$ rpki-client -vvf repo-rpki.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0/32372e3132312e38342e302f32342d3234203d3e203535363532.roa File: 32372e3132312e38342e302f32342d3234203d3e203535363532.roa (raw, json) Hash identifier: bA5Fx/rOlnkAyIC1kdWrOaLkxDABB/Vvu2ebi0eEf0Q= Subject key identifier: 5C:90:F1:FF:91:A4:DC:EF:94:8F:B9:55:5E:E5:FD:F4:03:C0:7E:DF Certificate issuer: /CN=930A4ED2B85AA9FE77ED90FA85044A9C80B38A46 Certificate serial: 450BC10D6B1D427E78CACA98324C9375A37C0BD1 Authority key identifier: 93:0A:4E:D2:B8:5A:A9:FE:77:ED:90:FA:85:04:4A:9C:80:B3:8A:46 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/930A4ED2B85AA9FE77ED90FA85044A9C80B38A46.cer Subject info access: rsync://repo-rpki.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0/32372e3132312e38342e302f32342d3234203d3e203535363532.roa Signing time: Sat 02 Aug 2025 04:00:00 +0000 ROA not before: Sat 02 Aug 2025 03:55:00 +0000 ROA not after: Sat 01 Aug 2026 04:00:00 +0000 asID: 55652 IP address blocks: 27.121.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0/930A4ED2B85AA9FE77ED90FA85044A9C80B38A46.crl rsync://repo-rpki.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0/930A4ED2B85AA9FE77ED90FA85044A9C80B38A46.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/930A4ED2B85AA9FE77ED90FA85044A9C80B38A46.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 21:02:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:0b:c1:0d:6b:1d:42:7e:78:ca:ca:98:32:4c:93:75:a3:7c:0b:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=930A4ED2B85AA9FE77ED90FA85044A9C80B38A46 Validity Not Before: Aug 2 03:55:00 2025 GMT Not After : Aug 1 04:00:00 2026 GMT Subject: CN=5C90F1FF91A4DCEF948FB9555EE5FDF403C07EDF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:8d:0f:32:dc:26:36:4d:a5:37:78:37:31:72: b2:c1:8c:ba:e6:67:26:0a:f7:e4:86:7e:0d:26:5b: 52:16:95:fa:77:b6:02:e1:b6:4e:8f:b7:0e:48:ae: fd:49:fa:30:5a:19:40:40:37:67:0d:da:5a:7a:ad: 73:cb:48:47:13:ae:15:c6:3c:e5:84:8e:5d:1b:ff: 9f:0d:4c:6f:b5:f0:ae:e0:20:c1:e8:e4:f9:ea:a8: df:29:85:4f:57:a0:a1:9c:05:83:4b:9e:f2:6d:42: 68:d6:ed:2c:53:fc:b9:60:8b:34:ed:ce:3f:c6:6d: 2a:1f:e3:95:00:08:27:42:7c:87:98:1f:52:35:10: 58:fc:01:10:11:a2:fd:0a:65:30:b8:7f:cb:2b:69: a3:2a:c3:53:1f:5a:fb:4c:ed:3c:60:dd:7f:13:29: 52:72:eb:4e:dd:e4:78:b0:75:b5:8f:38:01:2c:81: f9:60:86:d2:fb:c7:2b:68:74:23:4f:6c:a9:51:8e: 2e:10:35:ed:6c:a6:e3:92:d3:e2:01:59:09:d8:84: 93:71:d8:4e:b0:6b:9f:20:f2:23:d1:1e:f0:d4:86: 2b:50:1b:4b:c2:65:9e:61:d8:1a:ef:6b:e9:98:b8: 8e:5b:bc:97:e3:a1:64:56:34:21:71:07:48:e2:65: 7d:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:90:F1:FF:91:A4:DC:EF:94:8F:B9:55:5E:E5:FD:F4:03:C0:7E:DF X509v3 Authority Key Identifier: keyid:93:0A:4E:D2:B8:5A:A9:FE:77:ED:90:FA:85:04:4A:9C:80:B3:8A:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0/930A4ED2B85AA9FE77ED90FA85044A9C80B38A46.