$ rpki-client -vvf repo-rpki.idnic.net/repo/4daf9f0f-4fb1-40c0-b380-59a38dbc9a16/0/32372e3132342e37352e302f32342d3234203d3e20313532303532.roa File: 32372e3132342e37352e302f32342d3234203d3e20313532303532.roa (raw, json) Hash identifier: 50/h0X48yF6XiQdiL01GD/aPBUnfpp8V0OZDrNu+Wug= Subject key identifier: 8A:E9:94:A0:5F:90:5B:3B:66:00:51:1D:B6:34:1B:A0:BF:27:35:53 Certificate issuer: /CN=29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A Certificate serial: 12BA71070E29A0264A376E9985B3A0EA8F793C86 Authority key identifier: 29:C0:64:0D:D9:07:6D:C0:4C:F8:A3:90:EA:73:DF:C0:E0:E7:CF:9A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4daf9f0f-4fb1-40c0-b380-59a38dbc9a16/0/32372e3132342e37352e302f32342d3234203d3e20313532303532.roa Signing time: Fri 03 Apr 2026 14:00:00 +0000 ROA not before: Fri 03 Apr 2026 13:55:00 +0000 ROA not after: Fri 02 Apr 2027 14:00:00 +0000 asID: 152052 IP address blocks: 27.124.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4daf9f0f-4fb1-40c0-b380-59a38dbc9a16/0/29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.crl rsync://repo-rpki.idnic.net/repo/4daf9f0f-4fb1-40c0-b380-59a38dbc9a16/0/29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 10:15:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:ba:71:07:0e:29:a0:26:4a:37:6e:99:85:b3:a0:ea:8f:79:3c:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A Validity Not Before: Apr 3 13:55:00 2026 GMT Not After : Apr 2 14:00:00 2027 GMT Subject: CN=8AE994A05F905B3B6600511DB6341BA0BF273553 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:19:80:2b:32:4a:37:da:28:11:9f:7d:d1:d0: 66:cf:23:69:3c:ab:e4:ab:82:68:3a:d5:37:b7:45: bb:47:ff:5c:59:20:a5:16:57:e2:21:24:16:75:e7: 44:09:7e:de:8f:e0:3b:a4:8b:32:e1:b3:ff:ff:d2: 43:3f:b1:f9:df:a1:4b:9f:7c:3b:bf:3b:d4:fb:22: cb:b2:aa:3c:9b:2e:7c:88:ca:99:39:1c:7c:1d:5b: ad:ca:7e:f7:22:2f:d1:19:bd:d0:80:c3:46:66:fb: e7:86:5f:8a:1d:9d:2c:2d:00:83:ab:59:87:ef:e5: 5e:48:b5:d2:8c:54:bc:e7:56:d8:7c:8c:e5:d4:9a: c5:87:fc:e2:ec:c3:34:59:36:0a:35:b9:9e:ed:34: 17:db:cb:68:6b:7c:39:b6:49:05:62:1b:2d:53:a3: 80:e4:bc:6d:2b:fe:cb:45:08:00:85:f5:84:4d:c2: cd:45:6c:90:66:05:b6:7e:ec:2f:ee:e6:16:2c:e7: 1a:eb:ff:f1:ee:7f:f2:e9:95:ba:10:60:16:d7:70: 1c:41:20:6b:f9:6a:ba:06:65:da:d7:06:c6:d8:b2: 5f:b6:b9:bd:2f:ee:8d:24:6c:c1:11:d7:cf:d0:82: 18:3c:ab:86:b9:3e:9a:f2:9b:14:3a:87:e5:fa:70: 6e:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:E9:94:A0:5F:90:5B:3B:66:00:51:1D:B6:34:1B:A0:BF:27:35:53 X509v3 Authority Key Identifier: keyid:29:C0:64:0D:D9:07:6D:C0:4C:F8:A3:90:EA:73:DF:C0:E0:E7:CF:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4daf9f0f-4fb1-40c0-b380-59a38dbc9a16/0/29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4daf9f0f-4fb1-40c0-b380-59a38dbc9a16/0/32372e3132342e37352e302f32342d3234203d3e20313532303532.