$ rpki-client -vvf repo-rpki.idnic.net/repo/7d0f99c3-e567-41ae-aa00-26cb9781fbe9/0/34392e3233362e3231392e302f32342d3234203d3e203535363638.roa File: 34392e3233362e3231392e302f32342d3234203d3e203535363638.roa (raw, json) Hash identifier: WONaTaogHxZR78zw31IvprtisGRNqNJsbh6kYGrgZG4= Subject key identifier: EB:0B:4A:66:04:6C:C9:7C:CD:EF:9B:43:9A:7E:FB:F0:F4:4A:0F:FD Certificate issuer: /CN=6DA2B28F4391C01434B7229FD4D68E661BF13061 Certificate serial: 45D52E1E8B27F78973F34177F204A420E7FBED2C Authority key identifier: 6D:A2:B2:8F:43:91:C0:14:34:B7:22:9F:D4:D6:8E:66:1B:F1:30:61 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DA2B28F4391C01434B7229FD4D68E661BF13061.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7d0f99c3-e567-41ae-aa00-26cb9781fbe9/0/34392e3233362e3231392e302f32342d3234203d3e203535363638.roa Signing time: Fri 10 Oct 2025 05:00:01 +0000 ROA not before: Fri 10 Oct 2025 04:55:01 +0000 ROA not after: Fri 09 Oct 2026 05:00:01 +0000 asID: 55668 IP address blocks: 49.236.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7d0f99c3-e567-41ae-aa00-26cb9781fbe9/0/6DA2B28F4391C01434B7229FD4D68E661BF13061.crl rsync://repo-rpki.idnic.net/repo/7d0f99c3-e567-41ae-aa00-26cb9781fbe9/0/6DA2B28F4391C01434B7229FD4D68E661BF13061.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DA2B28F4391C01434B7229FD4D68E661BF13061.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 09:29:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:d5:2e:1e:8b:27:f7:89:73:f3:41:77:f2:04:a4:20:e7:fb:ed:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6DA2B28F4391C01434B7229FD4D68E661BF13061 Validity Not Before: Oct 10 04:55:01 2025 GMT Not After : Oct 9 05:00:01 2026 GMT Subject: CN=EB0B4A66046CC97CCDEF9B439A7EFBF0F44A0FFD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:16:45:ec:c3:43:10:8a:b4:0b:8a:ee:21:02: ed:1c:63:41:ac:48:0a:a0:83:cb:0d:78:8d:39:6e: f2:6a:f5:b5:7d:73:4f:90:61:d7:c2:65:73:92:f7: ac:95:86:dd:9a:f5:c7:f7:c3:74:06:20:ff:ba:b3: 45:54:9f:9d:b1:73:d2:e8:a8:19:57:b7:6e:54:3f: 08:97:7d:df:c8:7c:cd:79:6d:a7:05:74:1a:fa:9b: 21:1b:61:51:5b:8a:98:14:89:2d:af:50:f9:0b:ef: f6:0a:eb:d0:f3:79:f9:85:56:3f:ca:21:54:e7:40: 0a:9e:d6:64:29:51:ba:60:3d:a9:24:e8:88:50:dc: 64:28:37:53:f5:c4:ee:f5:54:88:d8:ef:f9:01:1c: ae:27:14:0d:87:64:e0:68:7b:d2:d1:25:5f:93:ef: 62:68:0e:b1:72:7e:f0:4a:c3:88:b6:8d:b5:18:d4: c0:02:4c:ad:a4:f3:72:65:23:86:5d:2d:06:1d:04: b2:98:1e:e1:22:5d:92:64:ef:3f:04:2b:bd:77:1f: cf:51:d6:c7:ca:94:13:37:62:f2:34:ef:6b:58:9f: e8:28:e3:e0:e1:3f:19:0b:64:cb:3a:57:6a:a9:ee: ab:bb:28:fd:8e:37:30:24:cc:0f:b9:ad:09:1d:20: 63:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:0B:4A:66:04:6C:C9:7C:CD:EF:9B:43:9A:7E:FB:F0:F4:4A:0F:FD X509v3 Authority Key Identifier: keyid:6D:A2:B2:8F:43:91:C0:14:34:B7:22:9F:D4:D6:8E:66:1B:F1:30:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7d0f99c3-e567-41ae-aa00-26cb9781fbe9/0/6DA2B28F4391C01434B7229FD4D68E661BF13061.