$ rpki-client -vvf repo-rpki.idnic.net/repo/4daf9f0f-4fb1-40c0-b380-59a38dbc9a16/0/32372e3132342e37342e302f32332d3234203d3e20313532303532.roa File: 32372e3132342e37342e302f32332d3234203d3e20313532303532.roa (raw, json) Hash identifier: ZHB+tTRgPo6rdTXygj1EBojkxuhIq9cR8qPI+iIa1cQ= Subject key identifier: 8B:23:81:DB:F6:F4:F2:F7:CC:02:E9:D9:0C:5D:23:21:3D:E2:15:CF Certificate issuer: /CN=29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A Certificate serial: 635200201F8E4E83AFEDA06E5F71F4D207E7A07D Authority key identifier: 29:C0:64:0D:D9:07:6D:C0:4C:F8:A3:90:EA:73:DF:C0:E0:E7:CF:9A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4daf9f0f-4fb1-40c0-b380-59a38dbc9a16/0/32372e3132342e37342e302f32332d3234203d3e20313532303532.roa Signing time: Fri 03 Apr 2026 14:00:00 +0000 ROA not before: Fri 03 Apr 2026 13:55:00 +0000 ROA not after: Fri 02 Apr 2027 14:00:00 +0000 asID: 152052 IP address blocks: 27.124.74.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4daf9f0f-4fb1-40c0-b380-59a38dbc9a16/0/29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.crl rsync://repo-rpki.idnic.net/repo/4daf9f0f-4fb1-40c0-b380-59a38dbc9a16/0/29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 10:15:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:52:00:20:1f:8e:4e:83:af:ed:a0:6e:5f:71:f4:d2:07:e7:a0:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A Validity Not Before: Apr 3 13:55:00 2026 GMT Not After : Apr 2 14:00:00 2027 GMT Subject: CN=8B2381DBF6F4F2F7CC02E9D90C5D23213DE215CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:c5:0d:51:df:c6:bf:75:35:b8:6f:16:e8:f5: e4:1c:c4:4c:1f:ae:2a:d0:2b:2e:0d:f4:ee:53:11: 35:a1:aa:e9:cc:57:fb:13:cf:0e:7b:6d:0f:0e:f5: 80:b3:d8:6f:41:05:03:86:1e:7f:aa:9c:8b:eb:52: 1a:43:59:9f:0c:e6:d1:5a:89:95:82:cb:36:cf:58: a4:98:36:30:9b:55:ed:84:72:95:ca:2e:ba:aa:73: 90:6e:e1:d2:08:17:b6:63:cb:0e:a6:18:8b:4e:22: 81:d2:c0:66:fe:ec:07:72:f7:b0:3c:27:70:58:b2: 6c:8b:13:d0:03:90:34:5b:e3:38:6e:54:67:98:a5: a4:bd:3d:21:1d:56:49:d6:7b:56:a8:7e:3f:77:d6: 44:89:54:89:05:04:3a:c9:c0:cb:54:8c:6e:ad:c0: 7e:43:22:bc:67:62:00:eb:85:b9:b6:72:e9:f9:1a: 41:46:2a:54:a3:7e:a8:7b:e8:a2:34:31:42:ea:31: b6:27:79:1a:20:df:e9:13:77:31:fa:6c:ed:a6:1d: 30:1b:9e:47:bf:e2:76:12:ea:c6:20:8a:0c:85:ae: 94:46:68:30:7e:b5:08:df:f9:1e:c9:4c:23:44:be: 86:37:32:b7:99:33:26:61:ad:9b:31:d7:e8:2b:d4: 04:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:23:81:DB:F6:F4:F2:F7:CC:02:E9:D9:0C:5D:23:21:3D:E2:15:CF X509v3 Authority Key Identifier: keyid:29:C0:64:0D:D9:07:6D:C0:4C:F8:A3:90:EA:73:DF:C0:E0:E7:CF:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4daf9f0f-4fb1-40c0-b380-59a38dbc9a16/0/29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4daf9f0f-4fb1-40c0-b380-59a38dbc9a16/0/32372e3132342e37342e302f32332d3234203d3e20313532303532.