$ rpki-client -vvf repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393030373a3a2f34382d3438203d3e203338353236.roa File: 323430353a333734303a393030373a3a2f34382d3438203d3e203338353236.roa (raw, json) Hash identifier: PbGQnr3j/dCzM6Bb9blAghBIYNeV/aGoXmA/NdfvA1M= Subject key identifier: 4A:92:90:A8:A7:DB:BA:82:D3:2B:8E:EC:91:D0:97:D5:B6:22:27:19 Certificate issuer: /CN=560CF5B1622CB492E1C603F69D4FB9C11322520D Certificate serial: 37198983667C9137009D410C0BF7C37DCED4AA7C Authority key identifier: 56:0C:F5:B1:62:2C:B4:92:E1:C6:03:F6:9D:4F:B9:C1:13:22:52:0D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/560CF5B1622CB492E1C603F69D4FB9C11322520D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393030373a3a2f34382d3438203d3e203338353236.roa Signing time: Wed 28 Jan 2026 02:02:36 +0000 ROA not before: Wed 28 Jan 2026 01:57:36 +0000 ROA not after: Wed 27 Jan 2027 02:02:36 +0000 asID: 38526 IP address blocks: 2405:3740:9007::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/560CF5B1622CB492E1C603F69D4FB9C11322520D.crl rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/560CF5B1622CB492E1C603F69D4FB9C11322520D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/560CF5B1622CB492E1C603F69D4FB9C11322520D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 20:24:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:19:89:83:66:7c:91:37:00:9d:41:0c:0b:f7:c3:7d:ce:d4:aa:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=560CF5B1622CB492E1C603F69D4FB9C11322520D Validity Not Before: Jan 28 01:57:36 2026 GMT Not After : Jan 27 02:02:36 2027 GMT Subject: CN=4A9290A8A7DBBA82D32B8EEC91D097D5B6222719 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:60:c0:e7:2b:c6:9c:7a:14:88:26:a1:65:0b: 02:85:52:1d:35:c9:b6:da:ae:de:b1:75:25:64:8c: e4:52:1c:c4:88:85:75:aa:1c:71:09:c1:3f:67:00: 4a:80:97:3f:92:5a:17:0f:d8:12:33:28:63:de:54: d0:e8:e4:ed:41:1e:a8:97:3f:43:0b:64:bf:8f:dc: 6d:99:5c:b9:0f:af:20:d4:24:3f:9c:95:fa:69:bb: b0:bb:11:9b:91:5b:f4:f6:fe:75:f0:cd:a9:1f:13: c9:ce:be:9e:40:b1:43:23:ec:0b:48:5f:c9:2b:99: f7:4a:e0:70:eb:37:78:5a:1c:f0:8a:90:8c:6f:6a: 23:fb:ed:62:17:50:3f:07:df:8c:6e:a5:d6:27:1f: ff:5b:94:ce:7e:a5:4f:8e:52:5b:8e:5b:dd:b8:34: d5:e7:05:ac:b0:4a:00:62:68:4d:49:f3:5e:e6:de: 8f:3b:9e:da:14:c5:dc:10:23:9c:57:a7:e0:e7:68: 9f:54:38:44:9c:cb:1b:10:10:c6:6f:da:ae:d7:85: 82:58:29:26:2f:3a:1e:a4:e3:57:32:36:0c:4e:ef: ea:e2:8f:aa:d1:da:e9:16:1e:10:55:38:e7:a4:44: c3:99:6b:93:43:85:6c:70:ca:8f:ac:7b:8b:43:f0: 64:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:92:90:A8:A7:DB:BA:82:D3:2B:8E:EC:91:D0:97:D5:B6:22:27:19 X509v3 Authority Key Identifier: keyid:56:0C:F5:B1:62:2C:B4:92:E1:C6:03:F6:9D:4F:B9:C1:13:22:52:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/560CF5B1622CB492E1C603F69D4FB9C11322520D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/560CF5B1622CB492E1C603F69D4FB9C11322520D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393030373a3a2f34382d3438203d3e203338353236.