$ rpki-client -vvf repo-rpki.idnic.net/repo/611a3980-a32e-4df9-8e52-0be0d343cc0b/0/34332e3232382e3137352e302f32342d3234203d3e20313532303235.roa File: 34332e3232382e3137352e302f32342d3234203d3e20313532303235.roa (raw, json) Hash identifier: CibmkAElI9pPo6S/s01oQXP/mAlsm0hzKBETN49DEY4= Subject key identifier: 55:B8:77:D9:7A:E2:7F:9F:BA:E7:E6:6D:7E:9A:67:B9:57:0C:2D:49 Certificate issuer: /CN=EE0318C1CF5D037492EFBC172300E2E062AFEFCB Certificate serial: 736629FA5A62EBC1D9FE89A5EC82D512D8DB9D66 Authority key identifier: EE:03:18:C1:CF:5D:03:74:92:EF:BC:17:23:00:E2:E0:62:AF:EF:CB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EE0318C1CF5D037492EFBC172300E2E062AFEFCB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/611a3980-a32e-4df9-8e52-0be0d343cc0b/0/34332e3232382e3137352e302f32342d3234203d3e20313532303235.roa Signing time: Tue 23 Sep 2025 06:00:01 +0000 ROA not before: Tue 23 Sep 2025 05:55:01 +0000 ROA not after: Tue 22 Sep 2026 06:00:01 +0000 asID: 152025 IP address blocks: 43.228.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/611a3980-a32e-4df9-8e52-0be0d343cc0b/0/EE0318C1CF5D037492EFBC172300E2E062AFEFCB.crl rsync://repo-rpki.idnic.net/repo/611a3980-a32e-4df9-8e52-0be0d343cc0b/0/EE0318C1CF5D037492EFBC172300E2E062AFEFCB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EE0318C1CF5D037492EFBC172300E2E062AFEFCB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:66:29:fa:5a:62:eb:c1:d9:fe:89:a5:ec:82:d5:12:d8:db:9d:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE0318C1CF5D037492EFBC172300E2E062AFEFCB Validity Not Before: Sep 23 05:55:01 2025 GMT Not After : Sep 22 06:00:01 2026 GMT Subject: CN=55B877D97AE27F9FBAE7E66D7E9A67B9570C2D49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:1f:3e:14:99:63:a4:8f:c6:72:96:cb:6c:d4: c5:1e:86:4e:ff:ae:fd:e0:ac:7e:7b:2b:5c:bf:f8: e0:6c:f0:15:b3:e2:08:97:1c:a1:c4:0e:16:07:10: 3a:e6:9a:2d:10:d0:d8:57:46:67:50:f4:36:eb:e8: 3d:59:68:2d:d9:82:9b:a7:70:4f:c2:54:a8:80:90: ce:6e:a3:07:38:58:e5:35:9b:43:55:61:14:c1:1c: c0:95:a1:aa:ca:89:78:fe:e0:27:59:20:10:79:34: f7:d3:30:7d:dc:9c:8c:ec:5d:6e:2f:d1:5d:eb:69: cd:b3:86:aa:e8:76:de:90:af:3b:a9:4c:8d:cd:a2: 6d:af:71:1f:01:ab:1b:b1:11:51:bf:83:ce:05:d8: ba:48:fd:b5:9d:4c:a6:c5:12:58:6b:d3:8d:a0:b8: 8e:41:84:5a:6a:49:71:b8:13:95:a5:70:be:49:22: e7:c6:94:63:bb:3b:1e:c2:9b:ac:93:25:af:eb:01: 08:73:94:67:df:64:84:e8:fa:f2:fd:60:d3:a2:b0: 9b:b1:b2:e5:59:af:b8:0e:01:58:e5:d1:8e:ba:fb: db:d2:01:ad:a2:29:8a:1e:07:9c:17:61:39:cd:1d: 51:77:28:50:33:cd:19:fa:50:ed:0b:7a:fb:4e:d7: 74:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:B8:77:D9:7A:E2:7F:9F:BA:E7:E6:6D:7E:9A:67:B9:57:0C:2D:49 X509v3 Authority Key Identifier: keyid:EE:03:18:C1:CF:5D:03:74:92:EF:BC:17:23:00:E2:E0:62:AF:EF:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/611a3980-a32e-4df9-8e52-0be0d343cc0b/0/EE0318C1CF5D037492EFBC172300E2E062AFEFCB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EE0318C1CF5D037492EFBC172300E2E062AFEFCB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/611a3980-a32e-4df9-8e52-0be0d343cc0b/0/34332e3232382e3137352e302f32342d3234203d3e20313532303235.