$ rpki-client -vvf repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/32372e3133312e332e302f32342d3234203d3e203338373533.roa File: 32372e3133312e332e302f32342d3234203d3e203338373533.roa (raw, json) Hash identifier: jhiacyV3KgqIh0kTCxpqJm647nikkbaCGHmdaBOBYW4= Subject key identifier: 36:4B:CF:B4:D7:65:AC:B4:68:6B:8F:DB:35:F0:8E:1C:BE:A0:E3:35 Certificate issuer: /CN=11C9BA28534BA44999B4BA5D6B0F28E568DF6E14 Certificate serial: 67FE8DAC58BAB978C382C0E3609EC682F80E0B55 Authority key identifier: 11:C9:BA:28:53:4B:A4:49:99:B4:BA:5D:6B:0F:28:E5:68:DF:6E:14 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/32372e3133312e332e302f32342d3234203d3e203338373533.roa Signing time: Fri 03 Apr 2026 07:00:02 +0000 ROA not before: Fri 03 Apr 2026 06:55:02 +0000 ROA not after: Fri 02 Apr 2027 07:00:02 +0000 asID: 38753 IP address blocks: 27.131.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.crl rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 12:23:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:fe:8d:ac:58:ba:b9:78:c3:82:c0:e3:60:9e:c6:82:f8:0e:0b:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11C9BA28534BA44999B4BA5D6B0F28E568DF6E14 Validity Not Before: Apr 3 06:55:02 2026 GMT Not After : Apr 2 07:00:02 2027 GMT Subject: CN=364BCFB4D765ACB4686B8FDB35F08E1CBEA0E335 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:f2:33:b5:ed:c2:6d:99:ba:37:8f:cc:f5:2a: 75:71:fd:d6:ec:d6:50:dc:f1:f9:bf:7f:d1:02:0d: 63:da:a4:72:bf:38:41:1d:9d:02:91:a7:86:6d:7e: 4a:1c:b7:da:e6:8e:b3:03:73:51:a2:a2:9a:7b:e6: 6c:2f:6a:bd:7f:63:01:f8:46:39:1b:22:ad:39:07: a6:b1:92:12:3d:27:fc:8c:5c:c2:60:19:e9:00:29: 0a:4d:04:50:65:bf:3d:b5:69:ee:e7:39:80:7a:92: c4:34:16:0a:cf:a9:e1:f7:cb:b9:d4:4d:09:8a:f8: fc:0b:bb:a8:5c:87:41:e5:60:35:75:04:37:b3:73: 74:ff:f3:40:fa:f4:17:2e:16:84:08:89:4d:5e:df: 42:d1:12:83:c0:60:67:24:da:95:dd:46:82:b3:22: 49:02:82:ab:a4:ef:54:da:08:60:58:93:06:76:31: ee:98:25:ba:f3:d7:46:d9:27:9f:78:f4:2b:f4:0f: 3a:13:14:15:6d:40:8d:2c:c9:0f:3a:55:3b:3e:0b: b2:86:8c:4a:af:c1:40:6c:e4:21:9a:92:e1:b5:e8: f6:4c:7e:9d:25:e6:d2:0d:50:e9:d5:67:af:3c:06: 20:c4:43:26:4e:fb:7c:ec:91:ec:f0:53:a7:02:d2: c6:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:4B:CF:B4:D7:65:AC:B4:68:6B:8F:DB:35:F0:8E:1C:BE:A0:E3:35 X509v3 Authority Key Identifier: keyid:11:C9:BA:28:53:4B:A4:49:99:B4:BA:5D:6B:0F:28:E5:68:DF:6E:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/32372e3133312e332e302f32342d3234203d3e203338373533.