$ rpki-client -vvf repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/34332e3234372e33352e302f32342d3234203d3e203435333132.roa File: 34332e3234372e33352e302f32342d3234203d3e203435333132.roa (raw, json) Hash identifier: 8EIcu8wBYQedYbKzrXuxjlLdKTdz7qNb/Awe3+Q5xAo= Subject key identifier: EA:73:51:45:A0:80:C6:3C:CC:52:66:10:86:24:7F:01:05:F3:8F:BD Certificate issuer: /CN=154EE03198467B96315FDB527FB3BBCCA0BFC441 Certificate serial: 325A8BEACA3089B2B8410157BF84E32659215909 Authority key identifier: 15:4E:E0:31:98:46:7B:96:31:5F:DB:52:7F:B3:BB:CC:A0:BF:C4:41 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154EE03198467B96315FDB527FB3BBCCA0BFC441.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/34332e3234372e33352e302f32342d3234203d3e203435333132.roa Signing time: Mon 02 Jun 2025 02:03:14 +0000 ROA not before: Mon 02 Jun 2025 01:58:14 +0000 ROA not after: Mon 01 Jun 2026 02:03:14 +0000 asID: 45312 IP address blocks: 43.247.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/154EE03198467B96315FDB527FB3BBCCA0BFC441.crl rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/154EE03198467B96315FDB527FB3BBCCA0BFC441.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154EE03198467B96315FDB527FB3BBCCA0BFC441.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 12:49:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:5a:8b:ea:ca:30:89:b2:b8:41:01:57:bf:84:e3:26:59:21:59:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=154EE03198467B96315FDB527FB3BBCCA0BFC441 Validity Not Before: Jun 2 01:58:14 2025 GMT Not After : Jun 1 02:03:14 2026 GMT Subject: CN=EA735145A080C63CCC52661086247F0105F38FBD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:18:1a:17:e7:5d:a8:37:a1:c8:4f:fe:90:a1: 27:3d:1a:39:0a:dd:79:be:ff:a8:66:04:47:e2:c3: 0b:d8:1f:e4:d4:fb:9a:2b:b4:14:13:99:a0:42:bb: 30:c1:d2:3c:95:38:17:d9:5c:4b:ae:dc:ff:99:4d: 33:2f:7c:b9:4f:cc:83:3c:e6:a7:d2:61:ea:8c:9a: 2a:fb:ac:a5:5f:91:6a:70:3e:97:40:2e:6b:9d:5c: d3:4b:17:e7:fd:54:1d:15:11:23:d8:d8:3e:db:21: 32:e1:5b:ae:f3:ac:41:6f:b4:4f:8d:e9:e5:a4:99: 62:b2:6d:61:55:8f:17:8c:df:04:fc:04:fa:46:1a: 68:24:68:83:cf:71:a0:ab:ea:0e:27:e9:b8:11:74: 32:a7:01:51:e3:14:5a:a8:17:d9:ae:06:da:83:79: 4f:64:a6:c5:f3:73:a9:dc:17:d0:f9:66:6e:f8:3e: 8f:77:22:03:a3:f4:a1:71:87:bc:9c:00:ff:37:dc: 81:f7:30:38:33:9e:fb:e3:b9:cc:3e:7c:6f:09:77: 47:5b:34:34:8a:40:78:95:f8:51:9a:ed:bc:45:2c: 67:21:9c:d1:50:58:50:3d:59:c9:5a:a3:67:5e:cb: 4b:a2:95:1f:4c:06:a9:96:3a:46:d1:03:9b:71:82: b0:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:73:51:45:A0:80:C6:3C:CC:52:66:10:86:24:7F:01:05:F3:8F:BD X509v3 Authority Key Identifier: keyid:15:4E:E0:31:98:46:7B:96:31:5F:DB:52:7F:B3:BB:CC:A0:BF:C4:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/154EE03198467B96315FDB527FB3BBCCA0BFC441.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154EE03198467B96315FDB527FB3BBCCA0BFC441.