$ rpki-client -vvf repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/32372e3133312e362e302f32332d3234203d3e203338373533.roa File: 32372e3133312e362e302f32332d3234203d3e203338373533.roa (raw, json) Hash identifier: dknIFheGMMEZ8EU/p94uWnfgerda5Yfc59CEmttZ7uM= Subject key identifier: 48:BE:32:21:E0:D4:5D:86:29:59:58:C5:25:A7:7C:92:D0:1E:C2:AB Certificate issuer: /CN=11C9BA28534BA44999B4BA5D6B0F28E568DF6E14 Certificate serial: 1C09CBEF6FFCB5E4D962AA2D480D2D3A37749DBB Authority key identifier: 11:C9:BA:28:53:4B:A4:49:99:B4:BA:5D:6B:0F:28:E5:68:DF:6E:14 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/32372e3133312e362e302f32332d3234203d3e203338373533.roa Signing time: Thu 25 Sep 2025 05:00:01 +0000 ROA not before: Thu 25 Sep 2025 04:55:01 +0000 ROA not after: Thu 24 Sep 2026 05:00:01 +0000 asID: 38753 IP address blocks: 27.131.6.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.crl rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 09:53:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:09:cb:ef:6f:fc:b5:e4:d9:62:aa:2d:48:0d:2d:3a:37:74:9d:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11C9BA28534BA44999B4BA5D6B0F28E568DF6E14 Validity Not Before: Sep 25 04:55:01 2025 GMT Not After : Sep 24 05:00:01 2026 GMT Subject: CN=48BE3221E0D45D86295958C525A77C92D01EC2AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:c5:b4:e4:c0:31:7c:4f:38:ad:77:7b:75:b9: 43:06:b7:bb:01:2a:23:cd:25:af:ea:1e:a0:47:74: 91:ab:ff:49:6f:d8:fa:eb:85:db:89:5c:2f:af:53: 03:9e:bd:0a:f8:8b:6e:0a:c6:e2:4b:8a:20:89:d1: a1:a9:07:7d:e6:28:0e:75:90:dd:f4:72:f7:4a:e1: 30:77:58:13:3d:7f:8b:56:c5:ca:8b:7a:68:89:cb: a0:3e:0c:53:6e:76:e8:c6:9e:f7:d0:32:94:63:37: f9:73:d1:67:47:ed:fc:63:80:6e:97:84:35:08:48: e1:81:a5:84:1f:1d:3d:ef:d9:a4:14:d0:e3:97:7e: 2e:42:7d:0a:13:67:87:09:81:75:e4:05:32:cf:d9: b2:ea:04:37:fd:c3:11:8f:81:0b:0b:78:77:17:68: 38:ea:98:c4:8f:74:a1:39:90:b4:92:a3:02:9f:a3: fa:b8:7d:2b:b2:1d:87:ec:3a:a1:fe:81:27:ae:74: e1:45:a2:ed:e0:ea:aa:9f:a4:66:6d:6d:46:d7:2d: f0:79:70:a9:a0:f8:8f:12:86:bb:8b:4f:b6:f5:03: f5:66:7a:4d:1e:fe:63:c6:61:11:9d:4f:4f:7b:5d: cb:38:f0:40:91:db:b0:a1:33:ee:87:ae:92:d4:4c: ee:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:BE:32:21:E0:D4:5D:86:29:59:58:C5:25:A7:7C:92:D0:1E:C2:AB X509v3 Authority Key Identifier: keyid:11:C9:BA:28:53:4B:A4:49:99:B4:BA:5D:6B:0F:28:E5:68:DF:6E:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/32372e3133312e362e302f32332d3234203d3e203338373533.