$ rpki-client -vvf repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393031353a3a2f34382d3438203d3e203338353236.roa File: 323430353a333734303a393031353a3a2f34382d3438203d3e203338353236.roa (raw, json) Hash identifier: GfCdnpuvSPNeHN8fHzd9E6LZjyQWlOMvod7RB45Hs4E= Subject key identifier: 7E:BD:94:31:CB:4B:D6:BE:D3:AC:B2:0E:3B:28:CB:DF:E1:F5:23:E8 Certificate issuer: /CN=560CF5B1622CB492E1C603F69D4FB9C11322520D Certificate serial: 1DC251452E6B24778BD14ACDEE9AB3A05BC78A5B Authority key identifier: 56:0C:F5:B1:62:2C:B4:92:E1:C6:03:F6:9D:4F:B9:C1:13:22:52:0D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/560CF5B1622CB492E1C603F69D4FB9C11322520D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393031353a3a2f34382d3438203d3e203338353236.roa Signing time: Wed 28 Jan 2026 03:00:02 +0000 ROA not before: Wed 28 Jan 2026 02:55:02 +0000 ROA not after: Wed 27 Jan 2027 03:00:02 +0000 asID: 38526 IP address blocks: 2405:3740:9015::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/560CF5B1622CB492E1C603F69D4FB9C11322520D.crl rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/560CF5B1622CB492E1C603F69D4FB9C11322520D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/560CF5B1622CB492E1C603F69D4FB9C11322520D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 20:24:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:c2:51:45:2e:6b:24:77:8b:d1:4a:cd:ee:9a:b3:a0:5b:c7:8a:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=560CF5B1622CB492E1C603F69D4FB9C11322520D Validity Not Before: Jan 28 02:55:02 2026 GMT Not After : Jan 27 03:00:02 2027 GMT Subject: CN=7EBD9431CB4BD6BED3ACB20E3B28CBDFE1F523E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:b5:6e:ff:db:f6:8d:f5:02:0f:54:12:27:ac: 5d:4d:85:4b:40:eb:d7:97:91:e8:8f:19:64:21:ff: f5:4c:dd:de:77:8a:6e:ba:a4:30:8c:98:91:fd:bb: c9:c8:9d:87:c3:49:f4:a2:a0:b8:ba:d4:50:49:af: 9c:e6:dc:02:85:06:6b:9c:f9:79:a4:26:58:12:cb: ec:14:87:39:5c:dc:18:de:6f:2c:31:da:5d:1f:ae: e4:17:f6:b8:7d:c9:c8:98:45:b5:9a:9d:39:75:c5: b4:3e:4c:3d:85:2b:ba:f3:c5:d5:62:8b:54:6c:ee: 9a:82:39:17:ee:f4:e6:1b:53:33:6a:9e:40:20:f0: 54:64:36:10:b7:22:15:96:0f:e1:59:b6:59:52:3e: 55:3d:ad:9a:16:35:67:65:33:cb:5f:e9:fb:b8:b7: 7e:f7:18:b9:76:aa:ed:68:69:16:d5:e6:c9:e1:b6: a4:b5:05:bf:a3:f1:a4:62:4b:48:3f:d5:89:4f:ee: ec:6a:56:22:37:33:b8:e3:1b:41:49:0b:36:01:04: 27:57:e5:d2:75:ce:98:d5:a0:d1:b3:88:4f:c9:6f: 57:ee:14:98:c0:a9:90:ae:76:b0:ac:da:f6:fb:a1: f3:e2:30:ce:4c:8a:aa:f6:e6:44:3a:4e:d1:1e:82: 1b:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:BD:94:31:CB:4B:D6:BE:D3:AC:B2:0E:3B:28:CB:DF:E1:F5:23:E8 X509v3 Authority Key Identifier: keyid:56:0C:F5:B1:62:2C:B4:92:E1:C6:03:F6:9D:4F:B9:C1:13:22:52:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/560CF5B1622CB492E1C603F69D4FB9C11322520D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/560CF5B1622CB492E1C603F69D4FB9C11322520D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393031353a3a2f34382d3438203d3e203338353236.