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 27.131.3.0/24 Signature Algorithm: sha256WithRSAEncryption 33:ab:26:3a:3a:c6:bb:50:ab:d9:31:35:95:c8:b9:3b:67:fa: 29:b7:2f:22:20:d3:ce:7f:c3:1c:7c:de:8d:9b:e7:99:18:7c: 51:30:7e:d6:cb:89:19:50:49:04:bc:eb:d6:c8:30:15:86:1b: c8:88:90:28:45:65:9c:fa:41:33:b9:f1:4c:a4:ac:98:02:c8: 98:5b:2d:77:d3:31:3d:d7:52:89:fd:e4:ae:06:5f:dd:c6:70: 0e:a1:2d:bd:0e:0e:ea:bf:1d:e5:51:a1:53:bb:4d:26:6c:02: 79:02:27:3b:80:04:f1:7e:5b:cf:73:af:8c:56:f2:42:78:d4: 82:71:ac:33:7e:38:97:89:81:87:f4:37:43:ba:ed:7e:90:5e: 41:a8:65:4e:2e:84:a5:34:8f:d3:44:b2:98:b8:0a:65:cf:36: 7a:aa:08:4f:98:be:bf:55:e0:3c:0b:9e:01:c3:26:07:49:ea: 41:5e:a8:3a:ca:40:ce:4d:d8:54:cd:56:82:fa:34:04:5f:2a: 42:bc:25:cb:81:07:21:29:ca:76:a4:39:2f:a4:22:be:4b:fd: 67:65:14:cf:5a:54:df:46:8f:05:ad:e1:36:2d:fb:0f:af:52: 65:8a:47:a4:e5:58:09:c1:e7:b3:e3:d6:73:2b:68:e0:c0:25: 90:2d:f5:98 -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgIUZ/6NrFi6uXjDgsDjYJ7GgvgOC1UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTFDOUJBMjg1MzRCQTQ0OTk5QjRCQTVENkIwRjI4RTU2 OERGNkUxNDAeFw0yNjA0MDMwNjU1MDJaFw0yNzA0MDIwNzAwMDJaMDMxMTAvBgNV BAMTKDM2NEJDRkI0RDc2NUFDQjQ2ODZCOEZEQjM1RjA4RTFDQkVBMEUzMzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC88jO17cJtmbo3j8z1KnVx/dbs 1lDc8fm/f9ECDWPapHK/OEEdnQKRp4Ztfkoct9rmjrMDc1Giopp75mwvar1/YwH4 RjkbIq05B6axkhI9J/yMXMJgGekAKQpNBFBlvz21ae7nOYB6ksQ0FgrPqeH3y7nU TQmK+PwLu6hch0HlYDV1BDezc3T/80D69BcuFoQIiU1e30LREoPAYGck2pXdRoKz IkkCgquk71TaCGBYkwZ2Me6YJbrz10bZJ5949Cv0DzoTFBVtQI0syQ86VTs+C7KG jEqvwUBs5CGakuG16PZMfp0l5tINUOnVZ688BiDEQyZO+3zskezwU6cC0sZHAgMB AAGjggItMIICKTAdBgNVHQ4EFgQUNkvPtNdlrLRoa4/bNfCOHL6g4zUwHwYDVR0j BBgwFoAUEcm6KFNLpEmZtLpdaw8o5WjfbhQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MDZiNjY3My00N2ExLTQ1ZTUtYjZjMi00MmFiOGI0NzYyNDkvMC8xMUM5QkEyODUz NEJBNDQ5OTlCNEJBNUQ2QjBGMjhFNTY4REY2RTE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTFDOUJBMjg1MzRCQTQ0OTk5QjRCQTVENkIwRjI4RTU2OERG NkUxNC5jZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTA2YjY2NzMtNDdhMS00NWU1LWI2 YzItNDJhYjhiNDc2MjQ5LzAvMzIzNzJlMzEzMzMxMmUzMzJlMzAyZjMyMzQyZDMy MzQyMDNkM2UyMDMzMzgzNzM1MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAbgwMwDQYJKoZIhvcNAQEL BQADggEBADOrJjo6xrtQq9kxNZXIuTtn+im3LyIg085/wxx83o2b55kYfFEwftbL iRlQSQS869bIMBWGG8iIkChFZZz6QTO58UykrJgCyJhbLXfTMT3XUon95K4GX93G cA6hLb0ODuq/HeVRoVO7TSZsAnkCJzuABPF+W89zr4xW8kJ41IJxrDN+OJeJgYf0 N0O67X6QXkGoZU4uhKU0j9NEspi4CmXPNnqqCE+Yvr9V4DwLngHDJgdJ6kFeqDrK QM5N2FTNVoL6NARfKkK8JcuBByEpynakOS+kIr5L/WdlFM9aVN9GjwWt4TYt+w+v UmWKR6TlWAnB57Pj1nMraODAJZAt9Zg= -----END CERTIFICATE-----Generated at Sun Apr 19 11:54:17 2026 by rpki-client