$ rpki-client -vvf repo-rpki.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/34332e3234302e3232362e302f32342d3234203d3e203633343933.roa File: 34332e3234302e3232362e302f32342d3234203d3e203633343933.roa (raw, json) Hash identifier: d0HjkKB7FfimroRB+n2YS7p7zUW66ddpBfJeipPxBBQ= Subject key identifier: C6:00:20:1D:E3:0D:6D:5C:BC:7E:01:3C:D1:B2:A6:BB:A7:7C:34:A4 Certificate issuer: /CN=194F6EF659F1115C068AB59065D57F150E23F5B6 Certificate serial: 629AB10AB047004E8695C09B7B062BEF476649D8 Authority key identifier: 19:4F:6E:F6:59:F1:11:5C:06:8A:B5:90:65:D5:7F:15:0E:23:F5:B6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/194F6EF659F1115C068AB59065D57F150E23F5B6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/34332e3234302e3232362e302f32342d3234203d3e203633343933.roa Signing time: Thu 26 Mar 2026 01:44:23 +0000 ROA not before: Thu 26 Mar 2026 01:39:23 +0000 ROA not after: Thu 25 Mar 2027 01:44:23 +0000 asID: 63493 IP address blocks: 43.240.226.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/194F6EF659F1115C068AB59065D57F150E23F5B6.crl rsync://repo-rpki.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/194F6EF659F1115C068AB59065D57F150E23F5B6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/194F6EF659F1115C068AB59065D57F150E23F5B6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 05:11:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:9a:b1:0a:b0:47:00:4e:86:95:c0:9b:7b:06:2b:ef:47:66:49:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=194F6EF659F1115C068AB59065D57F150E23F5B6 Validity Not Before: Mar 26 01:39:23 2026 GMT Not After : Mar 25 01:44:23 2027 GMT Subject: CN=C600201DE30D6D5CBC7E013CD1B2A6BBA77C34A4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:72:b2:ba:48:16:3a:b9:11:a9:55:80:53:67: 9b:44:14:59:c0:8f:1a:99:83:79:39:9c:5a:49:25: 2e:42:46:eb:bf:0f:ba:66:cb:3f:80:25:55:82:7d: 7b:87:5e:e0:46:45:68:a7:a8:48:f8:79:f9:a5:0a: 91:6a:3f:81:6c:09:6e:c7:8e:ea:46:cf:7c:77:68: 87:0c:9e:03:ce:58:96:71:e9:dd:04:5f:58:7f:1d: 46:65:e2:ae:20:9b:54:8b:7b:cc:53:6b:bc:08:78: 1b:31:fc:ca:86:24:e6:b2:c7:5f:50:3f:de:f3:61: a5:8b:90:5d:8a:c3:ea:7c:19:16:ca:36:13:2c:c0: af:2e:33:d7:0e:14:ab:88:9f:4f:e2:17:25:6e:aa: fc:39:8f:1c:5c:80:fc:0a:89:c4:49:90:b8:1b:0c: c0:c7:aa:59:6d:0c:15:78:94:23:11:95:05:92:6e: 9b:c2:91:cf:8a:7c:ec:03:c5:b6:35:1e:6e:fa:36: b5:c9:0d:35:4a:23:a4:81:2f:0a:a0:ab:bf:f6:a6: 96:49:f8:a8:dc:e3:e0:c1:06:c0:bc:89:27:53:b1: 5e:ac:6a:ac:b0:e2:5f:db:f5:95:9f:35:07:47:e7: 49:8b:cd:54:07:86:9e:40:5b:2a:e3:ba:c5:ab:fb: a3:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:00:20:1D:E3:0D:6D:5C:BC:7E:01:3C:D1:B2:A6:BB:A7:7C:34:A4 X509v3 Authority Key Identifier: keyid:19:4F:6E:F6:59:F1:11:5C:06:8A:B5:90:65:D5:7F:15:0E:23:F5:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/194F6EF659F1115C068AB59065D57F150E23F5B6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/194F6EF659F1115C068AB59065D57F150E23F5B6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/34332e3234302e3232362e302f32342d3234203d3e203633343933.