$ rpki-client -vvvf rpki-rsync.idnic.net/repo/aa659217-caa2-45ed-87b4-da0dadcfa087/0/34352e3234392e3138302e302f32332d3233203d3e20313331323035.roa File: 34352e3234392e3138302e302f32332d3233203d3e20313331323035.roa (raw, json) Hash identifier: t1hi0fCDvFnRk0himIi/9LHop5ByqrOhA6RjCjW27SI= Subject key identifier: C5:A8:21:EA:DE:17:14:15:8D:4D:89:05:30:91:E2:B6:AB:80:C1:49 Certificate issuer: /CN=C70C382573B502FF29482CE28573DCCF10C0C0DE Certificate serial: 341742D40F9C59ACE8B167CEE1DB2D9035471C39 Authority key identifier: C7:0C:38:25:73:B5:02:FF:29:48:2C:E2:85:73:DC:CF:10:C0:C0:DE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C70C382573B502FF29482CE28573DCCF10C0C0DE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/aa659217-caa2-45ed-87b4-da0dadcfa087/0/34352e3234392e3138302e302f32332d3233203d3e20313331323035.roa Signing time: Wed 23 Sep 2026 13:02:47 +0000 ROA not before: Wed 23 Sep 2026 12:57:47 +0000 ROA not after: Wed 22 Sep 2027 13:02:47 +0000 asID: 131205 IP address blocks: 45.249.180.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/aa659217-caa2-45ed-87b4-da0dadcfa087/0/C70C382573B502FF29482CE28573DCCF10C0C0DE.crl rsync://rpki-rsync.idnic.net/repo/aa659217-caa2-45ed-87b4-da0dadcfa087/0/C70C382573B502FF29482CE28573DCCF10C0C0DE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C70C382573B502FF29482CE28573DCCF10C0C0DE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:08:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:17:42:d4:0f:9c:59:ac:e8:b1:67:ce:e1:db:2d:90:35:47:1c:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C70C382573B502FF29482CE28573DCCF10C0C0DE Validity Not Before: Sep 23 12:57:47 2026 GMT Not After : Sep 22 13:02:47 2027 GMT Subject: CN=C5A821EADE1714158D4D89053091E2B6AB80C149 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:4e:bf:89:3f:24:2b:72:48:d1:13:fc:f1:b1: d0:59:3a:2a:07:ca:5a:62:b9:2d:c9:bb:9b:89:26: 50:df:6b:67:d6:f0:89:5f:05:a3:9a:da:10:fd:00: 89:7c:d6:48:a0:6c:59:5b:a4:9e:8e:10:2f:fb:41: ec:db:34:49:b7:fd:7b:af:09:cb:82:f4:49:aa:5f: 4c:ec:b2:96:fc:30:16:87:14:2e:d0:96:a0:6a:1a: 84:1a:1a:34:07:1d:13:67:c7:09:56:f4:c6:2f:f3: 2a:03:b6:8d:90:35:28:9b:8a:09:a7:0a:15:ca:c5: 08:d8:ae:c4:0c:76:79:00:db:ac:c2:be:dc:4d:3e: 66:df:08:b0:b4:3d:f6:93:cf:c7:31:4a:9b:c4:b9: 4c:2c:da:59:09:4c:09:e0:62:73:32:53:9f:5c:71: fb:7c:04:30:63:46:50:8b:9e:ce:cf:fe:1e:8b:b0: aa:14:98:20:cc:8f:40:9f:90:aa:bc:81:68:d0:1b: 34:e8:ce:4b:e0:ff:fe:57:6c:52:a2:e2:de:28:c5: dc:bf:8a:9d:d0:4d:4a:7e:62:8b:f4:c7:b1:9a:34: c3:cd:ea:54:c7:7a:1d:8d:40:e1:3d:c6:c5:e9:3b: f9:c5:f1:53:5b:de:3a:12:dd:c1:b5:c3:16:84:de: 71:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:A8:21:EA:DE:17:14:15:8D:4D:89:05:30:91:E2:B6:AB:80:C1:49 X509v3 Authority Key Identifier: keyid:C7:0C:38:25:73:B5:02:FF:29:48:2C:E2:85:73:DC:CF:10:C0:C0:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/aa659217-caa2-45ed-87b4-da0dadcfa087/0/C70C382573B502FF29482CE28573DCCF10C0C0DE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C70C382573B502FF29482CE28573DCCF10C0C0DE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aa659217-caa2-45ed-87b4-da0dadcfa087/0/34352e3234392e3138302e302f32332d3233203d3e20313331323035.