$ rpki-client -vvf repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393030623a3a2f34382d3438203d3e203338353236.roa File: 323430353a333734303a393030623a3a2f34382d3438203d3e203338353236.roa (raw, json) Hash identifier: kS1gKEl5dIQaYlShqbUKHAzFdrJeOJHizIx9ti8LkGA= Subject key identifier: 5E:95:84:A8:4C:AA:A6:FB:F6:86:52:20:0F:C2:AD:CA:D6:C9:8E:A6 Certificate issuer: /CN=560CF5B1622CB492E1C603F69D4FB9C11322520D Certificate serial: 1007C9464566D20B387B9B71F85310A5675C3C94 Authority key identifier: 56:0C:F5:B1:62:2C:B4:92:E1:C6:03:F6:9D:4F:B9:C1:13:22:52:0D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/560CF5B1622CB492E1C603F69D4FB9C11322520D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393030623a3a2f34382d3438203d3e203338353236.roa Signing time: Wed 28 Jan 2026 02:02:35 +0000 ROA not before: Wed 28 Jan 2026 01:57:35 +0000 ROA not after: Wed 27 Jan 2027 02:02:35 +0000 asID: 38526 IP address blocks: 2405:3740:900b::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/560CF5B1622CB492E1C603F69D4FB9C11322520D.crl rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/560CF5B1622CB492E1C603F69D4FB9C11322520D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/560CF5B1622CB492E1C603F69D4FB9C11322520D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 20:24:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:07:c9:46:45:66:d2:0b:38:7b:9b:71:f8:53:10:a5:67:5c:3c:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=560CF5B1622CB492E1C603F69D4FB9C11322520D Validity Not Before: Jan 28 01:57:35 2026 GMT Not After : Jan 27 02:02:35 2027 GMT Subject: CN=5E9584A84CAAA6FBF68652200FC2ADCAD6C98EA6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:7c:05:de:10:7d:0d:e6:bf:db:62:2f:0b:1f: e8:d1:f3:f2:5b:1d:8d:9c:52:bf:91:0f:50:0b:3a: 12:cc:a5:f1:3c:8c:81:6a:aa:b4:eb:ee:85:76:2b: f2:31:fc:a5:b5:f6:37:99:ae:28:96:2f:00:2d:28: 66:f9:ba:f6:09:2c:40:3d:a8:d3:3b:40:50:2a:3b: 9d:a9:3a:65:da:62:3e:ed:39:99:53:fb:da:67:ef: e4:ae:a8:2e:7b:d9:43:2e:4a:1b:0e:07:5f:19:9a: 4e:4d:93:19:21:ed:93:55:43:17:68:21:3a:22:b5: 2b:fa:03:d6:f5:de:09:7a:b6:42:4f:c8:1f:af:02: e4:be:9a:53:51:4f:04:59:34:83:5c:4c:a3:10:58: f9:a6:b4:50:09:51:79:29:5a:66:79:8c:24:f6:bb: f4:c8:ff:fc:e3:c8:59:43:23:86:71:8c:4d:84:6f: 82:b6:c2:fb:57:d7:02:51:44:3c:33:47:4e:92:7c: 01:65:ce:b0:d1:0e:a9:d0:46:33:ec:a9:24:40:8f: b5:59:1a:6e:97:0d:fb:f5:0c:33:e9:95:f0:d1:b0: a0:35:34:2c:da:32:12:5c:40:66:64:63:87:d5:ed: 44:b3:85:53:46:1a:4c:6d:3f:08:d1:16:19:ac:ea: ff:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:95:84:A8:4C:AA:A6:FB:F6:86:52:20:0F:C2:AD:CA:D6:C9:8E:A6 X509v3 Authority Key Identifier: keyid:56:0C:F5:B1:62:2C:B4:92:E1:C6:03:F6:9D:4F:B9:C1:13:22:52:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/560CF5B1622CB492E1C603F69D4FB9C11322520D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/560CF5B1622CB492E1C603F69D4FB9C11322520D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393030623a3a2f34382d3438203d3e203338353236.