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.228.175.0/24 Signature Algorithm: sha256WithRSAEncryption de:81:31:d4:4e:1f:e9:92:69:80:16:71:18:d1:27:b5:6e:91: a3:43:d0:66:02:56:c7:46:69:71:52:4b:d3:c8:9d:71:d5:b9: 66:84:ad:fc:0a:36:af:35:5d:c8:87:65:37:17:1a:2c:2e:fa: 40:09:46:6c:64:ab:59:89:7e:1f:08:d3:9f:e3:55:c4:af:08: ec:88:a2:15:7e:c0:72:4c:b4:62:cc:ec:d5:67:10:3d:64:da: d3:5d:34:ed:b0:d1:38:89:b5:db:82:e4:75:ae:45:b8:a6:99: bd:c5:6b:c6:84:d6:18:bc:2b:92:06:11:98:0a:a3:b9:ec:14: cd:99:a0:a5:d1:53:28:52:fb:ec:6c:fc:b6:b2:40:dd:55:fa: 87:94:70:52:d5:e1:d8:67:e1:f6:43:a4:f5:c8:11:05:0b:22: 5a:8c:70:cb:35:47:1e:df:f6:70:ac:a1:b6:ee:bc:dd:33:73: 83:cf:c4:b6:c1:b1:0f:c6:7d:4c:b8:f9:7a:70:7a:a3:de:36: 0f:d3:1a:7b:92:7b:36:2b:27:06:9a:4d:f0:45:7f:25:d8:a8: 0c:f7:aa:d8:59:92:7c:fb:fd:3f:d3:85:02:dd:a8:8d:93:a9: 7e:dc:36:3e:f9:0b:d2:cb:c9:73:76:7c:a3:ad:c2:76:db:e6: 61:f2:c1:72 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUc2Yp+lpi68HZ/oml7ILVEtjbnWYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUUwMzE4QzFDRjVEMDM3NDkyRUZCQzE3MjMwMEUyRTA2 MkFGRUZDQjAeFw0yNTA5MjMwNTU1MDFaFw0yNjA5MjIwNjAwMDFaMDMxMTAvBgNV BAMTKDU1Qjg3N0Q5N0FFMjdGOUZCQUU3RTY2RDdFOUE2N0I5NTcwQzJENDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYHz4UmWOkj8Zylsts1MUehk7/ rv3grH57K1y/+OBs8BWz4giXHKHEDhYHEDrmmi0Q0NhXRmdQ9Dbr6D1ZaC3Zgpun cE/CVKiAkM5uowc4WOU1m0NVYRTBHMCVoarKiXj+4CdZIBB5NPfTMH3cnIzsXW4v 0V3rac2zhqrodt6QrzupTI3Nom2vcR8BqxuxEVG/g84F2LpI/bWdTKbFElhr042g uI5BhFpqSXG4E5WlcL5JIufGlGO7Ox7Cm6yTJa/rAQhzlGffZITo+vL9YNOisJux suVZr7gOAVjl0Y66+9vSAa2iKYoeB5wXYTnNHVF3KFAzzRn6UO0LevtO13RdAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUVbh32Xrif5+65+ZtfppnuVcMLUkwHwYDVR0j BBgwFoAU7gMYwc9dA3SS77wXIwDi4GKv78swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MTFhMzk4MC1hMzJlLTRkZjktOGU1Mi0wYmUwZDM0M2NjMGIvMC9FRTAzMThDMUNG NUQwMzc0OTJFRkJDMTcyMzAwRTJFMDYyQUZFRkNCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUUwMzE4QzFDRjVEMDM3NDkyRUZCQzE3MjMwMEUyRTA2MkFG RUZDQi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzYxMWEzOTgwLWEzMmUtNGRmOS04 ZTUyLTBiZTBkMzQzY2MwYi8wLzM0MzMyZTMyMzIzODJlMzEzNzM1MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNTMyMzAzMjM1LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAK+SvMA0GCSqG SIb3DQEBCwUAA4IBAQDegTHUTh/pkmmAFnEY0Se1bpGjQ9BmAlbHRmlxUkvTyJ1x 1blmhK38CjavNV3Ih2U3FxosLvpACUZsZKtZiX4fCNOf41XErwjsiKIVfsByTLRi zOzVZxA9ZNrTXTTtsNE4ibXbguR1rkW4ppm9xWvGhNYYvCuSBhGYCqO57BTNmaCl 0VMoUvvsbPy2skDdVfqHlHBS1eHYZ+H2Q6T1yBEFCyJajHDLNUce3/ZwrKG27rzd M3ODz8S2wbEPxn1MuPl6cHqj3jYP0xp7kns2KycGmk3wRX8l2KgM96rYWZJ8+/0/ 04UC3aiNk6l+3DY++QvSy8lzdnyjrcJ22+Zh8sFy -----END CERTIFICATE-----Generated at Mon Oct 20 21:09:24 2025 by rpki-client