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 27.124.74.0/23 Signature Algorithm: sha256WithRSAEncryption 6b:4a:22:3b:12:9c:c4:e1:9a:60:a4:7d:ec:06:6c:8a:cd:2c: 7f:b4:f4:1d:e7:33:7c:61:97:aa:37:48:68:d6:fd:63:be:27: 10:ba:c2:6a:ff:00:72:6e:6f:de:1e:cf:b2:5c:88:2a:79:fb: a4:4a:49:3f:c6:3d:f7:b9:c1:3f:5a:6f:20:d0:ee:3e:ae:6f: 49:21:9d:88:99:63:29:29:dd:e4:d4:3b:10:e7:0a:15:41:35: c4:a5:b8:6e:78:82:0c:b8:03:21:25:f5:0b:1e:36:2f:b8:eb: b7:87:bd:15:bb:09:93:de:da:9d:dd:05:24:e6:3c:69:a8:5c: ef:08:31:90:75:14:a1:6d:a3:a8:fe:26:79:33:0b:af:75:c1: 82:30:e1:e2:38:98:c5:2a:c1:bb:4c:88:5c:54:d8:e9:3e:bb: 72:c8:7b:e0:3f:97:81:24:2b:c1:f1:09:9b:6f:3f:aa:f5:cc: 65:dc:66:bc:4c:f8:7b:19:cd:e1:14:88:15:20:b6:af:01:92: 56:27:c0:d2:27:e0:3e:b3:73:b0:27:a6:2d:55:9b:5a:0a:92: a2:71:69:bf:a0:43:51:fc:28:48:93:a1:3d:4b:bc:63:db:5d: d6:3c:89:bb:76:52:77:1f:20:68:42:f8:67:b7:65:6f:44:fb: 4f:77:ca:46 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUY1IAIB+OToOv7aBuX3H00gfnoH0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjlDMDY0MEREOTA3NkRDMDRDRjhBMzkwRUE3M0RGQzBF MEU3Q0Y5QTAeFw0yNjA0MDMxMzU1MDBaFw0yNzA0MDIxNDAwMDBaMDMxMTAvBgNV BAMTKDhCMjM4MURCRjZGNEYyRjdDQzAyRTlEOTBDNUQyMzIxM0RFMjE1Q0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCxQ1R38a/dTW4bxbo9eQcxEwf rirQKy4N9O5TETWhqunMV/sTzw57bQ8O9YCz2G9BBQOGHn+qnIvrUhpDWZ8M5tFa iZWCyzbPWKSYNjCbVe2EcpXKLrqqc5Bu4dIIF7Zjyw6mGItOIoHSwGb+7Ady97A8 J3BYsmyLE9ADkDRb4zhuVGeYpaS9PSEdVknWe1aofj931kSJVIkFBDrJwMtUjG6t wH5DIrxnYgDrhbm2cun5GkFGKlSjfqh76KI0MULqMbYneRog3+kTdzH6bO2mHTAb nke/4nYS6sYgigyFrpRGaDB+tQjf+R7JTCNEvoY3MreZMyZhrZsx1+gr1ASDAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUiyOB2/b08vfMAunZDF0jIT3iFc8wHwYDVR0j BBgwFoAUKcBkDdkHbcBM+KOQ6nPfwODnz5owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZGFmOWYwZi00ZmIxLTQwYzAtYjM4MC01OWEzOGRiYzlhMTYvMC8yOUMwNjQwREQ5 MDc2REMwNENGOEEzOTBFQTczREZDMEUwRTdDRjlBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjlDMDY0MEREOTA3NkRDMDRDRjhBMzkwRUE3M0RGQzBFMEU3 Q0Y5QS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzRkYWY5ZjBmLTRmYjEtNDBjMC1i MzgwLTU5YTM4ZGJjOWExNi8wLzMyMzcyZTMxMzIzNDJlMzczNDJlMzAyZjMyMzMy ZDMyMzQyMDNkM2UyMDMxMzUzMjMwMzUzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEARt8SjANBgkqhkiG 9w0BAQsFAAOCAQEAa0oiOxKcxOGaYKR97AZsis0sf7T0HeczfGGXqjdIaNb9Y74n ELrCav8Acm5v3h7PslyIKnn7pEpJP8Y997nBP1pvINDuPq5vSSGdiJljKSnd5NQ7 EOcKFUE1xKW4bniCDLgDISX1Cx42L7jrt4e9FbsJk97and0FJOY8aahc7wgxkHUU oW2jqP4meTMLr3XBgjDh4jiYxSrBu0yIXFTY6T67csh74D+XgSQrwfEJm28/qvXM ZdxmvEz4exnN4RSIFSC2rwGSVifA0ifgPrNzsCemLVWbWgqSonFpv6BDUfwoSJOh PUu8Y9td1jyJu3ZSdx8gaEL4Z7dlb0T7T3fKRg== -----END CERTIFICATE-----Generated at Sun Apr 19 11:53:11 2026 by rpki-client