$ rpki-client -vvf repo-rpki.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0/32372e3132312e38372e302f32342d3234203d3e203535363532.roa File: 32372e3132312e38372e302f32342d3234203d3e203535363532.roa (raw, json) Hash identifier: XOQFKUfDG7J0fbl+DTtQtPxTl6ii3+vzoE5o4zQO4bo= Subject key identifier: 27:16:FC:AF:CE:72:44:21:35:F3:1D:B5:05:72:C0:45:8E:74:6C:C0 Certificate issuer: /CN=930A4ED2B85AA9FE77ED90FA85044A9C80B38A46 Certificate serial: 01FCCF84A3FE6048948C5F65F2A0E2C223EE5A10 Authority key identifier: 93:0A:4E:D2:B8:5A:A9:FE:77:ED:90:FA:85:04:4A:9C:80:B3:8A:46 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/930A4ED2B85AA9FE77ED90FA85044A9C80B38A46.cer Subject info access: rsync://repo-rpki.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0/32372e3132312e38372e302f32342d3234203d3e203535363532.roa Signing time: Sat 02 Aug 2025 04:00:00 +0000 ROA not before: Sat 02 Aug 2025 03:55:00 +0000 ROA not after: Sat 01 Aug 2026 04:00:00 +0000 asID: 55652 IP address blocks: 27.121.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0/930A4ED2B85AA9FE77ED90FA85044A9C80B38A46.crl rsync://repo-rpki.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0/930A4ED2B85AA9FE77ED90FA85044A9C80B38A46.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/930A4ED2B85AA9FE77ED90FA85044A9C80B38A46.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 21:02:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:fc:cf:84:a3:fe:60:48:94:8c:5f:65:f2:a0:e2:c2:23:ee:5a:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=930A4ED2B85AA9FE77ED90FA85044A9C80B38A46 Validity Not Before: Aug 2 03:55:00 2025 GMT Not After : Aug 1 04:00:00 2026 GMT Subject: CN=2716FCAFCE72442135F31DB50572C0458E746CC0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e5:93:93:bc:3e:87:16:8f:cc:56:e3:d8:1c: de:3f:67:14:84:de:f0:92:55:fd:a3:bd:4a:14:98: 54:13:dd:c3:9b:3e:53:b8:66:80:61:5d:51:52:54: c4:e9:79:29:c8:6a:07:8d:34:cb:ae:fe:e8:8e:5d: 56:89:84:4b:d5:71:18:b6:51:21:d0:d4:ee:8c:51: 05:23:90:1a:12:9a:b1:9e:75:07:80:db:08:30:83: bc:8f:70:ea:a1:22:e8:05:2f:29:9d:de:5c:8b:da: de:e7:aa:45:ce:d7:46:9b:ae:a7:19:be:b8:82:b8: 81:a3:34:e9:db:8c:1c:b2:10:c2:36:ea:e8:82:9e: 80:00:17:b2:cf:b8:6b:c3:1a:95:fd:fd:a3:c6:97: ab:36:5d:c0:dd:8e:8f:69:08:3f:d3:74:14:21:2a: 12:45:9c:60:e9:59:6c:44:a6:7b:f5:6a:de:d9:56: 38:e1:d5:03:0d:58:92:c1:a2:3a:46:40:86:0f:25: 7f:63:70:1d:df:f9:55:0e:2e:6a:c4:87:a8:d0:11: b5:2d:f4:3c:20:f4:5d:75:3a:14:c0:09:63:c1:0d: ae:94:18:62:a1:15:20:59:30:41:3a:44:49:65:e9: 4c:da:51:cc:14:fb:f5:c1:0f:2f:8d:f7:05:a0:86: c3:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:16:FC:AF:CE:72:44:21:35:F3:1D:B5:05:72:C0:45:8E:74:6C:C0 X509v3 Authority Key Identifier: keyid:93:0A:4E:D2:B8:5A:A9:FE:77:ED:90:FA:85:04:4A:9C:80:B3:8A:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0/930A4ED2B85AA9FE77ED90FA85044A9C80B38A46.