$ rpki-client -vvf repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/34332e3234302e3233312e302f32342d3234203d3e203538353532.roa File: 34332e3234302e3233312e302f32342d3234203d3e203538353532.roa (raw, json) Hash identifier: KtZ+PWGLLhYqQoJFOfvbecMLimOSOCLzeg1SJkdsiBU= Subject key identifier: 29:AF:4D:75:06:E5:A4:58:B3:FD:A6:E4:AB:94:9F:E4:63:E0:F4:1F Certificate issuer: /CN=AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6 Certificate serial: 1B5C21147B3B6CA8351A674D49F1E752D6B897D6 Authority key identifier: AF:4B:58:D4:B1:65:30:B9:F6:91:9D:BF:4F:53:DC:3A:E4:D5:FD:E6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/34332e3234302e3233312e302f32342d3234203d3e203538353532.roa Signing time: Mon 02 Jun 2025 01:03:09 +0000 ROA not before: Mon 02 Jun 2025 00:58:09 +0000 ROA not after: Mon 01 Jun 2026 01:03:09 +0000 asID: 58552 IP address blocks: 43.240.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.crl rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 18:00:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:5c:21:14:7b:3b:6c:a8:35:1a:67:4d:49:f1:e7:52:d6:b8:97:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6 Validity Not Before: Jun 2 00:58:09 2025 GMT Not After : Jun 1 01:03:09 2026 GMT Subject: CN=29AF4D7506E5A458B3FDA6E4AB949FE463E0F41F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:92:13:64:22:cb:06:df:35:11:e3:07:13:72: c4:ad:26:bd:61:6b:b9:13:29:1e:f7:c4:df:cc:4a: 89:45:ef:c8:0f:a9:c6:b9:63:e4:bc:8b:b7:f5:9d: cf:73:1d:01:64:24:d0:7e:ca:4a:e5:13:b7:cc:66: 2b:42:17:81:98:4a:a8:ef:5e:04:63:eb:b4:6a:04: 00:86:40:e3:43:c4:e1:1c:1b:4c:cc:51:bd:dc:24: 83:be:5b:7b:f1:85:7c:58:b2:ec:d8:67:fe:29:74: 08:e0:5b:b2:25:f2:75:e0:af:a4:16:00:48:05:9a: 48:45:9c:68:5f:ae:61:21:6b:af:28:c0:4b:b2:ae: 88:da:cd:dc:36:45:2a:3d:28:b8:32:0d:93:7c:b4: e2:cd:84:35:16:88:fd:29:cf:a0:28:ed:be:da:c0: 15:23:35:af:95:88:ff:e5:70:14:38:b5:0e:ec:25: 2b:95:dd:4c:08:47:eb:f6:f6:07:c2:91:5a:82:3b: 68:9d:5b:e2:48:7f:90:30:b7:42:1c:01:49:eb:0e: 24:bf:77:64:c3:18:1b:ef:9a:1c:df:7e:5c:3b:d9: 18:b5:0d:01:6c:5d:f7:aa:ac:f0:8d:5f:4d:87:1a: bf:71:ec:0b:b4:68:d2:77:61:8d:97:39:95:45:41: e3:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:AF:4D:75:06:E5:A4:58:B3:FD:A6:E4:AB:94:9F:E4:63:E0:F4:1F X509v3 Authority Key Identifier: keyid:AF:4B:58:D4:B1:65:30:B9:F6:91:9D:BF:4F:53:DC:3A:E4:D5:FD:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/34332e3234302e3233312e302f32342d3234203d3e203538353532.