$ rpki-client -vvf rpki-rsync.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/32372e3133312e362e302f32332d3234203d3e203338373533.roa File: 32372e3133312e362e302f32332d3234203d3e203338373533.roa (raw, json) Hash identifier: jQf1kANsNHJX1nCJag+APOxLVQdFCjlHLHz5L35eSyk= Subject key identifier: C0:73:71:3A:E0:E5:82:D3:53:85:2E:1C:DA:E0:61:F7:29:E0:F4:8E Certificate issuer: /CN=955AF2D41C7C84BFE354F8648EE3271584452C79 Certificate serial: 536F5D40813379FA82C5A1DF466334EF00A5E03E Authority key identifier: 95:5A:F2:D4:1C:7C:84:BF:E3:54:F8:64:8E:E3:27:15:84:45:2C:79 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/955AF2D41C7C84BFE354F8648EE3271584452C79.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/32372e3133312e362e302f32332d3234203d3e203338373533.roa Signing time: Sun 03 May 2026 02:55:22 +0000 ROA not before: Sun 03 May 2026 02:50:22 +0000 ROA not after: Sun 02 May 2027 02:55:22 +0000 asID: 38753 IP address blocks: 27.131.6.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/955AF2D41C7C84BFE354F8648EE3271584452C79.crl rsync://rpki-rsync.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/955AF2D41C7C84BFE354F8648EE3271584452C79.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/955AF2D41C7C84BFE354F8648EE3271584452C79.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:6f:5d:40:81:33:79:fa:82:c5:a1:df:46:63:34:ef:00:a5:e0:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=955AF2D41C7C84BFE354F8648EE3271584452C79 Validity Not Before: May 3 02:50:22 2026 GMT Not After : May 2 02:55:22 2027 GMT Subject: CN=C073713AE0E582D353852E1CDAE061F729E0F48E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:ab:93:18:47:8a:08:57:bb:4b:51:27:f4:28: 12:ff:fc:e2:74:e6:eb:b9:8d:35:e3:df:33:49:7b: c6:57:51:45:92:ca:af:b2:83:ee:53:41:17:67:f8: 8c:68:ef:38:01:f6:9d:8e:76:74:77:78:8c:b7:39: c4:f8:35:68:91:87:3e:37:23:4d:33:4f:08:11:fc: e9:a7:ba:01:93:36:3c:10:1b:69:43:37:7d:28:6e: 2d:aa:10:de:4a:1d:c6:fd:59:ff:a2:8b:40:c8:fd: 76:07:fa:0a:86:1e:6e:c5:db:da:80:fa:19:80:72: 00:a7:51:b6:28:6c:00:25:ee:fd:76:48:9c:50:16: 28:e0:bf:6b:98:28:c1:3e:e6:79:c2:e0:95:2d:40: a8:db:1b:72:2e:20:63:fa:dc:d5:ca:1f:94:0e:58: eb:1d:dc:16:94:d6:16:25:a3:06:a9:21:ec:32:5e: 6e:a1:84:3f:a5:3e:cf:a8:70:fd:cf:0f:ba:de:09: 62:bc:32:65:fe:cf:5d:52:3d:08:f3:c7:37:4e:09: e4:f2:97:a9:c0:7b:7c:b9:b1:51:a1:89:61:95:5f: 34:f5:76:f4:f2:2c:e1:c4:6b:6c:81:9f:70:ea:44: ee:e7:aa:a7:f5:48:15:14:5e:4b:df:1f:e4:0c:f2: 76:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:73:71:3A:E0:E5:82:D3:53:85:2E:1C:DA:E0:61:F7:29:E0:F4:8E X509v3 Authority Key Identifier: keyid:95:5A:F2:D4:1C:7C:84:BF:E3:54:F8:64:8E:E3:27:15:84:45:2C:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/955AF2D41C7C84BFE354F8648EE3271584452C79.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/955AF2D41C7C84BFE354F8648EE3271584452C79.