$ rpki-client -vvf repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/32372e3132342e38332e302f32342d3234203d3e20313332363334.roa File: 32372e3132342e38332e302f32342d3234203d3e20313332363334.roa (raw, json) Hash identifier: 2EEYdzWr91JIl7YnldqA+u9ZlAli1CH0l6dUJ+oRlZU= Subject key identifier: 97:85:8D:21:BB:D2:79:1F:02:90:D0:04:AA:22:1B:CD:09:79:AA:85 Certificate issuer: /CN=228E752BBFB8C16B3B46F3D388ECED50CF9A6473 Certificate serial: 35864DE0A8888183A93456CB2655A0AD61803D73 Authority key identifier: 22:8E:75:2B:BF:B8:C1:6B:3B:46:F3:D3:88:EC:ED:50:CF:9A:64:73 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.cer Subject info access: rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/32372e3132342e38332e302f32342d3234203d3e20313332363334.roa Signing time: Tue 14 Oct 2025 09:31:55 +0000 ROA not before: Tue 14 Oct 2025 09:26:55 +0000 ROA not after: Tue 13 Oct 2026 09:31:55 +0000 asID: 132634 IP address blocks: 27.124.83.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.crl rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 05:31:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:86:4d:e0:a8:88:81:83:a9:34:56:cb:26:55:a0:ad:61:80:3d:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=228E752BBFB8C16B3B46F3D388ECED50CF9A6473 Validity Not Before: Oct 14 09:26:55 2025 GMT Not After : Oct 13 09:31:55 2026 GMT Subject: CN=97858D21BBD2791F0290D004AA221BCD0979AA85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:3e:d5:8a:fc:07:86:33:71:4f:c5:71:67:cd: 22:56:a3:35:d2:19:3a:fa:2e:3d:cc:90:45:72:a4: 69:63:74:8d:af:b6:3b:32:1b:07:09:b9:8a:f1:79: 23:8a:2d:40:e3:22:f6:40:57:0b:ed:38:d6:14:44: a8:20:2b:d8:3f:fe:91:89:67:70:d1:4a:bf:4d:59: 72:be:05:40:19:ee:f2:2b:52:3b:15:b2:d3:10:b6: 74:9d:1c:3a:03:99:20:2b:20:98:cb:c7:d3:e3:cd: 1e:aa:29:dc:5f:b3:95:b7:c9:55:57:b6:24:d9:8d: 2b:e6:49:21:e0:16:79:12:aa:a7:eb:4b:bf:aa:cd: b5:9e:57:24:d6:f3:c6:d0:db:8c:99:94:89:0a:8d: 27:c1:03:f0:cc:d2:e6:48:92:97:cb:c5:33:e3:f3: a6:4c:ff:25:34:12:b9:f6:1d:06:3d:aa:fa:a0:e3: 99:bd:33:55:5a:04:37:7e:89:6c:17:cf:ba:a5:98: 7d:bc:74:7a:69:96:ae:d2:9f:5e:14:8b:3d:bb:b4: b1:a6:71:7d:4f:21:c6:2d:70:b5:86:5e:13:4b:03: 85:97:2d:e4:55:30:b6:9f:5d:d8:c7:38:48:0a:41: 85:2e:32:b0:94:e8:91:b7:8e:20:68:27:7d:ce:06: a0:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:85:8D:21:BB:D2:79:1F:02:90:D0:04:AA:22:1B:CD:09:79:AA:85 X509v3 Authority Key Identifier: keyid:22:8E:75:2B:BF:B8:C1:6B:3B:46:F3:D3:88:EC:ED:50:CF:9A:64:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/32372e3132342e38332e302f32342d3234203d3e20313332363334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 27.124.83.0/24 Signature