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/930A4ED2B85AA9FE77ED90FA85044A9C80B38A46.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0/32372e3132312e38342e302f32342d3234203d3e203535363532.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 27.121.84.0/24 Signature Algorithm: sha256WithRSAEncryption 41:eb:ff:d3:d9:6a:b3:b9:71:07:c6:d5:11:cc:9a:f6:14:87: 35:8c:85:9d:b7:3d:8b:90:5a:dd:2e:bb:45:42:75:0d:92:d2: e1:30:07:c3:5f:85:13:b9:78:ff:b8:9d:1a:79:df:69:be:9b: e4:de:20:29:f8:b5:3c:bd:58:8a:c9:3f:98:76:97:80:33:4c: 32:1d:04:a5:d7:cb:26:cb:24:f0:7d:f8:11:9c:86:ba:2d:13: 58:95:2e:4c:aa:52:f2:28:53:a5:8a:ea:aa:1a:ee:a2:78:f3: 20:ec:68:a0:38:9d:c6:b4:e9:3e:b6:c3:1e:98:73:7a:87:39: c2:80:b2:94:9d:d9:80:0c:de:e2:d6:4e:9c:0c:4b:f2:11:53: 80:55:fb:2b:3f:de:b6:55:9f:17:f4:90:8f:e2:a8:92:bf:c9: 1e:c3:63:40:4a:b7:72:e6:a2:1c:5f:5a:7e:ab:b0:07:fe:57: 4b:3a:c4:fc:51:ad:43:58:a8:37:7f:ef:aa:42:12:2c:42:df: ef:d9:23:21:00:79:e3:e2:c0:46:4d:ae:01:5d:d3:74:04:7e: 0c:41:30:73:5f:62:59:2c:2d:36:8d:5c:0a:e7:c3:01:ed:55: 0e:6a:de:bc:13:be:4b:23:2c:6d:b9:18:39:18:fb:f2:fc:71: 67:b6:ff:37 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIURQvBDWsdQn54ysqYMkyTdaN8C9EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTMwQTRFRDJCODVBQTlGRTc3RUQ5MEZBODUwNDRBOUM4 MEIzOEE0NjAeFw0yNTA4MDIwMzU1MDBaFw0yNjA4MDEwNDAwMDBaMDMxMTAvBgNV BAMTKDVDOTBGMUZGOTFBNERDRUY5NDhGQjk1NTVFRTVGREY0MDNDMDdFREYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzjQ8y3CY2TaU3eDcxcrLBjLrm ZyYK9+SGfg0mW1IWlfp3tgLhtk6Ptw5Irv1J+jBaGUBAN2cN2lp6rXPLSEcTrhXG POWEjl0b/58NTG+18K7gIMHo5PnqqN8phU9XoKGcBYNLnvJtQmjW7SxT/LlgizTt zj/GbSof45UACCdCfIeYH1I1EFj8ARARov0KZTC4f8sraaMqw1MfWvtM7Txg3X8T KVJy607d5HiwdbWPOAEsgflghtL7xytodCNPbKlRji4QNe1spuOS0+IBWQnYhJNx 2E6wa58g8iPRHvDUhitQG0vCZZ5h2Brva+mYuI5bvJfjoWRWNCFxB0jiZX3pAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUXJDx/5Gk3O+Uj7lVXuX99APAft8wHwYDVR0j BBgwFoAUkwpO0rhaqf537ZD6hQRKnICzikYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZjYyODA5Yy1iZmI2LTRmZTctOGRkNi1jYTYwMjJjZGQ1NDAvMC85MzBBNEVEMkI4 NUFBOUZFNzdFRDkwRkE4NTA0NEE5QzgwQjM4QTQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTMwQTRFRDJCODVBQTlGRTc3RUQ5MEZBODUwNDRBOUM4MEIz OEE0Ni5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2FmNjI4MDljLWJmYjYtNGZlNy04 ZGQ2LWNhNjAyMmNkZDU0MC8wLzMyMzcyZTMxMzIzMTJlMzgzNDJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDM1MzUzNjM1MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAbeVQwDQYJKoZIhvcN AQELBQADggEBAEHr/9PZarO5cQfG1RHMmvYUhzWMhZ23PYuQWt0uu0VCdQ2S0uEw B8NfhRO5eP+4nRp532m+m+TeICn4tTy9WIrJP5h2l4AzTDIdBKXXyybLJPB9+BGc hrotE1iVLkyqUvIoU6WK6qoa7qJ48yDsaKA4nca06T62wx6Yc3qHOcKAspSd2YAM 3uLWTpwMS/IRU4BV+ys/3rZVnxf0kI/iqJK/yR7DY0BKt3LmohxfWn6rsAf+V0s6 xPxRrUNYqDd/76pCEixC3+/ZIyEAeePiwEZNrgFd03QEfgxBMHNfYlksLTaNXArn wwHtVQ5q3rwTvksjLG25GDkY+/L8cWe2/zc= -----END CERTIFICATE-----Generated at Thu Aug 7 20:10:07 2025 by rpki-client