$ rpki-client -vvf repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/32372e3133312e342e302f32342d3234203d3e203338373533.roa File: 32372e3133312e342e302f32342d3234203d3e203338373533.roa (raw, json) Hash identifier: Q8CHq2+StrBQm/R6JfH7wq4+THbETnwFr6LoNnfXRcs= Subject key identifier: 2D:CA:2D:95:EF:70:ED:CE:9F:A0:BF:A7:A1:A0:94:91:DC:DB:6E:F2 Certificate issuer: /CN=11C9BA28534BA44999B4BA5D6B0F28E568DF6E14 Certificate serial: 398ECAFCD32BE081E1CE225314A0EAEEF3C8689A Authority key identifier: 11:C9:BA:28:53:4B:A4:49:99:B4:BA:5D:6B:0F:28:E5:68:DF:6E:14 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/32372e3133312e342e302f32342d3234203d3e203338373533.roa Signing time: Fri 03 Apr 2026 07:00:01 +0000 ROA not before: Fri 03 Apr 2026 06:55:01 +0000 ROA not after: Fri 02 Apr 2027 07:00:01 +0000 asID: 38753 IP address blocks: 27.131.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.crl rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 12:23:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:8e:ca:fc:d3:2b:e0:81:e1:ce:22:53:14:a0:ea:ee:f3:c8:68:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11C9BA28534BA44999B4BA5D6B0F28E568DF6E14 Validity Not Before: Apr 3 06:55:01 2026 GMT Not After : Apr 2 07:00:01 2027 GMT Subject: CN=2DCA2D95EF70EDCE9FA0BFA7A1A09491DCDB6EF2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:a6:d0:05:ac:83:92:72:0d:e2:1a:02:93:ac: 58:3d:d4:10:d1:14:95:91:72:fd:65:4d:b0:9b:66: 68:35:c9:6a:16:53:46:5a:ed:e0:1b:8b:df:3f:4e: cb:30:23:0c:40:a5:0d:48:22:a6:33:88:11:41:05: f3:f1:4d:4c:e8:43:38:c0:d6:c4:42:4d:d1:aa:cd: 7b:9f:18:79:db:35:91:4f:24:99:61:3a:bc:00:61: b3:c0:48:99:37:e7:1d:94:ed:e8:86:12:44:75:c4: 8a:72:c0:14:f4:40:a6:58:dc:62:40:61:40:87:21: 22:bf:4e:19:60:f4:a3:94:48:21:25:ba:fa:fd:24: 0c:b2:c8:ad:0c:67:68:30:6f:f8:26:1e:8e:7f:25: 31:3e:0c:e7:d8:52:ea:ce:61:ad:14:fa:23:35:ed: 59:e8:1e:74:73:ff:f9:c0:2a:ec:05:80:40:64:95: f2:ea:95:08:4a:73:76:9e:59:b6:a2:05:3a:b8:22: 1d:00:a1:2a:7a:89:ba:2c:6b:3e:dd:41:0a:0a:02: d8:87:23:49:a0:41:57:27:fd:e6:69:1d:54:c5:f4: d3:c4:af:93:db:cb:d5:36:36:87:7f:21:1e:df:4c: 06:2a:05:05:ae:fd:09:65:42:68:f1:92:e9:58:76: ad:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:CA:2D:95:EF:70:ED:CE:9F:A0:BF:A7:A1:A0:94:91:DC:DB:6E:F2 X509v3 Authority Key Identifier: keyid:11:C9:BA:28:53:4B:A4:49:99:B4:BA:5D:6B:0F:28:E5:68:DF:6E:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/32372e3133312e342e302f32342d3234203d3e203338373533.