$ rpki-client -vvf repo-rpki.idnic.net/repo/c1f7c25b-410b-482a-9436-221ab079d368/0/34352e3132362e34332e302f32342d3234203d3e20313531353932.roa File: 34352e3132362e34332e302f32342d3234203d3e20313531353932.roa (raw, json) Hash identifier: ewEeaR7DMfnT3bww9hZJ32z3VJCiqclbtnfFQ/sT7f4= Subject key identifier: 7A:B8:9F:20:E1:EE:81:9D:67:15:5B:7E:75:2D:82:47:B0:9C:B2:7B Certificate issuer: /CN=121FC37C40B5B0AFD8F88B57216FD43E29D11E1C Certificate serial: 01FE47995D263E18172216A18030325FD7FA8C67 Authority key identifier: 12:1F:C3:7C:40:B5:B0:AF:D8:F8:8B:57:21:6F:D4:3E:29:D1:1E:1C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/121FC37C40B5B0AFD8F88B57216FD43E29D11E1C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c1f7c25b-410b-482a-9436-221ab079d368/0/34352e3132362e34332e302f32342d3234203d3e20313531353932.roa Signing time: Thu 04 Sep 2025 05:03:22 +0000 ROA not before: Thu 04 Sep 2025 04:58:22 +0000 ROA not after: Thu 03 Sep 2026 05:03:22 +0000 asID: 151592 IP address blocks: 45.126.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c1f7c25b-410b-482a-9436-221ab079d368/0/121FC37C40B5B0AFD8F88B57216FD43E29D11E1C.crl rsync://repo-rpki.idnic.net/repo/c1f7c25b-410b-482a-9436-221ab079d368/0/121FC37C40B5B0AFD8F88B57216FD43E29D11E1C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/121FC37C40B5B0AFD8F88B57216FD43E29D11E1C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 01:40:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:fe:47:99:5d:26:3e:18:17:22:16:a1:80:30:32:5f:d7:fa:8c:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=121FC37C40B5B0AFD8F88B57216FD43E29D11E1C Validity Not Before: Sep 4 04:58:22 2025 GMT Not After : Sep 3 05:03:22 2026 GMT Subject: CN=7AB89F20E1EE819D67155B7E752D8247B09CB27B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:0a:d1:1f:67:60:4b:fc:6e:0e:72:90:d7:21: 6e:01:e3:b1:ee:71:ea:7d:ff:a1:fc:ab:40:0f:83: 07:10:93:81:b7:ac:73:0f:2a:77:61:4d:64:09:87: 69:17:a1:55:0b:67:44:2c:9e:53:39:ed:d1:7b:03: 56:08:ed:b3:c0:a9:87:8e:8a:fc:2b:06:19:71:22: eb:b0:b8:41:63:42:d0:e0:7e:5d:9d:9a:70:11:d8: 95:3b:95:4d:e2:76:e7:62:07:2e:77:ae:64:da:af: 41:3c:0b:b6:ee:9b:84:c8:51:0e:bf:62:d4:81:cc: 3b:af:1f:40:86:72:f6:20:d0:c3:71:7b:1b:2b:1f: dd:dc:15:37:38:ec:28:e7:72:36:1f:3a:21:31:f9: 75:ec:a8:3b:7c:f0:69:b3:99:9f:1d:28:e2:1a:cf: 3d:52:78:8d:e8:4a:64:bc:94:d8:24:67:fd:3d:28: 3c:ba:16:9b:82:dc:15:4b:a2:27:f4:ef:d9:84:b1: c9:8e:29:27:7f:37:2a:e3:b7:e0:3f:a4:08:94:65: db:37:69:f8:e7:65:a0:3c:3d:ce:8a:76:ff:35:91: f0:3d:5e:15:9c:e9:ee:26:29:24:23:15:4d:97:a5: 67:f4:a6:d8:f1:11:6f:c1:b9:2b:3e:54:85:60:fc: c7:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:B8:9F:20:E1:EE:81:9D:67:15:5B:7E:75:2D:82:47:B0:9C:B2:7B X509v3 Authority Key Identifier: keyid:12:1F:C3:7C:40:B5:B0:AF:D8:F8:8B:57:21:6F:D4:3E:29:D1:1E:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c1f7c25b-410b-482a-9436-221ab079d368/0/121FC37C40B5B0AFD8F88B57216FD43E29D11E1C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/121FC37C40B5B0AFD8F88B57216FD43E29D11E1C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c1f7c25b-410b-482a-9436-221ab079d368/0/34352e3132362e34332e302f32342d3234203d3e20313531353932.