$ rpki-client -vvf repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393030323a3a2f34382d3438203d3e203338353236.roa File: 323430353a333734303a393030323a3a2f34382d3438203d3e203338353236.roa (raw, json) Hash identifier: Ukzc6gjYnQ1yz08l61RI1GoZFnZ6STf+6s6XOWh/Yeg= Subject key identifier: 9E:08:83:93:A2:6F:C0:6C:71:34:79:BB:D1:EB:02:76:C3:11:81:CD Certificate issuer: /CN=560CF5B1622CB492E1C603F69D4FB9C11322520D Certificate serial: 4D02023D513297C37BC685E5E393C022265B7F72 Authority key identifier: 56:0C:F5:B1:62:2C:B4:92:E1:C6:03:F6:9D:4F:B9:C1:13:22:52:0D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/560CF5B1622CB492E1C603F69D4FB9C11322520D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393030323a3a2f34382d3438203d3e203338353236.roa Signing time: Wed 28 Jan 2026 02:02:36 +0000 ROA not before: Wed 28 Jan 2026 01:57:36 +0000 ROA not after: Wed 27 Jan 2027 02:02:36 +0000 asID: 38526 IP address blocks: 2405:3740:9002::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/560CF5B1622CB492E1C603F69D4FB9C11322520D.crl rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/560CF5B1622CB492E1C603F69D4FB9C11322520D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/560CF5B1622CB492E1C603F69D4FB9C11322520D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 20:24:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:02:02:3d:51:32:97:c3:7b:c6:85:e5:e3:93:c0:22:26:5b:7f:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=560CF5B1622CB492E1C603F69D4FB9C11322520D Validity Not Before: Jan 28 01:57:36 2026 GMT Not After : Jan 27 02:02:36 2027 GMT Subject: CN=9E088393A26FC06C713479BBD1EB0276C31181CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:af:56:3f:17:da:f3:3b:37:c4:28:5c:c5:3e: 31:b8:3e:e5:67:2f:f4:b7:1c:b9:6b:d8:14:db:f3: c7:16:b1:c3:51:a0:2e:62:78:49:6f:02:5c:b5:3c: 5c:f9:75:6f:7c:ac:a0:db:7a:4a:0d:ae:df:bf:ef: 1b:f3:c5:b0:f5:7b:df:2b:03:d3:c1:c6:6c:4d:ce: 50:09:1c:a6:f3:e9:72:e7:b0:5d:94:ad:ae:32:e8: 45:75:3c:45:5d:9e:69:65:7c:2a:f3:2b:05:78:8c: f4:62:3c:1e:5e:c2:78:87:8f:41:7b:ef:a6:47:6b: b6:e6:ac:8e:ba:36:e5:cd:75:1c:12:05:aa:98:d3: 62:0c:16:7a:31:3e:b9:65:24:4f:43:13:c2:be:70: cf:56:97:7b:a4:4a:95:d5:72:dc:26:9b:57:71:55: 51:79:1d:54:59:5f:d2:b4:89:97:96:d5:17:b1:19: 47:fd:c6:41:3c:08:45:21:ad:06:d4:e8:28:19:48: 8e:0b:14:a2:c2:99:9f:74:ae:74:d8:36:0b:bc:78: b6:9b:9d:b9:19:a6:16:91:19:64:2d:2c:cc:e8:9e: e7:d6:ad:e0:be:c6:16:64:7b:68:b6:5b:ed:08:be: ac:f1:b3:a8:29:f3:be:5a:01:b0:bb:44:77:69:d0: f0:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:08:83:93:A2:6F:C0:6C:71:34:79:BB:D1:EB:02:76:C3:11:81:CD X509v3 Authority Key Identifier: keyid:56:0C:F5:B1:62:2C:B4:92:E1:C6:03:F6:9D:4F:B9:C1:13:22:52:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/560CF5B1622CB492E1C603F69D4FB9C11322520D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/560CF5B1622CB492E1C603F69D4FB9C11322520D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393030323a3a2f34382d3438203d3e203338353236.