$ rpki-client -vvf repo-rpki.idnic.net/repo/3305177a-a500-4996-b3ff-70c144edfece/0/34332e3234382e3231352e302f32342d3234203d3e203538343734.roa File: 34332e3234382e3231352e302f32342d3234203d3e203538343734.roa (raw, json) Hash identifier: 2rfcy4tUpo7HgU2cGwZC6pQYZQAR7WSsi/1k28TkJlU= Subject key identifier: 5C:26:7E:E7:23:3A:60:0F:23:01:14:D2:87:8D:2A:7A:A3:DA:0A:AE Certificate issuer: /CN=95FC6072A4A690A61A0B5F14B36882B43DA2F098 Certificate serial: 488538489BFAF8A39F03C62E8B6CECB13CF640EB Authority key identifier: 95:FC:60:72:A4:A6:90:A6:1A:0B:5F:14:B3:68:82:B4:3D:A2:F0:98 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95FC6072A4A690A61A0B5F14B36882B43DA2F098.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3305177a-a500-4996-b3ff-70c144edfece/0/34332e3234382e3231352e302f32342d3234203d3e203538343734.roa Signing time: Sun 27 Jul 2025 06:00:02 +0000 ROA not before: Sun 27 Jul 2025 05:55:02 +0000 ROA not after: Sun 26 Jul 2026 06:00:02 +0000 asID: 58474 IP address blocks: 43.248.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3305177a-a500-4996-b3ff-70c144edfece/0/95FC6072A4A690A61A0B5F14B36882B43DA2F098.crl rsync://repo-rpki.idnic.net/repo/3305177a-a500-4996-b3ff-70c144edfece/0/95FC6072A4A690A61A0B5F14B36882B43DA2F098.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95FC6072A4A690A61A0B5F14B36882B43DA2F098.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 02:32:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:85:38:48:9b:fa:f8:a3:9f:03:c6:2e:8b:6c:ec:b1:3c:f6:40:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95FC6072A4A690A61A0B5F14B36882B43DA2F098 Validity Not Before: Jul 27 05:55:02 2025 GMT Not After : Jul 26 06:00:02 2026 GMT Subject: CN=5C267EE7233A600F230114D2878D2A7AA3DA0AAE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:aa:db:5f:bd:e1:4c:fb:c8:67:cf:f1:28:7a: 3b:af:0d:3a:d6:70:e9:0d:d7:26:6d:27:f7:03:da: cd:ea:48:fc:90:46:6c:4f:c8:4e:00:fe:94:63:b8: 8a:a3:30:3b:f3:e5:dc:ff:55:79:39:18:11:88:65: b2:2a:62:1c:58:9b:a1:94:1a:0f:07:bc:71:19:33: 66:06:29:95:2a:5a:78:f4:e1:d0:6c:09:67:16:51: 9c:e3:0e:64:b2:98:e2:d0:db:85:66:b6:3a:f2:23: 0d:c5:ef:be:fc:a6:a3:7d:93:a5:e7:57:0b:71:ca: 5f:34:0d:d4:7b:27:f1:79:66:18:4a:3b:36:73:47: 80:77:5a:3a:5b:83:cf:35:2a:aa:72:34:68:03:58: bd:a2:41:73:15:bf:48:7a:09:0b:a9:ad:0f:ae:35: 2a:e6:64:e0:1f:4b:db:47:f2:83:61:de:57:06:3c: 83:51:a2:06:bf:2e:56:3f:7c:84:59:92:04:d7:73: 29:3b:14:4c:47:df:5e:e9:04:51:f8:b7:cb:ea:8a: 96:04:67:f3:0c:88:a6:25:57:0a:97:0c:5f:0d:85: d1:aa:86:df:16:f6:47:59:6b:2d:82:44:75:7f:08: c1:6e:d9:c9:78:07:22:2a:6e:20:fc:1b:34:2e:0f: 9d:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:26:7E:E7:23:3A:60:0F:23:01:14:D2:87:8D:2A:7A:A3:DA:0A:AE X509v3 Authority Key Identifier: keyid:95:FC:60:72:A4:A6:90:A6:1A:0B:5F:14:B3:68:82:B4:3D:A2:F0:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3305177a-a500-4996-b3ff-70c144edfece/0/95FC6072A4A690A61A0B5F14B36882B43DA2F098.