
$ rpki-client -vvf repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393031323a3a2f34382d3438203d3e203338353236.roa
File: 323430353a333734303a393031323a3a2f34382d3438203d3e203338353236.roa (raw, json)
Hash identifier: WUMy/wX5wJYTLfWoZ0v6Kmi19QvNybyBnth2dg5phWQ=
Subject key identifier: 14:8B:02:F4:BB:BE:0E:EC:6B:20:71:2F:76:14:E3:46:45:A1:26:4F
Certificate issuer: /CN=560CF5B1622CB492E1C603F69D4FB9C11322520D
Certificate serial: 6114DBBAF6AA78F99E8D00AEB0CA1A438953D79C
Authority key identifier: 56:0C:F5:B1:62:2C:B4:92:E1:C6:03:F6:9D:4F:B9:C1:13:22:52:0D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/560CF5B1622CB492E1C603F69D4FB9C11322520D.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393031323a3a2f34382d3438203d3e203338353236.roa
Signing time: Wed 28 Jan 2026 02:02:37 +0000
ROA not before: Wed 28 Jan 2026 01:57:37 +0000
ROA not after: Wed 27 Jan 2027 02:02:37 +0000
asID: 38526
IP address blocks: 2405:3740:9012::/48 maxlen: 48
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/560CF5B1622CB492E1C603F69D4FB9C11322520D.crl
rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/560CF5B1622CB492E1C603F69D4FB9C11322520D.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/560CF5B1622CB492E1C603F69D4FB9C11322520D.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Mar 2026 20:24:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:14:db:ba:f6:aa:78:f9:9e:8d:00:ae:b0:ca:1a:43:89:53:d7:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=560CF5B1622CB492E1C603F69D4FB9C11322520D
Validity
Not Before: Jan 28 01:57:37 2026 GMT
Not After : Jan 27 02:02:37 2027 GMT
Subject: CN=148B02F4BBBE0EEC6B20712F7614E34645A1264F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:97:35:c4:da:6a:fa:3d:be:2c:da:48:5c:ea:
dd:8c:21:96:f2:f9:ae:0a:24:bd:3e:83:fa:79:5d:
54:35:bd:95:17:3b:f9:dc:01:b4:98:6d:a6:95:af:
e4:86:40:06:80:0a:11:e4:53:67:f0:75:90:0d:e3:
04:b7:18:cd:fd:97:12:af:ec:52:fe:fa:a3:9f:f6:
01:ac:a3:f4:10:7c:dd:5a:7d:61:7f:bc:b6:b9:5d:
b6:52:10:fa:c4:a4:a2:4a:0f:19:2d:15:92:08:56:
52:e9:54:92:ee:f6:78:1e:b4:3d:e8:f3:ce:6b:d0:
fd:8e:de:4f:0f:10:ec:ec:c4:00:d8:f7:9a:27:2e:
ea:bb:b4:6d:0f:c4:d6:97:c2:90:78:85:f7:88:48:
1e:e8:d2:19:45:f3:42:c5:f2:9c:ef:5c:1e:b1:18:
a9:76:2c:15:10:e3:14:03:64:d7:1a:6f:00:6e:bc:
2d:8a:5b:60:0e:7a:a8:4f:97:0a:59:c3:06:de:6e:
04:be:24:80:93:3a:c1:15:05:3c:dc:4f:b6:11:01:
09:e0:2d:2e:7e:82:89:83:2e:e3:6a:fc:cf:b9:a4:
ac:ee:b5:63:95:97:0e:c2:85:bb:19:19:2d:2c:36:
9b:5b:75:e1:9d:a7:80:f2:cb:cd:3a:36:cf:a4:df:
2d:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:8B:02:F4:BB:BE:0E:EC:6B:20:71:2F:76:14:E3:46:45:A1:26:4F
X509v3 Authority Key Identifier:
keyid:56:0C:F5:B1:62:2C:B4:92:E1:C6:03:F6:9D:4F:B9:C1:13:22:52:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/560CF5B1622CB492E1C603F69D4FB9C11322520D.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/560CF5B1622CB492E1C603F69D4FB9C11322520D.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393031323a3a2f34382d3438203d3e203338353236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2405:3740:9012::/48
Signature Algorithm: sha256WithRSAEncryption
00:79:70:da:f7:57:01:94:cc:d1:77:cc:38:35:7c:46:76:14:
4e:07:6e:5a:69:f0:a8:08:e1:d3:a1:69:79:ca:5c:89:2d:db:
ce:60:10:f9:b0:f5:4d:ae:a5:74:d1:25:5c:54:a2:56:87:34:
23:1e:ea:90:be:13:79:aa:50:13:02:ed:73:ac:16:71:90:7d:
3b:19:7a:6d:8c:58:14:40:9a:f5:4c:b2:f7:d8:54:73:78:be:
73:ab:7f:51:bf:c6:df:23:5d:64:fc:f1:b3:a9:3c:1b:a3:6b:
d1:5b:20:19:7a:23:62:2a:36:c7:b5:91:f5:a2:6c:d9:d3:70:
66:58:2d:8a:fc:df:d2:10:58:01:7b:be:4e:2a:05:8e:9d:5b:
d8:ed:fa:73:3b:f6:db:b8:21:54:0b:4f:5e:6d:6d:e3:7a:0f:
ac:c1:74:d9:f4:51:d1:68:33:17:62:27:d9:c9:12:12:43:95:
d5:df:46:df:9d:88:8d:fa:34:ac:34:01:9a:00:fd:ee:73:ae:
3f:c7:00:2f:1d:a8:3a:86:42:61:de:be:ca:16:39:d4:3d:ca:
67:68:00:1b:f5:24:7a:7a:d2:66:63:3b:92:74:f8:4b:69:fd:
79:6d:9d:f3:41:a1:7a:d1:58:68:a4:ff:12:1d:74:74:bf:e8:
50:d1:63:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:57:31 2026 by rpki-client