
$ rpki-client -vvf repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393031333a3a2f34382d3438203d3e203338353236.roa
File: 323430353a333734303a393031333a3a2f34382d3438203d3e203338353236.roa (raw, json)
Hash identifier: yRbDJFB97hkhs8uFbV5VKIo+B4uxVUY6rOWhc0j3ElQ=
Subject key identifier: 6A:29:1E:C0:EF:FF:E4:38:2C:D9:B1:5C:87:46:AD:DD:B3:D1:C3:8A
Certificate issuer: /CN=560CF5B1622CB492E1C603F69D4FB9C11322520D
Certificate serial: 09C1904439D185DFC664478A8748A2CF6C778AD1
Authority key identifier: 56:0C:F5:B1:62:2C:B4:92:E1:C6:03:F6:9D:4F:B9:C1:13:22:52:0D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/560CF5B1622CB492E1C603F69D4FB9C11322520D.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393031333a3a2f34382d3438203d3e203338353236.roa
Signing time: Wed 28 Jan 2026 04:00:03 +0000
ROA not before: Wed 28 Jan 2026 03:55:03 +0000
ROA not after: Wed 27 Jan 2027 04:00:03 +0000
asID: 38526
IP address blocks: 2405:3740:9013::/48 maxlen: 48
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/560CF5B1622CB492E1C603F69D4FB9C11322520D.crl
rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/560CF5B1622CB492E1C603F69D4FB9C11322520D.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/560CF5B1622CB492E1C603F69D4FB9C11322520D.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Mar 2026 20:24:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:c1:90:44:39:d1:85:df:c6:64:47:8a:87:48:a2:cf:6c:77:8a:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=560CF5B1622CB492E1C603F69D4FB9C11322520D
Validity
Not Before: Jan 28 03:55:03 2026 GMT
Not After : Jan 27 04:00:03 2027 GMT
Subject: CN=6A291EC0EFFFE4382CD9B15C8746ADDDB3D1C38A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:1c:47:51:58:42:4a:43:d1:fe:dd:1b:fb:09:
dc:6d:44:75:31:b1:1f:be:74:d6:25:c6:ad:c4:25:
a1:2e:64:03:f5:a6:8a:df:2b:2b:8b:21:25:d1:84:
a3:d1:11:67:9e:79:73:de:b4:1a:19:8f:95:99:67:
5c:f3:55:44:50:60:b2:47:26:7a:7f:9b:1e:26:b5:
e9:9c:83:ac:49:7d:63:49:58:80:e9:d6:d1:b0:76:
14:bc:23:86:79:8e:23:2e:d8:cc:ba:73:3a:8c:e2:
03:12:45:b5:5e:0d:88:95:84:42:33:e6:ef:cf:a2:
a5:46:77:44:71:68:1f:ee:14:0e:07:e9:39:04:51:
ee:ca:54:e4:2c:b5:da:e1:ba:6c:c6:06:35:46:7b:
b6:53:55:4a:7e:c5:b9:7c:6b:3a:6c:f2:11:63:59:
44:0a:74:ad:ad:25:83:66:d6:d7:54:f9:8d:ec:aa:
79:e4:38:24:6a:db:bc:02:3b:d6:3f:95:8e:17:70:
45:cd:fe:7b:99:5a:85:c8:17:49:7d:fc:82:8f:08:
09:ed:64:fc:d5:eb:ce:14:33:92:03:cc:a6:bc:20:
73:ae:66:3e:02:16:73:40:99:c6:f0:bf:92:68:20:
dd:9b:31:03:26:0c:30:eb:f1:fd:18:d7:95:6d:dc:
8f:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:29:1E:C0:EF:FF:E4:38:2C:D9:B1:5C:87:46:AD:DD:B3:D1:C3:8A
X509v3 Authority Key Identifier:
keyid:56:0C:F5:B1:62:2C:B4:92:E1:C6:03:F6:9D:4F:B9:C1:13:22:52:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/560CF5B1622CB492E1C603F69D4FB9C11322520D.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/560CF5B1622CB492E1C603F69D4FB9C11322520D.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393031333a3a2f34382d3438203d3e203338353236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2405:3740:9013::/48
Signature Algorithm: sha256WithRSAEncryption
d3:09:8e:79:10:d5:19:ff:31:de:19:f9:23:6a:e3:3a:6c:c9:
d5:5f:6d:12:21:64:aa:d9:78:6c:83:78:1f:c8:be:88:ff:50:
e5:b5:19:98:6b:24:27:57:41:68:14:a4:fb:10:1b:d9:bc:76:
ca:52:b2:89:fa:86:2b:6d:e0:9a:9b:96:5e:36:fe:fd:a6:71:
5c:f2:8d:56:dc:bf:65:54:65:c9:56:69:e7:77:50:c1:35:ab:
01:4e:11:d4:cd:87:0c:07:b2:79:f0:66:ae:ce:06:33:74:86:
b4:82:b9:d4:d2:a8:49:98:c7:4b:a0:a5:ee:8c:49:6b:8a:fb:
34:79:90:6f:89:db:d3:41:61:19:2f:46:fb:1f:57:ae:4c:da:
97:ad:c3:dc:78:f5:5a:9f:14:e8:26:db:d4:27:3b:99:8f:37:
dc:b6:b7:0e:5e:22:04:56:77:74:fa:3d:93:0a:fd:8d:d9:9e:
f7:5d:1b:e9:03:7b:e3:8c:62:ce:85:c2:85:9c:a1:d9:8a:9d:
c5:95:f4:a3:9a:13:0b:35:87:c6:71:1c:72:e9:28:65:26:9f:
6b:5a:c2:c8:01:8b:fe:4c:b4:32:5e:7f:a8:89:f9:8a:4c:76:
21:b0:a4:0d:ec:a2:e4:94:0d:d8:98:73:09:3e:47:0a:48:7e:
68:a1:58:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:58:03 2026 by rpki-client