$ rpki-client -vvf repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393030613a3a2f34382d3438203d3e203338353236.roa File: 323430353a333734303a393030613a3a2f34382d3438203d3e203338353236.roa (raw, json) Hash identifier: QRMMZZkZ6zvVbZ0LJqj9l5QCuVUpLkMW1ja/7Vuoc7M= Subject key identifier: 99:59:48:18:FE:DB:14:EE:92:34:1C:B7:D5:06:73:55:31:A4:F1:1A Certificate issuer: /CN=560CF5B1622CB492E1C603F69D4FB9C11322520D Certificate serial: 503DE803996EAA963482C18C4A0A795988DD195A Authority key identifier: 56:0C:F5:B1:62:2C:B4:92:E1:C6:03:F6:9D:4F:B9:C1:13:22:52:0D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/560CF5B1622CB492E1C603F69D4FB9C11322520D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393030613a3a2f34382d3438203d3e203338353236.roa Signing time: Wed 28 Jan 2026 02:02:35 +0000 ROA not before: Wed 28 Jan 2026 01:57:35 +0000 ROA not after: Wed 27 Jan 2027 02:02:35 +0000 asID: 38526 IP address blocks: 2405:3740:900a::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/560CF5B1622CB492E1C603F69D4FB9C11322520D.crl rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/560CF5B1622CB492E1C603F69D4FB9C11322520D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/560CF5B1622CB492E1C603F69D4FB9C11322520D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 20:24:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:3d:e8:03:99:6e:aa:96:34:82:c1:8c:4a:0a:79:59:88:dd:19:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=560CF5B1622CB492E1C603F69D4FB9C11322520D Validity Not Before: Jan 28 01:57:35 2026 GMT Not After : Jan 27 02:02:35 2027 GMT Subject: CN=99594818FEDB14EE92341CB7D506735531A4F11A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:13:bb:68:35:52:6c:fc:b2:ee:56:98:5e:45: b1:72:9f:84:6c:cf:24:35:a1:2f:4c:68:26:54:10: 50:8c:1f:30:d9:0d:7e:30:ef:aa:da:3a:95:4a:f7: 0a:85:ea:2d:3f:00:29:e0:76:d7:07:85:c6:1e:07: 61:cd:49:44:e4:f8:a6:2b:6a:35:38:0c:a0:05:bf: 0d:df:35:09:c6:86:73:5c:81:6d:34:f9:55:d1:bb: c9:d8:04:5c:d4:9a:b3:86:ed:74:43:03:e7:12:bf: fb:29:6a:e1:ff:43:b1:7a:58:cd:c0:34:af:1a:36: 33:f9:79:8e:b5:a7:4c:9a:75:5b:93:6d:53:91:f9: 9b:56:1a:f8:9e:c9:6a:71:75:ff:db:83:6a:4d:45: fd:6d:10:83:0b:86:5f:38:e5:27:da:3e:96:0d:91: c8:d8:cc:51:a2:a8:e2:6c:52:59:44:8b:14:1d:c2: 47:e5:08:b0:01:a4:a7:9c:ee:f6:00:70:97:56:5f: be:4b:62:70:c0:43:a8:1a:d1:27:42:ad:23:3d:f6: 8a:f1:fa:43:79:2d:bf:c2:d9:54:fc:8e:9b:3c:cf: 95:3a:60:00:59:01:9b:da:5d:e0:17:5c:a6:70:97: db:98:23:f8:88:58:de:45:ec:5c:99:4f:a7:15:20: 98:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:59:48:18:FE:DB:14:EE:92:34:1C:B7:D5:06:73:55:31:A4:F1:1A X509v3 Authority Key Identifier: keyid:56:0C:F5:B1:62:2C:B4:92:E1:C6:03:F6:9D:4F:B9:C1:13:22:52:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/560CF5B1622CB492E1C603F69D4FB9C11322520D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/560CF5B1622CB492E1C603F69D4FB9C11322520D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393030613a3a2f34382d3438203d3e203338353236.