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:3740:9015::/48 Signature Algorithm: sha256WithRSAEncryption 3e:d1:4a:9e:9c:00:6e:71:21:c6:98:89:44:35:aa:cb:bd:0c: e6:0e:75:ea:a3:87:c9:33:34:8e:39:56:61:eb:f5:c5:75:e8: 25:de:d8:5e:81:1a:88:1c:24:0e:ae:1a:d3:9c:0d:76:c2:00: ab:70:50:f1:0a:8b:07:58:51:ee:52:b8:d3:08:85:16:fa:f5: bb:a9:70:09:48:47:bb:c4:2b:57:6c:32:eb:2d:93:bd:f3:78: 48:fa:f3:f4:a0:b8:ef:14:0f:14:1b:7c:85:75:44:49:fa:d4: e5:d1:e7:fc:ec:21:79:9c:33:18:40:48:f5:67:a6:31:a2:22: e9:bd:45:b2:8f:cd:4e:45:95:e6:07:63:35:81:d5:79:7a:b3: e3:89:4f:cd:89:b8:b9:ef:6f:ea:14:d8:57:03:52:02:a0:2e: f1:ba:dd:f0:3d:12:03:4c:a6:34:65:17:53:65:22:5a:1a:94: 22:e9:84:6e:9f:db:37:72:81:58:93:f5:e5:1e:2c:69:e6:43: 1f:82:61:03:7f:90:e5:92:1b:83:38:03:58:cc:15:49:36:ff: 38:60:aa:b2:8f:dc:1a:58:b2:fe:19:10:5f:17:db:2a:fa:cb: ba:31:70:82:2e:ef:8f:bd:27:7e:dd:5b:16:40:c2:a1:9b:a0: d1:ac:96:7f -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUHcJRRS5rJHeL0UrN7pqzoFvHilswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTYwQ0Y1QjE2MjJDQjQ5MkUxQzYwM0Y2OUQ0RkI5QzEx MzIyNTIwRDAeFw0yNjAxMjgwMjU1MDJaFw0yNzAxMjcwMzAwMDJaMDMxMTAvBgNV BAMTKDdFQkQ5NDMxQ0I0QkQ2QkVEM0FDQjIwRTNCMjhDQkRGRTFGNTIzRTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCetW7/2/aN9QIPVBInrF1NhUtA 69eXkeiPGWQh//VM3d53im66pDCMmJH9u8nInYfDSfSioLi61FBJr5zm3AKFBmuc +XmkJlgSy+wUhzlc3Bjebywx2l0fruQX9rh9yciYRbWanTl1xbQ+TD2FK7rzxdVi i1Rs7pqCORfu9OYbUzNqnkAg8FRkNhC3IhWWD+FZtllSPlU9rZoWNWdlM8tf6fu4 t373GLl2qu1oaRbV5snhtqS1Bb+j8aRiS0g/1YlP7uxqViI3M7jjG0FJCzYBBCdX 5dJ1zpjVoNGziE/Jb1fuFJjAqZCudrCs2vb7ofPiMM5Miqr25kQ6TtEeghuZAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUfr2UMctL1r7TrLIOOyjL3+H1I+gwHwYDVR0j BBgwFoAUVgz1sWIstJLhxgP2nU+5wRMiUg0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NjVlNzgxMC02N2Y0LTQxYzItODAzNC00NjUyNzMzYjhkZDIvMC81NjBDRjVCMTYy MkNCNDkyRTFDNjAzRjY5RDRGQjlDMTEzMjI1MjBELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTYwQ0Y1QjE2MjJDQjQ5MkUxQzYwM0Y2OUQ0RkI5QzExMzIy NTIwRC5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U2NWU3ODEwLTY3ZjQtNDFjMi04 MDM0LTQ2NTI3MzNiOGRkMi8wLzMyMzQzMDM1M2EzMzM3MzQzMDNhMzkzMDMxMzUz YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMzM4MzUzMjM2LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAU3 QJAVMA0GCSqGSIb3DQEBCwUAA4IBAQA+0UqenABucSHGmIlENarLvQzmDnXqo4fJ MzSOOVZh6/XFdegl3thegRqIHCQOrhrTnA12wgCrcFDxCosHWFHuUrjTCIUW+vW7 qXAJSEe7xCtXbDLrLZO983hI+vP0oLjvFA8UG3yFdURJ+tTl0ef87CF5nDMYQEj1 Z6YxoiLpvUWyj81ORZXmB2M1gdV5erPjiU/Nibi572/qFNhXA1ICoC7xut3wPRID TKY0ZRdTZSJaGpQi6YRun9s3coFYk/XlHixp5kMfgmEDf5DlkhuDOANYzBVJNv84 YKqyj9waWLL+GRBfF9sq+su6MXCCLu+PvSd+3VsWQMKhm6DRrJZ/ -----END CERTIFICATE-----Generated at Mon Mar 2 15:57:37 2026 by rpki-client