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95FC6072A4A690A61A0B5F14B36882B43DA2F098.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3305177a-a500-4996-b3ff-70c144edfece/0/34332e3234382e3231352e302f32342d3234203d3e203538343734.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.248.215.0/24 Signature Algorithm: sha256WithRSAEncryption a9:c6:2b:1a:a5:78:02:0b:b5:fc:c3:e6:77:49:f2:39:f8:f5: 4b:5b:db:d6:31:b5:5b:f0:da:bb:7b:f2:aa:4b:ee:53:32:5d: ab:c4:3a:a3:21:d1:2f:20:52:4a:dd:c5:18:b0:c5:45:f5:29: 71:32:e3:b7:89:4f:9e:6b:93:b1:15:0a:86:52:c9:7c:28:42: 06:12:0d:4e:85:34:df:af:ee:5c:71:e2:26:93:a3:0f:be:85: f3:20:62:a4:6b:81:6e:3d:26:d0:bb:5f:74:61:c0:05:e1:12: 09:08:7a:ca:ad:34:b8:72:bd:8d:13:03:73:33:c4:bc:47:bd: af:c4:0f:1c:82:30:76:93:b3:26:7c:52:79:38:7a:b7:e5:83: 6e:a9:a5:a2:0d:96:0f:de:36:ae:ba:c4:11:17:2b:e2:9f:ba: 4f:79:5a:f1:cd:e1:c1:95:c3:11:a4:11:60:30:f0:2a:17:8b: a8:5b:e8:50:47:e2:19:c6:0d:42:d1:67:d7:8e:96:73:90:4d: c3:55:90:78:75:dc:cf:6c:59:59:c0:c7:14:54:da:23:d5:8a: d8:73:7f:2d:3a:f1:e4:af:f2:c6:cd:6e:18:30:0d:8b:22:d3: e0:01:75:34:1a:85:63:f0:74:e0:76:41:62:3f:11:67:4a:93: fa:ca:bb:02 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUSIU4SJv6+KOfA8Yui2zssTz2QOswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTVGQzYwNzJBNEE2OTBBNjFBMEI1RjE0QjM2ODgyQjQz REEyRjA5ODAeFw0yNTA3MjcwNTU1MDJaFw0yNjA3MjYwNjAwMDJaMDMxMTAvBgNV BAMTKDVDMjY3RUU3MjMzQTYwMEYyMzAxMTREMjg3OEQyQTdBQTNEQTBBQUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGqttfveFM+8hnz/EoejuvDTrW cOkN1yZtJ/cD2s3qSPyQRmxPyE4A/pRjuIqjMDvz5dz/VXk5GBGIZbIqYhxYm6GU Gg8HvHEZM2YGKZUqWnj04dBsCWcWUZzjDmSymOLQ24VmtjryIw3F7778pqN9k6Xn Vwtxyl80DdR7J/F5ZhhKOzZzR4B3Wjpbg881KqpyNGgDWL2iQXMVv0h6CQuprQ+u NSrmZOAfS9tH8oNh3lcGPINRoga/LlY/fIRZkgTXcyk7FExH317pBFH4t8vqipYE Z/MMiKYlVwqXDF8NhdGqht8W9kdZay2CRHV/CMFu2cl4ByIqbiD8GzQuD50RAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUXCZ+5yM6YA8jARTSh40qeqPaCq4wHwYDVR0j BBgwFoAUlfxgcqSmkKYaC18Us2iCtD2i8JgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MzA1MTc3YS1hNTAwLTQ5OTYtYjNmZi03MGMxNDRlZGZlY2UvMC85NUZDNjA3MkE0 QTY5MEE2MUEwQjVGMTRCMzY4ODJCNDNEQTJGMDk4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTVGQzYwNzJBNEE2OTBBNjFBMEI1RjE0QjM2ODgyQjQzREEy RjA5OC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzMzMDUxNzdhLWE1MDAtNDk5Ni1i M2ZmLTcwYzE0NGVkZmVjZS8wLzM0MzMyZTMyMzQzODJlMzIzMTM1MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzUzODM0MzczNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEACv41zANBgkqhkiG 9w0BAQsFAAOCAQEAqcYrGqV4Agu1/MPmd0nyOfj1S1vb1jG1W/Dau3vyqkvuUzJd q8Q6oyHRLyBSSt3FGLDFRfUpcTLjt4lPnmuTsRUKhlLJfChCBhINToU036/uXHHi JpOjD76F8yBipGuBbj0m0LtfdGHABeESCQh6yq00uHK9jRMDczPEvEe9r8QPHIIw dpOzJnxSeTh6t+WDbqmlog2WD942rrrEERcr4p+6T3la8c3hwZXDEaQRYDDwKheL qFvoUEfiGcYNQtFn146Wc5BNw1WQeHXcz2xZWcDHFFTaI9WK2HN/LTrx5K/yxs1u GDANiyLT4AF1NBqFY/B04HZBYj8RZ0qT+sq7Ag== -----END CERTIFICATE-----Generated at Mon Oct 20 19:11:43 2025 by rpki-client