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:3740:9002::/48 Signature Algorithm: sha256WithRSAEncryption 2a:b5:ea:e1:e7:8c:57:01:ba:a0:14:85:94:22:c0:bd:3b:d5: 2c:ac:3d:af:d3:40:31:5e:d2:65:90:cc:b2:66:4a:cf:c7:c4: 15:a3:c9:c3:4b:74:4c:74:0a:09:df:d8:cb:83:c5:14:93:be: 38:37:a8:f8:50:2e:35:25:dc:d5:b6:9b:00:69:70:ee:b8:f9: 25:d4:59:c9:06:79:28:9c:58:26:05:eb:e3:48:d6:73:8d:01: 29:88:7d:36:79:ef:5c:a0:94:4a:95:1d:6f:23:a2:ad:15:a9: 69:41:1d:ff:8b:55:bf:0d:0c:1c:f3:a9:77:94:4b:81:40:ee: e9:65:70:d6:89:c7:fd:ad:4b:18:88:b7:1d:e5:09:fe:e7:c9: ed:ed:a1:a6:c3:94:cb:da:33:31:08:cf:9d:e2:6e:05:cc:9a: b7:39:ac:10:2c:ab:d7:e5:0e:50:57:ea:99:ac:8a:5b:1d:bf: 0f:8a:47:96:e4:40:2a:b1:f5:8b:52:90:4b:7f:33:0e:c0:c1: 53:58:68:10:79:5f:f0:6f:93:4b:c4:ea:30:56:ba:c7:59:12: a2:dd:c2:1d:f5:34:bc:5f:74:93:1e:7f:88:e4:d4:1a:cb:35: e9:39:73:4f:fa:4f:00:0f:3a:bc:7f:aa:91:7a:b8:52:6a:36: d5:22:4b:ec -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUTQICPVEyl8N7xoXl45PAIiZbf3IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTYwQ0Y1QjE2MjJDQjQ5MkUxQzYwM0Y2OUQ0RkI5QzEx MzIyNTIwRDAeFw0yNjAxMjgwMTU3MzZaFw0yNzAxMjcwMjAyMzZaMDMxMTAvBgNV BAMTKDlFMDg4MzkzQTI2RkMwNkM3MTM0NzlCQkQxRUIwMjc2QzMxMTgxQ0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/r1Y/F9rzOzfEKFzFPjG4PuVn L/S3HLlr2BTb88cWscNRoC5ieElvAly1PFz5dW98rKDbekoNrt+/7xvzxbD1e98r A9PBxmxNzlAJHKbz6XLnsF2Ura4y6EV1PEVdnmllfCrzKwV4jPRiPB5ewniHj0F7 76ZHa7bmrI66NuXNdRwSBaqY02IMFnoxPrllJE9DE8K+cM9Wl3ukSpXVctwmm1dx VVF5HVRZX9K0iZeW1RexGUf9xkE8CEUhrQbU6CgZSI4LFKLCmZ90rnTYNgu8eLab nbkZphaRGWQtLMzonufWreC+xhZke2i2W+0Ivqzxs6gp875aAbC7RHdp0PDVAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUngiDk6JvwGxxNHm70esCdsMRgc0wHwYDVR0j BBgwFoAUVgz1sWIstJLhxgP2nU+5wRMiUg0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NjVlNzgxMC02N2Y0LTQxYzItODAzNC00NjUyNzMzYjhkZDIvMC81NjBDRjVCMTYy MkNCNDkyRTFDNjAzRjY5RDRGQjlDMTEzMjI1MjBELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTYwQ0Y1QjE2MjJDQjQ5MkUxQzYwM0Y2OUQ0RkI5QzExMzIy NTIwRC5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U2NWU3ODEwLTY3ZjQtNDFjMi04 MDM0LTQ2NTI3MzNiOGRkMi8wLzMyMzQzMDM1M2EzMzM3MzQzMDNhMzkzMDMwMzIz YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMzM4MzUzMjM2LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAU3 QJACMA0GCSqGSIb3DQEBCwUAA4IBAQAqterh54xXAbqgFIWUIsC9O9UsrD2v00Ax XtJlkMyyZkrPx8QVo8nDS3RMdAoJ39jLg8UUk744N6j4UC41JdzVtpsAaXDuuPkl 1FnJBnkonFgmBevjSNZzjQEpiH02ee9coJRKlR1vI6KtFalpQR3/i1W/DQwc86l3 lEuBQO7pZXDWicf9rUsYiLcd5Qn+58nt7aGmw5TL2jMxCM+d4m4FzJq3OawQLKvX 5Q5QV+qZrIpbHb8PikeW5EAqsfWLUpBLfzMOwMFTWGgQeV/wb5NLxOowVrrHWRKi 3cId9TS8X3STHn+I5NQayzXpOXNP+k8ADzq8f6qRerhSajbVIkvs -----END CERTIFICATE-----Generated at Mon Mar 2 17:59:16 2026 by rpki-client