$ rpki-client -vvf repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393031613a3a2f34382d3438203d3e203338353236.roa File: 323430353a333734303a393031613a3a2f34382d3438203d3e203338353236.roa (raw, json) Hash identifier: CKziNPTvuQCDR6yHk4B0ASfU1pjWKZxXGUuvRj0vOOk= Subject key identifier: DD:FA:53:46:C5:BC:9F:29:33:15:C2:B2:5D:F0:0C:1E:27:80:2A:91 Certificate issuer: /CN=560CF5B1622CB492E1C603F69D4FB9C11322520D Certificate serial: 4F61C8EE3C0AF699CC2E79DD25C678DA10434BAF Authority key identifier: 56:0C:F5:B1:62:2C:B4:92:E1:C6:03:F6:9D:4F:B9:C1:13:22:52:0D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/560CF5B1622CB492E1C603F69D4FB9C11322520D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393031613a3a2f34382d3438203d3e203338353236.roa Signing time: Wed 28 Jan 2026 03:00:02 +0000 ROA not before: Wed 28 Jan 2026 02:55:02 +0000 ROA not after: Wed 27 Jan 2027 03:00:02 +0000 asID: 38526 IP address blocks: 2405:3740:901a::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/560CF5B1622CB492E1C603F69D4FB9C11322520D.crl rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/560CF5B1622CB492E1C603F69D4FB9C11322520D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/560CF5B1622CB492E1C603F69D4FB9C11322520D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 20:24:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:61:c8:ee:3c:0a:f6:99:cc:2e:79:dd:25:c6:78:da:10:43:4b:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=560CF5B1622CB492E1C603F69D4FB9C11322520D Validity Not Before: Jan 28 02:55:02 2026 GMT Not After : Jan 27 03:00:02 2027 GMT Subject: CN=DDFA5346C5BC9F293315C2B25DF00C1E27802A91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:ec:26:df:52:ba:3a:e8:a6:29:b4:7a:49:82: 05:7a:09:eb:af:91:54:c8:94:b4:56:f8:9c:bb:b8: f9:38:01:bd:4a:8f:bb:bb:44:09:04:c9:3e:7a:43: 47:95:f9:c2:b7:8b:3b:48:0c:67:f1:62:c4:fe:81: fb:eb:c1:92:65:7d:21:ab:13:d6:28:bf:b4:85:11: ad:e0:f5:55:75:2c:d3:a8:fb:4d:10:b9:32:ee:88: 89:69:60:20:03:ad:57:95:0e:7d:03:63:16:8d:07: fe:cb:4c:57:a0:7c:f7:60:0b:3f:01:bf:72:97:68: d0:c6:b9:53:23:af:38:4d:e4:68:da:e7:0a:7a:6d: 37:f1:31:55:78:29:98:4d:d9:bc:e2:69:b7:98:23: 20:01:09:fd:6e:81:d0:fb:5d:aa:b1:7b:27:5e:54: ad:f7:eb:3b:8b:26:95:b7:01:96:a7:c5:50:6c:fa: 79:25:19:42:91:cc:ad:d3:b0:1d:7b:23:7c:d3:91: c4:20:96:2d:ad:e9:43:4e:b2:6d:7c:7b:68:47:43: 8a:ec:f7:fd:f2:f5:3e:3b:e4:15:4c:e6:25:e8:48: 38:6a:cc:4f:e6:86:21:f9:42:15:28:6f:e8:86:2a: 82:a7:41:30:a0:08:87:b9:f2:5e:9e:df:16:3b:35: f6:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:FA:53:46:C5:BC:9F:29:33:15:C2:B2:5D:F0:0C:1E:27:80:2A:91 X509v3 Authority Key Identifier: keyid:56:0C:F5:B1:62:2C:B4:92:E1:C6:03:F6:9D:4F:B9:C1:13:22:52:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/560CF5B1622CB492E1C603F69D4FB9C11322520D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/560CF5B1622CB492E1C603F69D4FB9C11322520D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393031613a3a2f34382d3438203d3e203338353236.