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/34332e3234372e33352e302f32342d3234203d3e203435333132.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.247.35.0/24 Signature Algorithm: sha256WithRSAEncryption a0:96:47:f3:d1:56:b7:2f:96:7b:d0:53:39:aa:65:72:17:99: 75:ff:e3:20:4b:3c:c7:db:3e:35:c2:5b:55:ec:19:4c:56:7c: 2a:c7:8c:00:f3:f7:06:dc:04:b5:0e:43:4c:a6:4f:28:09:e5: 23:3c:ea:cc:b0:e5:79:fd:b9:bf:c3:70:84:b8:43:86:e6:6f: d9:27:3b:c7:cb:df:a3:8d:c6:fe:84:4d:36:89:d2:27:f8:a8: 90:3e:03:0e:c2:d2:49:e1:6a:05:f1:0a:b7:29:7b:cb:5d:0f: 3a:52:8b:bf:13:74:f8:14:a0:ac:1f:d3:43:7d:e5:0f:25:14: 51:6b:f9:3b:c5:e3:60:07:55:7d:d6:d2:81:c8:50:d1:b9:60: 2b:2c:75:c9:3f:07:77:21:e5:2e:8a:75:d0:19:67:9d:37:e7: 10:2d:fd:c2:d5:c6:57:9c:6f:93:d1:a9:ef:f9:6d:9c:6e:a3: 1b:6b:ed:25:e1:b9:bf:f7:d1:ea:7e:10:f3:9a:af:c8:06:28: 18:d8:f7:d5:55:1e:51:8b:50:59:8f:92:ce:88:9a:7a:a4:b4: 44:f1:25:a1:59:27:78:5c:12:02:56:db:a7:d2:29:87:bd:54: 3b:dc:a7:10:d7:60:00:6b:0f:b5:34:41:13:13:81:d2:8a:64: ec:c1:18:95 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUMlqL6sowibK4QQFXv4TjJlkhWQkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTU0RUUwMzE5ODQ2N0I5NjMxNUZEQjUyN0ZCM0JCQ0NB MEJGQzQ0MTAeFw0yNTA2MDIwMTU4MTRaFw0yNjA2MDEwMjAzMTRaMDMxMTAvBgNV BAMTKEVBNzM1MTQ1QTA4MEM2M0NDQzUyNjYxMDg2MjQ3RjAxMDVGMzhGQkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5GBoX512oN6HIT/6QoSc9GjkK 3Xm+/6hmBEfiwwvYH+TU+5ortBQTmaBCuzDB0jyVOBfZXEuu3P+ZTTMvfLlPzIM8 5qfSYeqMmir7rKVfkWpwPpdALmudXNNLF+f9VB0VESPY2D7bITLhW67zrEFvtE+N 6eWkmWKybWFVjxeM3wT8BPpGGmgkaIPPcaCr6g4n6bgRdDKnAVHjFFqoF9muBtqD eU9kpsXzc6ncF9D5Zm74Po93IgOj9KFxh7ycAP833IH3MDgznvvjucw+fG8Jd0db NDSKQHiV+FGa7bxFLGchnNFQWFA9Wclao2dey0uilR9MBqmWOkbRA5txgrBvAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQU6nNRRaCAxjzMUmYQhiR/AQXzj70wHwYDVR0j BBgwFoAUFU7gMZhGe5YxX9tSf7O7zKC/xEEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NjIxZjc1My1hODhlLTRlZGYtYTMwNi1iZDkzZDVhMzhmZWEvMC8xNTRFRTAzMTk4 NDY3Qjk2MzE1RkRCNTI3RkIzQkJDQ0EwQkZDNDQxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTU0RUUwMzE5ODQ2N0I5NjMxNUZEQjUyN0ZCM0JCQ0NBMEJG QzQ0MS5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2M2MjFmNzUzLWE4OGUtNGVkZi1h MzA2LWJkOTNkNWEzOGZlYS8wLzM0MzMyZTMyMzQzNzJlMzMzNTJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDM0MzUzMzMxMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAr9yMwDQYJKoZIhvcN AQELBQADggEBAKCWR/PRVrcvlnvQUzmqZXIXmXX/4yBLPMfbPjXCW1XsGUxWfCrH jADz9wbcBLUOQ0ymTygJ5SM86syw5Xn9ub/DcIS4Q4bmb9knO8fL36ONxv6ETTaJ 0if4qJA+Aw7C0knhagXxCrcpe8tdDzpSi78TdPgUoKwf00N95Q8lFFFr+TvF42AH VX3W0oHIUNG5YCssdck/B3ch5S6KddAZZ5035xAt/cLVxlecb5PRqe/5bZxuoxtr 7SXhub/30ep+EPOar8gGKBjY99VVHlGLUFmPks6ImnqktETxJaFZJ3hcEgJW26fS KYe9VDvcpxDXYABrD7U0QRMTgdKKZOzBGJU= -----END CERTIFICATE-----Generated at Thu Jun 5 18:12:05 2025 by rpki-client