$ rpki-client -vvf rpki-rsync.idnic.net/repo/6f2a8011-4c66-43d1-bbc5-fb11e89f91e0/0/32372e3132342e37362e302f32332d3234203d3e20313532303336.roa File: 32372e3132342e37362e302f32332d3234203d3e20313532303336.roa (raw, json) Hash identifier: iKJ0DIWC7U9aKL7GFCNEusABKzEUQiWvlNcSeLFvSF4= Subject key identifier: 8E:BC:C2:57:EB:8F:50:DB:E8:72:51:76:A2:6B:AF:E5:2B:01:F0:A4 Certificate issuer: /CN=D85B5F563F238E2E321FCB30013AE445C7D38DEB Certificate serial: 51AA5D65780B2877D9472E43C45D8C323C49717B Authority key identifier: D8:5B:5F:56:3F:23:8E:2E:32:1F:CB:30:01:3A:E4:45:C7:D3:8D:EB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D85B5F563F238E2E321FCB30013AE445C7D38DEB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6f2a8011-4c66-43d1-bbc5-fb11e89f91e0/0/32372e3132342e37362e302f32332d3234203d3e20313532303336.roa Signing time: Sun 03 May 2026 02:42:07 +0000 ROA not before: Sun 03 May 2026 02:37:07 +0000 ROA not after: Sun 02 May 2027 02:42:07 +0000 asID: 152036 IP address blocks: 27.124.76.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6f2a8011-4c66-43d1-bbc5-fb11e89f91e0/0/D85B5F563F238E2E321FCB30013AE445C7D38DEB.crl rsync://rpki-rsync.idnic.net/repo/6f2a8011-4c66-43d1-bbc5-fb11e89f91e0/0/D85B5F563F238E2E321FCB30013AE445C7D38DEB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D85B5F563F238E2E321FCB30013AE445C7D38DEB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:aa:5d:65:78:0b:28:77:d9:47:2e:43:c4:5d:8c:32:3c:49:71:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D85B5F563F238E2E321FCB30013AE445C7D38DEB Validity Not Before: May 3 02:37:07 2026 GMT Not After : May 2 02:42:07 2027 GMT Subject: CN=8EBCC257EB8F50DBE8725176A26BAFE52B01F0A4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:2e:41:d8:39:da:75:9d:a9:d1:da:48:eb:90: ab:72:22:34:04:d6:f6:d0:eb:7a:0b:17:c6:f6:b3: 16:f6:cf:1b:e3:89:27:61:b8:cd:07:25:52:7d:f7: bd:09:b0:5a:4c:94:f1:35:42:ab:e9:0b:dc:39:ca: a1:e8:fc:c6:4a:22:52:03:8c:ce:86:b5:08:a9:98: e5:4d:9e:f1:18:5f:b2:95:ab:9b:2f:86:d5:d2:82: 37:e9:1e:2b:88:1e:a7:fd:69:81:50:96:26:d9:0c: ff:a1:c2:d7:58:68:73:b0:fb:97:af:e7:42:ee:05: 7e:ae:37:f5:1f:bb:f6:08:61:56:5d:d0:5b:76:58: f7:38:7e:74:8a:f1:05:69:7d:35:7b:5b:62:d1:4c: ea:cb:6f:d8:a9:85:94:92:6e:d9:cc:6d:30:1f:54: ce:95:29:86:3c:fd:a7:98:d9:97:e7:0a:5c:48:21: 29:08:ad:72:48:99:c7:6e:3b:51:8f:4b:f1:0e:cd: 5f:9e:1d:18:c7:9f:7c:4a:00:79:a4:7b:c6:f5:d3: 2a:20:34:f2:1d:1b:30:9b:12:76:e9:06:df:49:5c: ae:51:af:05:cf:41:30:d7:56:f0:b0:62:0c:c4:ad: a9:a6:4b:c2:46:68:6d:00:0a:96:b5:dd:90:37:7e: 7b:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:BC:C2:57:EB:8F:50:DB:E8:72:51:76:A2:6B:AF:E5:2B:01:F0:A4 X509v3 Authority Key Identifier: keyid:D8:5B:5F:56:3F:23:8E:2E:32:1F:CB:30:01:3A:E4:45:C7:D3:8D:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6f2a8011-4c66-43d1-bbc5-fb11e89f91e0/0/D85B5F563F238E2E321FCB30013AE445C7D38DEB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D85B5F563F238E2E321FCB30013AE445C7D38DEB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6f2a8011-4c66-43d1-bbc5-fb11e89f91e0/0/32372e3132342e37362e302f32332d3234203d3e20313532303336.