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.240.226.0/24 Signature Algorithm: sha256WithRSAEncryption 93:5f:9c:63:cb:f9:c6:ef:a1:e7:2a:6a:1b:3e:46:ad:13:53: ef:42:8d:b0:9a:3e:04:bd:25:c4:b3:2d:37:f8:c1:ab:27:9a: 80:b9:99:4a:79:43:1b:6c:13:ef:f4:7f:24:4f:4f:01:20:80: 61:d7:bd:97:f7:e2:b7:a6:e9:cd:06:d6:28:d0:48:cb:34:40: 4b:7a:05:26:b3:3a:0a:dd:c7:f6:8f:53:10:89:63:f6:42:5f: ca:41:db:7a:f7:a2:c9:b4:1e:6c:3f:49:23:fd:25:c1:0a:80: 32:50:1a:c0:67:4d:a4:59:21:f2:20:54:f1:97:da:cc:83:9f: fb:8a:c4:f3:f3:57:56:59:8e:02:ba:21:92:a2:b5:47:a0:20: 87:dc:d2:62:5b:b0:0c:1d:9e:fb:57:c9:f4:3a:6c:80:8f:ff: a6:d3:e9:c0:9c:60:af:01:bf:68:69:65:1c:cc:f7:01:03:ea: 71:7b:4b:8a:92:54:dc:32:c0:ee:32:53:e2:d8:b8:47:07:26: 5d:b4:37:82:c1:43:14:7f:41:df:90:cc:7f:9a:12:b3:39:9c: 79:be:1e:8e:6e:d3:2b:d4:7e:79:70:f7:f0:d6:bb:c3:a0:ca: 65:f3:4f:c9:bb:ae:b4:f5:0c:d4:47:a0:8a:1e:92:f3:49:a5: e5:6a:bc:ea -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUYpqxCrBHAE6GlcCbewYr70dmSdgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTk0RjZFRjY1OUYxMTE1QzA2OEFCNTkwNjVENTdGMTUw RTIzRjVCNjAeFw0yNjAzMjYwMTM5MjNaFw0yNzAzMjUwMTQ0MjNaMDMxMTAvBgNV BAMTKEM2MDAyMDFERTMwRDZENUNCQzdFMDEzQ0QxQjJBNkJCQTc3QzM0QTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBcrK6SBY6uRGpVYBTZ5tEFFnA jxqZg3k5nFpJJS5CRuu/D7pmyz+AJVWCfXuHXuBGRWinqEj4efmlCpFqP4FsCW7H jupGz3x3aIcMngPOWJZx6d0EX1h/HUZl4q4gm1SLe8xTa7wIeBsx/MqGJOayx19Q P97zYaWLkF2Kw+p8GRbKNhMswK8uM9cOFKuIn0/iFyVuqvw5jxxcgPwKicRJkLgb DMDHqlltDBV4lCMRlQWSbpvCkc+KfOwDxbY1Hm76NrXJDTVKI6SBLwqgq7/2ppZJ +Kjc4+DBBsC8iSdTsV6saqyw4l/b9ZWfNQdH50mLzVQHhp5AWyrjusWr+6ObAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUxgAgHeMNbVy8fgE80bKmu6d8NKQwHwYDVR0j BBgwFoAUGU9u9lnxEVwGirWQZdV/FQ4j9bYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZmFiZWM3MS03ZWNiLTRkYmQtYTQyMS05OWI5Y2QyMDkwM2EvMC8xOTRGNkVGNjU5 RjExMTVDMDY4QUI1OTA2NUQ1N0YxNTBFMjNGNUI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTk0RjZFRjY1OUYxMTE1QzA2OEFCNTkwNjVENTdGMTUwRTIz RjVCNi5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2NmYWJlYzcxLTdlY2ItNGRiZC1h NDIxLTk5YjljZDIwOTAzYS8wLzM0MzMyZTMyMzQzMDJlMzIzMjM2MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzYzMzM0MzkzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEACvw4jANBgkqhkiG 9w0BAQsFAAOCAQEAk1+cY8v5xu+h5ypqGz5GrRNT70KNsJo+BL0lxLMtN/jBqyea gLmZSnlDG2wT7/R/JE9PASCAYde9l/fit6bpzQbWKNBIyzRAS3oFJrM6Ct3H9o9T EIlj9kJfykHbeveiybQebD9JI/0lwQqAMlAawGdNpFkh8iBU8ZfazIOf+4rE8/NX VlmOArohkqK1R6Agh9zSYluwDB2e+1fJ9DpsgI//ptPpwJxgrwG/aGllHMz3AQPq cXtLipJU3DLA7jJT4ti4RwcmXbQ3gsFDFH9B35DMf5oSszmceb4ejm7TK9R+eXD3 8Na7w6DKZfNPybuutPUM1Eegih6S80ml5Wq86g== -----END CERTIFICATE-----Generated at Thu Mar 26 12:24:17 2026 by rpki-client