$ rpki-client -vvf repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/34332e3234392e3231312e302f32342d3234203d3e203435323938.roa File: 34332e3234392e3231312e302f32342d3234203d3e203435323938.roa (raw, json) Hash identifier: 1w/9LRyUE06eBEdRnx71e6cTE3cd85bkpMBBImnruAE= Subject key identifier: E0:05:B0:21:C1:3A:D9:48:48:4A:DF:D3:70:2D:0E:09:E9:34:B0:E9 Certificate issuer: /CN=1AD597D3403FBD137C81429E3DE6D87BC886F1DE Certificate serial: 61D0E6DCDD13337BFE4C87D1C456ACE22DAAB332 Authority key identifier: 1A:D5:97:D3:40:3F:BD:13:7C:81:42:9E:3D:E6:D8:7B:C8:86:F1:DE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/34332e3234392e3231312e302f32342d3234203d3e203435323938.roa Signing time: Wed 26 Feb 2025 01:00:02 +0000 ROA not before: Wed 26 Feb 2025 00:55:02 +0000 ROA not after: Wed 25 Feb 2026 01:00:02 +0000 asID: 45298 IP address blocks: 43.249.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.crl rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 May 2025 05:11:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:d0:e6:dc:dd:13:33:7b:fe:4c:87:d1:c4:56:ac:e2:2d:aa:b3:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1AD597D3403FBD137C81429E3DE6D87BC886F1DE Validity Not Before: Feb 26 00:55:02 2025 GMT Not After : Feb 25 01:00:02 2026 GMT Subject: CN=E005B021C13AD948484ADFD3702D0E09E934B0E9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:18:c5:9a:d8:6b:ad:1a:c3:a8:31:4f:9d:1e: b0:14:ca:2e:24:fc:19:01:9a:d8:b9:86:b8:2c:d9: 8f:2b:7f:1d:6d:4f:77:48:58:2e:54:89:5d:a7:1d: 0a:d5:d9:ec:2a:91:a8:f2:73:0d:11:65:26:8f:dd: b6:a0:e2:28:be:fd:8f:e0:f6:44:c9:49:61:4a:2a: df:1e:c7:ac:45:33:6a:3f:e3:ce:c1:d3:61:44:77: 17:eb:84:b5:3b:cc:83:1b:67:5b:0d:63:53:69:c9: 11:e8:d6:a7:bb:b0:48:ef:c4:11:5c:58:70:61:60: 63:22:d8:44:77:d7:b4:a2:8b:ee:f0:7f:b0:05:a5: 07:db:6e:aa:45:6d:54:dd:9e:72:04:86:a3:b1:8a: 0a:84:b2:1d:29:35:70:d7:f5:75:21:7e:d7:f6:9b: cf:ff:83:53:16:d9:6d:73:f4:06:db:45:74:1f:f2: d4:1e:d4:ec:e7:72:e8:f8:6c:94:97:f2:1d:bd:59: e3:11:37:f7:3d:59:91:4b:9c:77:8b:16:bb:b7:8f: 59:db:0f:42:76:75:b3:38:58:a2:37:ee:7f:2e:2b: 0a:0f:09:70:a5:29:e3:47:91:48:08:c5:ee:79:8f: 2a:e9:b6:cc:c4:b5:fc:e6:7c:0e:29:08:02:86:a1: 5f:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:05:B0:21:C1:3A:D9:48:48:4A:DF:D3:70:2D:0E:09:E9:34:B0:E9 X509v3 Authority Key Identifier: keyid:1A:D5:97:D3:40:3F:BD:13:7C:81:42:9E:3D:E6:D8:7B:C8:86:F1:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/34332e3234392e3231312e302f32342d3234203d3e203435323938.