$ rpki-client -vvf repo-rpki.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0/32372e3132312e38362e302f32342d3234203d3e203535363532.roa File: 32372e3132312e38362e302f32342d3234203d3e203535363532.roa (raw, json) Hash identifier: 1kY5e/tIJX114u746CW39QHTp2rzxidBD7y122Pd6Ew= Subject key identifier: 5E:C6:D5:82:B5:1F:ED:DD:E3:2F:04:0C:8F:B3:76:57:E9:C2:52:B4 Certificate issuer: /CN=930A4ED2B85AA9FE77ED90FA85044A9C80B38A46 Certificate serial: 1F0955758DF4C9A0CE8FDC877793B4EB636F354D Authority key identifier: 93:0A:4E:D2:B8:5A:A9:FE:77:ED:90:FA:85:04:4A:9C:80:B3:8A:46 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/930A4ED2B85AA9FE77ED90FA85044A9C80B38A46.cer Subject info access: rsync://repo-rpki.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0/32372e3132312e38362e302f32342d3234203d3e203535363532.roa Signing time: Sat 02 Aug 2025 04:00:00 +0000 ROA not before: Sat 02 Aug 2025 03:55:00 +0000 ROA not after: Sat 01 Aug 2026 04:00:00 +0000 asID: 55652 IP address blocks: 27.121.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0/930A4ED2B85AA9FE77ED90FA85044A9C80B38A46.crl rsync://repo-rpki.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0/930A4ED2B85AA9FE77ED90FA85044A9C80B38A46.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/930A4ED2B85AA9FE77ED90FA85044A9C80B38A46.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 21:02:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:09:55:75:8d:f4:c9:a0:ce:8f:dc:87:77:93:b4:eb:63:6f:35:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=930A4ED2B85AA9FE77ED90FA85044A9C80B38A46 Validity Not Before: Aug 2 03:55:00 2025 GMT Not After : Aug 1 04:00:00 2026 GMT Subject: CN=5EC6D582B51FEDDDE32F040C8FB37657E9C252B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:51:e9:01:c7:54:77:4e:73:3e:94:97:c3:e9: 47:05:46:64:16:01:1f:c4:02:24:58:ff:d2:84:50: d0:98:72:ed:6a:5b:36:f6:8a:ce:87:c8:60:9f:45: 6a:48:83:ba:21:dd:5d:6e:10:63:27:84:24:a8:23: 7f:ee:b8:26:b3:21:5f:47:dc:9b:ab:b5:b1:5f:36: 83:04:9a:8e:cf:4b:68:c5:7f:52:8b:99:d7:39:be: 19:49:73:8f:38:49:86:24:cf:3f:39:d1:83:b6:d2: ce:a8:22:c9:7d:6c:c1:26:cb:7e:5f:63:ea:42:65: aa:24:46:f1:46:c2:d1:61:9a:2c:77:e2:79:23:dc: 4c:ab:58:c5:10:fa:d0:c1:31:ff:2a:e1:d1:7e:2b: 78:f4:95:b2:43:c3:e9:b3:11:86:19:ff:ea:26:ba: b3:c3:cc:79:25:d5:24:52:f4:4c:e7:9f:62:f8:2d: 0c:7f:8a:94:46:fd:3b:03:8f:f0:a6:79:55:67:26: 6b:72:61:ef:ad:be:61:d2:5c:94:cb:a5:8d:cf:0f: 06:0c:29:fe:2c:c5:de:9e:6a:43:2d:cd:e2:65:b1: fc:df:98:09:dd:c0:0a:69:66:bc:c2:65:32:c7:0b: 03:22:06:21:f0:15:44:01:de:ba:45:de:df:41:45: 92:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:C6:D5:82:B5:1F:ED:DD:E3:2F:04:0C:8F:B3:76:57:E9:C2:52:B4 X509v3 Authority Key Identifier: keyid:93:0A:4E:D2:B8:5A:A9:FE:77:ED:90:FA:85:04:4A:9C:80:B3:8A:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0/930A4ED2B85AA9FE77ED90FA85044A9C80B38A46.