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 27.131.6.0/23 Signature Algorithm: sha256WithRSAEncryption 7e:41:05:48:b1:3a:d3:5d:e3:7b:d1:c3:a1:59:0b:15:ad:af: 58:56:77:9e:70:a0:fe:56:44:4d:1d:a6:49:96:7b:fc:25:ea: 34:39:68:e2:86:81:56:a1:2f:3c:b6:c6:43:63:e4:86:f4:c3: 9e:b6:4d:de:2c:42:cc:c1:1c:6b:0a:13:c8:78:a1:8c:cd:2e: 27:ff:4a:b3:74:82:e8:a0:df:cb:a8:f8:53:f0:8a:c5:d3:8d: eb:30:62:5e:2c:db:7f:f9:87:8e:57:69:d5:c7:1a:5a:84:c2: df:87:a5:40:8b:14:9e:32:6d:48:8b:45:8f:e2:40:ff:79:5c: 1f:9b:25:16:3e:05:18:ad:4c:8c:ab:de:0d:b9:ee:11:a4:da: 0f:ed:64:d8:89:03:bd:24:63:13:5d:bf:17:6f:9a:60:4e:ff: 4f:31:d6:d4:18:64:28:74:5e:ea:24:ac:64:aa:11:f1:71:51: c5:ab:27:ef:f3:d9:3c:58:ae:2f:97:28:87:c8:c1:cb:72:63: 65:bf:eb:fb:13:19:9e:c5:d7:95:38:c7:6d:c0:ff:e4:3b:9a: b7:d3:be:e8:37:0e:9e:39:3b:9b:78:b0:a9:9a:3e:5b:38:8b: cb:93:61:d5:85:9e:bc:e2:83:86:35:54:8c:fd:46:c4:0b:94: 9a:9a:26:a2 -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgIUHAnL72/8teTZYqotSA0tOjd0nbswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTFDOUJBMjg1MzRCQTQ0OTk5QjRCQTVENkIwRjI4RTU2 OERGNkUxNDAeFw0yNTA5MjUwNDU1MDFaFw0yNjA5MjQwNTAwMDFaMDMxMTAvBgNV BAMTKDQ4QkUzMjIxRTBENDVEODYyOTU5NThDNTI1QTc3QzkyRDAxRUMyQUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/xbTkwDF8Tzitd3t1uUMGt7sB KiPNJa/qHqBHdJGr/0lv2PrrhduJXC+vUwOevQr4i24KxuJLiiCJ0aGpB33mKA51 kN30cvdK4TB3WBM9f4tWxcqLemiJy6A+DFNudujGnvfQMpRjN/lz0WdH7fxjgG6X hDUISOGBpYQfHT3v2aQU0OOXfi5CfQoTZ4cJgXXkBTLP2bLqBDf9wxGPgQsLeHcX aDjqmMSPdKE5kLSSowKfo/q4fSuyHYfsOqH+gSeudOFFou3g6qqfpGZtbUbXLfB5 cKmg+I8ShruLT7b1A/Vmek0e/mPGYRGdT097Xcs48ECR27ChM+6HrpLUTO4bAgMB AAGjggItMIICKTAdBgNVHQ4EFgQUSL4yIeDUXYYpWVjFJad8ktAewqswHwYDVR0j BBgwFoAUEcm6KFNLpEmZtLpdaw8o5WjfbhQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MDZiNjY3My00N2ExLTQ1ZTUtYjZjMi00MmFiOGI0NzYyNDkvMC8xMUM5QkEyODUz NEJBNDQ5OTlCNEJBNUQ2QjBGMjhFNTY4REY2RTE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTFDOUJBMjg1MzRCQTQ0OTk5QjRCQTVENkIwRjI4RTU2OERG NkUxNC5jZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTA2YjY2NzMtNDdhMS00NWU1LWI2 YzItNDJhYjhiNDc2MjQ5LzAvMzIzNzJlMzEzMzMxMmUzNjJlMzAyZjMyMzMyZDMy MzQyMDNkM2UyMDMzMzgzNzM1MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAEbgwYwDQYJKoZIhvcNAQEL BQADggEBAH5BBUixOtNd43vRw6FZCxWtr1hWd55woP5WRE0dpkmWe/wl6jQ5aOKG gVahLzy2xkNj5Ib0w562Td4sQszBHGsKE8h4oYzNLif/SrN0guig38uo+FPwisXT jeswYl4s23/5h45XadXHGlqEwt+HpUCLFJ4ybUiLRY/iQP95XB+bJRY+BRitTIyr 3g257hGk2g/tZNiJA70kYxNdvxdvmmBO/08x1tQYZCh0XuokrGSqEfFxUcWrJ+/z 2TxYri+XKIfIwctyY2W/6/sTGZ7F15U4x23A/+Q7mrfTvug3Dp45O5t4sKmaPls4 i8uTYdWFnrzig4Y1VIz9RsQLlJqaJqI= -----END CERTIFICATE-----Generated at Tue Oct 21 04:45:37 2025 by rpki-client