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.249.211.0/24 Signature Algorithm: sha256WithRSAEncryption 0e:84:b2:e9:2e:2c:8b:93:c3:48:4f:c7:a6:58:24:79:b0:4a: 56:9a:f8:38:58:22:a0:8d:c5:fa:05:fa:e8:68:80:72:9a:24: bf:39:98:cc:63:67:c1:db:09:4f:cd:0a:03:b3:66:74:71:8f: 76:73:69:74:b4:1b:f6:5d:5f:74:ef:3b:f4:05:88:27:28:6a: 59:1c:e8:4a:d7:b2:64:cb:60:67:4a:64:40:7a:8e:28:24:e4: ee:03:5b:e6:ed:f6:1c:18:85:8f:14:f2:2f:0a:46:04:61:53: 95:07:ad:6e:eb:32:2f:7d:ce:2c:f3:cd:6e:eb:74:1d:c8:a4: 8c:6e:c5:8c:3b:eb:6c:9e:b4:c7:05:d1:d8:79:be:74:bb:1c: 8e:24:ba:22:9c:c3:20:a3:5c:b7:1a:e4:f2:49:37:59:3d:e2: 03:7e:66:65:12:68:e2:e4:b7:08:fd:29:1b:0d:78:73:ae:f4: bb:1a:2a:c2:78:94:12:34:9b:cd:18:39:1f:ae:b6:43:76:b9: 2e:12:86:f0:14:0d:ea:14:76:a4:98:fc:9a:91:7f:05:e5:04: 49:ed:66:a5:03:88:59:de:0d:4c:79:69:ec:3b:a9:f3:39:b7: cd:2c:bc:7e:74:24:a6:55:98:4e:7a:e0:7f:c9:b6:18:45:23: 8c:96:aa:6a -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUYdDm3N0TM3v+TIfRxFas4i2qszIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUFENTk3RDM0MDNGQkQxMzdDODE0MjlFM0RFNkQ4N0JD ODg2RjFERTAeFw0yNTAyMjYwMDU1MDJaFw0yNjAyMjUwMTAwMDJaMDMxMTAvBgNV BAMTKEUwMDVCMDIxQzEzQUQ5NDg0ODRBREZEMzcwMkQwRTA5RTkzNEIwRTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBGMWa2GutGsOoMU+dHrAUyi4k /BkBmti5hrgs2Y8rfx1tT3dIWC5UiV2nHQrV2ewqkajycw0RZSaP3bag4ii+/Y/g 9kTJSWFKKt8ex6xFM2o/487B02FEdxfrhLU7zIMbZ1sNY1NpyRHo1qe7sEjvxBFc WHBhYGMi2ER317Sii+7wf7AFpQfbbqpFbVTdnnIEhqOxigqEsh0pNXDX9XUhftf2 m8//g1MW2W1z9AbbRXQf8tQe1Ozncuj4bJSX8h29WeMRN/c9WZFLnHeLFru3j1nb D0J2dbM4WKI37n8uKwoPCXClKeNHkUgIxe55jyrptszEtfzmfA4pCAKGoV//AgMB AAGjggIyMIICLjAdBgNVHQ4EFgQU4AWwIcE62UhISt/TcC0OCek0sOkwHwYDVR0j BBgwFoAUGtWX00A/vRN8gUKePebYe8iG8d4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NWVjMjVlNC05YWE4LTRiZWYtOTA5Ny1jMGJlYzBiMjY2YTcvMC8xQUQ1OTdEMzQw M0ZCRDEzN0M4MTQyOUUzREU2RDg3QkM4ODZGMURFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUFENTk3RDM0MDNGQkQxMzdDODE0MjlFM0RFNkQ4N0JDODg2 RjFERS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzY1ZWMyNWU0LTlhYTgtNGJlZi05 MDk3LWMwYmVjMGIyNjZhNy8wLzM0MzMyZTMyMzQzOTJlMzIzMTMxMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzQzNTMyMzkzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEACv50zANBgkqhkiG 9w0BAQsFAAOCAQEADoSy6S4si5PDSE/HplgkebBKVpr4OFgioI3F+gX66GiAcpok vzmYzGNnwdsJT80KA7NmdHGPdnNpdLQb9l1fdO879AWIJyhqWRzoSteyZMtgZ0pk QHqOKCTk7gNb5u32HBiFjxTyLwpGBGFTlQetbusyL33OLPPNbut0HcikjG7FjDvr bJ60xwXR2Hm+dLscjiS6IpzDIKNctxrk8kk3WT3iA35mZRJo4uS3CP0pGw14c670 uxoqwniUEjSbzRg5H662Q3a5LhKG8BQN6hR2pJj8mpF/BeUESe1mpQOIWd4NTHlp 7Dup8zm3zSy8fnQkplWYTnrgf8m2GEUjjJaqag== -----END CERTIFICATE-----Generated at Wed May 7 16:55:09 2025 by rpki-client