$ rpki-client -vvf repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a313a3a2f34382d3438203d3e203338353236.roa File: 323430353a333734303a313a3a2f34382d3438203d3e203338353236.roa (raw, json) Hash identifier: AJiAOxyJtklj+44FnRlPrdcpNQDZ1/qPfhlpEXQxVrw= Subject key identifier: 72:39:50:A8:85:E1:AA:74:F6:8B:D8:4F:73:67:D1:CF:44:53:4F:39 Certificate issuer: /CN=560CF5B1622CB492E1C603F69D4FB9C11322520D Certificate serial: 66B95CDC65D0D959C232CCBC4231A9119BD81AB2 Authority key identifier: 56:0C:F5:B1:62:2C:B4:92:E1:C6:03:F6:9D:4F:B9:C1:13:22:52:0D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/560CF5B1622CB492E1C603F69D4FB9C11322520D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a313a3a2f34382d3438203d3e203338353236.roa Signing time: Mon 02 Feb 2026 05:03:06 +0000 ROA not before: Mon 02 Feb 2026 04:58:06 +0000 ROA not after: Mon 01 Feb 2027 05:03:06 +0000 asID: 38526 IP address blocks: 2405:3740:1::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/560CF5B1622CB492E1C603F69D4FB9C11322520D.crl rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/560CF5B1622CB492E1C603F69D4FB9C11322520D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/560CF5B1622CB492E1C603F69D4FB9C11322520D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 20:24:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:b9:5c:dc:65:d0:d9:59:c2:32:cc:bc:42:31:a9:11:9b:d8:1a:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=560CF5B1622CB492E1C603F69D4FB9C11322520D Validity Not Before: Feb 2 04:58:06 2026 GMT Not After : Feb 1 05:03:06 2027 GMT Subject: CN=723950A885E1AA74F68BD84F7367D1CF44534F39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:e1:26:cb:30:84:8e:a5:0d:00:b1:f8:b2:85: 40:e4:90:f0:cc:59:d2:b6:ca:44:83:e2:52:8d:0a: 58:2f:30:16:ad:2b:2f:4f:28:6e:1b:ff:47:8e:36: b8:04:f4:96:6d:87:8b:b2:9c:2e:46:2a:36:3e:1e: 01:02:6a:6c:bf:f0:dd:4a:89:a4:a2:84:3b:f2:e3: 10:77:68:79:b2:a4:b0:4b:50:45:27:29:38:08:cd: ea:19:a6:a0:71:a3:3b:56:b5:18:0b:85:71:41:56: 49:2a:0f:65:0f:8f:46:78:85:fc:90:e1:7d:fb:b8: 35:7a:d3:e1:66:aa:18:59:c3:01:e1:a7:f9:ff:d2: 52:09:6b:38:3d:a2:a6:c0:9b:b6:c1:aa:5c:38:5b: 18:f7:09:37:4e:62:04:85:4d:cf:d3:3e:9f:f5:dc: 33:33:8c:0b:2e:37:83:c6:f8:91:7f:83:07:ff:4f: 91:d5:9f:0a:1e:48:99:7a:d1:e4:23:6f:60:dd:08: 81:f5:30:d0:4b:72:15:5a:cf:42:78:93:6e:55:92: 2b:09:5f:d1:6a:a1:ca:09:0e:4e:14:1c:e2:d6:67: 19:42:fe:54:1c:08:ce:4e:82:7b:fb:b6:91:1d:7a: 4e:ca:a9:ea:20:9e:d1:af:ab:4e:20:30:10:96:f9: ed:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:39:50:A8:85:E1:AA:74:F6:8B:D8:4F:73:67:D1:CF:44:53:4F:39 X509v3 Authority Key Identifier: keyid:56:0C:F5:B1:62:2C:B4:92:E1:C6:03:F6:9D:4F:B9:C1:13:22:52:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/560CF5B1622CB492E1C603F69D4FB9C11322520D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/560CF5B1622CB492E1C603F69D4FB9C11322520D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a313a3a2f34382d3438203d3e203338353236.