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.249.180.0/23 Signature Algorithm: sha256WithRSAEncryption 9c:e2:44:46:e6:ba:fb:46:1c:c6:1a:d9:dd:a2:e7:69:8c:b1: 84:6c:d2:20:e3:c8:1a:74:67:88:92:bd:9f:6b:ce:ce:cf:88: af:9c:55:9a:3f:4a:c7:92:54:f1:bd:09:d9:2c:54:c3:c6:86: a6:7e:02:9a:3a:45:c0:65:58:74:d5:93:26:57:b9:35:55:54: 68:16:f5:50:5d:fe:11:41:f0:ea:31:7c:dd:11:82:ef:6d:e9: f3:a4:9d:cc:89:83:8c:78:92:12:a7:88:a9:fa:6c:90:af:4c: ba:ec:3e:fc:bf:a9:46:ed:a2:d9:ab:d8:4c:79:05:7e:01:1f: 57:7c:88:17:4b:9d:f0:5c:f3:74:d7:b7:b0:f3:1a:bf:c3:b1: c8:c5:ae:bf:b6:c2:ef:53:60:5b:21:5b:71:33:3b:42:0f:8f: 67:b9:f2:f4:4d:21:c7:89:21:6f:ef:22:ef:a0:85:7e:9d:e6: f1:f0:52:55:ae:12:b9:d5:1c:11:f6:04:cd:ba:9b:4c:f2:56: 6a:b3:2a:1f:00:86:59:22:17:12:9c:16:4f:27:07:01:6e:4e: e7:78:5b:e5:cf:68:b2:92:0e:e5:b5:5e:8f:81:8d:56:9b:4a: bd:d1:b6:44:e1:34:a0:eb:f7:43:37:36:39:9e:ba:5e:5f:26: a7:33:f8:c1 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUNBdC1A+cWazosWfO4dstkDVHHDkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzcwQzM4MjU3M0I1MDJGRjI5NDgyQ0UyODU3M0RDQ0Yx MEMwQzBERTAeFw0yNjA5MjMxMjU3NDdaFw0yNzA5MjIxMzAyNDdaMDMxMTAvBgNV BAMTKEM1QTgyMUVBREUxNzE0MTU4RDREODkwNTMwOTFFMkI2QUI4MEMxNDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYTr+JPyQrckjRE/zxsdBZOioH ylpiuS3Ju5uJJlDfa2fW8IlfBaOa2hD9AIl81kigbFlbpJ6OEC/7QezbNEm3/Xuv CcuC9EmqX0zsspb8MBaHFC7QlqBqGoQaGjQHHRNnxwlW9MYv8yoDto2QNSibigmn ChXKxQjYrsQMdnkA26zCvtxNPmbfCLC0PfaTz8cxSpvEuUws2lkJTAngYnMyU59c cft8BDBjRlCLns7P/h6LsKoUmCDMj0CfkKq8gWjQGzTozkvg//5XbFKi4t4oxdy/ ip3QTUp+Yov0x7GaNMPN6lTHeh2NQOE9xsXpO/nF8VNb3joS3cG1wxaE3nHLAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUxagh6t4XFBWNTYkFMJHitquAwUkwHwYDVR0j BBgwFoAUxww4JXO1Av8pSCzihXPczxDAwN4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWE2NTkyMTctY2FhMi00NWVkLTg3YjQtZGEwZGFkY2ZhMDg3LzAvQzcwQzM4MjU3 M0I1MDJGRjI5NDgyQ0UyODU3M0RDQ0YxMEMwQzBERS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DNzBDMzgyNTczQjUwMkZGMjk0ODJDRTI4NTczRENDRjEwQzBD MERFLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2FhNjU5MjE3LWNhYTItNDVlZC04 N2I0LWRhMGRhZGNmYTA4Ny8wLzM0MzUyZTMyMzQzOTJlMzEzODMwMmUzMDJmMzIz MzJkMzIzMzIwM2QzZTIwMzEzMzMxMzIzMDM1LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLfm0MA0GCSqG SIb3DQEBCwUAA4IBAQCc4kRG5rr7RhzGGtndoudpjLGEbNIg48gadGeIkr2fa87O z4ivnFWaP0rHklTxvQnZLFTDxoamfgKaOkXAZVh01ZMmV7k1VVRoFvVQXf4RQfDq MXzdEYLvbenzpJ3MiYOMeJISp4ip+myQr0y67D78v6lG7aLZq9hMeQV+AR9XfIgX S53wXPN017ew8xq/w7HIxa6/tsLvU2BbIVtxMztCD49nufL0TSHHiSFv7yLvoIV+ nebx8FJVrhK51RwR9gTNuptM8lZqsyofAIZZIhcSnBZPJwcBbk7neFvlz2iykg7l tV6PgY1Wm0q90bZE4TSg6/dDNzY5nrpeXyanM/jB -----END CERTIFICATE-----Generated at Thu Sep 24 22:44:02 2026 by rpki-client