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DA2B28F4391C01434B7229FD4D68E661BF13061.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d0f99c3-e567-41ae-aa00-26cb9781fbe9/0/34392e3233362e3231392e302f32342d3234203d3e203535363638.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 49.236.219.0/24 Signature Algorithm: sha256WithRSAEncryption 7f:07:04:48:c6:d7:c2:cc:bc:65:86:a4:e8:75:10:3a:07:67: e4:a8:84:2c:48:61:f1:f8:c6:2e:29:b9:d8:af:7d:80:3f:77: f8:63:a7:1f:82:a7:11:a3:11:fd:38:02:5e:98:20:4e:f7:8d: 80:45:ce:08:ea:5b:44:fa:f0:bf:bd:f5:cd:bd:bc:c6:67:3f: cd:3f:ed:46:79:45:43:1f:ff:d9:72:f0:7d:e6:c0:64:3c:ba: db:e7:37:c5:60:0f:31:3a:f3:bf:5f:df:56:05:11:67:52:ef: 32:ef:86:d2:66:e9:ec:1c:d7:0c:b7:a0:0c:f4:d9:72:1f:be: 55:c9:08:8a:42:53:14:54:e1:70:58:c1:96:72:28:d1:a2:69: f6:e8:49:e3:fd:b4:7b:40:04:a0:af:49:78:f5:4e:c6:2f:cd: 2f:7b:db:4c:6c:e5:8d:f4:2d:5f:80:d4:6b:4a:a8:7b:7a:cf: 4c:71:e1:ac:e4:9f:f2:dc:ff:d1:93:2f:b5:51:f2:c7:0f:72: 25:3c:9d:66:09:7d:d5:ac:c4:87:d2:4e:d3:46:9a:fe:21:f9: 64:18:61:54:85:91:c1:47:b6:3b:0e:9b:6e:ee:f8:10:94:ef: 42:d3:fa:ef:66:76:89:45:f6:eb:f2:02:1a:9a:89:c6:5b:22: 33:47:c5:8d -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIURdUuHosn94lz80F38gSkIOf77SwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkRBMkIyOEY0MzkxQzAxNDM0QjcyMjlGRDRENjhFNjYx QkYxMzA2MTAeFw0yNTEwMTAwNDU1MDFaFw0yNjEwMDkwNTAwMDFaMDMxMTAvBgNV BAMTKEVCMEI0QTY2MDQ2Q0M5N0NDREVGOUI0MzlBN0VGQkYwRjQ0QTBGRkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRFkXsw0MQirQLiu4hAu0cY0Gs SAqgg8sNeI05bvJq9bV9c0+QYdfCZXOS96yVht2a9cf3w3QGIP+6s0VUn52xc9Lo qBlXt25UPwiXfd/IfM15bacFdBr6myEbYVFbipgUiS2vUPkL7/YK69DzefmFVj/K IVTnQAqe1mQpUbpgPakk6IhQ3GQoN1P1xO71VIjY7/kBHK4nFA2HZOBoe9LRJV+T 72JoDrFyfvBKw4i2jbUY1MACTK2k83JlI4ZdLQYdBLKYHuEiXZJk7z8EK713H89R 1sfKlBM3YvI072tYn+go4+DhPxkLZMs6V2qp7qu7KP2ONzAkzA+5rQkdIGPRAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQU6wtKZgRsyXzN75tDmn778PRKD/0wHwYDVR0j BBgwFoAUbaKyj0ORwBQ0tyKf1NaOZhvxMGEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZDBmOTljMy1lNTY3LTQxYWUtYWEwMC0yNmNiOTc4MWZiZTkvMC82REEyQjI4RjQz OTFDMDE0MzRCNzIyOUZENEQ2OEU2NjFCRjEzMDYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkRBMkIyOEY0MzkxQzAxNDM0QjcyMjlGRDRENjhFNjYxQkYx MzA2MS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzdkMGY5OWMzLWU1NjctNDFhZS1h YTAwLTI2Y2I5NzgxZmJlOS8wLzM0MzkyZTMyMzMzNjJlMzIzMTM5MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzUzNTM2MzYzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEADHs2zANBgkqhkiG 9w0BAQsFAAOCAQEAfwcESMbXwsy8ZYak6HUQOgdn5KiELEhh8fjGLim52K99gD93 +GOnH4KnEaMR/TgCXpggTveNgEXOCOpbRPrwv731zb28xmc/zT/tRnlFQx//2XLw febAZDy62+c3xWAPMTrzv1/fVgURZ1LvMu+G0mbp7BzXDLegDPTZch++VckIikJT FFThcFjBlnIo0aJp9uhJ4/20e0AEoK9JePVOxi/NL3vbTGzljfQtX4DUa0qoe3rP THHhrOSf8tz/0ZMvtVHyxw9yJTydZgl91azEh9JO00aa/iH5ZBhhVIWRwUe2Ow6b bu74EJTvQtP672Z2iUX26/ICGpqJxlsiM0fFjQ== -----END CERTIFICATE-----Generated at Mon Oct 20 13:22:27 2025 by rpki-client