$ rpki-client -vvf repo-rpki.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0/32372e3132312e38332e302f32342d3234203d3e203535363532.roa File: 32372e3132312e38332e302f32342d3234203d3e203535363532.roa (raw, json) Hash identifier: 1Ap1USzQtzqwgDtQDrhH77MKkzf62RSPe2jHuhWF7VY= Subject key identifier: BA:03:B7:F5:E0:35:CF:B0:14:E4:28:F1:70:71:FB:F8:3E:F6:D8:AD Certificate issuer: /CN=930A4ED2B85AA9FE77ED90FA85044A9C80B38A46 Certificate serial: 681F9A9392B6CDE7246CF66AA0AEB2169F3235F0 Authority key identifier: 93:0A:4E:D2:B8:5A:A9:FE:77:ED:90:FA:85:04:4A:9C:80:B3:8A:46 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/930A4ED2B85AA9FE77ED90FA85044A9C80B38A46.cer Subject info access: rsync://repo-rpki.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0/32372e3132312e38332e302f32342d3234203d3e203535363532.roa Signing time: Sat 02 Aug 2025 04:00:00 +0000 ROA not before: Sat 02 Aug 2025 03:55:00 +0000 ROA not after: Sat 01 Aug 2026 04:00:00 +0000 asID: 55652 IP address blocks: 27.121.83.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0/930A4ED2B85AA9FE77ED90FA85044A9C80B38A46.crl rsync://repo-rpki.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0/930A4ED2B85AA9FE77ED90FA85044A9C80B38A46.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/930A4ED2B85AA9FE77ED90FA85044A9C80B38A46.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 21:02:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:1f:9a:93:92:b6:cd:e7:24:6c:f6:6a:a0:ae:b2:16:9f:32:35:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=930A4ED2B85AA9FE77ED90FA85044A9C80B38A46 Validity Not Before: Aug 2 03:55:00 2025 GMT Not After : Aug 1 04:00:00 2026 GMT Subject: CN=BA03B7F5E035CFB014E428F17071FBF83EF6D8AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:0c:e4:0c:d5:2a:bd:eb:b5:53:39:a9:7e:34: 36:49:29:cd:a5:8c:bf:e0:c0:78:fc:6b:7f:d9:a7: c7:a3:58:10:23:62:02:2f:00:5d:f0:03:00:cc:94: 3b:9b:40:ba:b2:61:c7:f6:c6:7f:ed:8e:7c:a1:47: a7:a6:64:b7:79:8c:8f:24:cf:6c:48:93:be:6a:91: 8d:44:ec:ef:10:cb:bc:9e:8e:af:15:8d:75:74:15: 38:9f:87:ac:08:05:62:6c:32:85:44:1c:99:2e:7f: f3:02:cc:40:b6:2f:c1:d7:d4:a7:ee:7a:df:5c:b5: 58:9c:10:f8:d7:8b:b3:eb:8d:45:29:7b:f1:47:d4: f0:97:7d:10:6c:51:99:d7:a5:88:e4:e6:b9:98:16: 80:77:18:d2:2b:55:fd:06:47:19:8c:d6:8f:88:1b: 96:bf:6d:86:f7:cf:04:64:c8:2a:da:5f:49:68:18: 71:a1:73:11:83:c2:0b:5f:48:c4:29:ed:06:a4:1c: 66:d7:d8:06:07:1a:a2:96:a5:83:87:d7:a3:e4:a6: ea:67:72:8b:0b:2e:1d:9b:24:99:61:69:e0:d2:7c: 2e:fa:9b:7d:4e:fc:89:3f:a9:73:ec:52:c3:a0:1f: 33:d5:18:e7:e5:e7:f2:8f:e6:c4:29:fe:c2:2e:3b: 72:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:03:B7:F5:E0:35:CF:B0:14:E4:28:F1:70:71:FB:F8:3E:F6:D8:AD X509v3 Authority Key Identifier: keyid:93:0A:4E:D2:B8:5A:A9:FE:77:ED:90:FA:85:04:4A:9C:80:B3:8A:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0/930A4ED2B85AA9FE77ED90FA85044A9C80B38A46.