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 27.124.76.0/23 Signature Algorithm: sha256WithRSAEncryption 13:52:a3:9c:84:0f:aa:c0:2b:c1:ad:cd:6b:be:53:3f:b4:d8: e2:62:5c:f0:44:39:5d:26:11:9b:57:54:bb:8e:dc:97:52:8b: ed:36:88:c8:d0:ee:1a:6c:87:c0:dd:c8:70:0b:fa:46:2a:d6: 1f:5b:f8:75:6e:9d:a5:be:33:90:8f:c5:68:80:2b:25:49:e1: cb:b5:68:bf:b0:03:1b:91:67:2d:ca:bd:67:72:dc:3b:bf:ef: 43:28:53:fb:71:1a:51:3f:ec:a2:1a:f7:12:09:d6:2d:d6:19: 0f:4d:96:36:97:68:bf:72:53:15:cd:b8:9f:03:32:43:99:88: 32:9a:5b:e9:01:32:52:47:44:88:94:04:62:57:2e:44:04:18: 77:92:2d:d9:4f:85:bf:2c:08:1d:0a:8b:f5:29:ee:8e:4e:0f: bd:5b:cb:4e:0a:56:ea:5c:57:58:65:26:bb:a8:64:6c:40:86: 70:cb:7e:43:d7:6a:a7:12:fe:72:20:d8:d0:7e:68:ba:b6:d1: 07:19:11:96:28:c8:d7:83:72:e9:cb:2b:87:b2:87:22:7a:e7: 20:fd:b8:97:97:cc:6c:c7:fe:8d:f5:72:4e:b8:eb:ed:f1:99: a0:0b:5e:50:88:2e:36:12:2a:69:a4:5a:3c:08:70:c0:ff:46: fb:f9:7b:2d -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUUapdZXgLKHfZRy5DxF2MMjxJcXswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDg1QjVGNTYzRjIzOEUyRTMyMUZDQjMwMDEzQUU0NDVD N0QzOERFQjAeFw0yNjA1MDMwMjM3MDdaFw0yNzA1MDIwMjQyMDdaMDMxMTAvBgNV BAMTKDhFQkNDMjU3RUI4RjUwREJFODcyNTE3NkEyNkJBRkU1MkIwMUYwQTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTLkHYOdp1nanR2kjrkKtyIjQE 1vbQ63oLF8b2sxb2zxvjiSdhuM0HJVJ9970JsFpMlPE1QqvpC9w5yqHo/MZKIlID jM6GtQipmOVNnvEYX7KVq5svhtXSgjfpHiuIHqf9aYFQlibZDP+hwtdYaHOw+5ev 50LuBX6uN/Ufu/YIYVZd0Ft2WPc4fnSK8QVpfTV7W2LRTOrLb9iphZSSbtnMbTAf VM6VKYY8/aeY2ZfnClxIISkIrXJImcduO1GPS/EOzV+eHRjHn3xKAHmke8b10yog NPIdGzCbEnbpBt9JXK5RrwXPQTDXVvCwYgzErammS8JGaG0ACpa13ZA3fnu3AgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUjrzCV+uPUNvoclF2omuv5SsB8KQwHwYDVR0j BBgwFoAU2FtfVj8jji4yH8swATrkRcfTjeswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmYyYTgwMTEtNGM2Ni00M2QxLWJiYzUtZmIxMWU4OWY5MWUwLzAvRDg1QjVGNTYz RjIzOEUyRTMyMUZDQjMwMDEzQUU0NDVDN0QzOERFQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EODVCNUY1NjNGMjM4RTJFMzIxRkNCMzAwMTNBRTQ0NUM3RDM4 REVCLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzZmMmE4MDExLTRjNjYtNDNkMS1i YmM1LWZiMTFlODlmOTFlMC8wLzMyMzcyZTMxMzIzNDJlMzczNjJlMzAyZjMyMzMy ZDMyMzQyMDNkM2UyMDMxMzUzMjMwMzMzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEARt8TDANBgkqhkiG 9w0BAQsFAAOCAQEAE1KjnIQPqsArwa3Na75TP7TY4mJc8EQ5XSYRm1dUu47cl1KL 7TaIyNDuGmyHwN3IcAv6RirWH1v4dW6dpb4zkI/FaIArJUnhy7Vov7ADG5FnLcq9 Z3LcO7/vQyhT+3EaUT/sohr3EgnWLdYZD02WNpdov3JTFc24nwMyQ5mIMppb6QEy UkdEiJQEYlcuRAQYd5It2U+FvywIHQqL9Snujk4PvVvLTgpW6lxXWGUmu6hkbECG cMt+Q9dqpxL+ciDY0H5ourbRBxkRlijI14Ny6csrh7KHInrnIP24l5fMbMf+jfVy Trjr7fGZoAteUIguNhIqaaRaPAhwwP9G+/l7LQ== -----END CERTIFICATE-----Generated at Wed May 13 02:25:38 2026 by rpki-client