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 27.131.4.0/24 Signature Algorithm: sha256WithRSAEncryption 38:d1:8d:e2:f1:1f:cc:7f:56:ed:1f:e2:44:d8:da:9f:9b:94: e1:d7:fa:6b:88:c2:a8:c1:0d:d2:26:56:27:27:df:c3:7c:56: 9e:5f:e7:63:3f:6c:b7:a0:f4:48:2e:f3:13:2b:1c:d3:2e:32: 62:21:09:1e:0e:ee:e6:0e:f1:4c:37:11:23:9b:b2:b5:13:40: 15:5e:16:58:1d:4d:c9:ac:a0:95:b7:6b:0d:00:ba:4a:9f:70: 3e:c6:f1:76:0f:80:5c:d2:12:25:f1:78:d5:51:1a:79:d9:6b: af:d6:0c:f3:12:e7:97:1b:89:82:f3:d1:66:65:7e:30:48:a5: e4:50:61:84:cd:43:49:62:97:e3:1c:56:5f:a1:7f:43:bf:ea: 0f:fc:d5:26:d8:e7:7f:51:cb:66:ce:84:ff:56:55:c9:bf:da: 34:00:9c:5a:b3:48:4d:37:19:e3:98:d6:2f:87:5d:5e:72:9a: e0:35:39:bb:fd:77:b2:c6:6a:e0:16:c7:e6:c5:c1:99:11:5e: b7:a0:ec:14:ba:46:8b:3d:ee:7c:c6:ec:1e:17:14:ec:17:40: 10:87:a2:93:15:10:2a:ae:7f:ab:1c:1c:95:fe:d1:c9:fe:b6: 66:da:5b:86:a8:cc:b2:3f:fd:ff:d3:cd:17:ef:fe:e9:f4:53: 46:ff:69:7b -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgIUOY7K/NMr4IHhziJTFKDq7vPIaJowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTFDOUJBMjg1MzRCQTQ0OTk5QjRCQTVENkIwRjI4RTU2 OERGNkUxNDAeFw0yNjA0MDMwNjU1MDFaFw0yNzA0MDIwNzAwMDFaMDMxMTAvBgNV BAMTKDJEQ0EyRDk1RUY3MEVEQ0U5RkEwQkZBN0ExQTA5NDkxRENEQjZFRjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwptAFrIOScg3iGgKTrFg91BDR FJWRcv1lTbCbZmg1yWoWU0Za7eAbi98/TsswIwxApQ1IIqYziBFBBfPxTUzoQzjA 1sRCTdGqzXufGHnbNZFPJJlhOrwAYbPASJk35x2U7eiGEkR1xIpywBT0QKZY3GJA YUCHISK/Thlg9KOUSCEluvr9JAyyyK0MZ2gwb/gmHo5/JTE+DOfYUurOYa0U+iM1 7VnoHnRz//nAKuwFgEBklfLqlQhKc3aeWbaiBTq4Ih0AoSp6ibosaz7dQQoKAtiH I0mgQVcn/eZpHVTF9NPEr5Pby9U2Nod/IR7fTAYqBQWu/QllQmjxkulYdq2vAgMB AAGjggItMIICKTAdBgNVHQ4EFgQULcotle9w7c6foL+noaCUkdzbbvIwHwYDVR0j BBgwFoAUEcm6KFNLpEmZtLpdaw8o5WjfbhQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MDZiNjY3My00N2ExLTQ1ZTUtYjZjMi00MmFiOGI0NzYyNDkvMC8xMUM5QkEyODUz NEJBNDQ5OTlCNEJBNUQ2QjBGMjhFNTY4REY2RTE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTFDOUJBMjg1MzRCQTQ0OTk5QjRCQTVENkIwRjI4RTU2OERG NkUxNC5jZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTA2YjY2NzMtNDdhMS00NWU1LWI2 YzItNDJhYjhiNDc2MjQ5LzAvMzIzNzJlMzEzMzMxMmUzNDJlMzAyZjMyMzQyZDMy MzQyMDNkM2UyMDMzMzgzNzM1MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAbgwQwDQYJKoZIhvcNAQEL BQADggEBADjRjeLxH8x/Vu0f4kTY2p+blOHX+muIwqjBDdImVicn38N8Vp5f52M/ bLeg9Egu8xMrHNMuMmIhCR4O7uYO8Uw3ESObsrUTQBVeFlgdTcmsoJW3aw0Aukqf cD7G8XYPgFzSEiXxeNVRGnnZa6/WDPMS55cbiYLz0WZlfjBIpeRQYYTNQ0lil+Mc Vl+hf0O/6g/81SbY539Ry2bOhP9WVcm/2jQAnFqzSE03GeOY1i+HXV5ymuA1Obv9 d7LGauAWx+bFwZkRXreg7BS6Ros97nzG7B4XFOwXQBCHopMVECquf6scHJX+0cn+ tmbaW4aozLI//f/TzRfv/un0U0b/aXs= -----END CERTIFICATE-----Generated at Sun Apr 19 11:54:17 2026 by rpki-client