$ rpki-client -vvf repo-rpki.idnic.net/repo/7d0f99c3-e567-41ae-aa00-26cb9781fbe9/0/34392e3233362e3231382e302f32342d3234203d3e203535363638.roa File: 34392e3233362e3231382e302f32342d3234203d3e203535363638.roa (raw, json) Hash identifier: IuWeKhHtePe16+Mo0GNe9sNi8Di/hp1hWH17ol9RuOY= Subject key identifier: DB:28:E0:A0:1F:57:27:C1:46:67:DD:FF:7A:3C:67:C6:DF:04:18:F1 Certificate issuer: /CN=6DA2B28F4391C01434B7229FD4D68E661BF13061 Certificate serial: 0938C031275A78CDB8738B01716D8299365972F9 Authority key identifier: 6D:A2:B2:8F:43:91:C0:14:34:B7:22:9F:D4:D6:8E:66:1B:F1:30:61 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DA2B28F4391C01434B7229FD4D68E661BF13061.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7d0f99c3-e567-41ae-aa00-26cb9781fbe9/0/34392e3233362e3231382e302f32342d3234203d3e203535363638.roa Signing time: Fri 10 Oct 2025 04:00:01 +0000 ROA not before: Fri 10 Oct 2025 03:55:01 +0000 ROA not after: Fri 09 Oct 2026 04:00:01 +0000 asID: 55668 IP address blocks: 49.236.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7d0f99c3-e567-41ae-aa00-26cb9781fbe9/0/6DA2B28F4391C01434B7229FD4D68E661BF13061.crl rsync://repo-rpki.idnic.net/repo/7d0f99c3-e567-41ae-aa00-26cb9781fbe9/0/6DA2B28F4391C01434B7229FD4D68E661BF13061.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DA2B28F4391C01434B7229FD4D68E661BF13061.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 09:29:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:38:c0:31:27:5a:78:cd:b8:73:8b:01:71:6d:82:99:36:59:72:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6DA2B28F4391C01434B7229FD4D68E661BF13061 Validity Not Before: Oct 10 03:55:01 2025 GMT Not After : Oct 9 04:00:01 2026 GMT Subject: CN=DB28E0A01F5727C14667DDFF7A3C67C6DF0418F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:1b:83:fd:5c:6f:cb:74:80:8b:32:52:19:d7: 4d:a5:6c:37:63:95:56:03:e7:6d:03:63:2d:00:71: 24:ac:26:e2:a5:39:2e:16:37:8d:10:29:ad:fb:7b: b9:92:81:41:ec:6e:53:d1:23:c1:b1:de:25:b3:d8: 9c:1f:78:e3:52:e2:32:29:86:bc:94:4f:b1:ec:48: e8:aa:4e:4d:fc:0b:1e:fd:5b:0a:17:7e:fa:be:87: b3:d3:5f:01:8a:60:d3:9d:31:79:48:21:48:3f:90: 1c:cd:78:c3:57:08:bb:df:52:41:b9:9d:2d:c7:46: 9b:64:e0:42:ea:ce:d9:6a:61:bc:e4:ba:12:0e:31: ca:65:04:c3:ab:40:b2:36:cc:54:56:63:4b:4a:d3: 7b:90:ea:bb:8d:1f:a1:7f:6c:32:e7:aa:f0:b7:79: 29:30:9b:66:6a:7b:47:0e:f0:3e:f1:92:f8:ec:d7: d1:b7:d4:c2:d6:41:96:fb:ea:87:e2:6d:f6:a7:a3: e4:72:77:cf:03:1b:ab:3d:a7:b3:ef:95:ec:cd:e8: 25:47:e3:01:5f:2e:c9:6b:a0:4a:42:18:8c:28:e0: 5d:3c:af:c6:83:cf:d7:58:36:39:55:f6:cd:09:0d: ac:8a:78:2f:33:7d:2b:ff:23:00:c8:01:6e:7a:91: 2b:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:28:E0:A0:1F:57:27:C1:46:67:DD:FF:7A:3C:67:C6:DF:04:18:F1 X509v3 Authority Key Identifier: keyid:6D:A2:B2:8F:43:91:C0:14:34:B7:22:9F:D4:D6:8E:66:1B:F1:30:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7d0f99c3-e567-41ae-aa00-26cb9781fbe9/0/6DA2B28F4391C01434B7229FD4D68E661BF13061.