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/930A4ED2B85AA9FE77ED90FA85044A9C80B38A46.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0/32372e3132312e38372e302f32342d3234203d3e203535363532.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 27.121.87.0/24 Signature Algorithm: sha256WithRSAEncryption 6c:c4:45:44:09:78:03:dc:f3:cf:83:f7:ea:31:7a:42:3e:d1: 56:bc:a5:14:5e:fc:20:08:de:45:9b:48:38:94:23:99:17:f0: a3:c4:4c:e0:46:f4:ae:46:29:5a:ad:db:b2:ba:8e:9e:de:b2: 02:de:0f:eb:69:6b:ff:51:64:26:72:14:05:66:e7:62:8a:d1: 39:d7:27:e7:29:c7:63:e4:58:d6:e5:8b:36:76:ee:af:16:96: c6:45:a5:c2:93:aa:d9:84:11:d1:6e:ab:5a:f0:89:77:eb:d5: 1f:bf:31:dd:a6:39:61:93:00:59:de:87:97:10:04:bb:15:9a: 08:84:54:a9:9a:7c:0d:c6:12:c3:50:c3:6a:9a:de:ce:de:0b: 53:19:46:d3:29:0e:00:98:d6:42:54:fe:44:57:1c:44:f0:dd: 12:05:81:e2:f1:d2:8a:47:e6:7c:b8:89:b6:13:85:e8:df:62: 31:18:9a:78:61:a0:05:74:6a:83:48:3e:42:af:c8:e3:1b:dc: ba:e4:cc:ac:f0:1e:27:6f:20:21:25:df:dc:c2:b1:f7:22:4c: 71:29:b3:2f:fc:1f:a7:4b:a9:0d:4a:b0:8e:fa:e3:45:68:bb: f9:16:11:4e:b0:84:a4:ba:e4:72:6d:d9:29:de:de:a8:60:6d: 65:dd:8f:b1 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUAfzPhKP+YEiUjF9l8qDiwiPuWhAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTMwQTRFRDJCODVBQTlGRTc3RUQ5MEZBODUwNDRBOUM4 MEIzOEE0NjAeFw0yNTA4MDIwMzU1MDBaFw0yNjA4MDEwNDAwMDBaMDMxMTAvBgNV BAMTKDI3MTZGQ0FGQ0U3MjQ0MjEzNUYzMURCNTA1NzJDMDQ1OEU3NDZDQzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC05ZOTvD6HFo/MVuPYHN4/ZxSE 3vCSVf2jvUoUmFQT3cObPlO4ZoBhXVFSVMTpeSnIageNNMuu/uiOXVaJhEvVcRi2 USHQ1O6MUQUjkBoSmrGedQeA2wgwg7yPcOqhIugFLymd3lyL2t7nqkXO10abrqcZ vriCuIGjNOnbjByyEMI26uiCnoAAF7LPuGvDGpX9/aPGl6s2XcDdjo9pCD/TdBQh KhJFnGDpWWxEpnv1at7ZVjjh1QMNWJLBojpGQIYPJX9jcB3f+VUOLmrEh6jQEbUt 9Dwg9F11OhTACWPBDa6UGGKhFSBZMEE6REll6UzaUcwU+/XBDy+N9wWghsO7AgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUJxb8r85yRCE18x21BXLARY50bMAwHwYDVR0j BBgwFoAUkwpO0rhaqf537ZD6hQRKnICzikYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZjYyODA5Yy1iZmI2LTRmZTctOGRkNi1jYTYwMjJjZGQ1NDAvMC85MzBBNEVEMkI4 NUFBOUZFNzdFRDkwRkE4NTA0NEE5QzgwQjM4QTQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTMwQTRFRDJCODVBQTlGRTc3RUQ5MEZBODUwNDRBOUM4MEIz OEE0Ni5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2FmNjI4MDljLWJmYjYtNGZlNy04 ZGQ2LWNhNjAyMmNkZDU0MC8wLzMyMzcyZTMxMzIzMTJlMzgzNzJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDM1MzUzNjM1MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAbeVcwDQYJKoZIhvcN AQELBQADggEBAGzERUQJeAPc88+D9+oxekI+0Va8pRRe/CAI3kWbSDiUI5kX8KPE TOBG9K5GKVqt27K6jp7esgLeD+tpa/9RZCZyFAVm52KK0TnXJ+cpx2PkWNblizZ2 7q8WlsZFpcKTqtmEEdFuq1rwiXfr1R+/Md2mOWGTAFneh5cQBLsVmgiEVKmafA3G EsNQw2qa3s7eC1MZRtMpDgCY1kJU/kRXHETw3RIFgeLx0opH5ny4ibYThejfYjEY mnhhoAV0aoNIPkKvyOMb3LrkzKzwHidvICEl39zCsfciTHEpsy/8H6dLqQ1KsI76 40Vou/kWEU6whKS65HJt2Sne3qhgbWXdj7E= -----END CERTIFICATE-----Generated at Thu Aug 7 20:09:48 2025 by rpki-client