$ rpki-client -vvf repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/32372e3132342e39342e302f32332d3234203d3e2039333431.roa File: 32372e3132342e39342e302f32332d3234203d3e2039333431.roa (raw, json) Hash identifier: 0+yGLvHpY8A6oIoQYlO2A8JNZHM2oZ4Kj3ENx9a776E= Subject key identifier: 28:50:D6:5E:C2:20:D5:CD:FE:83:19:96:54:C4:3A:90:25:91:25:23 Certificate issuer: /CN=61566F205F7037962069571320603B274357CC6D Certificate serial: 777A9BBEACDDC46448DFBE5F9BED6C5EDD63871E Authority key identifier: 61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/32372e3132342e39342e302f32332d3234203d3e2039333431.roa Signing time: Fri 27 Jun 2025 14:00:01 +0000 ROA not before: Fri 27 Jun 2025 13:55:01 +0000 ROA not after: Fri 26 Jun 2026 14:00:01 +0000 asID: 9341 IP address blocks: 27.124.94.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 00:13:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:7a:9b:be:ac:dd:c4:64:48:df:be:5f:9b:ed:6c:5e:dd:63:87:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61566F205F7037962069571320603B274357CC6D Validity Not Before: Jun 27 13:55:01 2025 GMT Not After : Jun 26 14:00:01 2026 GMT Subject: CN=2850D65EC220D5CDFE83199654C43A9025912523 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:76:e2:56:1d:fa:da:4f:6c:7b:1c:9f:91:ab: 68:26:db:5b:f1:1c:c8:2b:aa:ee:69:51:9e:66:ff: f9:74:8a:f1:81:55:5b:49:64:73:58:3e:f3:22:82: 26:90:55:e1:1c:a4:fb:b8:a3:5f:02:c8:a4:f6:f9: e2:da:49:bb:8e:84:fd:d3:51:62:e6:f9:18:a2:66: 0b:2c:62:7c:b5:23:be:cf:a4:1e:22:b5:b1:6f:30: e2:03:e6:e7:d1:2d:70:39:a8:fa:38:7d:98:1f:9f: 3b:a6:b7:a8:3c:c9:1b:97:9e:83:1b:63:01:f2:21: 14:50:60:ea:6d:a2:1f:0d:43:ec:f0:79:6b:ee:09: b1:a9:7b:6a:57:57:91:66:fc:c5:17:90:fd:f1:b3: 0d:b9:e2:95:da:b7:4d:e6:8a:c4:be:2e:4b:4c:66: 67:a4:ab:5f:e1:c1:a0:57:a5:93:a9:65:91:ad:ef: 6e:02:4b:a6:ca:f5:ae:89:51:1f:e7:8c:c5:01:67: e4:aa:da:80:82:b6:d2:6e:b9:09:fb:6e:3f:29:fd: 0c:9b:ab:6a:8f:d8:8e:40:12:b6:7c:f3:14:9d:53: 97:38:e7:b5:42:3b:3a:87:39:e3:96:4e:92:55:03: e9:ac:29:c9:13:49:b4:1f:b5:6c:19:69:bb:89:2e: 47:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:50:D6:5E:C2:20:D5:CD:FE:83:19:96:54:C4:3A:90:25:91:25:23 X509v3 Authority Key Identifier: keyid:61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/32372e3132342e39342e302f32332d3234203d3e2039333431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 27.124.94.0/23 Signature Algorithm: sha256WithRSAEncryption 2d:a8:fb:ee:0e:4b:c2:85:5a:2c:1e:57:7e:88:3b:44:10:f6: