
$ rpki-client -vvf repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393030663a3a2f34382d3438203d3e203338353236.roa
File: 323430353a333734303a393030663a3a2f34382d3438203d3e203338353236.roa (raw, json)
Hash identifier: qFMzlbSPUHDTndf1FQtJAa9lGNFkl/eh4dpQ1Y/Zgpc=
Subject key identifier: B7:BF:DF:9E:C2:4A:EB:43:03:31:68:03:C3:C6:93:38:DA:20:ED:89
Certificate issuer: /CN=560CF5B1622CB492E1C603F69D4FB9C11322520D
Certificate serial: 744F97B31ABBEC487785467192E899F733A118FE
Authority key identifier: 56:0C:F5:B1:62:2C:B4:92:E1:C6:03:F6:9D:4F:B9:C1:13:22:52:0D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/560CF5B1622CB492E1C603F69D4FB9C11322520D.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393030663a3a2f34382d3438203d3e203338353236.roa
Signing time: Wed 28 Jan 2026 02:02:38 +0000
ROA not before: Wed 28 Jan 2026 01:57:38 +0000
ROA not after: Wed 27 Jan 2027 02:02:38 +0000
asID: 38526
IP address blocks: 2405:3740:900f::/48 maxlen: 48
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/560CF5B1622CB492E1C603F69D4FB9C11322520D.crl
rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/560CF5B1622CB492E1C603F69D4FB9C11322520D.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/560CF5B1622CB492E1C603F69D4FB9C11322520D.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Mar 2026 20:24:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:4f:97:b3:1a:bb:ec:48:77:85:46:71:92:e8:99:f7:33:a1:18:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=560CF5B1622CB492E1C603F69D4FB9C11322520D
Validity
Not Before: Jan 28 01:57:38 2026 GMT
Not After : Jan 27 02:02:38 2027 GMT
Subject: CN=B7BFDF9EC24AEB4303316803C3C69338DA20ED89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:9a:a5:8f:74:f9:95:0a:1e:94:1c:47:e9:12:
b7:f9:17:b0:a2:5b:5c:ae:97:c3:c1:01:9f:21:0d:
74:37:f7:61:82:d2:69:cb:be:86:a5:a5:87:e8:7b:
eb:45:98:8f:b5:93:97:d8:6c:1e:b0:c5:f4:1a:3a:
7d:2a:60:31:86:58:65:ab:b6:8e:9e:a2:54:f2:db:
6c:44:cf:59:cf:bf:f0:9c:b0:4f:e5:2c:79:0b:bf:
da:9d:01:7b:38:1d:a8:af:a8:5d:a6:07:b6:0d:98:
ea:08:3f:f3:87:1d:b7:a8:ce:9e:f3:96:65:51:b8:
8f:d8:ec:3f:37:95:54:1c:75:fa:9f:d7:77:9e:e1:
5a:e9:91:7e:b3:ac:6b:d1:a2:2a:49:bf:17:b5:05:
14:67:a4:f9:1d:7b:a1:26:26:81:b0:fb:5d:fd:bc:
9c:f6:08:a7:91:18:44:e8:6c:13:b8:e4:d7:24:f0:
1c:f1:1d:39:bd:74:9f:92:64:4c:37:99:00:7e:19:
53:ff:0f:af:e2:80:62:9b:0a:a5:2c:11:2f:59:e2:
fc:d9:50:b9:ad:b6:74:f0:12:96:f7:ac:5e:1b:03:
e9:ef:40:16:06:df:ed:46:a3:69:08:69:bb:58:d4:
a2:b4:2a:f7:fe:0c:c4:f4:55:b1:37:bb:c4:5a:0a:
fe:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:BF:DF:9E:C2:4A:EB:43:03:31:68:03:C3:C6:93:38:DA:20:ED:89
X509v3 Authority Key Identifier:
keyid:56:0C:F5:B1:62:2C:B4:92:E1:C6:03:F6:9D:4F:B9:C1:13:22:52:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/560CF5B1622CB492E1C603F69D4FB9C11322520D.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/560CF5B1622CB492E1C603F69D4FB9C11322520D.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393030663a3a2f34382d3438203d3e203338353236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2405:3740:900f::/48
Signature Algorithm: sha256WithRSAEncryption
37:b7:aa:6d:c3:da:8c:93:7c:ca:59:d9:c5:b7:f7:45:36:1c:
0d:2a:e9:6d:17:0d:45:73:9c:59:03:bb:c9:7d:ab:4d:ef:8a:
17:2b:c5:12:67:cc:6a:fd:25:87:b9:4f:60:55:d7:3f:c5:71:
fe:3b:94:24:e5:78:6f:24:74:fd:b4:09:75:89:b4:93:9c:9e:
a3:54:ad:d8:13:67:f1:b2:8e:ba:62:21:f7:cc:04:e0:32:05:
83:c2:f3:c3:05:06:4f:38:88:7a:8d:f7:76:f8:49:42:85:04:
59:67:be:00:2d:37:b1:e9:ae:6f:42:f6:e3:4d:9b:65:8c:8d:
43:1d:23:ed:59:b3:17:58:5f:fb:e8:1c:d3:93:dc:00:1d:b1:
d0:97:44:55:5e:d1:f0:a1:1a:77:30:d7:c7:3a:d6:74:80:b0:
33:5b:9c:6f:ed:37:0f:ed:34:94:fe:7a:2d:54:70:fd:f2:d6:
fc:c6:01:e2:94:73:92:30:15:8d:51:6e:3c:f8:bb:80:f9:4b:
b9:70:45:f8:f5:14:98:35:4b:65:8d:e2:c3:6f:d3:e2:b0:32:
27:57:ae:59:11:be:c4:e9:c0:36:0a:f8:13:02:a0:e2:6e:55:
90:ca:3e:9c:7d:27:89:0d:2c:96:7b:c1:d5:2e:9d:1b:d7:72:
93:20:4c:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:41:39 2026 by rpki-client