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/930A4ED2B85AA9FE77ED90FA85044A9C80B38A46.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0/32372e3132312e38332e302f32342d3234203d3e203535363532.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 27.121.83.0/24 Signature Algorithm: sha256WithRSAEncryption 6a:49:a7:53:b3:c0:b6:32:99:2e:6f:5a:c8:4c:65:2f:3e:53: b3:fd:bb:1c:e0:2f:99:8b:5b:4f:b5:96:66:3d:78:b9:74:a8: 81:a9:cc:c8:23:50:78:fd:06:4c:e3:d0:9f:7e:b1:be:99:a1: 57:2d:a8:5c:88:c8:44:1f:88:f6:8d:8e:fe:ca:49:e4:bd:33: 08:e2:7d:fe:62:3b:6e:01:f5:6b:cf:f4:13:91:53:3d:a0:87: 22:a5:79:d4:60:93:0a:92:40:01:f1:d9:71:f2:0b:9f:78:4d: 0a:db:5b:45:43:65:10:f6:0d:8d:85:78:28:99:b0:4b:b9:f0: 8e:ee:44:83:ad:22:9f:b8:3f:3c:9e:81:d9:0c:f3:0d:27:5d: 59:83:dc:26:58:51:94:f5:77:39:ee:87:18:89:4d:da:58:54: 9e:75:51:4b:6e:84:f4:b3:0b:9e:9d:8c:8c:ba:c4:7e:06:ce: 30:c0:45:4c:71:33:0a:ac:e0:69:27:96:95:41:33:c9:e8:8d: 84:c0:e9:5c:80:03:40:59:82:36:43:b8:7a:3d:34:d3:a3:cb: 55:49:c9:8c:cc:a5:7f:76:81:0d:4d:c4:19:89:a4:27:69:27: c5:70:2a:e9:50:9f:9e:be:da:94:39:46:82:60:93:b7:f0:16: 43:27:da:8d -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUaB+ak5K2zeckbPZqoK6yFp8yNfAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTMwQTRFRDJCODVBQTlGRTc3RUQ5MEZBODUwNDRBOUM4 MEIzOEE0NjAeFw0yNTA4MDIwMzU1MDBaFw0yNjA4MDEwNDAwMDBaMDMxMTAvBgNV BAMTKEJBMDNCN0Y1RTAzNUNGQjAxNEU0MjhGMTcwNzFGQkY4M0VGNkQ4QUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdDOQM1Sq967VTOal+NDZJKc2l jL/gwHj8a3/Zp8ejWBAjYgIvAF3wAwDMlDubQLqyYcf2xn/tjnyhR6emZLd5jI8k z2xIk75qkY1E7O8Qy7yejq8VjXV0FTifh6wIBWJsMoVEHJkuf/MCzEC2L8HX1Kfu et9ctVicEPjXi7PrjUUpe/FH1PCXfRBsUZnXpYjk5rmYFoB3GNIrVf0GRxmM1o+I G5a/bYb3zwRkyCraX0loGHGhcxGDwgtfSMQp7QakHGbX2AYHGqKWpYOH16Pkpupn cosLLh2bJJlhaeDSfC76m31O/Ik/qXPsUsOgHzPVGOfl5/KP5sQp/sIuO3KDAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUugO39eA1z7AU5CjxcHH7+D722K0wHwYDVR0j BBgwFoAUkwpO0rhaqf537ZD6hQRKnICzikYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZjYyODA5Yy1iZmI2LTRmZTctOGRkNi1jYTYwMjJjZGQ1NDAvMC85MzBBNEVEMkI4 NUFBOUZFNzdFRDkwRkE4NTA0NEE5QzgwQjM4QTQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTMwQTRFRDJCODVBQTlGRTc3RUQ5MEZBODUwNDRBOUM4MEIz OEE0Ni5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2FmNjI4MDljLWJmYjYtNGZlNy04 ZGQ2LWNhNjAyMmNkZDU0MC8wLzMyMzcyZTMxMzIzMTJlMzgzMzJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDM1MzUzNjM1MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAbeVMwDQYJKoZIhvcN AQELBQADggEBAGpJp1OzwLYymS5vWshMZS8+U7P9uxzgL5mLW0+1lmY9eLl0qIGp zMgjUHj9Bkzj0J9+sb6ZoVctqFyIyEQfiPaNjv7KSeS9Mwjiff5iO24B9WvP9BOR Uz2ghyKledRgkwqSQAHx2XHyC594TQrbW0VDZRD2DY2FeCiZsEu58I7uRIOtIp+4 PzyegdkM8w0nXVmD3CZYUZT1dznuhxiJTdpYVJ51UUtuhPSzC56djIy6xH4GzjDA RUxxMwqs4GknlpVBM8nojYTA6VyAA0BZgjZDuHo9NNOjy1VJyYzMpX92gQ1NxBmJ pCdpJ8VwKulQn56+2pQ5RoJgk7fwFkMn2o0= -----END CERTIFICATE-----Generated at Thu Aug 7 23:56:19 2025 by rpki-client