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:3740:901a::/48 Signature Algorithm: sha256WithRSAEncryption 58:85:82:d0:dc:32:13:e2:d3:19:79:75:8c:08:e8:21:8c:fd: 39:dd:d3:b2:22:1d:0c:b2:ec:9b:95:21:11:23:5e:02:b8:ab: 70:ad:a7:ca:56:e4:4e:40:23:39:2a:b5:f7:9e:d4:21:fb:49: 1e:10:c4:88:6c:84:93:05:70:19:41:4b:dd:6b:e7:89:22:66: 34:1e:3a:0a:64:9c:3e:8f:38:f7:f0:00:45:b7:1d:fe:75:9a: f5:f9:a2:88:b9:d2:75:f5:19:32:a8:c0:80:0f:92:b2:1e:6a: 45:99:06:a6:8c:86:04:e4:fd:23:db:4e:f0:4e:5e:47:b5:99: b1:aa:f8:f0:ba:fd:dc:fe:9e:62:cb:a3:5c:d6:87:ca:3c:c3: 2c:8e:b1:a6:7c:17:54:5e:6f:8a:5c:6b:8f:44:13:52:89:5d: 9b:7f:1a:0f:0f:67:e1:f9:0a:0c:2a:0b:b9:25:a3:ec:9f:ea: d7:36:dc:2f:55:5c:2c:7d:c6:fe:d6:c6:22:1f:67:21:dc:41: fb:0f:84:3a:7d:26:d0:16:1f:43:46:af:b5:7c:7d:2b:0e:2d: fc:6c:1c:b2:1b:1d:b9:72:22:fe:08:b1:5c:05:d3:ba:36:c4: a0:68:a3:e7:af:45:0a:e7:56:8b:31:42:d1:87:70:0d:a7:ef: fb:4a:55:e7 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUT2HI7jwK9pnMLnndJcZ42hBDS68wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTYwQ0Y1QjE2MjJDQjQ5MkUxQzYwM0Y2OUQ0RkI5QzEx MzIyNTIwRDAeFw0yNjAxMjgwMjU1MDJaFw0yNzAxMjcwMzAwMDJaMDMxMTAvBgNV BAMTKERERkE1MzQ2QzVCQzlGMjkzMzE1QzJCMjVERjAwQzFFMjc4MDJBOTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDw7CbfUro66KYptHpJggV6Ceuv kVTIlLRW+Jy7uPk4Ab1Kj7u7RAkEyT56Q0eV+cK3iztIDGfxYsT+gfvrwZJlfSGr E9Yov7SFEa3g9VV1LNOo+00QuTLuiIlpYCADrVeVDn0DYxaNB/7LTFegfPdgCz8B v3KXaNDGuVMjrzhN5Gja5wp6bTfxMVV4KZhN2bziabeYIyABCf1ugdD7Xaqxeyde VK336zuLJpW3AZanxVBs+nklGUKRzK3TsB17I3zTkcQgli2t6UNOsm18e2hHQ4rs 9/3y9T475BVM5iXoSDhqzE/mhiH5QhUob+iGKoKnQTCgCIe58l6e3xY7NfZBAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQU3fpTRsW8nykzFcKyXfAMHieAKpEwHwYDVR0j BBgwFoAUVgz1sWIstJLhxgP2nU+5wRMiUg0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NjVlNzgxMC02N2Y0LTQxYzItODAzNC00NjUyNzMzYjhkZDIvMC81NjBDRjVCMTYy MkNCNDkyRTFDNjAzRjY5RDRGQjlDMTEzMjI1MjBELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTYwQ0Y1QjE2MjJDQjQ5MkUxQzYwM0Y2OUQ0RkI5QzExMzIy NTIwRC5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U2NWU3ODEwLTY3ZjQtNDFjMi04 MDM0LTQ2NTI3MzNiOGRkMi8wLzMyMzQzMDM1M2EzMzM3MzQzMDNhMzkzMDMxNjEz YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMzM4MzUzMjM2LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAU3 QJAaMA0GCSqGSIb3DQEBCwUAA4IBAQBYhYLQ3DIT4tMZeXWMCOghjP053dOyIh0M suyblSERI14CuKtwrafKVuROQCM5KrX3ntQh+0keEMSIbISTBXAZQUvda+eJImY0 HjoKZJw+jzj38ABFtx3+dZr1+aKIudJ19RkyqMCAD5KyHmpFmQamjIYE5P0j207w Tl5HtZmxqvjwuv3c/p5iy6Nc1ofKPMMsjrGmfBdUXm+KXGuPRBNSiV2bfxoPD2fh +QoMKgu5JaPsn+rXNtwvVVwsfcb+1sYiH2ch3EH7D4Q6fSbQFh9DRq+1fH0rDi38 bByyGx25ciL+CLFcBdO6NsSgaKPnr0UK51aLMULRh3ANp+/7SlXn -----END CERTIFICATE-----Generated at Mon Mar 2 17:58:25 2026 by rpki-client