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/930A4ED2B85AA9FE77ED90FA85044A9C80B38A46.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0/32372e3132312e38362e302f32342d3234203d3e203535363532.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 27.121.86.0/24 Signature Algorithm: sha256WithRSAEncryption 4c:07:57:45:5b:99:34:e2:a8:e0:f5:e5:ca:8c:10:6f:4b:2f: fc:ed:e8:04:39:02:0e:6e:70:e9:51:b9:b5:9e:12:b0:c7:b9: 98:e9:1d:67:ae:de:54:39:26:07:09:51:4a:99:b1:6e:a8:f7: a5:b3:f5:46:3f:74:6f:e9:c5:dd:8b:62:27:c2:ab:c7:52:b9: 51:cb:e8:95:53:4e:bd:36:2d:f5:65:41:56:33:f1:31:61:c3: c8:26:3f:0a:d5:91:b1:43:43:00:ee:56:ff:5c:61:68:d5:b3: df:3f:61:a4:b0:e2:e5:da:87:df:99:cf:98:f4:c3:87:54:f9: b4:47:25:df:5d:98:ab:22:5d:88:38:aa:34:1d:b6:1f:ad:32: 5e:61:0b:0b:19:24:a4:7a:0a:5c:5e:42:dd:e8:0a:e6:b8:e6: 91:f9:b5:4e:c7:0c:a7:ce:de:a8:d6:50:66:1c:5f:0f:67:21: 94:f4:2d:42:f9:3e:89:91:12:c2:d8:61:e5:6b:d2:da:65:99: 76:67:4b:71:63:f1:f1:3a:7e:aa:1b:66:1f:4c:3d:de:9c:8b: 5d:b7:70:20:f1:2f:81:91:a6:57:e1:2a:1e:2c:99:7f:35:5b: 1d:c3:fe:67:32:05:84:5e:a6:2c:fe:18:1a:66:3d:ee:d4:bc: 35:57:03:23 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUHwlVdY30yaDOj9yHd5O062NvNU0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTMwQTRFRDJCODVBQTlGRTc3RUQ5MEZBODUwNDRBOUM4 MEIzOEE0NjAeFw0yNTA4MDIwMzU1MDBaFw0yNjA4MDEwNDAwMDBaMDMxMTAvBgNV BAMTKDVFQzZENTgyQjUxRkVERERFMzJGMDQwQzhGQjM3NjU3RTlDMjUyQjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0UekBx1R3TnM+lJfD6UcFRmQW AR/EAiRY/9KEUNCYcu1qWzb2is6HyGCfRWpIg7oh3V1uEGMnhCSoI3/uuCazIV9H 3JurtbFfNoMEmo7PS2jFf1KLmdc5vhlJc484SYYkzz850YO20s6oIsl9bMEmy35f Y+pCZaokRvFGwtFhmix34nkj3EyrWMUQ+tDBMf8q4dF+K3j0lbJDw+mzEYYZ/+om urPDzHkl1SRS9Eznn2L4LQx/ipRG/TsDj/CmeVVnJmtyYe+tvmHSXJTLpY3PDwYM Kf4sxd6eakMtzeJlsfzfmAndwAppZrzCZTLHCwMiBiHwFUQB3rpF3t9BRZIbAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUXsbVgrUf7d3jLwQMj7N2V+nCUrQwHwYDVR0j BBgwFoAUkwpO0rhaqf537ZD6hQRKnICzikYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZjYyODA5Yy1iZmI2LTRmZTctOGRkNi1jYTYwMjJjZGQ1NDAvMC85MzBBNEVEMkI4 NUFBOUZFNzdFRDkwRkE4NTA0NEE5QzgwQjM4QTQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTMwQTRFRDJCODVBQTlGRTc3RUQ5MEZBODUwNDRBOUM4MEIz OEE0Ni5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2FmNjI4MDljLWJmYjYtNGZlNy04 ZGQ2LWNhNjAyMmNkZDU0MC8wLzMyMzcyZTMxMzIzMTJlMzgzNjJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDM1MzUzNjM1MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAbeVYwDQYJKoZIhvcN AQELBQADggEBAEwHV0VbmTTiqOD15cqMEG9LL/zt6AQ5Ag5ucOlRubWeErDHuZjp HWeu3lQ5JgcJUUqZsW6o96Wz9UY/dG/pxd2LYifCq8dSuVHL6JVTTr02LfVlQVYz 8TFhw8gmPwrVkbFDQwDuVv9cYWjVs98/YaSw4uXah9+Zz5j0w4dU+bRHJd9dmKsi XYg4qjQdth+tMl5hCwsZJKR6ClxeQt3oCua45pH5tU7HDKfO3qjWUGYcXw9nIZT0 LUL5PomREsLYYeVr0tplmXZnS3Fj8fE6fqobZh9MPd6ci123cCDxL4GRplfhKh4s mX81Wx3D/mcyBYRepiz+GBpmPe7UvDVXAyM= -----END CERTIFICATE-----Generated at Thu Aug 7 23:56:15 2025 by rpki-client