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 27.124.75.0/24 Signature Algorithm: sha256WithRSAEncryption 5e:40:d0:2b:50:a7:bf:67:71:e3:b0:8b:f1:ac:b8:aa:c9:85: 8e:5e:0d:79:be:b5:37:08:16:9b:22:e7:7d:c7:f8:0e:17:f8: 63:8e:d7:ce:c7:10:91:1b:b7:7e:06:40:ae:72:6a:31:00:0d: ad:a6:5b:fa:63:fe:3d:6b:39:65:12:f1:fc:bd:7e:19:d0:f3: 7e:fc:8c:00:a9:02:b2:1f:ed:40:b8:de:2d:b6:22:70:b7:f5: ba:1c:98:c9:c6:98:d0:41:0e:be:05:76:cc:91:96:52:2f:d4: 17:c3:44:87:7f:ab:8c:e0:4a:3a:6d:97:89:4d:0a:0f:5d:45: 41:d7:a6:65:cd:3f:00:50:10:fd:dc:d7:f3:9f:f8:85:45:4a: 6b:fc:9a:6e:d1:69:38:ec:79:b5:81:19:b3:0e:91:b6:c4:f3: 9c:fd:b5:42:22:e5:05:e4:34:2e:1a:e4:47:70:e3:d3:73:65: a3:19:23:e0:6d:c8:07:b4:70:5b:c7:23:e3:05:1b:dd:0c:28: b4:5c:e3:d0:79:8e:99:0f:fa:2e:1a:90:91:58:3b:30:39:b3: 37:29:29:5b:0e:f9:7a:f2:1b:ef:51:05:2f:bb:7a:1e:50:0a: 26:7e:db:dd:70:20:93:82:f0:23:21:db:c1:30:57:56:ab:ff: 39:1b:4e:88 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUErpxBw4poCZKN26ZhbOg6o95PIYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjlDMDY0MEREOTA3NkRDMDRDRjhBMzkwRUE3M0RGQzBF MEU3Q0Y5QTAeFw0yNjA0MDMxMzU1MDBaFw0yNzA0MDIxNDAwMDBaMDMxMTAvBgNV BAMTKDhBRTk5NEEwNUY5MDVCM0I2NjAwNTExREI2MzQxQkEwQkYyNzM1NTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaGYArMko32igRn33R0GbPI2k8 q+Srgmg61Te3RbtH/1xZIKUWV+IhJBZ150QJft6P4DukizLhs///0kM/sfnfoUuf fDu/O9T7IsuyqjybLnyIypk5HHwdW63KfvciL9EZvdCAw0Zm++eGX4odnSwtAIOr WYfv5V5ItdKMVLznVth8jOXUmsWH/OLswzRZNgo1uZ7tNBfby2hrfDm2SQViGy1T o4DkvG0r/stFCACF9YRNws1FbJBmBbZ+7C/u5hYs5xrr//Huf/LplboQYBbXcBxB IGv5aroGZdrXBsbYsl+2ub0v7o0kbMER18/Qghg8q4a5PprymxQ6h+X6cG4TAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUiumUoF+QWztmAFEdtjQboL8nNVMwHwYDVR0j BBgwFoAUKcBkDdkHbcBM+KOQ6nPfwODnz5owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZGFmOWYwZi00ZmIxLTQwYzAtYjM4MC01OWEzOGRiYzlhMTYvMC8yOUMwNjQwREQ5 MDc2REMwNENGOEEzOTBFQTczREZDMEUwRTdDRjlBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjlDMDY0MEREOTA3NkRDMDRDRjhBMzkwRUE3M0RGQzBFMEU3 Q0Y5QS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzRkYWY5ZjBmLTRmYjEtNDBjMC1i MzgwLTU5YTM4ZGJjOWExNi8wLzMyMzcyZTMxMzIzNDJlMzczNTJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMxMzUzMjMwMzUzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEABt8SzANBgkqhkiG 9w0BAQsFAAOCAQEAXkDQK1Cnv2dx47CL8ay4qsmFjl4Neb61NwgWmyLnfcf4Dhf4 Y47XzscQkRu3fgZArnJqMQANraZb+mP+PWs5ZRLx/L1+GdDzfvyMAKkCsh/tQLje LbYicLf1uhyYycaY0EEOvgV2zJGWUi/UF8NEh3+rjOBKOm2XiU0KD11FQdemZc0/ AFAQ/dzX85/4hUVKa/yabtFpOOx5tYEZsw6RtsTznP21QiLlBeQ0LhrkR3Dj03Nl oxkj4G3IB7RwW8cj4wUb3QwotFzj0HmOmQ/6LhqQkVg7MDmzNykpWw75evIb71EF L7t6HlAKJn7b3XAgk4LwIyHbwTBXVqv/ORtOiA== -----END CERTIFICATE-----Generated at Sun Apr 19 11:53:11 2026 by rpki-client