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:3740:1::/48 Signature Algorithm: sha256WithRSAEncryption cd:a8:78:6c:d1:1f:5b:3d:4b:43:bc:0e:e5:67:15:f9:3b:c2: 99:0f:a9:7a:e0:78:89:ff:7d:4f:eb:d6:29:01:d1:f8:e8:8e: 23:f0:c3:41:25:ae:a5:44:01:f0:8a:97:62:6e:de:cf:cc:c5: 00:65:69:ad:3b:bb:2e:b5:9b:0f:35:94:ff:99:cd:a1:15:5b: 2a:b3:28:e6:20:8d:10:37:d5:f6:0e:8a:32:0e:93:b7:11:63: 42:8e:1d:68:e7:98:c9:e6:3e:bf:c0:a7:80:26:ef:ea:c9:14: 66:57:1b:1e:67:f1:cd:05:c4:f0:a1:4e:2b:9a:06:db:ab:05: 1e:04:72:07:40:a7:47:d1:a7:e9:6f:45:ac:7b:bc:e0:93:63: 7e:27:fb:96:0d:ac:35:8b:4b:25:fd:30:3a:04:77:bc:f5:ab: 66:5b:d6:77:8f:36:41:18:2b:28:80:35:0a:24:91:3d:17:ea: 6b:c6:ce:f9:4f:14:c1:43:bf:e3:83:b4:a9:7f:17:59:39:09: 1b:b7:23:e0:21:84:78:c8:a2:57:31:20:8f:c2:18:e9:74:22: b9:8c:5b:cb:00:60:52:f3:86:d9:39:76:63:fa:3b:4d:9a:43: 5a:e1:d1:23:27:11:90:d6:1d:cf:47:f0:cb:b6:73:66:30:c1: b3:67:94:6e -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgIUZrlc3GXQ2VnCMsy8QjGpEZvYGrIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTYwQ0Y1QjE2MjJDQjQ5MkUxQzYwM0Y2OUQ0RkI5QzEx MzIyNTIwRDAeFw0yNjAyMDIwNDU4MDZaFw0yNzAyMDEwNTAzMDZaMDMxMTAvBgNV BAMTKDcyMzk1MEE4ODVFMUFBNzRGNjhCRDg0RjczNjdEMUNGNDQ1MzRGMzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCX4SbLMISOpQ0AsfiyhUDkkPDM WdK2ykSD4lKNClgvMBatKy9PKG4b/0eONrgE9JZth4uynC5GKjY+HgECamy/8N1K iaSihDvy4xB3aHmypLBLUEUnKTgIzeoZpqBxoztWtRgLhXFBVkkqD2UPj0Z4hfyQ 4X37uDV60+FmqhhZwwHhp/n/0lIJazg9oqbAm7bBqlw4Wxj3CTdOYgSFTc/TPp/1 3DMzjAsuN4PG+JF/gwf/T5HVnwoeSJl60eQjb2DdCIH1MNBLchVaz0J4k25VkisJ X9FqocoJDk4UHOLWZxlC/lQcCM5Ognv7tpEdek7KqeogntGvq04gMBCW+e3bAgMB AAGjggI3MIICMzAdBgNVHQ4EFgQUcjlQqIXhqnT2i9hPc2fRz0RTTzkwHwYDVR0j BBgwFoAUVgz1sWIstJLhxgP2nU+5wRMiUg0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NjVlNzgxMC02N2Y0LTQxYzItODAzNC00NjUyNzMzYjhkZDIvMC81NjBDRjVCMTYy MkNCNDkyRTFDNjAzRjY5RDRGQjlDMTEzMjI1MjBELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTYwQ0Y1QjE2MjJDQjQ5MkUxQzYwM0Y2OUQ0RkI5QzExMzIy NTIwRC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U2NWU3ODEwLTY3ZjQtNDFjMi04 MDM0LTQ2NTI3MzNiOGRkMi8wLzMyMzQzMDM1M2EzMzM3MzQzMDNhMzEzYTNhMmYz NDM4MmQzNDM4MjAzZDNlMjAzMzM4MzUzMjM2LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAU3QAABMA0G CSqGSIb3DQEBCwUAA4IBAQDNqHhs0R9bPUtDvA7lZxX5O8KZD6l64HiJ/31P69Yp AdH46I4j8MNBJa6lRAHwipdibt7PzMUAZWmtO7sutZsPNZT/mc2hFVsqsyjmII0Q N9X2DooyDpO3EWNCjh1o55jJ5j6/wKeAJu/qyRRmVxseZ/HNBcTwoU4rmgbbqwUe BHIHQKdH0afpb0Wse7zgk2N+J/uWDaw1i0sl/TA6BHe89atmW9Z3jzZBGCsogDUK JJE9F+prxs75TxTBQ7/jg7SpfxdZOQkbtyPgIYR4yKJXMSCPwhjpdCK5jFvLAGBS 84bZOXZj+jtNmkNa4dEjJxGQ1h3PR/DLtnNmMMGzZ5Ru -----END CERTIFICATE-----Generated at Mon Mar 2 15:02:53 2026 by rpki-client