$ rpki-client -vvf repo-rpki.idnic.net/repo/1b7e0bc0-761b-4ec3-8f42-82981b91a97a/0/32372e3132342e36372e302f32342d3234203d3e20313532303339.roa File: 32372e3132342e36372e302f32342d3234203d3e20313532303339.roa (raw, json) Hash identifier: s05NUxO3OCK6ljSM126JzvbuefrUbP5vbV9fxoiHqUw= Subject key identifier: AA:34:9B:C9:66:98:7D:CA:58:D8:AC:D3:2A:49:5E:8E:C5:A3:0B:AD Certificate issuer: /CN=2CFD5BDDD1DBA6D9402874D6223ABD7EEEE01605 Certificate serial: 18868DCC6CE4DEF67870636AB25F10A83B93D7A7 Authority key identifier: 2C:FD:5B:DD:D1:DB:A6:D9:40:28:74:D6:22:3A:BD:7E:EE:E0:16:05 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CFD5BDDD1DBA6D9402874D6223ABD7EEEE01605.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1b7e0bc0-761b-4ec3-8f42-82981b91a97a/0/32372e3132342e36372e302f32342d3234203d3e20313532303339.roa Signing time: Sun 26 Oct 2025 20:00:01 +0000 ROA not before: Sun 26 Oct 2025 19:55:01 +0000 ROA not after: Sun 25 Oct 2026 20:00:01 +0000 asID: 152039 IP address blocks: 27.124.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1b7e0bc0-761b-4ec3-8f42-82981b91a97a/0/2CFD5BDDD1DBA6D9402874D6223ABD7EEEE01605.crl rsync://repo-rpki.idnic.net/repo/1b7e0bc0-761b-4ec3-8f42-82981b91a97a/0/2CFD5BDDD1DBA6D9402874D6223ABD7EEEE01605.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CFD5BDDD1DBA6D9402874D6223ABD7EEEE01605.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 16:07:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:86:8d:cc:6c:e4:de:f6:78:70:63:6a:b2:5f:10:a8:3b:93:d7:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2CFD5BDDD1DBA6D9402874D6223ABD7EEEE01605 Validity Not Before: Oct 26 19:55:01 2025 GMT Not After : Oct 25 20:00:01 2026 GMT Subject: CN=AA349BC966987DCA58D8ACD32A495E8EC5A30BAD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:aa:ab:37:34:a6:9b:91:51:9d:38:42:1c:09: a8:a4:b8:65:6d:20:c2:37:78:a1:cc:2f:60:03:e1: 0b:ee:87:47:4e:b9:e1:8d:37:fa:76:ab:60:be:c4: 69:ab:5b:bd:1d:15:25:34:11:31:8c:31:ef:09:8f: 10:40:8b:b7:f3:54:d0:af:9e:26:d5:16:ea:c4:31: 74:3e:5c:1b:7a:64:ba:bc:09:46:1e:22:97:dd:7e: 09:53:a0:dc:ac:18:e8:bc:fd:ab:53:ab:f7:60:f1: 28:5c:32:53:a5:1e:20:6b:4e:23:42:ec:ab:6e:a0: e8:bf:8a:a9:b8:ef:bc:1f:f1:18:cc:7e:53:76:c9: 39:a2:68:2c:37:65:e5:4f:18:e0:6e:7f:12:7b:f1: 03:ae:56:71:34:fe:22:6a:bf:92:3e:75:78:bb:3c: 7d:f0:30:e4:39:d6:1f:00:80:93:d6:57:24:2d:c1: 8e:2c:9c:f5:f7:45:7c:ab:ba:21:72:65:2d:7b:8b: 0c:62:17:4a:76:f5:c8:f4:7a:c4:05:26:1d:16:57: a7:24:2e:93:09:b9:23:d4:56:94:99:6d:33:80:72: 89:26:2c:42:25:7b:98:10:82:c1:cb:14:28:ee:e6: 22:45:9f:bd:3d:fe:c4:4b:c2:2c:4b:79:8b:8d:82: dc:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:34:9B:C9:66:98:7D:CA:58:D8:AC:D3:2A:49:5E:8E:C5:A3:0B:AD X509v3 Authority Key Identifier: keyid:2C:FD:5B:DD:D1:DB:A6:D9:40:28:74:D6:22:3A:BD:7E:EE:E0:16:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1b7e0bc0-761b-4ec3-8f42-82981b91a97a/0/2CFD5BDDD1DBA6D9402874D6223ABD7EEEE01605.