$ rpki-client -vvf repo-rpki.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/34332e3234302e3232352e302f32342d3234203d3e203633343933.roa File: 34332e3234302e3232352e302f32342d3234203d3e203633343933.roa (raw, json) Hash identifier: iiMdXC5IwE7CrNkyDM/L6svytNKfCeHud3DpbhTkmXw= Subject key identifier: 33:03:FB:76:33:79:CD:4B:02:FA:89:29:FF:BB:F3:04:1A:64:F7:38 Certificate issuer: /CN=194F6EF659F1115C068AB59065D57F150E23F5B6 Certificate serial: 377D6279CC4D8285F14C70B0559322D5756106EC Authority key identifier: 19:4F:6E:F6:59:F1:11:5C:06:8A:B5:90:65:D5:7F:15:0E:23:F5:B6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/194F6EF659F1115C068AB59065D57F150E23F5B6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/34332e3234302e3232352e302f32342d3234203d3e203633343933.roa Signing time: Mon 22 Sep 2025 04:02:24 +0000 ROA not before: Mon 22 Sep 2025 03:57:24 +0000 ROA not after: Mon 21 Sep 2026 04:02:24 +0000 asID: 63493 IP address blocks: 43.240.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/194F6EF659F1115C068AB59065D57F150E23F5B6.crl rsync://repo-rpki.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/194F6EF659F1115C068AB59065D57F150E23F5B6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/194F6EF659F1115C068AB59065D57F150E23F5B6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 08:47:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:7d:62:79:cc:4d:82:85:f1:4c:70:b0:55:93:22:d5:75:61:06:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=194F6EF659F1115C068AB59065D57F150E23F5B6 Validity Not Before: Sep 22 03:57:24 2025 GMT Not After : Sep 21 04:02:24 2026 GMT Subject: CN=3303FB763379CD4B02FA8929FFBBF3041A64F738 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:fc:98:66:3b:18:09:44:0a:05:12:e3:ce:dc: b0:71:d7:28:36:a4:44:a5:75:5b:2a:b9:18:0b:60: 64:f6:15:db:83:93:d4:b4:50:f0:d9:3d:04:04:6b: 5e:4b:1d:0e:35:6a:a0:20:fd:f9:f2:ce:85:d8:f0: 28:4b:fb:9d:b4:b7:e6:e4:16:53:4d:be:dc:c7:89: 09:91:67:d8:a7:22:68:06:63:42:44:8f:5a:4b:e1: 1e:fb:12:93:02:ef:89:b9:a5:6b:04:b5:d4:1e:a9: f3:32:78:2c:bd:09:1d:01:90:80:05:8d:66:83:d7: 2c:e1:fe:12:b3:1a:68:c3:a6:8e:eb:3c:53:c4:2d: d2:e1:a4:77:da:24:e3:16:60:20:0b:d4:f6:60:a6: 70:7a:cf:bc:47:e3:77:0c:3e:75:51:a8:e6:9d:68: 87:63:b9:01:44:cd:01:25:49:89:10:2b:39:1e:48: 89:0f:0f:1e:8b:f8:4c:68:92:2a:fc:89:fb:6d:d0: 6a:13:78:9d:d6:df:99:57:26:67:8e:cd:6f:cc:0d: b7:d1:f6:48:e3:a0:b9:73:75:75:a5:52:0e:0e:ee: 21:d3:05:92:76:34:10:f6:bb:b5:aa:2a:a0:bf:e6: 79:20:fd:78:de:74:2c:72:5b:90:cc:cf:b8:3f:a5: 8d:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:03:FB:76:33:79:CD:4B:02:FA:89:29:FF:BB:F3:04:1A:64:F7:38 X509v3 Authority Key Identifier: keyid:19:4F:6E:F6:59:F1:11:5C:06:8A:B5:90:65:D5:7F:15:0E:23:F5:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/194F6EF659F1115C068AB59065D57F150E23F5B6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/194F6EF659F1115C068AB59065D57F150E23F5B6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/34332e3234302e3232352e302f32342d3234203d3e203633343933.