$ rpki-client -vvf rpki-rsync.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0/32372e3132312e38352e302f32342d3234203d3e203535363532.roa File: 32372e3132312e38352e302f32342d3234203d3e203535363532.roa (raw, json) Hash identifier: DKemgkGfRSsQDIb9t6Dxr8FxG7VecmyFhyl+wtA42dc= Subject key identifier: 8E:58:B8:6D:0D:32:DB:C3:B5:EC:E5:35:53:31:D4:00:47:47:F1:DF Certificate issuer: /CN=51F511E456B4CA99CA7BD1C91B651FDDC5C0268F Certificate serial: 64C30A4C3FF891CF37AB107E763BC427F20A6634 Authority key identifier: 51:F5:11:E4:56:B4:CA:99:CA:7B:D1:C9:1B:65:1F:DD:C5:C0:26:8F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/51F511E456B4CA99CA7BD1C91B651FDDC5C0268F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0/32372e3132312e38352e302f32342d3234203d3e203535363532.roa Signing time: Sun 03 May 2026 02:59:47 +0000 ROA not before: Sun 03 May 2026 02:54:47 +0000 ROA not after: Sun 02 May 2027 02:59:47 +0000 asID: 55652 IP address blocks: 27.121.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0/51F511E456B4CA99CA7BD1C91B651FDDC5C0268F.crl rsync://rpki-rsync.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0/51F511E456B4CA99CA7BD1C91B651FDDC5C0268F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/51F511E456B4CA99CA7BD1C91B651FDDC5C0268F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:c3:0a:4c:3f:f8:91:cf:37:ab:10:7e:76:3b:c4:27:f2:0a:66:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51F511E456B4CA99CA7BD1C91B651FDDC5C0268F Validity Not Before: May 3 02:54:47 2026 GMT Not After : May 2 02:59:47 2027 GMT Subject: CN=8E58B86D0D32DBC3B5ECE5355331D4004747F1DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:bd:b1:1a:91:86:68:de:c9:c3:e1:49:1c:58: 69:93:7a:42:fa:dd:21:08:03:d0:67:95:a0:91:bd: bb:d5:45:fb:42:11:43:9b:2c:34:b7:62:64:e5:af: 71:c6:37:ce:06:8b:f2:c5:de:d6:13:ad:a8:b1:ba: bb:e6:92:7e:c2:9a:cc:ab:f5:ea:4f:3a:27:78:46: f3:08:ca:0e:34:96:60:44:a3:bc:d4:95:ab:14:4c: 3b:13:ac:e6:c2:d8:48:c1:ea:14:60:07:d5:7b:57: 32:72:4b:bf:7a:00:92:19:7c:cf:3e:4e:d2:49:ad: bd:25:d5:c2:58:91:2c:bb:2f:da:3f:5f:ee:1a:db: f5:e3:f8:cd:26:e3:0d:11:9c:78:52:76:29:5c:70: 82:73:da:4f:4a:bf:be:f2:c2:9a:68:9a:fd:ca:a7: b7:bf:d3:9b:ba:fd:7b:3e:f6:9c:57:44:24:ab:d9: 43:54:59:39:ba:7e:74:6a:30:5b:d9:6e:6a:fb:80: 20:43:74:50:a3:1c:88:13:9f:39:31:ee:7c:cc:d2: 6d:3c:9e:e1:d2:61:e1:d0:27:19:3e:9f:13:30:b6: e4:f9:b5:c5:43:68:ac:dd:2d:c1:09:6c:f2:1f:78: d5:bc:62:e5:38:30:52:fa:24:c0:12:39:8a:2a:d3: df:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:58:B8:6D:0D:32:DB:C3:B5:EC:E5:35:53:31:D4:00:47:47:F1:DF X509v3 Authority Key Identifier: keyid:51:F5:11:E4:56:B4:CA:99:CA:7B:D1:C9:1B:65:1F:DD:C5:C0:26:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0/51F511E456B4CA99CA7BD1C91B651FDDC5C0268F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/51F511E456B4CA99CA7BD1C91B651FDDC5C0268F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0/32372e3132312e38352e302f32342d3234203d3e203535363532.