$ rpki-client -vvf repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/34332e3234302e3232342e302f32342d3234203d3e2039333431.roa File: 34332e3234302e3232342e302f32342d3234203d3e2039333431.roa (raw, json) Hash identifier: XbSO4l/pZ9lygyDeWpVvYEK/H2tOAVVyhEe6BB/b8cQ= Subject key identifier: D2:EF:49:CE:30:37:D4:1D:01:10:94:41:9C:24:D5:F2:37:50:67:BC Certificate issuer: /CN=61566F205F7037962069571320603B274357CC6D Certificate serial: 5A9F20BE6144D5FFB29EA80144D9F0FB8A23A711 Authority key identifier: 61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/34332e3234302e3232342e302f32342d3234203d3e2039333431.roa Signing time: Fri 27 Jun 2025 15:00:02 +0000 ROA not before: Fri 27 Jun 2025 14:55:02 +0000 ROA not after: Fri 26 Jun 2026 15:00:02 +0000 asID: 9341 IP address blocks: 43.240.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 00:13:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:9f:20:be:61:44:d5:ff:b2:9e:a8:01:44:d9:f0:fb:8a:23:a7:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61566F205F7037962069571320603B274357CC6D Validity Not Before: Jun 27 14:55:02 2025 GMT Not After : Jun 26 15:00:02 2026 GMT Subject: CN=D2EF49CE3037D41D011094419C24D5F2375067BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:4b:9b:5e:cf:2b:4d:d2:b2:80:3f:39:ed:b2: 2c:79:14:cb:c5:97:39:80:7f:a5:85:c3:5f:1a:b0: 6e:98:9f:59:4c:21:3a:17:e4:25:63:f8:82:6a:1e: b9:55:b0:99:ed:6d:29:f2:1f:e7:34:c2:e1:dd:27: 5a:15:69:0e:34:b5:01:c0:a4:62:e6:ba:74:a3:74: 8d:63:2f:f9:aa:a9:e3:58:f2:ab:35:ff:91:69:14: ac:65:15:75:1f:a4:dd:40:99:8b:e9:64:f6:9e:0e: d2:be:aa:31:ae:0d:45:35:a5:bb:7c:be:3b:c3:15: ec:4f:61:f8:c6:ab:fd:00:27:b4:b8:81:7e:3f:1a: d9:06:68:0e:5a:ba:68:2e:92:38:35:f9:d4:49:93: e6:b6:ee:d3:95:23:f6:9f:7b:10:0d:d2:bf:dc:8d: 67:49:63:b6:ff:99:ba:87:07:90:87:ed:c3:2a:76: 1b:9b:db:dd:40:b0:18:e0:fd:a9:b6:c9:1a:fc:92: 01:40:4d:22:15:14:e5:8f:00:12:66:c7:c1:38:1d: 9a:0d:2f:59:5e:f1:f7:ff:f3:e9:9f:ec:f6:11:6a: 4e:cb:51:b1:87:08:34:55:a0:08:8d:3d:33:87:39: 43:e5:bb:5f:5d:99:aa:04:0c:b5:e9:4d:14:6e:20: c1:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:EF:49:CE:30:37:D4:1D:01:10:94:41:9C:24:D5:F2:37:50:67:BC X509v3 Authority Key Identifier: keyid:61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/34332e3234302e3232342e302f32342d3234203d3e2039333431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.240.224.0/24 Signature Algorithm: sha256WithRSAEncryption 5c:81:4c:7b:29:33:7d:1d:ea:b1:13:57:9e:9d:bb:7c:66:39: 8f:4c:c7:b2:a2:f5:14:17:1a:b1:37:80:77:c8:4b:74:5a:7e: 