$ rpki-client -vvf repo-rpki.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/34352e3132372e3133342e302f32342d3234203d3e203538343737.roa File: 34352e3132372e3133342e302f32342d3234203d3e203538343737.roa (raw, json) Hash identifier: mAHS4RhjFlyuuj4wSTCANOzW1BtppaUwbd4+LpgqV3A= Subject key identifier: 9B:46:99:5A:AB:2B:45:0F:1B:89:9F:D1:EE:33:D7:4C:1F:FB:8C:48 Certificate issuer: /CN=BD809D8A065DB595DC069383736A1A9C4A96B267 Certificate serial: 5079641026FCBA80F46F38542A693B25878125F4 Authority key identifier: BD:80:9D:8A:06:5D:B5:95:DC:06:93:83:73:6A:1A:9C:4A:96:B2:67 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD809D8A065DB595DC069383736A1A9C4A96B267.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/34352e3132372e3133342e302f32342d3234203d3e203538343737.roa Signing time: Mon 02 Jun 2025 02:05:07 +0000 ROA not before: Mon 02 Jun 2025 02:00:07 +0000 ROA not after: Mon 01 Jun 2026 02:05:07 +0000 asID: 58477 IP address blocks: 45.127.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/BD809D8A065DB595DC069383736A1A9C4A96B267.crl rsync://repo-rpki.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/BD809D8A065DB595DC069383736A1A9C4A96B267.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD809D8A065DB595DC069383736A1A9C4A96B267.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 20:03:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:79:64:10:26:fc:ba:80:f4:6f:38:54:2a:69:3b:25:87:81:25:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BD809D8A065DB595DC069383736A1A9C4A96B267 Validity Not Before: Jun 2 02:00:07 2025 GMT Not After : Jun 1 02:05:07 2026 GMT Subject: CN=9B46995AAB2B450F1B899FD1EE33D74C1FFB8C48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:22:ec:0e:6b:71:d4:9f:fa:e3:20:a9:c1:42: 91:6c:4e:10:90:59:26:57:ab:5b:0c:9b:b0:6b:b2: 70:19:04:f2:11:41:1d:b1:e1:a4:c6:df:5a:83:fb: af:b5:6e:0e:36:46:6f:69:37:0a:32:cd:67:75:b7: eb:a1:e0:bc:22:66:71:aa:66:cb:7f:bd:7b:26:6f: f8:03:05:1e:00:e4:90:9d:31:66:a7:99:8a:5b:d7: 70:35:35:e2:30:1e:0d:c1:8c:43:f7:6a:7c:fc:79: e4:20:ac:70:8c:80:1d:74:1d:7c:33:de:2c:b6:55: e3:82:3e:9a:53:68:a2:b4:9e:ec:d1:d0:aa:a8:e6: 40:8f:de:3c:1b:b3:ba:de:69:46:f5:fb:08:c1:3a: 5e:a0:f9:01:97:e2:5d:3c:b4:74:8b:b8:20:eb:68: 0d:2a:e6:67:ec:bd:c6:73:c0:4b:35:35:f0:f6:56: 27:5c:1b:86:dd:c7:be:f7:05:2f:e5:ec:cf:1c:5d: fc:22:c3:74:38:b2:4d:9e:f5:f1:8a:19:f4:ff:10: 85:81:0c:f3:35:0c:c3:2d:b1:51:e6:47:23:3b:2d: fe:1b:87:fa:be:13:61:7c:e7:5d:ac:51:fb:ba:d5: 1c:4c:bb:2c:98:0d:7f:39:86:44:0e:57:b5:1a:07: 2e:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:46:99:5A:AB:2B:45:0F:1B:89:9F:D1:EE:33:D7:4C:1F:FB:8C:48 X509v3 Authority Key Identifier: keyid:BD:80:9D:8A:06:5D:B5:95:DC:06:93:83:73:6A:1A:9C:4A:96:B2:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/BD809D8A065DB595DC069383736A1A9C4A96B267.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD809D8A065DB595DC069383736A1A9C4A96B267.