$ rpki-client -vvf rpki-rsync.idnic.net/repo/1e6ff38d-e547-4f73-bb30-2b14c08c89fb/0/32372e3131322e37372e302f32342d3234203d3e20313430343832.roa File: 32372e3131322e37372e302f32342d3234203d3e20313430343832.roa (raw, json) Hash identifier: EYrB9WmEEsZBQC1BtxA6FgRk0osKm3o1jztWowdaQE0= Subject key identifier: 6D:34:59:8D:36:9E:A7:28:72:97:DB:AE:DE:93:69:0F:73:75:2E:41 Certificate issuer: /CN=A7F257AB233C8B2F1C6388FCB94F34206063ACA7 Certificate serial: 6C87741FA3387876BB8D8316EC8AA5F9A10592F9 Authority key identifier: A7:F2:57:AB:23:3C:8B:2F:1C:63:88:FC:B9:4F:34:20:60:63:AC:A7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A7F257AB233C8B2F1C6388FCB94F34206063ACA7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1e6ff38d-e547-4f73-bb30-2b14c08c89fb/0/32372e3131322e37372e302f32342d3234203d3e20313430343832.roa Signing time: Sun 03 May 2026 02:18:20 +0000 ROA not before: Sun 03 May 2026 02:13:20 +0000 ROA not after: Sun 02 May 2027 02:18:20 +0000 asID: 140482 IP address blocks: 27.112.77.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1e6ff38d-e547-4f73-bb30-2b14c08c89fb/0/A7F257AB233C8B2F1C6388FCB94F34206063ACA7.crl rsync://rpki-rsync.idnic.net/repo/1e6ff38d-e547-4f73-bb30-2b14c08c89fb/0/A7F257AB233C8B2F1C6388FCB94F34206063ACA7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A7F257AB233C8B2F1C6388FCB94F34206063ACA7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:87:74:1f:a3:38:78:76:bb:8d:83:16:ec:8a:a5:f9:a1:05:92:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A7F257AB233C8B2F1C6388FCB94F34206063ACA7 Validity Not Before: May 3 02:13:20 2026 GMT Not After : May 2 02:18:20 2027 GMT Subject: CN=6D34598D369EA7287297DBAEDE93690F73752E41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:f9:e5:ca:4a:31:d2:2b:59:85:05:0e:a9:16: 9a:ad:2c:08:84:8f:c8:92:ae:22:ed:38:9b:5a:d6: 83:b9:c9:eb:ea:b8:e1:1b:9b:83:5f:c1:5d:5a:a6: 38:05:be:33:e7:45:1c:43:84:ae:b2:8a:df:1e:67: ed:43:be:e8:f8:b6:24:6e:69:9f:38:3f:d7:6d:bc: c1:17:95:14:98:d7:d8:ae:02:b3:cf:3f:be:ab:82: 0b:95:c9:43:c4:c9:92:3d:f2:25:ab:b0:81:c2:50: ec:b4:f5:8e:6e:9a:7a:20:63:2a:c4:2c:a5:66:52: 0b:1f:3e:00:0b:89:71:dc:00:d1:24:c8:8f:a7:10: d5:7e:47:50:0b:ee:71:93:57:5c:b6:31:5b:0a:22: 2b:47:de:5b:55:a2:8f:78:96:85:8b:8f:7a:6c:e6: 69:e9:97:6f:0d:82:4e:a0:52:c4:d5:ad:00:a5:ef: fa:c1:9b:e5:c3:8d:c1:57:ae:05:89:47:d7:2e:51: 74:94:c7:c6:b9:fc:df:fc:53:9d:52:0c:13:e3:5d: cb:77:11:a8:b6:d4:a1:2b:a1:c2:6d:5f:68:8c:3a: db:11:70:f9:12:92:3f:35:ee:33:9f:10:83:62:a5: 23:fc:2f:a9:a5:2b:51:f4:c9:94:bc:de:72:0f:e3: 5a:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:34:59:8D:36:9E:A7:28:72:97:DB:AE:DE:93:69:0F:73:75:2E:41 X509v3 Authority Key Identifier: keyid:A7:F2:57:AB:23:3C:8B:2F:1C:63:88:FC:B9:4F:34:20:60:63:AC:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1e6ff38d-e547-4f73-bb30-2b14c08c89fb/0/A7F257AB233C8B2F1C6388FCB94F34206063ACA7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A7F257AB233C8B2F1C6388FCB94F34206063ACA7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1e6ff38d-e547-4f73-bb30-2b14c08c89fb/0/32372e3131322e37372e302f32342d3234203d3e20313430343832.