$ rpki-client -vvf repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a383030323a3a2f34382d3438203d3e203338353236.roa File: 323430353a333734303a383030323a3a2f34382d3438203d3e203338353236.roa (raw, json) Hash identifier: s15gdj8Ve07ZFt7VxsR7txsT2EKatNheILI9dLCOWj0= Subject key identifier: D1:17:22:DA:A2:DD:CD:A9:72:07:EB:32:3F:EE:8D:A7:2F:8C:24:66 Certificate issuer: /CN=560CF5B1622CB492E1C603F69D4FB9C11322520D Certificate serial: 17035FB381CB0D59584D381533A6B2F4A9D7E76A Authority key identifier: 56:0C:F5:B1:62:2C:B4:92:E1:C6:03:F6:9D:4F:B9:C1:13:22:52:0D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/560CF5B1622CB492E1C603F69D4FB9C11322520D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a383030323a3a2f34382d3438203d3e203338353236.roa Signing time: Mon 04 Aug 2025 08:00:02 +0000 ROA not before: Mon 04 Aug 2025 07:55:02 +0000 ROA not after: Mon 03 Aug 2026 08:00:02 +0000 asID: 38526 IP address blocks: 2405:3740:8002::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/560CF5B1622CB492E1C603F69D4FB9C11322520D.crl rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/560CF5B1622CB492E1C603F69D4FB9C11322520D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/560CF5B1622CB492E1C603F69D4FB9C11322520D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 18:47:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:03:5f:b3:81:cb:0d:59:58:4d:38:15:33:a6:b2:f4:a9:d7:e7:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=560CF5B1622CB492E1C603F69D4FB9C11322520D Validity Not Before: Aug 4 07:55:02 2025 GMT Not After : Aug 3 08:00:02 2026 GMT Subject: CN=D11722DAA2DDCDA97207EB323FEE8DA72F8C2466 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:b9:fd:0a:10:ff:c0:e8:0b:d9:20:5f:2a:b0: fc:5c:d7:79:e0:53:7d:9d:6b:a2:b9:ce:77:58:18: 2e:cd:c2:2d:6b:7c:66:48:27:76:2b:55:a5:eb:6f: 55:a4:30:34:b0:fe:33:48:17:52:5c:cb:a8:68:e2: 18:c9:47:a8:b9:36:1a:39:d6:f8:ee:79:32:87:a0: cb:4e:de:85:cd:f5:94:8d:d0:09:cc:65:cc:7a:c4: ef:a6:72:f8:38:b5:3e:16:c5:49:c2:d0:df:b9:c2: 77:cf:87:98:6d:a3:87:df:f0:27:18:dd:9c:6f:2c: 34:14:eb:9e:22:30:2a:f6:f4:a0:31:0e:bd:97:2e: 19:b2:59:81:d9:ad:4e:d8:67:40:4e:a1:41:35:a7: ed:a0:bc:05:e8:05:d2:67:df:3e:d3:11:49:fb:f7: c1:01:dc:57:3f:92:1e:a6:03:53:1e:58:db:47:17: a8:41:d4:f8:0b:cf:8e:bc:79:c2:e5:24:47:a5:2a: f1:76:c2:fa:ca:ba:23:cf:e1:da:97:56:2d:10:c1: 24:8d:22:47:fd:f0:81:94:50:1c:7f:5e:d2:98:58: e7:91:79:00:8b:dc:fd:ed:57:0f:68:d7:1f:c0:42: 7b:b2:a3:b0:63:6c:62:73:fc:25:e3:bf:45:45:08: 78:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:17:22:DA:A2:DD:CD:A9:72:07:EB:32:3F:EE:8D:A7:2F:8C:24:66 X509v3 Authority Key Identifier: keyid:56:0C:F5:B1:62:2C:B4:92:E1:C6:03:F6:9D:4F:B9:C1:13:22:52:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/560CF5B1622CB492E1C603F69D4FB9C11322520D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/560CF5B1622CB492E1C603F69D4FB9C11322520D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a383030323a3a2f34382d3438203d3e203338353236.