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/34352e3132372e3133342e302f32342d3234203d3e203538343737.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.127.134.0/24 Signature Algorithm: sha256WithRSAEncryption 56:8a:98:e0:ca:38:43:1a:bb:20:d4:d5:7f:22:3c:49:d4:0c: b1:31:99:d6:d4:ed:aa:78:1b:75:b2:38:76:e1:0d:f0:38:62: 11:2d:7d:ba:2a:69:14:36:94:d9:3a:b1:49:57:54:26:d1:12: 1c:f9:6f:93:d6:4b:35:79:c3:51:ab:cf:fe:1a:c8:f1:97:1f: 0c:1c:91:a3:45:be:40:ef:39:3b:0f:67:c3:32:2a:f0:33:dd: 6a:8a:9b:8f:af:6a:f1:8a:89:f2:c2:32:20:54:09:02:70:ac: 1c:13:69:fe:cf:b2:08:c8:14:ba:a2:b6:6e:31:15:bc:fa:05: 69:70:99:cd:5d:66:ce:09:31:d8:f8:f7:18:99:31:58:1f:f7: 79:ff:f6:40:55:91:fa:b3:31:59:d9:48:86:df:44:8e:71:b0: ef:fb:d7:8e:f3:90:99:b1:32:f5:7b:37:e7:22:b3:1a:d9:3b: a1:fc:cd:d4:f7:b6:71:e7:96:cd:27:e7:45:60:c4:7a:56:a0: fd:98:e1:04:8b:e0:76:13:fd:28:98:7c:cf:35:1f:28:d4:d7: c3:60:5a:1a:86:ff:4d:d8:ee:ec:92:4b:ff:55:c0:cc:5d:4c: 70:71:b0:1c:5a:7d:e7:3e:a8:a8:13:85:f8:88:55:3f:bc:8a: 6d:0d:dc:e2 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUUHlkECb8uoD0bzhUKmk7JYeBJfQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkQ4MDlEOEEwNjVEQjU5NURDMDY5MzgzNzM2QTFBOUM0 QTk2QjI2NzAeFw0yNTA2MDIwMjAwMDdaFw0yNjA2MDEwMjA1MDdaMDMxMTAvBgNV BAMTKDlCNDY5OTVBQUIyQjQ1MEYxQjg5OUZEMUVFMzNENzRDMUZGQjhDNDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzIuwOa3HUn/rjIKnBQpFsThCQ WSZXq1sMm7BrsnAZBPIRQR2x4aTG31qD+6+1bg42Rm9pNwoyzWd1t+uh4LwiZnGq Zst/vXsmb/gDBR4A5JCdMWanmYpb13A1NeIwHg3BjEP3anz8eeQgrHCMgB10HXwz 3iy2VeOCPppTaKK0nuzR0Kqo5kCP3jwbs7reaUb1+wjBOl6g+QGX4l08tHSLuCDr aA0q5mfsvcZzwEs1NfD2VidcG4bdx773BS/l7M8cXfwiw3Q4sk2e9fGKGfT/EIWB DPM1DMMtsVHmRyM7Lf4bh/q+E2F8512sUfu61RxMuyyYDX85hkQOV7UaBy7ZAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUm0aZWqsrRQ8biZ/R7jPXTB/7jEgwHwYDVR0j BBgwFoAUvYCdigZdtZXcBpODc2oanEqWsmcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k M2Y4ZjU1Yy05ZTM1LTRjZTItODkwZi0wZGUzZTI0MDQ2MTEvMC9CRDgwOUQ4QTA2 NURCNTk1REMwNjkzODM3MzZBMUE5QzRBOTZCMjY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkQ4MDlEOEEwNjVEQjU5NURDMDY5MzgzNzM2QTFBOUM0QTk2 QjI2Ny5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2QzZjhmNTVjLTllMzUtNGNlMi04 OTBmLTBkZTNlMjQwNDYxMS8wLzM0MzUyZTMxMzIzNzJlMzEzMzM0MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzUzODM0MzczNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC1/hjANBgkqhkiG 9w0BAQsFAAOCAQEAVoqY4Mo4Qxq7INTVfyI8SdQMsTGZ1tTtqngbdbI4duEN8Dhi ES19uippFDaU2TqxSVdUJtESHPlvk9ZLNXnDUavP/hrI8ZcfDByRo0W+QO85Ow9n wzIq8DPdaoqbj69q8YqJ8sIyIFQJAnCsHBNp/s+yCMgUuqK2bjEVvPoFaXCZzV1m zgkx2Pj3GJkxWB/3ef/2QFWR+rMxWdlIht9EjnGw7/vXjvOQmbEy9Xs35yKzGtk7 ofzN1Pe2ceeWzSfnRWDEelag/ZjhBIvgdhP9KJh8zzUfKNTXw2BaGob/Tdju7JJL /1XAzF1McHGwHFp95z6oqBOF+IhVP7yKbQ3c4g== -----END CERTIFICATE-----Generated at Thu Jun 5 18:20:05 2025 by rpki-client