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:3740:900a::/48 Signature Algorithm: sha256WithRSAEncryption 7d:f1:20:7a:f9:36:3b:c7:41:9e:6b:d3:1d:18:db:69:98:79: 7c:2a:2d:37:c2:85:9c:93:f4:b9:cf:65:61:24:1d:fa:1f:de: 76:dc:44:d0:19:50:34:f7:d7:44:0f:91:62:54:66:64:da:27: 3a:e0:b2:ec:aa:03:4d:06:6f:f8:e1:dc:33:75:4e:65:06:fc: 15:e7:9f:55:26:9e:44:6b:e2:eb:c3:94:6d:39:7a:0b:a2:46: 06:53:c3:69:58:68:89:30:e8:02:d4:65:b4:5a:93:a0:bb:a9: f2:b1:a4:c4:f0:1c:c6:de:42:4a:90:a6:eb:8d:36:b6:0c:59: d8:8b:d7:ec:fd:52:b6:f1:7a:e2:f8:6c:8c:c1:43:6f:11:a7: 01:e1:05:12:93:8e:7a:a1:1b:b0:73:fb:ed:da:77:67:31:9a: ae:33:bf:4a:89:ac:c9:6a:1f:ef:72:98:bc:dc:02:54:92:b9: be:1c:a4:ce:d6:c3:ba:d3:b9:2a:ee:94:d1:f6:9f:20:f4:98: f2:28:ff:06:2e:cb:aa:97:5f:17:8b:e1:f1:5b:a1:26:29:b2: 4f:4a:13:d2:39:75:fe:9e:95:75:44:e5:ae:3f:03:2b:34:78: 49:db:2d:8b:b5:30:e4:c8:19:77:81:46:73:d5:6f:d4:ea:ac: 9f:a7:c5:09 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUUD3oA5luqpY0gsGMSgp5WYjdGVowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTYwQ0Y1QjE2MjJDQjQ5MkUxQzYwM0Y2OUQ0RkI5QzEx MzIyNTIwRDAeFw0yNjAxMjgwMTU3MzVaFw0yNzAxMjcwMjAyMzVaMDMxMTAvBgNV BAMTKDk5NTk0ODE4RkVEQjE0RUU5MjM0MUNCN0Q1MDY3MzU1MzFBNEYxMUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTE7toNVJs/LLuVpheRbFyn4Rs zyQ1oS9MaCZUEFCMHzDZDX4w76raOpVK9wqF6i0/ACngdtcHhcYeB2HNSUTk+KYr ajU4DKAFvw3fNQnGhnNcgW00+VXRu8nYBFzUmrOG7XRDA+cSv/spauH/Q7F6WM3A NK8aNjP5eY61p0yadVuTbVOR+ZtWGvieyWpxdf/bg2pNRf1tEIMLhl845SfaPpYN kcjYzFGiqOJsUllEixQdwkflCLABpKec7vYAcJdWX75LYnDAQ6ga0SdCrSM99orx +kN5Lb/C2VT8jps8z5U6YABZAZvaXeAXXKZwl9uYI/iIWN5F7FyZT6cVIJgdAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUmVlIGP7bFO6SNBy31QZzVTGk8RowHwYDVR0j BBgwFoAUVgz1sWIstJLhxgP2nU+5wRMiUg0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NjVlNzgxMC02N2Y0LTQxYzItODAzNC00NjUyNzMzYjhkZDIvMC81NjBDRjVCMTYy MkNCNDkyRTFDNjAzRjY5RDRGQjlDMTEzMjI1MjBELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTYwQ0Y1QjE2MjJDQjQ5MkUxQzYwM0Y2OUQ0RkI5QzExMzIy NTIwRC5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U2NWU3ODEwLTY3ZjQtNDFjMi04 MDM0LTQ2NTI3MzNiOGRkMi8wLzMyMzQzMDM1M2EzMzM3MzQzMDNhMzkzMDMwNjEz YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMzM4MzUzMjM2LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAU3 QJAKMA0GCSqGSIb3DQEBCwUAA4IBAQB98SB6+TY7x0Gea9MdGNtpmHl8Ki03woWc k/S5z2VhJB36H9523ETQGVA099dED5FiVGZk2ic64LLsqgNNBm/44dwzdU5lBvwV 559VJp5Ea+Lrw5RtOXoLokYGU8NpWGiJMOgC1GW0WpOgu6nysaTE8BzG3kJKkKbr jTa2DFnYi9fs/VK28Xri+GyMwUNvEacB4QUSk456oRuwc/vt2ndnMZquM79KiazJ ah/vcpi83AJUkrm+HKTO1sO607kq7pTR9p8g9JjyKP8GLsuql18Xi+HxW6EmKbJP ShPSOXX+npV1ROWuPwMrNHhJ2y2LtTDkyBl3gUZz1W/U6qyfp8UJ -----END CERTIFICATE-----Generated at Mon Mar 2 21:58:20 2026 by rpki-client