Algorithm: sha256WithRSAEncryption 75:9d:7b:69:1e:2c:eb:3b:94:05:eb:c9:7c:63:3a:a8:5a:38: f4:07:91:ad:bb:a2:4a:fc:af:08:29:5e:cd:c7:b7:0d:46:00: 51:67:f1:75:57:99:55:b2:d7:07:d0:f1:c9:a8:d1:71:0a:11: 09:58:9f:3f:f1:59:6f:1c:0e:bd:76:ad:b1:d3:da:96:27:e8: 79:e4:28:95:82:a5:bf:1a:46:11:75:b7:67:bc:74:a6:be:61: a8:6a:58:cc:12:4b:1b:a9:c8:c6:8e:23:ee:2f:b9:e4:a6:bd: 97:df:97:a0:44:2b:0b:e9:16:02:69:94:98:c7:59:1c:f3:86: fd:32:fd:df:6c:ba:8f:b4:3f:09:ac:38:2b:2f:32:ba:36:ec: 48:aa:96:b7:bd:8a:19:80:44:9d:69:a9:e3:3d:88:2e:2c:40: 8e:25:ba:60:a6:fc:4a:9a:96:dc:0a:bb:e1:86:3e:8d:39:d2: 76:2d:02:30:4f:e6:22:67:3f:c6:4c:55:cb:34:9d:ea:b6:6c: 3b:af:39:ad:3c:97:55:cd:cc:2c:8a:a7:4f:c7:96:7d:19:03: 64:42:51:18:db:01:99:d3:42:4a:16:08:9c:b9:c9:38:01:f7: 15:04:fb:36:2d:85:bc:5f:4a:ba:fa:d6:f2:3d:49:55:53:15: 1b:70:a9:df -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUNYZN4KiIgYOpNFbLJlWgrWGAPXMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjI4RTc1MkJCRkI4QzE2QjNCNDZGM0QzODhFQ0VENTBD RjlBNjQ3MzAeFw0yNTEwMTQwOTI2NTVaFw0yNjEwMTMwOTMxNTVaMDMxMTAvBgNV BAMTKDk3ODU4RDIxQkJEMjc5MUYwMjkwRDAwNEFBMjIxQkNEMDk3OUFBODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKPtWK/AeGM3FPxXFnzSJWozXS GTr6Lj3MkEVypGljdI2vtjsyGwcJuYrxeSOKLUDjIvZAVwvtONYURKggK9g//pGJ Z3DRSr9NWXK+BUAZ7vIrUjsVstMQtnSdHDoDmSArIJjLx9PjzR6qKdxfs5W3yVVX tiTZjSvmSSHgFnkSqqfrS7+qzbWeVyTW88bQ24yZlIkKjSfBA/DM0uZIkpfLxTPj 86ZM/yU0Ern2HQY9qvqg45m9M1VaBDd+iWwXz7qlmH28dHpplq7Sn14Uiz27tLGm cX1PIcYtcLWGXhNLA4WXLeRVMLafXdjHOEgKQYUuMrCU6JG3jiBoJ33OBqB1AgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUl4WNIbvSeR8CkNAEqiIbzQl5qoUwHwYDVR0j BBgwFoAUIo51K7+4wWs7RvPTiOztUM+aZHMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MTdlZmQyYS0wMmFiLTQyMDItOTcwZi1mNjk5ZGZmOTdkZTUvMC8yMjhFNzUyQkJG QjhDMTZCM0I0NkYzRDM4OEVDRUQ1MENGOUE2NDczLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjI4RTc1MkJCRkI4QzE2QjNCNDZGM0QzODhFQ0VENTBDRjlB NjQ3My5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzMxN2VmZDJhLTAyYWItNDIwMi05 NzBmLWY2OTlkZmY5N2RlNS8wLzMyMzcyZTMxMzIzNDJlMzgzMzJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMxMzMzMjM2MzMzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEABt8UzANBgkqhkiG 9w0BAQsFAAOCAQEAdZ17aR4s6zuUBevJfGM6qFo49AeRrbuiSvyvCClezce3DUYA UWfxdVeZVbLXB9DxyajRcQoRCVifP/FZbxwOvXatsdPalifoeeQolYKlvxpGEXW3 Z7x0pr5hqGpYzBJLG6nIxo4j7i+55Ka9l9+XoEQrC+kWAmmUmMdZHPOG/TL932y6 j7Q/Caw4Ky8yujbsSKqWt72KGYBEnWmp4z2ILixAjiW6YKb8SpqW3Aq74YY+jTnS di0CME/mImc/xkxVyzSd6rZsO685rTyXVc3MLIqnT8eWfRkDZEJRGNsBmdNCShYI nLnJOAH3FQT7Ni2FvF9KuvrW8j1JVVMVG3Cp3w== -----END CERTIFICATE-----Generated at Mon Oct 20 20:50:20 2025 by rpki-client