$ rpki-client -vvf rpki-rsync.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/32372e3133312e302e302f32342d3234203d3e203338373533.roa File: 32372e3133312e302e302f32342d3234203d3e203338373533.roa (raw, json) Hash identifier: e977YWIWm/BXV1wJwh2j4S4MW5uCFqiX6zu8rAGZQFA= Subject key identifier: D2:C4:25:A2:53:36:CA:02:C7:2C:29:00:19:40:AA:88:0F:1A:70:2D Certificate issuer: /CN=955AF2D41C7C84BFE354F8648EE3271584452C79 Certificate serial: 49039D9679279FCEE6C843E37F2F54FBE0345358 Authority key identifier: 95:5A:F2:D4:1C:7C:84:BF:E3:54:F8:64:8E:E3:27:15:84:45:2C:79 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/955AF2D41C7C84BFE354F8648EE3271584452C79.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/32372e3133312e302e302f32342d3234203d3e203338373533.roa Signing time: Sun 03 May 2026 02:55:33 +0000 ROA not before: Sun 03 May 2026 02:50:33 +0000 ROA not after: Sun 02 May 2027 02:55:33 +0000 asID: 38753 IP address blocks: 27.131.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/955AF2D41C7C84BFE354F8648EE3271584452C79.crl rsync://rpki-rsync.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/955AF2D41C7C84BFE354F8648EE3271584452C79.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/955AF2D41C7C84BFE354F8648EE3271584452C79.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:03:9d:96:79:27:9f:ce:e6:c8:43:e3:7f:2f:54:fb:e0:34:53:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=955AF2D41C7C84BFE354F8648EE3271584452C79 Validity Not Before: May 3 02:50:33 2026 GMT Not After : May 2 02:55:33 2027 GMT Subject: CN=D2C425A25336CA02C72C29001940AA880F1A702D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:8c:53:60:91:31:17:ca:d4:1e:ae:27:ab:7b: a5:f7:1d:20:a5:63:9e:81:40:65:af:a8:98:9e:c0: b8:cc:c6:65:a4:1e:ad:61:7e:bb:70:10:8a:df:41: 73:a1:38:ae:fd:d5:f9:28:6e:6b:80:49:29:09:bb: 6f:06:1a:41:55:1c:0e:12:c3:2f:a1:65:5f:dd:8b: 4a:c7:51:62:7e:29:ff:d2:28:c8:95:7a:71:94:72: e1:b8:7d:d8:9b:d2:df:ab:50:12:63:f3:33:b2:2e: 50:39:12:d4:ef:bf:96:08:dd:a0:b6:92:20:3b:e7: aa:36:ff:fc:2c:70:8a:2b:ca:be:ae:5d:10:2b:4c: fd:a5:1d:67:3c:7e:26:6b:b1:a5:9d:eb:37:e5:80: 24:f8:d5:a0:31:93:8b:8a:9f:3d:c5:7d:c7:1e:19: 30:bd:27:f1:24:8b:02:2e:c0:6d:82:63:dd:90:2c: d5:82:dc:4c:bc:5a:e5:1d:72:93:f6:da:b6:67:86: c9:28:e5:b1:1c:ed:53:74:45:32:3a:7d:ae:ba:fc: 5b:e0:cb:45:73:86:84:a3:47:52:8d:75:a4:df:3d: 76:38:72:72:33:d7:41:25:5c:97:87:70:74:53:ff: 37:c3:a2:0b:6a:00:b1:56:bc:09:b4:af:4d:bc:1d: d1:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:C4:25:A2:53:36:CA:02:C7:2C:29:00:19:40:AA:88:0F:1A:70:2D X509v3 Authority Key Identifier: keyid:95:5A:F2:D4:1C:7C:84:BF:E3:54:F8:64:8E:E3:27:15:84:45:2C:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/955AF2D41C7C84BFE354F8648EE3271584452C79.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/955AF2D41C7C84BFE354F8648EE3271584452C79.