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:3740:900b::/48 Signature Algorithm: sha256WithRSAEncryption 51:82:9a:d3:c3:40:f4:86:50:07:06:90:96:ec:97:93:ad:15: 17:66:6d:76:19:04:f3:81:eb:6c:26:dc:60:68:6d:50:90:06: 38:02:46:53:78:09:da:a6:de:aa:80:37:30:59:a9:b0:5a:0d: 8e:b1:50:45:94:06:a9:57:4d:36:37:b3:db:59:a1:9d:2a:a2: 78:1c:f0:c2:55:14:d0:ab:50:88:c6:8c:3f:23:f2:ce:15:7b: f5:ab:cf:15:bb:59:3a:55:08:38:e3:35:ee:35:14:ab:31:99: 21:16:01:36:0e:eb:c3:3c:c2:15:65:16:09:d2:18:07:61:f4: 6a:c7:fe:17:b6:e5:30:ec:ff:1d:24:d6:46:37:ea:2b:59:b1: 3a:d3:70:99:6d:f0:3a:8f:29:b4:8d:d3:a6:67:bd:59:ec:ec: f0:74:f3:3b:4b:d1:9d:1c:d6:02:7b:db:95:43:76:41:a7:c3: 53:84:8d:6f:86:e5:cd:03:53:16:95:f2:c6:ab:52:cb:77:09: ab:31:02:19:b6:2f:0a:ef:19:3a:4f:dd:a7:ef:ad:6a:03:50: 7c:85:87:e8:d0:68:db:b8:f8:e8:a1:32:a0:88:b1:20:e8:9b: 32:2f:3b:e3:68:cb:76:2d:2a:7d:d1:39:5f:42:c3:ee:da:4c: d3:45:dd:0c -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUEAfJRkVm0gs4e5tx+FMQpWdcPJQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTYwQ0Y1QjE2MjJDQjQ5MkUxQzYwM0Y2OUQ0RkI5QzEx MzIyNTIwRDAeFw0yNjAxMjgwMTU3MzVaFw0yNzAxMjcwMjAyMzVaMDMxMTAvBgNV BAMTKDVFOTU4NEE4NENBQUE2RkJGNjg2NTIyMDBGQzJBRENBRDZDOThFQTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5fAXeEH0N5r/bYi8LH+jR8/Jb HY2cUr+RD1ALOhLMpfE8jIFqqrTr7oV2K/Ix/KW19jeZriiWLwAtKGb5uvYJLEA9 qNM7QFAqO52pOmXaYj7tOZlT+9pn7+SuqC572UMuShsOB18Zmk5Nkxkh7ZNVQxdo IToitSv6A9b13gl6tkJPyB+vAuS+mlNRTwRZNINcTKMQWPmmtFAJUXkpWmZ5jCT2 u/TI//zjyFlDI4ZxjE2Eb4K2wvtX1wJRRDwzR06SfAFlzrDRDqnQRjPsqSRAj7VZ Gm6XDfv1DDPplfDRsKA1NCzaMhJcQGZkY4fV7USzhVNGGkxtPwjRFhms6v+nAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUXpWEqEyqpvv2hlIgD8KtytbJjqYwHwYDVR0j BBgwFoAUVgz1sWIstJLhxgP2nU+5wRMiUg0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NjVlNzgxMC02N2Y0LTQxYzItODAzNC00NjUyNzMzYjhkZDIvMC81NjBDRjVCMTYy MkNCNDkyRTFDNjAzRjY5RDRGQjlDMTEzMjI1MjBELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTYwQ0Y1QjE2MjJDQjQ5MkUxQzYwM0Y2OUQ0RkI5QzExMzIy NTIwRC5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U2NWU3ODEwLTY3ZjQtNDFjMi04 MDM0LTQ2NTI3MzNiOGRkMi8wLzMyMzQzMDM1M2EzMzM3MzQzMDNhMzkzMDMwNjIz YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMzM4MzUzMjM2LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAU3 QJALMA0GCSqGSIb3DQEBCwUAA4IBAQBRgprTw0D0hlAHBpCW7JeTrRUXZm12GQTz getsJtxgaG1QkAY4AkZTeAnapt6qgDcwWamwWg2OsVBFlAapV002N7PbWaGdKqJ4 HPDCVRTQq1CIxow/I/LOFXv1q88Vu1k6VQg44zXuNRSrMZkhFgE2DuvDPMIVZRYJ 0hgHYfRqx/4XtuUw7P8dJNZGN+orWbE603CZbfA6jym0jdOmZ71Z7OzwdPM7S9Gd HNYCe9uVQ3ZBp8NThI1vhuXNA1MWlfLGq1LLdwmrMQIZti8K7xk6T92n761qA1B8 hYfo0GjbuPjooTKgiLEg6JsyLzvjaMt2LSp90TlfQsPu2kzTRd0M -----END CERTIFICATE-----Generated at Mon Mar 2 21:58:21 2026 by rpki-client