27:70:99:e5:ee:23:f2:87:8e:42:51:57:04:88: d6:84:77:ab:1c:18:6f:4b:70:f5:53:6a:b9:be:be:cc:6f:09: 0b:a1:45:29:c2:2f:65:fb:c3:b4:1a:26:ea:c1:6b:74:23:d2: 75:b1:a5:79:7d:35:f9:e5:9d:f7:64:26:a5:94:46:56:4d:33: 7e:55:a1:a5:55:b9:e3:58:07:36:d3:29:c2:de:cb:a1:a5:2e: ba:bc:e9:ac:73:a2:f3:8b:6f:f6:dc:a0:6e:17:bc:fd:39:fa: d6:4a:be:b4:61:23:ef:b5:dc:91:fe:a4:23:bb:b9:6e:d3:d8: ac:dd:0a:7c:a4:46:78:30:ce:be:f4:ae:17:ec:20:42:69:65: f3:92:bb:07:f6:bf:47:47:93:b4:61:6c:19:fd:e3:08:98:f0: 1d:23:41:04:6b:6c:f6:07:67:f6:01:57:60:bb:ed:ee:51:e4: cd:b3:a2:63 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUR0iINAb7RL4nz0Bo/WnOikpvQwkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUM5RDk4NzJBNzEwRkU3MTNEQzYyMjQxRDU4NzcwM0JE RjdEQzFENjAeFw0yNTA5MjIwMjQwMDBaFw0yNjA5MjEwMjQ1MDBaMDMxMTAvBgNV BAMTKDc3RTRGRUY4QTRFMTI2NEQwMDM2QUVEOTM3QTc0M0JCNTdEMDE2RjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfX6cAR4MFB+V8Q9278kS3XklY B0nwCVQ5aIC/BUFbmKPzYye0ctzQchYzmUsE5dU5Yxrn3tiONzhaBzViIvKVMtpf 2EU+Ox4q08GGMkYhjTqw1oio8iwHu459yQnUaMJGi79X76JD3J3fXn+fSde6qjPd d5xAHKsUge/l6HMKZxyTNLnWoZMffUdVM/wCo6fxvhih8Q8vSmQIMVWc1+X1Xj/r H4KaP0sOKMdvHDC8D6mM751jMkqx1iXKU0mHbtl79Quon6bhlgNaFsmERYTuZfnV C67U5Gihogb4jZgRUMeS+sF3J506WequVh+cZEvGSS8F/PgdRJVpAYp0yHHxAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUd+T++KThJk0ANq7ZN6dDu1fQFvYwHwYDVR0j BBgwFoAU7J2YcqcQ/nE9xiJB1YdwO999wdYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NjYxN2Q4Yy1kMTU0LTQ2MWUtYmNjYS1iNjZkMjY3Y2ZmYzcvMC9FQzlEOTg3MkE3 MTBGRTcxM0RDNjIyNDFENTg3NzAzQkRGN0RDMUQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUM5RDk4NzJBNzEwRkU3MTNEQzYyMjQxRDU4NzcwM0JERjdE QzFENi5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E2NjE3ZDhjLWQxNTQtNDYxZS1i Y2NhLWI2NmQyNjdjZmZjNy8wLzM0MzUyZTMxMzIzNjJlMzUzOTJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMxMzMzMjM2MzQzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC1+OzANBgkqhkiG 9w0BAQsFAAOCAQEAHdMQHnXxtg0TftSrGhXmqdB0SVaFIhYntlZ71yEusa4LT/gJ U+Y/hwYNRBgMg1kB0uiEhts1NnfJ0TSoUYV2GcomWhyXlkQu8U+13SdwmeXuI/KH jkJRVwSI1oR3qxwYb0tw9VNqub6+zG8JC6FFKcIvZfvDtBom6sFrdCPSdbGleX01 +eWd92QmpZRGVk0zflWhpVW541gHNtMpwt7LoaUuurzprHOi84tv9tygbhe8/Tn6 1kq+tGEj77Xckf6kI7u5btPYrN0KfKRGeDDOvvSuF+wgQmll85K7B/a/R0eTtGFs Gf3jCJjwHSNBBGts9gdn9gFXYLvt7lHkzbOiYw== -----END CERTIFICATE-----Generated at Sun Oct 19 19:51:21 2025 by rpki-client