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/32372e3133312e362e302f32332d3234203d3e203338373533.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 27.131.6.0/23 Signature Algorithm: sha256WithRSAEncryption d8:c5:27:a2:06:4b:84:18:00:3c:cc:28:1e:a6:c7:47:38:d0: 3d:11:d6:cb:30:71:ae:9c:1f:74:71:86:e2:be:4c:55:02:6d: 54:92:52:00:ff:b8:e8:0a:12:be:bf:2b:28:db:9a:af:46:e2: 8c:ab:80:60:11:1a:9d:13:49:61:bc:69:d9:bd:0b:43:b7:3f: 76:6c:66:f3:f7:8a:60:b2:2e:24:ad:fd:4c:8b:f3:1a:d9:7b: b2:7f:f4:0d:56:f9:db:f4:7c:4d:7e:22:92:af:56:6a:f8:2b: c7:c2:d8:6a:c1:25:1a:18:ed:02:3c:5a:f3:d6:d0:46:2d:0c: 11:20:5f:bc:d9:b2:42:4c:dc:9a:59:a2:40:5a:da:2c:e9:f2: 90:19:2c:1d:f2:a1:8f:35:07:81:65:e3:6c:a2:f0:57:8d:6e: 99:24:e9:66:54:78:33:0a:be:26:24:1e:96:9b:a1:c6:4a:35: d9:ce:16:c5:82:db:00:31:0d:88:bd:3f:66:70:b8:90:0d:52: 16:58:c0:fb:d7:41:40:fa:98:28:19:ac:ec:e6:7e:b0:38:7e: 74:6d:b2:71:c9:96:cb:58:2a:b6:52:53:56:35:56:ac:66:87: 87:32:fa:55:58:47:b9:43:ed:32:c5:31:e0:2d:fc:21:9f:ff: 62:50:dd:18 -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgIUU29dQIEzefqCxaHfRmM07wCl4D4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTU1QUYyRDQxQzdDODRCRkUzNTRGODY0OEVFMzI3MTU4 NDQ1MkM3OTAeFw0yNjA1MDMwMjUwMjJaFw0yNzA1MDIwMjU1MjJaMDMxMTAvBgNV BAMTKEMwNzM3MTNBRTBFNTgyRDM1Mzg1MkUxQ0RBRTA2MUY3MjlFMEY0OEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSq5MYR4oIV7tLUSf0KBL//OJ0 5uu5jTXj3zNJe8ZXUUWSyq+yg+5TQRdn+Ixo7zgB9p2OdnR3eIy3OcT4NWiRhz43 I00zTwgR/OmnugGTNjwQG2lDN30obi2qEN5KHcb9Wf+ii0DI/XYH+gqGHm7F29qA +hmAcgCnUbYobAAl7v12SJxQFijgv2uYKME+5nnC4JUtQKjbG3IuIGP63NXKH5QO WOsd3BaU1hYlowapIewyXm6hhD+lPs+ocP3PD7reCWK8MmX+z11SPQjzxzdOCeTy l6nAe3y5sVGhiWGVXzT1dvTyLOHEa2yBn3DqRO7nqqf1SBUUXkvfH+QM8nbdAgMB AAGjggItMIICKTAdBgNVHQ4EFgQUwHNxOuDlgtNThS4c2uBh9yng9I4wHwYDVR0j BBgwFoAUlVry1Bx8hL/jVPhkjuMnFYRFLHkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTA2YjY2NzMtNDdhMS00NWU1LWI2YzItNDJhYjhiNDc2MjQ5LzAvOTU1QUYyRDQx QzdDODRCRkUzNTRGODY0OEVFMzI3MTU4NDQ1MkM3OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85NTVBRjJENDFDN0M4NEJGRTM1NEY4NjQ4RUUzMjcxNTg0NDUy Qzc5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUFBzALhn9yc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTA2YjY2NzMtNDdhMS00NWU1LWI2 YzItNDJhYjhiNDc2MjQ5LzAvMzIzNzJlMzEzMzMxMmUzNjJlMzAyZjMyMzMyZDMy MzQyMDNkM2UyMDMzMzgzNzM1MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAEbgwYwDQYJKoZIhvcNAQEL BQADggEBANjFJ6IGS4QYADzMKB6mx0c40D0R1sswca6cH3RxhuK+TFUCbVSSUgD/ uOgKEr6/Kyjbmq9G4oyrgGARGp0TSWG8adm9C0O3P3ZsZvP3imCyLiSt/UyL8xrZ e7J/9A1W+dv0fE1+IpKvVmr4K8fC2GrBJRoY7QI8WvPW0EYtDBEgX7zZskJM3JpZ okBa2izp8pAZLB3yoY81B4Fl42yi8FeNbpkk6WZUeDMKviYkHpabocZKNdnOFsWC 2wAxDYi9P2ZwuJANUhZYwPvXQUD6mCgZrOzmfrA4fnRtsnHJlstYKrZSU1Y1Vqxm h4cy+lVYR7lD7TLFMeAt/CGf/2JQ3Rg= -----END CERTIFICATE-----Generated at Wed May 13 02:59:30 2026 by rpki-client