$ rpki-client -vvf repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393030393a3a2f34382d3438203d3e203338353236.roa File: 323430353a333734303a393030393a3a2f34382d3438203d3e203338353236.roa (raw, json) Hash identifier: JXc4O7nADHRutBFfLbhO2Yv9JLXR0kRIX4MAl8UEofM= Subject key identifier: C5:82:E0:AF:0E:CD:00:10:54:DB:AB:D7:38:3B:18:E6:54:7A:C8:F8 Certificate issuer: /CN=560CF5B1622CB492E1C603F69D4FB9C11322520D Certificate serial: 30E7E2D8EADA483E38CAE580DAAEB3F220EBBF6B Authority key identifier: 56:0C:F5:B1:62:2C:B4:92:E1:C6:03:F6:9D:4F:B9:C1:13:22:52:0D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/560CF5B1622CB492E1C603F69D4FB9C11322520D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393030393a3a2f34382d3438203d3e203338353236.roa Signing time: Wed 28 Jan 2026 02:02:38 +0000 ROA not before: Wed 28 Jan 2026 01:57:38 +0000 ROA not after: Wed 27 Jan 2027 02:02:38 +0000 asID: 38526 IP address blocks: 2405:3740:9009::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/560CF5B1622CB492E1C603F69D4FB9C11322520D.crl rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/560CF5B1622CB492E1C603F69D4FB9C11322520D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/560CF5B1622CB492E1C603F69D4FB9C11322520D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 20:24:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:e7:e2:d8:ea:da:48:3e:38:ca:e5:80:da:ae:b3:f2:20:eb:bf:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=560CF5B1622CB492E1C603F69D4FB9C11322520D Validity Not Before: Jan 28 01:57:38 2026 GMT Not After : Jan 27 02:02:38 2027 GMT Subject: CN=C582E0AF0ECD001054DBABD7383B18E6547AC8F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:eb:13:2a:96:3d:3d:0e:41:58:d5:cf:86:46: e1:6d:c4:ab:fb:ff:b9:80:a5:be:69:e6:1f:84:76: 24:f0:88:94:5a:d2:5b:80:ec:29:1d:3e:66:d9:5e: eb:3c:fc:a9:01:0b:cc:f3:92:c1:31:72:54:da:4e: c9:f6:2d:42:dc:fc:37:88:7b:6a:9a:00:64:e7:fa: 26:83:18:2f:89:ad:7e:ef:99:06:f9:9c:cd:97:23: 99:d6:25:5a:15:42:a5:8a:1d:34:24:6e:35:aa:4d: 66:90:51:19:4c:5b:be:c1:0f:59:af:c3:a5:7a:48: 80:3f:ef:fb:dc:c9:34:ec:ce:85:22:59:e7:ba:c0: 8e:38:70:95:38:80:24:b2:79:5f:40:86:68:93:a9: 90:6a:26:55:ab:b8:f0:a5:34:65:f6:b5:a0:07:31: 04:9d:0b:61:b0:ce:7e:56:64:a6:b7:a7:a3:7c:15: ce:03:a7:05:ac:6d:c6:a5:93:5d:6e:ab:01:30:ed: b2:1c:7c:33:89:0a:ed:53:10:77:0a:3f:ac:11:ae: cd:42:e7:98:02:f4:7e:3d:4b:1e:57:07:50:ec:98: 2a:45:a4:04:69:41:7d:68:2d:c0:95:d6:7e:0b:59: f3:e4:cc:a8:14:f1:41:69:7d:32:2b:94:ef:83:94: f0:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:82:E0:AF:0E:CD:00:10:54:DB:AB:D7:38:3B:18:E6:54:7A:C8:F8 X509v3 Authority Key Identifier: keyid:56:0C:F5:B1:62:2C:B4:92:E1:C6:03:F6:9D:4F:B9:C1:13:22:52:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/560CF5B1622CB492E1C603F69D4FB9C11322520D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/560CF5B1622CB492E1C603F69D4FB9C11322520D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393030393a3a2f34382d3438203d3e203338353236.