$ rpki-client -vvf repo-rpki.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0/32372e3132312e38352e302f32342d3234203d3e203535363532.roa File: 32372e3132312e38352e302f32342d3234203d3e203535363532.roa (raw, json) Hash identifier: 3Mqc4bpW2MlccFa1Ubf+/4bclFJ21AcG0i5KBo4oD48= Subject key identifier: 0F:0B:35:22:1A:90:52:D3:52:A6:CF:D3:AD:DA:99:0B:01:7C:86:BD Certificate issuer: /CN=930A4ED2B85AA9FE77ED90FA85044A9C80B38A46 Certificate serial: 6F9B8723FC7952AB7B666EF6318BD48B7613E7A7 Authority key identifier: 93:0A:4E:D2:B8:5A:A9:FE:77:ED:90:FA:85:04:4A:9C:80:B3:8A:46 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/930A4ED2B85AA9FE77ED90FA85044A9C80B38A46.cer Subject info access: rsync://repo-rpki.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0/32372e3132312e38352e302f32342d3234203d3e203535363532.roa Signing time: Sat 02 Aug 2025 05:00:00 +0000 ROA not before: Sat 02 Aug 2025 04:55:00 +0000 ROA not after: Sat 01 Aug 2026 05:00:00 +0000 asID: 55652 IP address blocks: 27.121.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0/930A4ED2B85AA9FE77ED90FA85044A9C80B38A46.crl rsync://repo-rpki.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0/930A4ED2B85AA9FE77ED90FA85044A9C80B38A46.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/930A4ED2B85AA9FE77ED90FA85044A9C80B38A46.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 21:02:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:9b:87:23:fc:79:52:ab:7b:66:6e:f6:31:8b:d4:8b:76:13:e7:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=930A4ED2B85AA9FE77ED90FA85044A9C80B38A46 Validity Not Before: Aug 2 04:55:00 2025 GMT Not After : Aug 1 05:00:00 2026 GMT Subject: CN=0F0B35221A9052D352A6CFD3ADDA990B017C86BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ac:93:3e:2d:73:05:66:9e:a9:3a:7f:5b:be: 50:05:f5:8a:3f:94:b7:dd:77:cc:ec:d3:11:00:06: 80:3f:06:6f:65:fd:7d:d7:59:04:69:b3:b1:c0:cd: c1:0a:3c:96:f6:ea:22:f1:37:bf:a9:f9:f9:44:41: e1:a3:3e:d0:aa:b6:97:c8:24:2d:54:9b:c4:9c:71: 28:42:3e:51:73:8f:51:eb:f5:ef:fd:62:ec:07:7a: b6:9a:4b:d8:eb:f2:76:eb:ef:b1:ac:b2:41:46:c6: c7:78:69:c7:2e:38:17:93:32:f7:77:ce:af:21:a5: c4:7f:97:a8:2a:90:7d:82:c0:1a:78:d1:a1:e3:1a: be:b2:39:38:cb:99:f1:2c:a6:26:6c:09:28:00:e0: 4d:87:ce:21:78:49:92:d9:1c:e8:0c:90:fe:04:2b: d4:69:ea:cf:d3:c6:87:4f:69:e9:80:54:96:8a:7e: 63:9b:75:bf:3d:74:32:7f:da:c8:a3:f2:8a:00:3f: 94:36:90:82:76:b4:74:3d:ef:e3:c8:fb:cf:06:22: 2d:3e:33:96:d6:1b:06:13:3a:02:11:40:ad:36:f1: ba:cf:41:ab:93:bb:ed:7d:b2:48:2a:2d:5e:1b:97: cc:4c:45:83:4c:de:8c:65:29:d1:2a:49:52:88:38: 63:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:0B:35:22:1A:90:52:D3:52:A6:CF:D3:AD:DA:99:0B:01:7C:86:BD X509v3 Authority Key Identifier: keyid:93:0A:4E:D2:B8:5A:A9:FE:77:ED:90:FA:85:04:4A:9C:80:B3:8A:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0/930A4ED2B85AA9FE77ED90FA85044A9C80B38A46.