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:3740:9007::/48 Signature Algorithm: sha256WithRSAEncryption 15:02:e8:5c:e3:c7:e4:f4:1b:72:f4:65:c3:a9:d9:b0:1a:49: 08:c0:cc:9a:cb:e1:18:8a:1a:6e:d6:3a:72:5b:8c:ce:fd:d4: a6:86:9a:1a:70:53:b6:bb:0d:59:65:c8:8e:58:2c:2d:ef:fe: bb:00:fe:ec:96:c0:2e:6a:60:38:c3:22:fb:d9:68:9e:52:e5: 72:63:c9:fc:31:3c:d3:d6:b1:0c:52:f5:8d:3e:0c:7d:95:9c: 61:d4:f4:97:bb:d3:54:21:4c:7a:8c:d0:a7:b7:fe:ed:00:39: 3f:97:b9:75:1a:1e:05:d8:5e:7c:1f:e4:17:7e:76:a2:44:7a: c9:98:2b:8a:aa:06:96:cc:0e:8d:a7:3f:d7:69:a2:a0:a7:7e: 64:04:22:a6:be:33:92:28:23:27:5f:a6:a9:e1:c9:ff:37:88: 29:9e:58:a8:8d:54:9f:9b:95:89:7f:00:c5:02:fd:dd:6a:51: 77:e8:cc:55:92:07:59:09:ef:24:71:db:d6:c0:d0:28:c4:79: a4:68:5d:a6:f5:b7:27:0a:0d:27:93:df:ad:ce:0c:d8:4a:ee: a0:58:2a:ec:01:34:fd:43:23:28:b6:33:93:25:a5:f3:f4:8f: 46:d2:90:64:0f:2e:5c:c9:61:d1:d0:8a:8d:47:7e:22:1c:34: b0:a9:03:52 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUNxmJg2Z8kTcAnUEMC/fDfc7UqnwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTYwQ0Y1QjE2MjJDQjQ5MkUxQzYwM0Y2OUQ0RkI5QzEx MzIyNTIwRDAeFw0yNjAxMjgwMTU3MzZaFw0yNzAxMjcwMjAyMzZaMDMxMTAvBgNV BAMTKDRBOTI5MEE4QTdEQkJBODJEMzJCOEVFQzkxRDA5N0Q1QjYyMjI3MTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsYMDnK8acehSIJqFlCwKFUh01 ybbart6xdSVkjORSHMSIhXWqHHEJwT9nAEqAlz+SWhcP2BIzKGPeVNDo5O1BHqiX P0MLZL+P3G2ZXLkPryDUJD+clfppu7C7EZuRW/T2/nXwzakfE8nOvp5AsUMj7AtI X8krmfdK4HDrN3haHPCKkIxvaiP77WIXUD8H34xupdYnH/9blM5+pU+OUluOW924 NNXnBaywSgBiaE1J817m3o87ntoUxdwQI5xXp+DnaJ9UOEScyxsQEMZv2q7XhYJY KSYvOh6k41cyNgxO7+rij6rR2ukWHhBVOOekRMOZa5NDhWxwyo+se4tD8GQnAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUSpKQqKfbuoLTK47skdCX1bYiJxkwHwYDVR0j BBgwFoAUVgz1sWIstJLhxgP2nU+5wRMiUg0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NjVlNzgxMC02N2Y0LTQxYzItODAzNC00NjUyNzMzYjhkZDIvMC81NjBDRjVCMTYy MkNCNDkyRTFDNjAzRjY5RDRGQjlDMTEzMjI1MjBELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTYwQ0Y1QjE2MjJDQjQ5MkUxQzYwM0Y2OUQ0RkI5QzExMzIy NTIwRC5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U2NWU3ODEwLTY3ZjQtNDFjMi04 MDM0LTQ2NTI3MzNiOGRkMi8wLzMyMzQzMDM1M2EzMzM3MzQzMDNhMzkzMDMwMzcz YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMzM4MzUzMjM2LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAU3 QJAHMA0GCSqGSIb3DQEBCwUAA4IBAQAVAuhc48fk9Bty9GXDqdmwGkkIwMyay+EY ihpu1jpyW4zO/dSmhpoacFO2uw1ZZciOWCwt7/67AP7slsAuamA4wyL72WieUuVy Y8n8MTzT1rEMUvWNPgx9lZxh1PSXu9NUIUx6jNCnt/7tADk/l7l1Gh4F2F58H+QX fnaiRHrJmCuKqgaWzA6Npz/XaaKgp35kBCKmvjOSKCMnX6ap4cn/N4gpnliojVSf m5WJfwDFAv3dalF36MxVkgdZCe8kcdvWwNAoxHmkaF2m9bcnCg0nk9+tzgzYSu6g WCrsATT9QyMotjOTJaXz9I9G0pBkDy5cyWHR0IqNR34iHDSwqQNS -----END CERTIFICATE-----Generated at Mon Mar 2 23:42:11 2026 by rpki-client