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:3740:9009::/48 Signature Algorithm: sha256WithRSAEncryption 99:3a:42:69:14:cc:89:dd:f6:85:53:25:5f:4c:17:cd:fc:7e: f0:f4:c8:1c:fb:93:4c:2b:2d:b4:cc:91:e7:c0:8e:67:5f:08: d3:c0:93:bf:2d:af:b2:ee:b7:75:5f:f5:a2:01:9c:1f:d4:2b: 2c:df:7d:1c:5f:61:17:ea:f4:0e:0b:75:1e:51:71:85:31:6c: aa:86:7d:81:00:41:09:91:e4:89:f0:86:bc:e1:74:7b:15:d2: dd:8d:38:ce:41:c1:87:34:04:9d:de:60:4f:64:87:89:21:f2: 84:31:cb:0b:cd:5f:6e:b3:c4:aa:8f:dd:55:88:0b:9b:5f:5e: de:ab:ab:05:8c:ce:a5:5e:c2:4a:ac:d9:95:cf:17:5c:3f:50: 16:36:81:2b:41:b2:f8:f0:6a:1c:f0:ff:65:3b:6a:60:40:fb: 27:2d:3c:a8:86:4e:1d:7c:82:31:9d:04:1a:cb:92:63:cd:d1: c3:28:0a:aa:fb:c1:6a:aa:28:1a:dd:fe:c1:02:55:90:ca:51: 70:e0:e8:4d:5b:db:c8:f0:bf:39:e6:ec:23:e9:0d:25:eb:8b: 5f:55:bb:01:18:01:0f:32:90:cc:d5:3f:e7:c8:ba:fe:1b:50: 2f:71:1c:9c:4c:09:f8:1d:2f:12:48:c5:43:f0:3f:ae:d5:da: 53:0a:03:95 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUMOfi2OraSD44yuWA2q6z8iDrv2swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTYwQ0Y1QjE2MjJDQjQ5MkUxQzYwM0Y2OUQ0RkI5QzEx MzIyNTIwRDAeFw0yNjAxMjgwMTU3MzhaFw0yNzAxMjcwMjAyMzhaMDMxMTAvBgNV BAMTKEM1ODJFMEFGMEVDRDAwMTA1NERCQUJENzM4M0IxOEU2NTQ3QUM4RjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCb6xMqlj09DkFY1c+GRuFtxKv7 /7mApb5p5h+EdiTwiJRa0luA7CkdPmbZXus8/KkBC8zzksExclTaTsn2LULc/DeI e2qaAGTn+iaDGC+JrX7vmQb5nM2XI5nWJVoVQqWKHTQkbjWqTWaQURlMW77BD1mv w6V6SIA/7/vcyTTszoUiWee6wI44cJU4gCSyeV9AhmiTqZBqJlWruPClNGX2taAH MQSdC2Gwzn5WZKa3p6N8Fc4DpwWsbcalk11uqwEw7bIcfDOJCu1TEHcKP6wRrs1C 55gC9H49Sx5XB1DsmCpFpARpQX1oLcCV1n4LWfPkzKgU8UFpfTIrlO+DlPCbAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUxYLgrw7NABBU26vXODsY5lR6yPgwHwYDVR0j BBgwFoAUVgz1sWIstJLhxgP2nU+5wRMiUg0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NjVlNzgxMC02N2Y0LTQxYzItODAzNC00NjUyNzMzYjhkZDIvMC81NjBDRjVCMTYy MkNCNDkyRTFDNjAzRjY5RDRGQjlDMTEzMjI1MjBELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTYwQ0Y1QjE2MjJDQjQ5MkUxQzYwM0Y2OUQ0RkI5QzExMzIy NTIwRC5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U2NWU3ODEwLTY3ZjQtNDFjMi04 MDM0LTQ2NTI3MzNiOGRkMi8wLzMyMzQzMDM1M2EzMzM3MzQzMDNhMzkzMDMwMzkz YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMzM4MzUzMjM2LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAU3 QJAJMA0GCSqGSIb3DQEBCwUAA4IBAQCZOkJpFMyJ3faFUyVfTBfN/H7w9Mgc+5NM Ky20zJHnwI5nXwjTwJO/La+y7rd1X/WiAZwf1Css330cX2EX6vQOC3UeUXGFMWyq hn2BAEEJkeSJ8Ia84XR7FdLdjTjOQcGHNASd3mBPZIeJIfKEMcsLzV9us8Sqj91V iAubX17eq6sFjM6lXsJKrNmVzxdcP1AWNoErQbL48Goc8P9lO2pgQPsnLTyohk4d fIIxnQQay5JjzdHDKAqq+8Fqqiga3f7BAlWQylFw4OhNW9vI8L855uwj6Q0l64tf VbsBGAEPMpDM1T/nyLr+G1AvcRycTAn4HS8SSMVD8D+u1dpTCgOV -----END CERTIFICATE-----Generated at Mon Mar 2 23:42:17 2026 by rpki-client