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.240.231.0/24 Signature Algorithm: sha256WithRSAEncryption 73:60:60:48:2a:2f:17:fd:6c:c5:45:7f:fc:81:8c:45:f8:20: 28:33:aa:84:f6:03:ef:a6:37:75:f0:a7:b9:5f:5c:30:26:7b: db:c8:ad:19:22:0f:d3:92:3a:82:d2:2e:59:0a:cf:23:b4:6c: 4d:00:e8:07:94:85:b8:91:f9:9f:b5:c4:6a:d4:ae:72:b5:2a: 9e:50:52:6d:7a:4e:55:45:7b:62:d2:52:dc:b7:46:c3:1a:af: 1e:04:b0:6e:b1:47:fb:a6:13:72:8b:dc:b8:da:80:f5:78:bd: 50:42:89:cc:84:07:f0:52:ec:e7:fb:4f:b4:00:53:65:de:21: 8c:e4:9c:db:20:5d:19:cc:82:b0:89:ed:52:d7:95:e4:51:99: 79:04:da:6c:26:88:b6:8f:fa:3f:a7:0c:11:f6:a4:69:2a:17: ab:c6:4b:b7:9c:17:45:de:88:f5:87:0f:80:3b:5c:29:c7:2a: 96:7a:ff:44:d5:da:c5:41:33:ad:fa:2d:c6:3b:5b:06:49:94: f4:41:5a:ff:04:bd:07:51:60:17:b0:db:d6:c7:18:02:70:85: ea:20:0b:55:33:77:82:6e:48:cf:c1:de:13:24:4c:e1:0c:40: d6:e0:59:7c:15:df:cf:32:ea:bc:ee:43:d0:96:41:95:ba:90: 7b:49:6b:fa -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUG1whFHs7bKg1GmdNSfHnUta4l9YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY0QjU4RDRCMTY1MzBCOUY2OTE5REJGNEY1M0RDM0FF NEQ1RkRFNjAeFw0yNTA2MDIwMDU4MDlaFw0yNjA2MDEwMTAzMDlaMDMxMTAvBgNV BAMTKDI5QUY0RDc1MDZFNUE0NThCM0ZEQTZFNEFCOTQ5RkU0NjNFMEY0MUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMkhNkIssG3zUR4wcTcsStJr1h a7kTKR73xN/MSolF78gPqca5Y+S8i7f1nc9zHQFkJNB+ykrlE7fMZitCF4GYSqjv XgRj67RqBACGQONDxOEcG0zMUb3cJIO+W3vxhXxYsuzYZ/4pdAjgW7Il8nXgr6QW AEgFmkhFnGhfrmEha68owEuyrojazdw2RSo9KLgyDZN8tOLNhDUWiP0pz6Ao7b7a wBUjNa+ViP/lcBQ4tQ7sJSuV3UwIR+v29gfCkVqCO2idW+JIf5Awt0IcAUnrDiS/ d2TDGBvvmhzfflw72Ri1DQFsXfeqrPCNX02HGr9x7Au0aNJ3YY2XOZVFQePvAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUKa9NdQblpFiz/abkq5Sf5GPg9B8wHwYDVR0j BBgwFoAUr0tY1LFlMLn2kZ2/T1PcOuTV/eYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZDIyN2RiZS00YTFjLTQwYjAtOTRhNi03OTNiZGJkYTM3NzcvMC9BRjRCNThENEIx NjUzMEI5RjY5MTlEQkY0RjUzREMzQUU0RDVGREU2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUY0QjU4RDRCMTY1MzBCOUY2OTE5REJGNEY1M0RDM0FFNEQ1 RkRFNi5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzVkMjI3ZGJlLTRhMWMtNDBiMC05 NGE2LTc5M2JkYmRhMzc3Ny8wLzM0MzMyZTMyMzQzMDJlMzIzMzMxMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzUzODM1MzUzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEACvw5zANBgkqhkiG 9w0BAQsFAAOCAQEAc2BgSCovF/1sxUV//IGMRfggKDOqhPYD76Y3dfCnuV9cMCZ7 28itGSIP05I6gtIuWQrPI7RsTQDoB5SFuJH5n7XEatSucrUqnlBSbXpOVUV7YtJS 3LdGwxqvHgSwbrFH+6YTcovcuNqA9Xi9UEKJzIQH8FLs5/tPtABTZd4hjOSc2yBd GcyCsIntUteV5FGZeQTabCaIto/6P6cMEfakaSoXq8ZLt5wXRd6I9YcPgDtcKccq lnr/RNXaxUEzrfotxjtbBkmU9EFa/wS9B1FgF7Db1scYAnCF6iALVTN3gm5Iz8He EyRM4QxA1uBZfBXfzzLqvO5D0JZBlbqQe0lr+g== -----END CERTIFICATE-----Generated at Mon Jun 30 17:33:47 2025 by rpki-client