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CFD5BDDD1DBA6D9402874D6223ABD7EEEE01605.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1b7e0bc0-761b-4ec3-8f42-82981b91a97a/0/32372e3132342e36372e302f32342d3234203d3e20313532303339.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 27.124.67.0/24 Signature Algorithm: sha256WithRSAEncryption 38:01:bf:b2:d0:7f:31:5e:8c:81:5d:12:00:f9:bb:f1:80:d2: 7b:e5:1c:17:02:41:8f:e5:42:98:78:67:d5:8b:d1:d9:56:6a: ab:4c:4f:a3:e3:70:41:fe:e2:66:0b:fe:0b:61:cc:22:b6:68: c8:5c:40:e2:1e:8d:f0:6f:b2:5f:56:c2:3f:28:6a:21:6c:73: f4:28:b3:1c:1c:db:0d:34:3e:d0:e5:bb:0c:a9:bf:a6:20:30: 8d:17:80:f7:d9:3e:04:56:ac:b1:16:ca:3f:75:d6:c7:10:39: e6:53:f9:6c:2d:e3:5d:f1:37:87:92:d5:a3:b0:2e:34:03:bd: 0a:30:87:94:81:e2:a7:d6:05:f3:de:fa:8d:ba:cc:07:87:c3: d0:03:0d:d5:64:68:78:d1:40:6a:82:bc:86:70:49:cb:6e:99: 2f:79:56:90:dc:0f:63:fd:1b:bd:29:f1:cc:75:d5:33:87:67: 32:61:27:ad:ad:59:bf:e4:3d:4a:07:0b:2c:ac:95:2b:d7:db: a7:19:b0:b8:10:c9:48:1e:ec:eb:40:49:d1:7f:65:70:e9:75: 24:8e:c6:dd:f6:c9:57:0f:91:7e:c2:20:50:9d:3b:2a:e3:88: 05:72:0f:84:61:5e:28:18:b1:82:ad:bc:12:fb:be:47:0a:02: 4e:d8:fb:44 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUGIaNzGzk3vZ4cGNqsl8QqDuT16cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkNGRDVCREREMURCQTZEOTQwMjg3NEQ2MjIzQUJEN0VF RUUwMTYwNTAeFw0yNTEwMjYxOTU1MDFaFw0yNjEwMjUyMDAwMDFaMDMxMTAvBgNV BAMTKEFBMzQ5QkM5NjY5ODdEQ0E1OEQ4QUNEMzJBNDk1RThFQzVBMzBCQUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIqqs3NKabkVGdOEIcCaikuGVt IMI3eKHML2AD4Qvuh0dOueGNN/p2q2C+xGmrW70dFSU0ETGMMe8JjxBAi7fzVNCv nibVFurEMXQ+XBt6ZLq8CUYeIpfdfglToNysGOi8/atTq/dg8ShcMlOlHiBrTiNC 7KtuoOi/iqm477wf8RjMflN2yTmiaCw3ZeVPGOBufxJ78QOuVnE0/iJqv5I+dXi7 PH3wMOQ51h8AgJPWVyQtwY4snPX3RXyruiFyZS17iwxiF0p29cj0esQFJh0WV6ck LpMJuSPUVpSZbTOAcokmLEIle5gQgsHLFCju5iJFn709/sRLwixLeYuNgtzFAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUqjSbyWaYfcpY2KzTKklejsWjC60wHwYDVR0j BBgwFoAULP1b3dHbptlAKHTWIjq9fu7gFgUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YjdlMGJjMC03NjFiLTRlYzMtOGY0Mi04Mjk4MWI5MWE5N2EvMC8yQ0ZENUJEREQx REJBNkQ5NDAyODc0RDYyMjNBQkQ3RUVFRTAxNjA1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkNGRDVCREREMURCQTZEOTQwMjg3NEQ2MjIzQUJEN0VFRUUw MTYwNS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzFiN2UwYmMwLTc2MWItNGVjMy04 ZjQyLTgyOTgxYjkxYTk3YS8wLzMyMzcyZTMxMzIzNDJlMzYzNzJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMxMzUzMjMwMzMzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEABt8QzANBgkqhkiG 9w0BAQsFAAOCAQEAOAG/stB/MV6MgV0SAPm78YDSe+UcFwJBj+VCmHhn1YvR2VZq q0xPo+NwQf7iZgv+C2HMIrZoyFxA4h6N8G+yX1bCPyhqIWxz9CizHBzbDTQ+0OW7 DKm/piAwjReA99k+BFassRbKP3XWxxA55lP5bC3jXfE3h5LVo7AuNAO9CjCHlIHi p9YF8976jbrMB4fD0AMN1WRoeNFAaoK8hnBJy26ZL3lWkNwPY/0bvSnxzHXVM4dn MmEnra1Zv+Q9SgcLLKyVK9fbpxmwuBDJSB7s60BJ0X9lcOl1JI7G3fbJVw+RfsIg UJ07KuOIBXIPhGFeKBixgq28Evu+RwoCTtj7RA== -----END CERTIFICATE-----Generated at Tue Nov 4 16:36:03 2025 by rpki-client