$ rpki-client -vvf repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393031363a3a2f34382d3438203d3e203338353236.roa File: 323430353a333734303a393031363a3a2f34382d3438203d3e203338353236.roa (raw, json) Hash identifier: XoUEunsOL8EM49wUN5Sp8FD4HT5/C37qKecSgriGLLY= Subject key identifier: 86:59:0D:6E:EB:E0:A6:94:4C:8F:F8:C1:20:67:31:00:85:25:83:15 Certificate issuer: /CN=560CF5B1622CB492E1C603F69D4FB9C11322520D Certificate serial: 33D00CF7321CA98E00E7AAA8E250B8F8F22E9373 Authority key identifier: 56:0C:F5:B1:62:2C:B4:92:E1:C6:03:F6:9D:4F:B9:C1:13:22:52:0D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/560CF5B1622CB492E1C603F69D4FB9C11322520D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393031363a3a2f34382d3438203d3e203338353236.roa Signing time: Wed 28 Jan 2026 04:00:03 +0000 ROA not before: Wed 28 Jan 2026 03:55:03 +0000 ROA not after: Wed 27 Jan 2027 04:00:03 +0000 asID: 38526 IP address blocks: 2405:3740:9016::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/560CF5B1622CB492E1C603F69D4FB9C11322520D.crl rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/560CF5B1622CB492E1C603F69D4FB9C11322520D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/560CF5B1622CB492E1C603F69D4FB9C11322520D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 20:24:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:d0:0c:f7:32:1c:a9:8e:00:e7:aa:a8:e2:50:b8:f8:f2:2e:93:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=560CF5B1622CB492E1C603F69D4FB9C11322520D Validity Not Before: Jan 28 03:55:03 2026 GMT Not After : Jan 27 04:00:03 2027 GMT Subject: CN=86590D6EEBE0A6944C8FF8C12067310085258315 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:75:a9:06:fb:77:ef:8f:a2:d1:b5:44:02:67: b4:9d:2c:30:d2:b3:38:64:cc:de:3a:22:d9:48:08: 34:f0:9e:b4:0d:3c:f1:c0:e8:78:c8:b7:4c:3c:9b: 38:7e:2f:4b:c0:1e:1a:12:db:01:58:ce:d3:18:bc: 75:7b:28:05:d8:60:8c:fb:4d:ba:4f:0f:09:1a:8a: 2d:94:69:52:c9:65:0a:91:1c:96:6d:84:b3:f2:ee: 45:50:7f:c7:07:dd:13:a9:e0:9c:92:b1:6b:ef:20: 16:3d:df:fc:1a:71:cc:83:be:bb:36:e1:86:78:8f: ab:11:3e:83:f5:e1:ac:2e:55:3c:33:49:74:70:4b: 1d:ce:ac:50:47:8f:94:81:9a:56:42:66:33:26:99: f9:5d:c6:0c:83:28:1b:42:8d:ac:58:f1:e1:b5:ac: 0d:7e:b9:e3:44:a2:c2:a1:65:21:68:7b:15:06:63: 8e:62:b4:d9:eb:7e:5b:d1:4b:fa:10:ba:66:14:90: 54:87:c2:4a:f4:18:65:a7:7e:04:77:7c:33:e4:11: 10:79:ff:c6:07:0d:12:c2:f9:91:8d:3f:55:90:1e: 28:63:a9:04:20:50:54:5f:aa:e1:0c:2b:ce:9c:e9: 41:e0:47:a6:64:92:83:ce:86:b9:9b:e4:05:e9:66: 0f:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:59:0D:6E:EB:E0:A6:94:4C:8F:F8:C1:20:67:31:00:85:25:83:15 X509v3 Authority Key Identifier: keyid:56:0C:F5:B1:62:2C:B4:92:E1:C6:03:F6:9D:4F:B9:C1:13:22:52:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/560CF5B1622CB492E1C603F69D4FB9C11322520D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/560CF5B1622CB492E1C603F69D4FB9C11322520D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393031363a3a2f34382d3438203d3e203338353236.