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 27.121.85.0/24 Signature Algorithm: sha256WithRSAEncryption 50:62:40:ab:eb:b5:1a:ed:48:ba:fc:50:6e:94:4c:83:e5:7d: b0:0c:60:a6:28:e1:09:b9:9c:3b:cb:02:29:ab:60:de:d6:31: 3e:98:b1:e6:9a:55:0f:5a:15:be:64:ff:87:be:10:dd:9a:71: 56:28:fb:f4:f0:eb:27:55:d1:6a:fb:66:a2:1d:1a:d0:82:c3: 40:c3:85:40:33:15:bb:49:c2:bb:53:50:f0:05:29:55:3e:99: 8d:6e:93:e6:5b:a6:23:98:ad:17:b1:61:44:2f:aa:6a:97:a6: 95:31:7d:4c:2f:dc:45:1c:93:8f:7b:e5:4c:c6:01:02:82:fb: e3:f7:7c:7e:f0:aa:98:a4:29:01:3f:a4:6b:e5:c2:a3:10:98: c8:bd:56:53:dd:2a:02:60:06:f4:1f:d0:bc:d4:16:ac:7c:db: 21:5e:99:9a:e9:36:f2:e7:ec:4d:6f:bb:32:63:ce:13:b6:cd: af:50:e2:11:ce:0a:4c:14:1a:da:42:39:37:1a:7a:3d:b1:06: 1f:7d:a4:ff:60:a2:5d:f5:f7:5b:d0:4b:49:53:62:cf:1b:11: ed:e9:e6:14:87:4f:7e:d4:57:43:99:79:4e:3b:05:d6:80:a9: 30:1b:1b:7b:96:e3:c2:cc:48:0a:35:57:01:ca:13:74:ed:1b: ea:d1:51:97 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUZMMKTD/4kc83qxB+djvEJ/IKZjQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTFGNTExRTQ1NkI0Q0E5OUNBN0JEMUM5MUI2NTFGRERD NUMwMjY4RjAeFw0yNjA1MDMwMjU0NDdaFw0yNzA1MDIwMjU5NDdaMDMxMTAvBgNV BAMTKDhFNThCODZEMEQzMkRCQzNCNUVDRTUzNTUzMzFENDAwNDc0N0YxREYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7vbEakYZo3snD4UkcWGmTekL6 3SEIA9BnlaCRvbvVRftCEUObLDS3YmTlr3HGN84Gi/LF3tYTraixurvmkn7Cmsyr 9epPOid4RvMIyg40lmBEo7zUlasUTDsTrObC2EjB6hRgB9V7VzJyS796AJIZfM8+ TtJJrb0l1cJYkSy7L9o/X+4a2/Xj+M0m4w0RnHhSdilccIJz2k9Kv77ywppomv3K p7e/05u6/Xs+9pxXRCSr2UNUWTm6fnRqMFvZbmr7gCBDdFCjHIgTnzkx7nzM0m08 nuHSYeHQJxk+nxMwtuT5tcVDaKzdLcEJbPIfeNW8YuU4MFL6JMASOYoq099vAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUjli4bQ0y28O17OU1UzHUAEdH8d8wHwYDVR0j BBgwFoAUUfUR5Fa0ypnKe9HJG2Uf3cXAJo8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWY2MjgwOWMtYmZiNi00ZmU3LThkZDYtY2E2MDIyY2RkNTQwLzAvNTFGNTExRTQ1 NkI0Q0E5OUNBN0JEMUM5MUI2NTFGRERDNUMwMjY4Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81MUY1MTFFNDU2QjRDQTk5Q0E3QkQxQzkxQjY1MUZEREM1QzAy NjhGLmNlcjCBoQYIKwYBBQUHAQsEgZQwgZEwgY4GCCsGAQUFBzALhoGBcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2FmNjI4MDljLWJmYjYtNGZlNy04 ZGQ2LWNhNjAyMmNkZDU0MC8wLzMyMzcyZTMxMzIzMTJlMzgzNTJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDM1MzUzNjM1MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAbeVUwDQYJKoZIhvcN AQELBQADggEBAFBiQKvrtRrtSLr8UG6UTIPlfbAMYKYo4Qm5nDvLAimrYN7WMT6Y seaaVQ9aFb5k/4e+EN2acVYo+/Tw6ydV0Wr7ZqIdGtCCw0DDhUAzFbtJwrtTUPAF KVU+mY1uk+ZbpiOYrRexYUQvqmqXppUxfUwv3EUck4975UzGAQKC++P3fH7wqpik KQE/pGvlwqMQmMi9VlPdKgJgBvQf0LzUFqx82yFemZrpNvLn7E1vuzJjzhO2za9Q 4hHOCkwUGtpCOTcaej2xBh99pP9gol3191vQS0lTYs8bEe3p5hSHT37UV0OZeU47 BdaAqTAbG3uW48LMSAo1VwHKE3TtG+rRUZc= -----END CERTIFICATE-----Generated at Wed May 13 01:35:51 2026 by rpki-client