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.240.225.0/24 Signature Algorithm: sha256WithRSAEncryption 39:48:65:0a:24:77:d1:a4:30:d5:1f:b8:92:a9:98:86:da:1f: 77:57:5a:9b:2a:0f:5c:5b:8f:73:59:d3:d9:a9:54:0a:ef:f8: a9:ef:e6:85:45:a1:74:fc:02:03:61:39:fe:50:f9:86:db:f5: 4b:28:07:f4:b6:ca:31:d5:1d:38:00:44:ea:c2:e7:8b:02:85: 0d:72:d6:50:bc:f8:c3:e0:6d:de:2e:25:a7:85:04:97:ca:94: 2a:ba:f2:2c:78:3a:b9:15:7c:fb:25:68:09:2a:46:a0:f1:a8: 4f:24:a7:43:7c:9a:8b:2c:ef:14:97:48:bc:7e:bf:60:d1:2a: 61:53:66:ee:10:58:ca:18:6e:5d:ac:23:1f:5a:fc:65:3b:0e: 6b:4e:8c:b5:71:b2:91:a9:22:18:b4:ac:50:46:35:ac:d9:99: a7:28:4a:98:77:4e:27:1c:cc:69:2a:b0:9d:80:08:83:81:a8: d0:12:28:1c:3a:51:39:2a:d3:1c:f4:f5:18:2f:f3:32:84:6f: c3:5a:97:94:59:bf:f7:14:2f:5d:45:53:54:ea:ad:9d:ea:69: a5:af:13:f5:d5:d6:f4:87:dd:03:7d:95:0a:6b:63:c3:8d:d5: 98:1b:1d:9c:87:f4:34:36:32:f9:4a:c4:80:77:f9:d6:30:12: a1:2c:ec:23 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUN31iecxNgoXxTHCwVZMi1XVhBuwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTk0RjZFRjY1OUYxMTE1QzA2OEFCNTkwNjVENTdGMTUw RTIzRjVCNjAeFw0yNTA5MjIwMzU3MjRaFw0yNjA5MjEwNDAyMjRaMDMxMTAvBgNV BAMTKDMzMDNGQjc2MzM3OUNENEIwMkZBODkyOUZGQkJGMzA0MUE2NEY3MzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq/JhmOxgJRAoFEuPO3LBx1yg2 pESldVsquRgLYGT2FduDk9S0UPDZPQQEa15LHQ41aqAg/fnyzoXY8ChL+520t+bk FlNNvtzHiQmRZ9inImgGY0JEj1pL4R77EpMC74m5pWsEtdQeqfMyeCy9CR0BkIAF jWaD1yzh/hKzGmjDpo7rPFPELdLhpHfaJOMWYCAL1PZgpnB6z7xH43cMPnVRqOad aIdjuQFEzQElSYkQKzkeSIkPDx6L+Exokir8iftt0GoTeJ3W35lXJmeOzW/MDbfR 9kjjoLlzdXWlUg4O7iHTBZJ2NBD2u7WqKqC/5nkg/XjedCxyW5DMz7g/pY3HAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUMwP7djN5zUsC+okp/7vzBBpk9zgwHwYDVR0j BBgwFoAUGU9u9lnxEVwGirWQZdV/FQ4j9bYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZmFiZWM3MS03ZWNiLTRkYmQtYTQyMS05OWI5Y2QyMDkwM2EvMC8xOTRGNkVGNjU5 RjExMTVDMDY4QUI1OTA2NUQ1N0YxNTBFMjNGNUI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTk0RjZFRjY1OUYxMTE1QzA2OEFCNTkwNjVENTdGMTUwRTIz RjVCNi5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2NmYWJlYzcxLTdlY2ItNGRiZC1h NDIxLTk5YjljZDIwOTAzYS8wLzM0MzMyZTMyMzQzMDJlMzIzMjM1MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzYzMzM0MzkzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEACvw4TANBgkqhkiG 9w0BAQsFAAOCAQEAOUhlCiR30aQw1R+4kqmYhtofd1damyoPXFuPc1nT2alUCu/4 qe/mhUWhdPwCA2E5/lD5htv1SygH9LbKMdUdOABE6sLniwKFDXLWULz4w+Bt3i4l p4UEl8qUKrryLHg6uRV8+yVoCSpGoPGoTySnQ3yaiyzvFJdIvH6/YNEqYVNm7hBY yhhuXawjH1r8ZTsOa06MtXGykakiGLSsUEY1rNmZpyhKmHdOJxzMaSqwnYAIg4Go 0BIoHDpROSrTHPT1GC/zMoRvw1qXlFm/9xQvXUVTVOqtnepppa8T9dXW9IfdA32V Cmtjw43VmBsdnIf0NDYy+UrEgHf51jASoSzsIw== -----END CERTIFICATE-----Generated at Tue Oct 21 00:08:29 2025 by rpki-client