$ rpki-client -vvf repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393030633a3a2f34382d3438203d3e203338353236.roa File: 323430353a333734303a393030633a3a2f34382d3438203d3e203338353236.roa (raw, json) Hash identifier: ML5+KeZ4h6Vdt+g6XhIMxLR+xc9NlUtJLrg775bfEZ4= Subject key identifier: C2:08:3E:91:60:FA:39:89:DF:BC:73:84:72:28:43:47:0F:A7:41:CF Certificate issuer: /CN=560CF5B1622CB492E1C603F69D4FB9C11322520D Certificate serial: 18A820B5DDF07D55B90F52196E4D55EB52622A1E Authority key identifier: 56:0C:F5:B1:62:2C:B4:92:E1:C6:03:F6:9D:4F:B9:C1:13:22:52:0D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/560CF5B1622CB492E1C603F69D4FB9C11322520D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393030633a3a2f34382d3438203d3e203338353236.roa Signing time: Wed 28 Jan 2026 02:02:35 +0000 ROA not before: Wed 28 Jan 2026 01:57:35 +0000 ROA not after: Wed 27 Jan 2027 02:02:35 +0000 asID: 38526 IP address blocks: 2405:3740:900c::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/560CF5B1622CB492E1C603F69D4FB9C11322520D.crl rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/560CF5B1622CB492E1C603F69D4FB9C11322520D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/560CF5B1622CB492E1C603F69D4FB9C11322520D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 20:24:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:a8:20:b5:dd:f0:7d:55:b9:0f:52:19:6e:4d:55:eb:52:62:2a:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=560CF5B1622CB492E1C603F69D4FB9C11322520D Validity Not Before: Jan 28 01:57:35 2026 GMT Not After : Jan 27 02:02:35 2027 GMT Subject: CN=C2083E9160FA3989DFBC7384722843470FA741CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:f1:76:5e:d7:30:be:98:2f:05:46:0a:56:09: 5b:7a:61:f1:9f:70:be:c6:4c:97:2b:b6:e2:88:30: 74:73:b3:55:dc:79:e0:fe:9b:34:7c:50:da:b6:0d: f8:c0:dd:ac:f4:e5:d0:c3:6e:6b:3a:89:91:42:28: 8d:01:6c:f4:28:b2:2e:5f:41:a8:a9:5d:95:2a:5a: 29:c1:c6:20:e8:13:5e:ed:04:b6:b3:a9:b5:23:3e: 8c:14:ca:fe:3c:ab:63:b9:fc:85:77:23:86:3f:84: dd:6b:9a:28:9e:9b:cf:30:50:12:3f:f9:4a:cf:5d: 39:82:45:f3:0e:4c:cb:46:38:5f:0f:a8:e8:06:b0: 15:f6:07:26:41:be:12:49:62:7d:6c:50:87:bb:a7: 56:67:70:b8:bd:a6:96:71:6c:33:63:b4:83:33:a3: bd:3d:2b:1e:5e:30:04:98:25:25:38:46:71:78:3c: c8:1a:d7:0a:7c:02:24:d7:12:0f:2c:db:cd:69:ad: 5a:de:79:ff:e9:dc:ff:f1:4e:ff:91:f4:ec:51:72: 2a:bc:cc:55:dd:42:1f:82:b3:f8:be:2a:ff:6e:88: ea:70:b0:3e:a5:d7:55:e5:04:6d:e5:bc:cb:a6:8c: 71:10:60:bb:ec:13:11:7f:a4:4e:86:d7:21:eb:ab: 9c:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:08:3E:91:60:FA:39:89:DF:BC:73:84:72:28:43:47:0F:A7:41:CF X509v3 Authority Key Identifier: keyid:56:0C:F5:B1:62:2C:B4:92:E1:C6:03:F6:9D:4F:B9:C1:13:22:52:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/560CF5B1622CB492E1C603F69D4FB9C11322520D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/560CF5B1622CB492E1C603F69D4FB9C11322520D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393030633a3a2f34382d3438203d3e203338353236.