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.126.43.0/24 Signature Algorithm: sha256WithRSAEncryption 69:98:d9:a7:66:ba:0a:55:df:fc:fe:55:bc:3b:fc:ca:54:13: 78:bf:de:a4:34:18:c3:57:1e:96:e7:29:2f:c0:4d:f1:50:e9: d8:de:c0:de:83:3a:06:06:08:b6:b1:dc:f8:ab:00:d0:2b:76: 44:7d:cc:8c:05:5f:9e:c3:0b:a9:da:25:31:89:76:e7:75:e8: 6f:ae:55:94:22:15:78:9d:83:f9:f3:60:52:20:fb:96:36:bb: aa:a6:a8:90:c5:9d:6a:d8:32:22:b9:e8:eb:39:20:c9:6f:02: 35:f9:b5:46:13:96:3c:54:72:e0:a8:0d:98:cc:7b:30:19:44: c2:6d:46:4e:3f:f5:57:3f:1f:a0:fd:21:bd:03:10:0b:80:93: c9:d6:db:bd:f3:d6:fb:94:dd:2b:cf:9f:39:c0:05:65:53:e2: e2:ca:08:1d:0b:bf:6d:87:e2:b2:b1:f7:1d:75:2b:86:10:cf: 0d:fd:b9:a3:24:e0:07:11:a6:2d:59:af:a4:7e:58:5d:de:b2: 58:8b:8b:9f:70:ab:09:86:09:99:03:ac:84:6f:2e:44:50:92: 93:b9:6b:f3:75:9e:52:7b:ce:e6:bf:eb:b8:1a:39:1b:a6:9e: 85:ed:00:25:8a:8b:c3:a6:cc:7b:06:10:08:a4:36:e2:3c:55: 7f:24:e1:49 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUAf5HmV0mPhgXIhahgDAyX9f6jGcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTIxRkMzN0M0MEI1QjBBRkQ4Rjg4QjU3MjE2RkQ0M0Uy OUQxMUUxQzAeFw0yNTA5MDQwNDU4MjJaFw0yNjA5MDMwNTAzMjJaMDMxMTAvBgNV BAMTKDdBQjg5RjIwRTFFRTgxOUQ2NzE1NUI3RTc1MkQ4MjQ3QjA5Q0IyN0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDICtEfZ2BL/G4OcpDXIW4B47Hu cep9/6H8q0APgwcQk4G3rHMPKndhTWQJh2kXoVULZ0QsnlM57dF7A1YI7bPAqYeO ivwrBhlxIuuwuEFjQtDgfl2dmnAR2JU7lU3idudiBy53rmTar0E8C7bum4TIUQ6/ YtSBzDuvH0CGcvYg0MNxexsrH93cFTc47CjncjYfOiEx+XXsqDt88GmzmZ8dKOIa zz1SeI3oSmS8lNgkZ/09KDy6FpuC3BVLoif079mEscmOKSd/Nyrjt+A/pAiUZds3 afjnZaA8Pc6Kdv81kfA9XhWc6e4mKSQjFU2XpWf0ptjxEW/BuSs+VIVg/MevAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUerifIOHugZ1nFVt+dS2CR7CcsnswHwYDVR0j BBgwFoAUEh/DfEC1sK/Y+ItXIW/UPinRHhwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MWY3YzI1Yi00MTBiLTQ4MmEtOTQzNi0yMjFhYjA3OWQzNjgvMC8xMjFGQzM3QzQw QjVCMEFGRDhGODhCNTcyMTZGRDQzRTI5RDExRTFDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTIxRkMzN0M0MEI1QjBBRkQ4Rjg4QjU3MjE2RkQ0M0UyOUQx MUUxQy5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2MxZjdjMjViLTQxMGItNDgyYS05 NDM2LTIyMWFiMDc5ZDM2OC8wLzM0MzUyZTMxMzIzNjJlMzQzMzJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMxMzUzMTM1MzkzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC1+KzANBgkqhkiG 9w0BAQsFAAOCAQEAaZjZp2a6ClXf/P5VvDv8ylQTeL/epDQYw1celucpL8BN8VDp 2N7A3oM6BgYItrHc+KsA0Ct2RH3MjAVfnsMLqdolMYl253Xob65VlCIVeJ2D+fNg UiD7lja7qqaokMWdatgyIrno6zkgyW8CNfm1RhOWPFRy4KgNmMx7MBlEwm1GTj/1 Vz8foP0hvQMQC4CTydbbvfPW+5TdK8+fOcAFZVPi4soIHQu/bYfisrH3HXUrhhDP Df25oyTgBxGmLVmvpH5YXd6yWIuLn3CrCYYJmQOshG8uRFCSk7lr83WeUnvO5r/r uBo5G6aehe0AJYqLw6bMewYQCKQ24jxVfyThSQ== -----END CERTIFICATE-----Generated at Thu Nov 6 03:31:25 2025 by rpki-client