$ rpki-client -vvf repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/32372e3133312e312e302f32342d3234203d3e203338373533.roa File: 32372e3133312e312e302f32342d3234203d3e203338373533.roa (raw, json) Hash identifier: O16WfTE8MntMc3oInkht1ztDcjpW1Fa+OtvQua35Qz0= Subject key identifier: 55:A7:7F:C2:3A:5A:A9:3C:33:E0:13:1F:CC:4A:B8:B8:81:61:56:14 Certificate issuer: /CN=11C9BA28534BA44999B4BA5D6B0F28E568DF6E14 Certificate serial: 5A31FFE1E55CE529DB112EF3C9F67FADE7FDF0C9 Authority key identifier: 11:C9:BA:28:53:4B:A4:49:99:B4:BA:5D:6B:0F:28:E5:68:DF:6E:14 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/32372e3133312e312e302f32342d3234203d3e203338373533.roa Signing time: Tue 05 Aug 2025 03:00:01 +0000 ROA not before: Tue 05 Aug 2025 02:55:01 +0000 ROA not after: Tue 04 Aug 2026 03:00:01 +0000 asID: 38753 IP address blocks: 27.131.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.crl rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 15:11:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:31:ff:e1:e5:5c:e5:29:db:11:2e:f3:c9:f6:7f:ad:e7:fd:f0:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11C9BA28534BA44999B4BA5D6B0F28E568DF6E14 Validity Not Before: Aug 5 02:55:01 2025 GMT Not After : Aug 4 03:00:01 2026 GMT Subject: CN=55A77FC23A5AA93C33E0131FCC4AB8B881615614 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:32:60:02:f6:54:c2:34:4c:e8:01:02:3b:52: 0e:be:de:15:49:9c:25:71:ae:41:e5:50:c1:28:b3: e1:61:4a:07:a3:d8:38:42:3a:5f:de:f0:a2:9d:8a: 05:05:89:76:5a:db:d6:6f:1d:28:b3:2d:43:03:46: 5d:2e:93:9c:f3:b9:47:46:6f:da:38:ee:6c:32:f5: 77:7c:85:0f:ac:fb:02:09:15:4a:38:52:2b:e7:1e: 88:7f:78:4f:41:f3:18:20:22:8a:41:fb:c8:3b:03: 08:be:17:96:02:61:8e:b7:c1:a5:8a:a2:27:b9:01: 4a:b1:15:25:32:a6:e9:e3:80:cf:c8:13:71:86:76: 49:90:5e:ea:65:f0:7a:3f:d5:d0:e0:d2:68:4c:c1: ba:af:94:73:ec:fd:6d:37:fd:84:32:bc:dd:11:c4: 18:9c:60:6b:99:91:2b:96:90:af:67:38:9f:31:d2: 3f:0c:0a:a4:df:e3:af:4e:22:64:f9:6f:16:c9:43: ca:87:43:bb:87:e7:d8:75:bc:60:8a:8f:e8:cd:c1: 67:ba:1e:5e:f1:fc:53:6b:75:5b:ce:66:2b:21:1e: b9:80:a8:7e:3d:e8:a6:f3:52:ad:0d:3b:b3:b4:42: 27:59:2c:c0:74:b2:e7:ef:0b:0d:c0:2f:a6:48:55: a0:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:A7:7F:C2:3A:5A:A9:3C:33:E0:13:1F:CC:4A:B8:B8:81:61:56:14 X509v3 Authority Key Identifier: keyid:11:C9:BA:28:53:4B:A4:49:99:B4:BA:5D:6B:0F:28:E5:68:DF:6E:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/32372e3133312e312e302f32342d3234203d3e203338373533.