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DA2B28F4391C01434B7229FD4D68E661BF13061.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d0f99c3-e567-41ae-aa00-26cb9781fbe9/0/34392e3233362e3231382e302f32342d3234203d3e203535363638.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 49.236.218.0/24 Signature Algorithm: sha256WithRSAEncryption 75:0e:d7:79:52:c0:ab:8d:d7:71:45:4d:da:0a:68:11:70:a3: 59:9e:ae:84:09:05:91:4d:4e:d5:7e:64:f9:1a:64:27:5f:39: 29:f1:73:64:a6:01:80:cb:3b:66:d5:0f:6c:04:63:11:01:a4: ed:b6:ec:31:59:78:b6:42:b9:4f:14:ee:80:6a:6d:e6:9b:ad: 5f:ff:96:52:57:a4:20:8e:af:3e:24:96:3a:15:49:8c:64:d0: 8f:84:c6:74:a6:36:6e:fb:c4:ec:fe:cd:1e:43:03:33:de:bd: c4:16:e3:b6:2f:ea:32:98:65:e9:31:b9:3d:05:bb:ff:b6:ac: a4:1e:0b:c0:9b:0c:c3:90:4a:11:4b:8d:e0:ac:6b:92:b0:94: 91:f8:10:b5:cd:8b:b6:9f:51:c9:2a:2f:7d:d8:e0:05:d8:67: ab:88:85:df:95:c3:b1:fb:85:37:34:d7:5f:f8:8f:ef:d5:1a: a3:b1:bc:2d:e8:e1:86:d2:e0:41:38:0b:d9:0f:1d:15:36:fd: be:bc:fa:5b:03:34:b1:97:96:46:ec:61:db:dd:ee:f4:7d:e8: fa:2a:06:64:50:d6:fc:b3:df:c3:b1:54:e7:d6:e3:39:9b:1b: e0:09:38:6d:2c:13:b8:e0:fd:0a:12:49:dd:a1:8f:63:0a:d5: 60:0f:b8:a9 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUCTjAMSdaeM24c4sBcW2CmTZZcvkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkRBMkIyOEY0MzkxQzAxNDM0QjcyMjlGRDRENjhFNjYx QkYxMzA2MTAeFw0yNTEwMTAwMzU1MDFaFw0yNjEwMDkwNDAwMDFaMDMxMTAvBgNV BAMTKERCMjhFMEEwMUY1NzI3QzE0NjY3RERGRjdBM0M2N0M2REYwNDE4RjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXG4P9XG/LdICLMlIZ102lbDdj lVYD520DYy0AcSSsJuKlOS4WN40QKa37e7mSgUHsblPRI8Gx3iWz2JwfeONS4jIp hryUT7HsSOiqTk38Cx79WwoXfvq+h7PTXwGKYNOdMXlIIUg/kBzNeMNXCLvfUkG5 nS3HRptk4ELqztlqYbzkuhIOMcplBMOrQLI2zFRWY0tK03uQ6ruNH6F/bDLnqvC3 eSkwm2Zqe0cO8D7xkvjs19G31MLWQZb76ofibfano+Ryd88DG6s9p7PvlezN6CVH 4wFfLslroEpCGIwo4F08r8aDz9dYNjlV9s0JDayKeC8zfSv/IwDIAW56kStrAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQU2yjgoB9XJ8FGZ93/ejxnxt8EGPEwHwYDVR0j BBgwFoAUbaKyj0ORwBQ0tyKf1NaOZhvxMGEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZDBmOTljMy1lNTY3LTQxYWUtYWEwMC0yNmNiOTc4MWZiZTkvMC82REEyQjI4RjQz OTFDMDE0MzRCNzIyOUZENEQ2OEU2NjFCRjEzMDYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkRBMkIyOEY0MzkxQzAxNDM0QjcyMjlGRDRENjhFNjYxQkYx MzA2MS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzdkMGY5OWMzLWU1NjctNDFhZS1h YTAwLTI2Y2I5NzgxZmJlOS8wLzM0MzkyZTMyMzMzNjJlMzIzMTM4MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzUzNTM2MzYzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEADHs2jANBgkqhkiG 9w0BAQsFAAOCAQEAdQ7XeVLAq43XcUVN2gpoEXCjWZ6uhAkFkU1O1X5k+RpkJ185 KfFzZKYBgMs7ZtUPbARjEQGk7bbsMVl4tkK5TxTugGpt5putX/+WUlekII6vPiSW OhVJjGTQj4TGdKY2bvvE7P7NHkMDM969xBbjti/qMphl6TG5PQW7/7aspB4LwJsM w5BKEUuN4KxrkrCUkfgQtc2Ltp9RySovfdjgBdhnq4iF35XDsfuFNzTXX/iP79Ua o7G8LejhhtLgQTgL2Q8dFTb9vrz6WwM0sZeWRuxh293u9H3o+ioGZFDW/LPfw7FU 59bjOZsb4Ak4bSwTuOD9ChJJ3aGPYwrVYA+4qQ== -----END CERTIFICATE-----Generated at Mon Oct 20 13:22:26 2025 by rpki-client