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 27.112.77.0/24 Signature Algorithm: sha256WithRSAEncryption 7c:be:7a:26:1a:81:97:42:0c:a7:f1:21:33:bb:d4:e2:ce:6e: 2f:73:2c:d8:5c:e8:02:30:e3:d3:3c:21:c4:42:24:7e:60:a2: b3:19:91:03:c8:88:b7:94:57:ce:ff:a8:fb:a2:20:5c:ed:a6: af:c5:da:81:16:bd:b4:51:63:ff:91:d9:17:64:de:d8:8e:b5: 01:74:d5:74:9a:ad:77:0a:16:c9:7f:30:f5:a8:b6:7d:f4:a3: a4:af:06:57:cb:10:13:05:78:ad:8e:64:72:21:1d:54:21:17: 5e:5c:80:23:7b:df:08:0d:ee:4e:a1:7e:62:f9:4d:9a:cf:98: 23:0e:cd:6f:67:00:bc:4e:46:20:88:16:a6:95:cd:81:cd:b4: 30:69:8a:c6:0b:7f:09:6c:5d:7a:26:0f:4f:22:6f:5c:6c:85: 11:5f:a4:24:fc:61:73:02:f0:60:9c:58:61:18:c9:cc:bd:c3: 4c:d2:13:b1:bf:58:f1:83:0e:98:76:1c:38:d0:17:26:5b:f6: 5b:2b:f1:87:7a:5f:e2:4e:fb:46:06:a0:87:0f:8a:02:a4:4e: 80:68:18:53:cd:11:7a:64:0e:8c:3b:eb:72:31:ab:27:b8:b3: 60:38:f6:9b:bd:ad:1c:57:67:66:33:24:9e:68:10:72:4b:28: 15:b8:1e:56 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUbId0H6M4eHa7jYMW7Iql+aEFkvkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTdGMjU3QUIyMzNDOEIyRjFDNjM4OEZDQjk0RjM0MjA2 MDYzQUNBNzAeFw0yNjA1MDMwMjEzMjBaFw0yNzA1MDIwMjE4MjBaMDMxMTAvBgNV BAMTKDZEMzQ1OThEMzY5RUE3Mjg3Mjk3REJBRURFOTM2OTBGNzM3NTJFNDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDf+eXKSjHSK1mFBQ6pFpqtLAiE j8iSriLtOJta1oO5yevquOEbm4NfwV1apjgFvjPnRRxDhK6yit8eZ+1Dvuj4tiRu aZ84P9dtvMEXlRSY19iuArPPP76rgguVyUPEyZI98iWrsIHCUOy09Y5umnogYyrE LKVmUgsfPgALiXHcANEkyI+nENV+R1AL7nGTV1y2MVsKIitH3ltVoo94loWLj3ps 5mnpl28Ngk6gUsTVrQCl7/rBm+XDjcFXrgWJR9cuUXSUx8a5/N/8U51SDBPjXct3 Eai21KErocJtX2iMOtsRcPkSkj817jOfEINipSP8L6mlK1H0yZS83nIP41pnAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUbTRZjTaepyhyl9uu3pNpD3N1LkEwHwYDVR0j BBgwFoAUp/JXqyM8iy8cY4j8uU80IGBjrKcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWU2ZmYzOGQtZTU0Ny00ZjczLWJiMzAtMmIxNGMwOGM4OWZiLzAvQTdGMjU3QUIy MzNDOEIyRjFDNjM4OEZDQjk0RjM0MjA2MDYzQUNBNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BN0YyNTdBQjIzM0M4QjJGMUM2Mzg4RkNCOTRGMzQyMDYwNjNB Q0E3LmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzFlNmZmMzhkLWU1NDctNGY3My1i YjMwLTJiMTRjMDhjODlmYi8wLzMyMzcyZTMxMzEzMjJlMzczNzJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMxMzQzMDM0MzgzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEABtwTTANBgkqhkiG 9w0BAQsFAAOCAQEAfL56JhqBl0IMp/EhM7vU4s5uL3Ms2FzoAjDj0zwhxEIkfmCi sxmRA8iIt5RXzv+o+6IgXO2mr8XagRa9tFFj/5HZF2Te2I61AXTVdJqtdwoWyX8w 9ai2ffSjpK8GV8sQEwV4rY5kciEdVCEXXlyAI3vfCA3uTqF+YvlNms+YIw7Nb2cA vE5GIIgWppXNgc20MGmKxgt/CWxdeiYPTyJvXGyFEV+kJPxhcwLwYJxYYRjJzL3D TNITsb9Y8YMOmHYcONAXJlv2Wyvxh3pf4k77Rgaghw+KAqROgGgYU80RemQOjDvr cjGrJ7izYDj2m72tHFdnZjMknmgQcksoFbgeVg== -----END CERTIFICATE-----Generated at Wed May 13 01:41:05 2026 by rpki-client