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:3740:900c::/48 Signature Algorithm: sha256WithRSAEncryption 39:7f:3c:60:fa:89:1c:03:55:7c:36:b9:9b:ce:ab:cc:a9:32: 2e:87:18:58:f3:f0:dd:4e:9d:e3:ca:26:1e:7c:ed:e5:a2:e0: f8:ca:a2:de:7c:06:3a:f3:db:b5:71:e5:a2:f0:7f:58:2a:86: b1:12:8c:12:36:51:dd:0f:98:b9:ff:39:2e:75:2c:b7:3f:32: 6a:e1:c2:87:4d:1c:28:96:b9:36:fc:6e:d7:06:52:6a:17:cb: ec:bc:72:be:79:5b:7e:fa:ea:0e:1a:35:a4:9c:fe:59:3b:52: 89:e0:c1:89:87:e0:f7:8a:11:d3:7d:77:4e:67:74:3d:c3:48: de:7b:c2:41:5b:f2:3a:48:56:6d:7f:18:00:4c:96:78:e6:4f: be:e7:9f:42:f8:bf:e1:40:d8:0d:aa:c2:10:25:9a:5f:31:2d: 0e:8a:65:b0:1d:ec:3d:71:cd:f3:f5:7d:4f:f0:bd:aa:e0:89: cf:18:46:69:a5:31:1e:87:17:6d:87:b0:f9:55:c1:22:dc:86: fa:65:13:9b:06:61:a6:95:88:9b:92:5a:51:14:29:01:f5:60: 29:94:89:6c:6a:d7:e1:75:08:9c:15:86:70:0e:50:d8:9e:12: 55:e1:2c:f3:15:fe:37:83:e2:76:b9:85:0b:c2:bb:cc:8c:c4: f1:5c:cb:33 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUGKggtd3wfVW5D1IZbk1V61JiKh4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTYwQ0Y1QjE2MjJDQjQ5MkUxQzYwM0Y2OUQ0RkI5QzEx MzIyNTIwRDAeFw0yNjAxMjgwMTU3MzVaFw0yNzAxMjcwMjAyMzVaMDMxMTAvBgNV BAMTKEMyMDgzRTkxNjBGQTM5ODlERkJDNzM4NDcyMjg0MzQ3MEZBNzQxQ0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDS8XZe1zC+mC8FRgpWCVt6YfGf cL7GTJcrtuKIMHRzs1XceeD+mzR8UNq2DfjA3az05dDDbms6iZFCKI0BbPQosi5f QaipXZUqWinBxiDoE17tBLazqbUjPowUyv48q2O5/IV3I4Y/hN1rmiiem88wUBI/ +UrPXTmCRfMOTMtGOF8PqOgGsBX2ByZBvhJJYn1sUIe7p1ZncLi9ppZxbDNjtIMz o709Kx5eMASYJSU4RnF4PMga1wp8AiTXEg8s281prVreef/p3P/xTv+R9OxRciq8 zFXdQh+Cs/i+Kv9uiOpwsD6l11XlBG3lvMumjHEQYLvsExF/pE6G1yHrq5xdAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUwgg+kWD6OYnfvHOEcihDRw+nQc8wHwYDVR0j BBgwFoAUVgz1sWIstJLhxgP2nU+5wRMiUg0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NjVlNzgxMC02N2Y0LTQxYzItODAzNC00NjUyNzMzYjhkZDIvMC81NjBDRjVCMTYy MkNCNDkyRTFDNjAzRjY5RDRGQjlDMTEzMjI1MjBELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTYwQ0Y1QjE2MjJDQjQ5MkUxQzYwM0Y2OUQ0RkI5QzExMzIy NTIwRC5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U2NWU3ODEwLTY3ZjQtNDFjMi04 MDM0LTQ2NTI3MzNiOGRkMi8wLzMyMzQzMDM1M2EzMzM3MzQzMDNhMzkzMDMwNjMz YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMzM4MzUzMjM2LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAU3 QJAMMA0GCSqGSIb3DQEBCwUAA4IBAQA5fzxg+okcA1V8NrmbzqvMqTIuhxhY8/Dd Tp3jyiYefO3louD4yqLefAY689u1ceWi8H9YKoaxEowSNlHdD5i5/zkudSy3PzJq 4cKHTRwolrk2/G7XBlJqF8vsvHK+eVt++uoOGjWknP5ZO1KJ4MGJh+D3ihHTfXdO Z3Q9w0jee8JBW/I6SFZtfxgATJZ45k++559C+L/hQNgNqsIQJZpfMS0OimWwHew9 cc3z9X1P8L2q4InPGEZppTEehxdth7D5VcEi3Ib6ZRObBmGmlYibklpRFCkB9WAp lIlsatfhdQicFYZwDlDYnhJV4SzzFf43g+J2uYULwrvMjMTxXMsz -----END CERTIFICATE-----Generated at Mon Mar 2 22:22:29 2026 by rpki-client