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/930A4ED2B85AA9FE77ED90FA85044A9C80B38A46.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0/32372e3132312e38352e302f32342d3234203d3e203535363532.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 27.121.85.0/24 Signature Algorithm: sha256WithRSAEncryption 23:ed:1d:3c:f3:f4:f8:5a:72:ef:1e:db:11:49:8e:54:1e:54: 8f:0b:79:73:99:d8:7e:93:9e:3b:ae:2b:24:73:12:ee:4d:0e: f9:07:62:82:9f:26:65:fb:2b:c2:36:f8:ee:fe:2c:c2:2b:dd: 5e:3a:1c:3a:1d:96:ac:bf:8d:96:a4:28:d0:77:68:ae:47:f9: fc:18:69:63:3e:61:03:0f:c3:7f:26:c9:33:1e:21:17:70:48: a7:67:72:a3:c5:6f:bf:07:a7:15:23:cf:92:0c:87:c9:72:3c: 9d:9b:57:8c:fb:7e:0d:c1:fc:a4:59:5a:c0:d2:a4:8b:80:d0: 48:63:61:aa:1f:66:f3:22:07:3d:69:c9:d6:20:26:0b:44:15: ad:86:7f:e9:59:35:1c:ed:c8:79:00:f8:d6:f0:de:e9:40:de: b0:9a:aa:9a:81:0d:6a:4a:07:9c:11:6a:33:64:c3:36:e8:af: 80:7b:2b:ba:ba:fa:47:f3:0d:6d:ad:fb:19:8b:38:b5:ea:d0: 9e:be:d7:90:6a:07:f6:de:ed:93:5e:90:96:1f:af:d2:cf:62: 34:e7:a9:8d:02:f0:82:e2:bd:15:c5:4a:55:90:4a:42:d0:ca: cb:f0:1f:2a:41:50:d5:08:74:9d:8e:48:08:be:48:0e:48:dd: 40:31:98:62 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUb5uHI/x5Uqt7Zm72MYvUi3YT56cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTMwQTRFRDJCODVBQTlGRTc3RUQ5MEZBODUwNDRBOUM4 MEIzOEE0NjAeFw0yNTA4MDIwNDU1MDBaFw0yNjA4MDEwNTAwMDBaMDMxMTAvBgNV BAMTKDBGMEIzNTIyMUE5MDUyRDM1MkE2Q0ZEM0FEREE5OTBCMDE3Qzg2QkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMrJM+LXMFZp6pOn9bvlAF9Yo/ lLfdd8zs0xEABoA/Bm9l/X3XWQRps7HAzcEKPJb26iLxN7+p+flEQeGjPtCqtpfI JC1Um8SccShCPlFzj1Hr9e/9YuwHeraaS9jr8nbr77GsskFGxsd4accuOBeTMvd3 zq8hpcR/l6gqkH2CwBp40aHjGr6yOTjLmfEspiZsCSgA4E2HziF4SZLZHOgMkP4E K9Rp6s/TxodPaemAVJaKfmObdb89dDJ/2sij8ooAP5Q2kIJ2tHQ97+PI+88GIi0+ M5bWGwYTOgIRQK028brPQauTu+19skgqLV4bl8xMRYNM3oxlKdEqSVKIOGMPAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUDws1IhqQUtNSps/TrdqZCwF8hr0wHwYDVR0j BBgwFoAUkwpO0rhaqf537ZD6hQRKnICzikYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZjYyODA5Yy1iZmI2LTRmZTctOGRkNi1jYTYwMjJjZGQ1NDAvMC85MzBBNEVEMkI4 NUFBOUZFNzdFRDkwRkE4NTA0NEE5QzgwQjM4QTQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTMwQTRFRDJCODVBQTlGRTc3RUQ5MEZBODUwNDRBOUM4MEIz OEE0Ni5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2FmNjI4MDljLWJmYjYtNGZlNy04 ZGQ2LWNhNjAyMmNkZDU0MC8wLzMyMzcyZTMxMzIzMTJlMzgzNTJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDM1MzUzNjM1MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAbeVUwDQYJKoZIhvcN AQELBQADggEBACPtHTzz9Phacu8e2xFJjlQeVI8LeXOZ2H6TnjuuKyRzEu5NDvkH YoKfJmX7K8I2+O7+LMIr3V46HDodlqy/jZakKNB3aK5H+fwYaWM+YQMPw38myTMe IRdwSKdncqPFb78HpxUjz5IMh8lyPJ2bV4z7fg3B/KRZWsDSpIuA0EhjYaofZvMi Bz1pydYgJgtEFa2Gf+lZNRztyHkA+Nbw3ulA3rCaqpqBDWpKB5wRajNkwzbor4B7 K7q6+kfzDW2t+xmLOLXq0J6+15BqB/be7ZNekJYfr9LPYjTnqY0C8ILivRXFSlWQ SkLQysvwHypBUNUIdJ2OSAi+SA5I3UAxmGI= -----END CERTIFICATE-----Generated at Thu Aug 7 20:09:54 2025 by rpki-client