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:3740:9016::/48 Signature Algorithm: sha256WithRSAEncryption 31:c3:cb:ab:ed:66:08:a7:f5:e8:2e:25:28:10:2e:b4:02:52: 96:2c:b1:7c:18:d3:69:0f:54:22:c4:cb:ae:b5:20:f9:63:8b: e0:e9:a5:64:e4:5d:f5:c4:06:4a:2b:ed:38:4f:41:0d:e5:10: e6:b6:71:1a:fb:99:14:03:fa:0c:02:33:bb:5e:62:e9:06:80: e0:c5:b6:96:2c:6b:3a:50:1a:61:38:d4:6f:53:b7:3e:5c:54: fb:95:a4:61:69:a1:ac:3b:82:c1:62:3d:6c:5f:5f:c0:2a:bc: 9b:06:86:13:5f:ff:ed:42:db:df:48:24:24:d1:9b:ca:49:e9: 18:28:5f:e6:cb:0a:65:27:92:d4:5f:fd:e4:31:5c:ff:3c:33: 38:1f:76:d1:47:c2:c2:91:48:5b:c8:91:10:02:3a:c4:55:10: ab:ea:de:39:71:0d:00:0e:09:5d:44:dc:2b:00:26:90:0a:99: 4e:bc:92:ca:7d:bc:45:b3:15:d3:ed:7f:f4:43:58:28:7b:03: c8:67:ba:8b:1c:fb:80:7a:44:b2:8f:c3:6a:0b:a4:d2:c9:53: 74:2a:be:fd:9c:3e:96:3d:aa:9a:e4:0f:9e:35:68:4a:b3:82: c7:d4:f2:d1:dd:2d:a5:6a:82:1b:16:a2:e5:cd:9c:2d:7a:3b: b2:d7:fb:e7 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUM9AM9zIcqY4A56qo4lC4+PIuk3MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTYwQ0Y1QjE2MjJDQjQ5MkUxQzYwM0Y2OUQ0RkI5QzEx MzIyNTIwRDAeFw0yNjAxMjgwMzU1MDNaFw0yNzAxMjcwNDAwMDNaMDMxMTAvBgNV BAMTKDg2NTkwRDZFRUJFMEE2OTQ0QzhGRjhDMTIwNjczMTAwODUyNTgzMTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjdakG+3fvj6LRtUQCZ7SdLDDS szhkzN46ItlICDTwnrQNPPHA6HjIt0w8mzh+L0vAHhoS2wFYztMYvHV7KAXYYIz7 TbpPDwkaii2UaVLJZQqRHJZthLPy7kVQf8cH3ROp4JySsWvvIBY93/waccyDvrs2 4YZ4j6sRPoP14awuVTwzSXRwSx3OrFBHj5SBmlZCZjMmmfldxgyDKBtCjaxY8eG1 rA1+ueNEosKhZSFoexUGY45itNnrflvRS/oQumYUkFSHwkr0GGWnfgR3fDPkERB5 /8YHDRLC+ZGNP1WQHihjqQQgUFRfquEMK86c6UHgR6ZkkoPOhrmb5AXpZg91AgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUhlkNbuvgppRMj/jBIGcxAIUlgxUwHwYDVR0j BBgwFoAUVgz1sWIstJLhxgP2nU+5wRMiUg0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NjVlNzgxMC02N2Y0LTQxYzItODAzNC00NjUyNzMzYjhkZDIvMC81NjBDRjVCMTYy MkNCNDkyRTFDNjAzRjY5RDRGQjlDMTEzMjI1MjBELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTYwQ0Y1QjE2MjJDQjQ5MkUxQzYwM0Y2OUQ0RkI5QzExMzIy NTIwRC5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U2NWU3ODEwLTY3ZjQtNDFjMi04 MDM0LTQ2NTI3MzNiOGRkMi8wLzMyMzQzMDM1M2EzMzM3MzQzMDNhMzkzMDMxMzYz YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMzM4MzUzMjM2LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAU3 QJAWMA0GCSqGSIb3DQEBCwUAA4IBAQAxw8ur7WYIp/XoLiUoEC60AlKWLLF8GNNp D1QixMuutSD5Y4vg6aVk5F31xAZKK+04T0EN5RDmtnEa+5kUA/oMAjO7XmLpBoDg xbaWLGs6UBphONRvU7c+XFT7laRhaaGsO4LBYj1sX1/AKrybBoYTX//tQtvfSCQk 0ZvKSekYKF/mywplJ5LUX/3kMVz/PDM4H3bRR8LCkUhbyJEQAjrEVRCr6t45cQ0A DgldRNwrACaQCplOvJLKfbxFsxXT7X/0Q1goewPIZ7qLHPuAekSyj8NqC6TSyVN0 Kr79nD6WPaqa5A+eNWhKs4LH1PLR3S2laoIbFqLlzZwtejuy1/vn -----END CERTIFICATE-----Generated at Mon Mar 2 15:57:11 2026 by rpki-client