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 27.131.1.0/24 Signature Algorithm: sha256WithRSAEncryption 8e:0b:e4:5c:be:9a:9c:f8:3b:03:b6:77:80:a6:e2:f4:60:63: 7d:b6:1a:ab:cb:c0:58:a1:1c:73:02:1b:07:12:75:98:57:d8: 41:f6:95:2f:78:7c:98:a2:4b:d4:fa:c6:3a:90:38:74:e9:83: dc:cc:55:e9:8d:aa:f4:7a:47:64:66:96:ef:8c:e3:4c:88:5d: cc:88:fc:72:ae:fe:bf:1b:47:b6:03:53:76:db:66:13:96:1f: b6:15:e7:8f:61:01:15:72:51:2c:59:40:0a:b0:92:15:ef:4d: c9:c3:2a:7b:58:9f:84:8b:4b:e0:0f:10:69:4a:f7:56:cb:81: e9:5b:d3:e2:57:4d:d9:d5:88:ec:27:07:17:5b:86:ff:2a:23: 8a:f3:31:d7:f1:fd:f2:ad:ad:6a:5a:82:68:f1:b5:30:7f:77: 37:4b:6e:6f:d8:16:1f:6c:b8:cb:4f:3d:58:d7:b0:78:d4:ed: da:a3:03:6e:15:c5:e0:37:ab:5b:b4:34:a6:d6:5b:44:41:1c: 2f:ec:9d:b9:0c:c4:05:ab:11:1c:98:6d:9e:bc:bf:06:8c:17: 0d:c3:2b:ce:88:b4:12:4b:31:f1:0b:77:8a:8b:9a:34:7f:ce: 4a:12:91:70:cd:a3:85:34:c2:b9:46:d9:d6:bb:8e:91:ee:f4: 58:67:86:69 -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgIUWjH/4eVc5SnbES7zyfZ/ref98MkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTFDOUJBMjg1MzRCQTQ0OTk5QjRCQTVENkIwRjI4RTU2 OERGNkUxNDAeFw0yNTA4MDUwMjU1MDFaFw0yNjA4MDQwMzAwMDFaMDMxMTAvBgNV BAMTKDU1QTc3RkMyM0E1QUE5M0MzM0UwMTMxRkNDNEFCOEI4ODE2MTU2MTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIMmAC9lTCNEzoAQI7Ug6+3hVJ nCVxrkHlUMEos+FhSgej2DhCOl/e8KKdigUFiXZa29ZvHSizLUMDRl0uk5zzuUdG b9o47mwy9Xd8hQ+s+wIJFUo4UivnHoh/eE9B8xggIopB+8g7Awi+F5YCYY63waWK oie5AUqxFSUypunjgM/IE3GGdkmQXupl8Ho/1dDg0mhMwbqvlHPs/W03/YQyvN0R xBicYGuZkSuWkK9nOJ8x0j8MCqTf469OImT5bxbJQ8qHQ7uH59h1vGCKj+jNwWe6 Hl7x/FNrdVvOZishHrmAqH496KbzUq0NO7O0QidZLMB0sufvCw3AL6ZIVaBBAgMB AAGjggItMIICKTAdBgNVHQ4EFgQUVad/wjpaqTwz4BMfzEq4uIFhVhQwHwYDVR0j BBgwFoAUEcm6KFNLpEmZtLpdaw8o5WjfbhQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MDZiNjY3My00N2ExLTQ1ZTUtYjZjMi00MmFiOGI0NzYyNDkvMC8xMUM5QkEyODUz NEJBNDQ5OTlCNEJBNUQ2QjBGMjhFNTY4REY2RTE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTFDOUJBMjg1MzRCQTQ0OTk5QjRCQTVENkIwRjI4RTU2OERG NkUxNC5jZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTA2YjY2NzMtNDdhMS00NWU1LWI2 YzItNDJhYjhiNDc2MjQ5LzAvMzIzNzJlMzEzMzMxMmUzMTJlMzAyZjMyMzQyZDMy MzQyMDNkM2UyMDMzMzgzNzM1MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAbgwEwDQYJKoZIhvcNAQEL BQADggEBAI4L5Fy+mpz4OwO2d4Cm4vRgY322GqvLwFihHHMCGwcSdZhX2EH2lS94 fJiiS9T6xjqQOHTpg9zMVemNqvR6R2Rmlu+M40yIXcyI/HKu/r8bR7YDU3bbZhOW H7YV549hARVyUSxZQAqwkhXvTcnDKntYn4SLS+APEGlK91bLgelb0+JXTdnViOwn Bxdbhv8qI4rzMdfx/fKtrWpagmjxtTB/dzdLbm/YFh9suMtPPVjXsHjU7dqjA24V xeA3q1u0NKbWW0RBHC/snbkMxAWrERyYbZ68vwaMFw3DK86ItBJLMfELd4qLmjR/ zkoSkXDNo4U0wrlG2da7jpHu9Fhnhmk= -----END CERTIFICATE-----Generated at Sat Aug 9 20:41:25 2025 by rpki-client