c5:dd:db:48:85:8c:f4:ef:ff:60:87:b4:0d:f7:28:b8:75:18: d7:f2:de:49:54:0b:0b:83:a1:3c:17:f6:1b:c7:0a:f4:3f:69: 9b:82:37:6b:06:ff:dd:24:f5:5f:50:89:f5:d7:38:c7:2e:bf: dd:71:34:89:64:2d:41:ca:3c:b7:c6:4b:30:ec:ec:b1:32:a6: c8:c1:eb:ca:12:ef:e9:5a:b5:c5:b1:00:a3:00:ba:51:f0:2d: 9c:53:7a:d4:94:72:dd:e6:52:bc:e7:41:19:ca:be:74:d2:e5: 71:92:20:b8:8c:7d:f3:0d:41:32:38:8d:23:f7:26:ce:77:08: 60:77:be:03:1b:df:82:50:6a:1e:90:5f:8b:ce:d7:b8:94:a8: e8:a1:f4:0c:5b:2c:bf:51:79:2f:03:47:f5:6e:3b:ee:52:ce: 38:1a:8d:43:0f:98:2c:f9:67:49:5a:46:3f:8a:22:e9:b5:52: 43:4d:f1:c8:1a:64:c6:b5:c4:6d:dc:cd:dd:3a:04:ff:3f:d5: 11:f4:95:8b:27:4c:2f:98:a2:12:32:e4:9b:c7:62:d1:6a:72: 75:23:aa:84:9f:6f:ff:16:5c:c4:b7:56:42:6a:13:7e:54:51: 2a:bd:2a:17 -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgIUd3qbvqzdxGRI375fm+1sXt1jhx4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjE1NjZGMjA1RjcwMzc5NjIwNjk1NzEzMjA2MDNCMjc0 MzU3Q0M2RDAeFw0yNTA2MjcxMzU1MDFaFw0yNjA2MjYxNDAwMDFaMDMxMTAvBgNV BAMTKDI4NTBENjVFQzIyMEQ1Q0RGRTgzMTk5NjU0QzQzQTkwMjU5MTI1MjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKduJWHfraT2x7HJ+Rq2gm21vx HMgrqu5pUZ5m//l0ivGBVVtJZHNYPvMigiaQVeEcpPu4o18CyKT2+eLaSbuOhP3T UWLm+RiiZgssYny1I77PpB4itbFvMOID5ufRLXA5qPo4fZgfnzumt6g8yRuXnoMb YwHyIRRQYOptoh8NQ+zweWvuCbGpe2pXV5Fm/MUXkP3xsw254pXat03misS+LktM Zmekq1/hwaBXpZOpZZGt724CS6bK9a6JUR/njMUBZ+Sq2oCCttJuuQn7bj8p/Qyb q2qP2I5AErZ88xSdU5c457VCOzqHOeOWTpJVA+msKckTSbQftWwZabuJLkdRAgMB AAGjggItMIICKTAdBgNVHQ4EFgQUKFDWXsIg1c3+gxmWVMQ6kCWRJSMwHwYDVR0j BBgwFoAUYVZvIF9wN5YgaVcTIGA7J0NXzG0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 M2JkY2JhZS0yZTlkLTRmM2YtOGFiOS0zNDI0ZTQ0ODQ4NGUvMC82MTU2NkYyMDVG NzAzNzk2MjA2OTU3MTMyMDYwM0IyNzQzNTdDQzZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjE1NjZGMjA1RjcwMzc5NjIwNjk1NzEzMjA2MDNCMjc0MzU3 Q0M2RC5jZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzNiZGNiYWUtMmU5ZC00ZjNmLThh YjktMzQyNGU0NDg0ODRlLzAvMzIzNzJlMzEzMjM0MmUzOTM0MmUzMDJmMzIzMzJk MzIzNDIwM2QzZTIwMzkzMzM0MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAEbfF4wDQYJKoZIhvcNAQEL BQADggEBAC2o++4OS8KFWiweV36IO0QQ9sXd20iFjPTv/2CHtA33KLh1GNfy3klU CwuDoTwX9hvHCvQ/aZuCN2sG/90k9V9QifXXOMcuv91xNIlkLUHKPLfGSzDs7LEy psjB68oS7+latcWxAKMAulHwLZxTetSUct3mUrznQRnKvnTS5XGSILiMffMNQTI4 jSP3Js53CGB3vgMb34JQah6QX4vO17iUqOih9AxbLL9ReS8DR/VuO+5SzjgajUMP mCz5Z0laRj+KIum1UkNN8cgaZMa1xG3czd06BP8/1RH0lYsnTC+YohIy5JvHYtFq cnUjqoSfb/8WXMS3VkJqE35UUSq9Khc= -----END CERTIFICATE-----Generated at Mon Jun 30 11:34:37 2025 by rpki-client