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/32372e3133312e302e302f32342d3234203d3e203338373533.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 27.131.0.0/24 Signature Algorithm: sha256WithRSAEncryption 5a:4c:61:5a:13:73:7e:ff:75:b8:f8:1f:78:0a:ee:bf:22:00: 9d:be:54:d9:13:e8:d8:f4:ac:fd:00:de:84:01:59:98:58:68: e5:a5:47:a5:df:24:8f:a0:49:69:c0:2a:49:a9:63:78:a7:ee: 2c:61:f5:f5:a4:1f:be:a1:c6:49:07:6b:42:b8:15:a9:3f:5f: a0:b9:6a:28:2c:9f:4b:9f:9b:9c:f2:bf:27:7d:90:9b:93:6b: 7e:8d:2a:c2:e9:bc:98:9c:1e:91:53:3a:a5:26:3c:cf:d3:7e: 74:35:5b:45:0e:8f:a0:df:cc:c3:ba:35:ff:f8:35:af:24:3f: 7e:f9:a1:b8:d7:01:9b:5c:44:bd:00:5c:1b:75:8d:b5:bd:6b: 7a:84:40:83:6b:ac:9f:68:73:f3:a0:38:75:45:b9:ff:96:79: 46:d1:d3:6d:5f:fc:4f:d1:7c:72:f6:79:17:39:de:0f:0d:d2: 5c:b3:be:42:64:d3:f5:9e:64:da:27:d5:d7:3c:3e:1e:a4:9d: 0d:20:cf:69:07:22:07:ce:d3:7a:3f:91:ce:0a:ab:06:8c:4d: 3b:50:5e:2f:d0:d9:a8:a8:b9:51:93:01:29:f8:02:bf:cf:89: af:bc:86:ba:f3:3a:41:d2:dc:91:da:65:83:ab:e5:6a:99:b0: 07:fe:bf:5c -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgIUSQOdlnknn87myEPjfy9U++A0U1gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTU1QUYyRDQxQzdDODRCRkUzNTRGODY0OEVFMzI3MTU4 NDQ1MkM3OTAeFw0yNjA1MDMwMjUwMzNaFw0yNzA1MDIwMjU1MzNaMDMxMTAvBgNV BAMTKEQyQzQyNUEyNTMzNkNBMDJDNzJDMjkwMDE5NDBBQTg4MEYxQTcwMkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8jFNgkTEXytQeriere6X3HSCl Y56BQGWvqJiewLjMxmWkHq1hfrtwEIrfQXOhOK791fkobmuASSkJu28GGkFVHA4S wy+hZV/di0rHUWJ+Kf/SKMiVenGUcuG4fdib0t+rUBJj8zOyLlA5EtTvv5YI3aC2 kiA756o2//wscIoryr6uXRArTP2lHWc8fiZrsaWd6zflgCT41aAxk4uKnz3Ffcce GTC9J/EkiwIuwG2CY92QLNWC3Ey8WuUdcpP22rZnhsko5bEc7VN0RTI6fa66/Fvg y0VzhoSjR1KNdaTfPXY4cnIz10ElXJeHcHRT/zfDogtqALFWvAm0r028HdHDAgMB AAGjggItMIICKTAdBgNVHQ4EFgQU0sQlolM2ygLHLCkAGUCqiA8acC0wHwYDVR0j BBgwFoAUlVry1Bx8hL/jVPhkjuMnFYRFLHkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTA2YjY2NzMtNDdhMS00NWU1LWI2YzItNDJhYjhiNDc2MjQ5LzAvOTU1QUYyRDQx QzdDODRCRkUzNTRGODY0OEVFMzI3MTU4NDQ1MkM3OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85NTVBRjJENDFDN0M4NEJGRTM1NEY4NjQ4RUUzMjcxNTg0NDUy Qzc5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUFBzALhn9yc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTA2YjY2NzMtNDdhMS00NWU1LWI2 YzItNDJhYjhiNDc2MjQ5LzAvMzIzNzJlMzEzMzMxMmUzMDJlMzAyZjMyMzQyZDMy MzQyMDNkM2UyMDMzMzgzNzM1MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAbgwAwDQYJKoZIhvcNAQEL BQADggEBAFpMYVoTc37/dbj4H3gK7r8iAJ2+VNkT6Nj0rP0A3oQBWZhYaOWlR6Xf JI+gSWnAKkmpY3in7ixh9fWkH76hxkkHa0K4Fak/X6C5aigsn0ufm5zyvyd9kJuT a36NKsLpvJicHpFTOqUmPM/TfnQ1W0UOj6DfzMO6Nf/4Na8kP375objXAZtcRL0A XBt1jbW9a3qEQINrrJ9oc/OgOHVFuf+WeUbR021f/E/RfHL2eRc53g8N0lyzvkJk 0/WeZNon1dc8Ph6knQ0gz2kHIgfO03o/kc4KqwaMTTtQXi/Q2aiouVGTASn4Ar/P ia+8hrrzOkHS3JHaZYOr5WqZsAf+v1w= -----END CERTIFICATE-----Generated at Wed May 13 02:59:19 2026 by rpki-client