19:72:50:76:ff:d3:60:52:5c:79:93:15:a6:d3:81:f3:46:52: d1:3b:2c:eb:c7:1c:d4:e0:29:d3:ae:8f:8b:79:e0:49:2f:69: 25:49:74:ea:a4:c5:9a:76:3b:b1:87:73:8c:0a:b9:75:20:4b: 76:00:dd:c2:57:b3:40:9c:58:6f:c3:90:6b:25:4b:54:a0:1b: 49:1e:6b:35:88:fb:3e:a8:fb:2c:d4:0b:f2:ca:60:fb:3d:b7: cf:d2:2f:02:0c:67:c3:5f:07:a3:1c:dd:bd:8c:7e:45:3f:1f: 8f:da:49:cc:c9:77:f3:ec:04:61:44:48:c2:16:d2:b3:04:36: ae:08:b0:7a:af:93:e9:a9:a5:40:9b:02:1a:5f:55:e0:11:7d: 9f:4b:db:cd:12:26:41:76:59:6e:fc:90:d0:6b:af:74:26:14: 81:7e:b1:be:83:a0:f3:c9:20:36:91:64:17:fd:58:5b:1e:66: 53:1c:c2:ba:6b:dd:35:b1:66:7f:42:9f:ff:08:16:a1:fb:94: 5d:cd:f5:3e:49:a7:1c:82:8f:68:c6:e7:5c:69:b8:d2:a2:a7: 10:d1:41:7e -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUWp8gvmFE1f+ynqgBRNnw+4ojpxEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjE1NjZGMjA1RjcwMzc5NjIwNjk1NzEzMjA2MDNCMjc0 MzU3Q0M2RDAeFw0yNTA2MjcxNDU1MDJaFw0yNjA2MjYxNTAwMDJaMDMxMTAvBgNV BAMTKEQyRUY0OUNFMzAzN0Q0MUQwMTEwOTQ0MTlDMjRENUYyMzc1MDY3QkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAS5tezytN0rKAPzntsix5FMvF lzmAf6WFw18asG6Yn1lMIToX5CVj+IJqHrlVsJntbSnyH+c0wuHdJ1oVaQ40tQHA pGLmunSjdI1jL/mqqeNY8qs1/5FpFKxlFXUfpN1AmYvpZPaeDtK+qjGuDUU1pbt8 vjvDFexPYfjGq/0AJ7S4gX4/GtkGaA5aumgukjg1+dRJk+a27tOVI/afexAN0r/c jWdJY7b/mbqHB5CH7cMqdhub291AsBjg/am2yRr8kgFATSIVFOWPABJmx8E4HZoN L1le8ff/8+mf7PYRak7LUbGHCDRVoAiNPTOHOUPlu19dmaoEDLXpTRRuIMHRAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQU0u9JzjA31B0BEJRBnCTV8jdQZ7wwHwYDVR0j BBgwFoAUYVZvIF9wN5YgaVcTIGA7J0NXzG0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 M2JkY2JhZS0yZTlkLTRmM2YtOGFiOS0zNDI0ZTQ0ODQ4NGUvMC82MTU2NkYyMDVG NzAzNzk2MjA2OTU3MTMyMDYwM0IyNzQzNTdDQzZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjE1NjZGMjA1RjcwMzc5NjIwNjk1NzEzMjA2MDNCMjc0MzU3 Q0M2RC5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzczYmRjYmFlLTJlOWQtNGYzZi04 YWI5LTM0MjRlNDQ4NDg0ZS8wLzM0MzMyZTMyMzQzMDJlMzIzMjM0MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzkzMzM0MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAr8OAwDQYJKoZIhvcN AQELBQADggEBAFyBTHspM30d6rETV56du3xmOY9Mx7Ki9RQXGrE3gHfIS3Rafhly UHb/02BSXHmTFabTgfNGUtE7LOvHHNTgKdOuj4t54EkvaSVJdOqkxZp2O7GHc4wK uXUgS3YA3cJXs0CcWG/DkGslS1SgG0keazWI+z6o+yzUC/LKYPs9t8/SLwIMZ8Nf B6Mc3b2MfkU/H4/aSczJd/PsBGFESMIW0rMENq4IsHqvk+mppUCbAhpfVeARfZ9L 280SJkF2WW78kNBrr3QmFIF+sb6DoPPJIDaRZBf9WFseZlMcwrpr3TWxZn9Cn/8I FqH7lF3N9T5JpxyCj2jG51xpuNKipxDRQX4= -----END CERTIFICATE-----Generated at Mon Jun 30 18:13:25 2025 by rpki-client