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:3740:8002::/48 Signature Algorithm: sha256WithRSAEncryption 44:ad:1d:a2:aa:a4:9e:2f:64:8f:eb:c6:93:22:43:fc:27:b5: d0:64:82:46:b6:63:6e:00:d1:18:32:81:9f:1d:4e:ab:9d:e5: 1c:7c:6d:18:2e:cf:c5:29:6e:35:bc:6f:f4:5d:fd:8a:e6:47: e2:cf:d9:1a:ae:31:ba:49:26:72:a7:a3:1c:a1:ee:9a:35:d2: 91:2f:8f:45:d1:e1:e7:06:9b:04:d0:a3:e6:b1:54:da:95:27: 07:bf:09:45:00:b1:0f:d1:6a:14:4e:42:90:23:18:7f:3e:22: 56:c7:c7:ab:e2:10:c6:9e:10:49:35:60:68:84:a8:a6:91:ac: d2:5b:1b:09:e6:67:57:08:5d:17:2a:68:bf:ca:ff:84:ec:66: b3:c6:1a:64:4d:0a:bd:60:9c:43:d9:5a:a0:e8:c5:c3:6e:b7: 8b:c4:1a:e9:9b:70:47:cc:84:5e:de:51:ae:f3:2e:24:e7:7f: 97:d0:a0:0b:b6:5b:f3:41:b4:17:3e:e6:14:58:c6:8b:78:08: d9:69:95:43:ac:80:66:bd:98:5a:ba:8e:ce:f2:69:19:86:80: 25:c9:c8:1c:e0:a3:f0:2c:bf:dc:00:0e:05:6d:9a:f9:1b:1a: e5:63:f0:68:b6:32:29:b3:a4:78:62:38:9e:c4:a4:62:ef:4e: 95:1f:68:f0 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUFwNfs4HLDVlYTTgVM6ay9KnX52owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTYwQ0Y1QjE2MjJDQjQ5MkUxQzYwM0Y2OUQ0RkI5QzEx MzIyNTIwRDAeFw0yNTA4MDQwNzU1MDJaFw0yNjA4MDMwODAwMDJaMDMxMTAvBgNV BAMTKEQxMTcyMkRBQTJERENEQTk3MjA3RUIzMjNGRUU4REE3MkY4QzI0NjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCuf0KEP/A6AvZIF8qsPxc13ng U32da6K5zndYGC7Nwi1rfGZIJ3YrVaXrb1WkMDSw/jNIF1Jcy6ho4hjJR6i5Nho5 1vjueTKHoMtO3oXN9ZSN0AnMZcx6xO+mcvg4tT4WxUnC0N+5wnfPh5hto4ff8CcY 3ZxvLDQU654iMCr29KAxDr2XLhmyWYHZrU7YZ0BOoUE1p+2gvAXoBdJn3z7TEUn7 98EB3Fc/kh6mA1MeWNtHF6hB1PgLz468ecLlJEelKvF2wvrKuiPP4dqXVi0QwSSN Ikf98IGUUBx/XtKYWOeReQCL3P3tVw9o1x/AQnuyo7BjbGJz/CXjv0VFCHghAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQU0Rci2qLdzalyB+syP+6Npy+MJGYwHwYDVR0j BBgwFoAUVgz1sWIstJLhxgP2nU+5wRMiUg0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NjVlNzgxMC02N2Y0LTQxYzItODAzNC00NjUyNzMzYjhkZDIvMC81NjBDRjVCMTYy MkNCNDkyRTFDNjAzRjY5RDRGQjlDMTEzMjI1MjBELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTYwQ0Y1QjE2MjJDQjQ5MkUxQzYwM0Y2OUQ0RkI5QzExMzIy NTIwRC5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U2NWU3ODEwLTY3ZjQtNDFjMi04 MDM0LTQ2NTI3MzNiOGRkMi8wLzMyMzQzMDM1M2EzMzM3MzQzMDNhMzgzMDMwMzIz YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMzM4MzUzMjM2LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAU3 QIACMA0GCSqGSIb3DQEBCwUAA4IBAQBErR2iqqSeL2SP68aTIkP8J7XQZIJGtmNu ANEYMoGfHU6rneUcfG0YLs/FKW41vG/0Xf2K5kfiz9karjG6SSZyp6Mcoe6aNdKR L49F0eHnBpsE0KPmsVTalScHvwlFALEP0WoUTkKQIxh/PiJWx8er4hDGnhBJNWBo hKimkazSWxsJ5mdXCF0XKmi/yv+E7GazxhpkTQq9YJxD2Vqg6MXDbreLxBrpm3BH zIRe3lGu8y4k53+X0KALtlvzQbQXPuYUWMaLeAjZaZVDrIBmvZhauo7O8mkZhoAl ycgc4KPwLL/cAA4FbZr5GxrlY/BotjIps6R4YjiexKRi706VH2jw -----END CERTIFICATE-----Generated at Mon Aug 11 04:07:50 2025 by rpki-client