$ rpki-client -vvf repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393031643a3a2f34382d3438203d3e203338353236.roa File: 323430353a333734303a393031643a3a2f34382d3438203d3e203338353236.roa (raw, json) Hash identifier: 2tfX5pIiZt8tMzbYYL07mis4oZuxOvlYjvBXSHZbdgI= Subject key identifier: 4F:F4:A3:23:76:E3:B8:8C:EE:14:41:44:F2:2E:21:F6:07:32:FB:82 Certificate issuer: /CN=560CF5B1622CB492E1C603F69D4FB9C11322520D Certificate serial: 3F2908E6AFB6C411EAEA4FF4D5F36CC23876E901 Authority key identifier: 56:0C:F5:B1:62:2C:B4:92:E1:C6:03:F6:9D:4F:B9:C1:13:22:52:0D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/560CF5B1622CB492E1C603F69D4FB9C11322520D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393031643a3a2f34382d3438203d3e203338353236.roa Signing time: Wed 28 Jan 2026 03:00:02 +0000 ROA not before: Wed 28 Jan 2026 02:55:02 +0000 ROA not after: Wed 27 Jan 2027 03:00:02 +0000 asID: 38526 IP address blocks: 2405:3740:901d::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/560CF5B1622CB492E1C603F69D4FB9C11322520D.crl rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/560CF5B1622CB492E1C603F69D4FB9C11322520D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/560CF5B1622CB492E1C603F69D4FB9C11322520D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 20:24:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:29:08:e6:af:b6:c4:11:ea:ea:4f:f4:d5:f3:6c:c2:38:76:e9:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=560CF5B1622CB492E1C603F69D4FB9C11322520D Validity Not Before: Jan 28 02:55:02 2026 GMT Not After : Jan 27 03:00:02 2027 GMT Subject: CN=4FF4A32376E3B88CEE144144F22E21F60732FB82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:e8:04:c9:6e:fc:76:04:3d:a6:c7:9d:ce:af: dc:d1:46:bc:19:ce:54:75:86:6e:9e:0e:89:c0:04: 23:4c:b5:e0:48:5d:7f:55:72:74:8e:77:e0:43:e8: 1a:85:f0:99:0c:a6:a3:9e:4f:54:dd:2c:96:eb:37: 3c:06:81:32:53:ad:09:31:61:6a:33:77:2d:56:00: 3a:99:9b:90:e3:76:f4:8c:29:30:77:c5:28:e1:b4: 08:61:98:60:b4:87:e1:c4:63:87:de:ce:0e:17:44: 85:98:96:8d:76:16:a6:b4:a3:08:59:44:ef:d3:7f: e6:cf:fb:17:53:56:53:ba:49:5d:d5:44:ea:b7:88: 67:2f:43:cd:78:d2:27:5f:96:ce:69:a6:7a:e6:f9: 26:c0:81:29:8a:e7:8a:64:18:1c:2f:0c:c3:75:e3: a7:4a:f4:a2:40:71:f6:55:ca:0a:a1:41:83:76:ad: af:51:2d:73:75:af:58:0a:4c:28:9a:04:ae:3e:25: 42:02:93:df:05:b4:11:a2:a7:2f:a7:1b:9c:4f:5e: 97:96:dd:65:20:91:44:67:70:14:9d:5e:f0:97:60: 52:73:7f:1d:61:4f:bb:a2:53:be:d4:9c:f7:3d:09: a0:3a:c3:58:23:7b:57:5e:06:87:6a:a3:8d:60:d9: 7d:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:F4:A3:23:76:E3:B8:8C:EE:14:41:44:F2:2E:21:F6:07:32:FB:82 X509v3 Authority Key Identifier: keyid:56:0C:F5:B1:62:2C:B4:92:E1:C6:03:F6:9D:4F:B9:C1:13:22:52:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/560CF5B1622CB492E1C603F69D4FB9C11322520D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/560CF5B1622CB492E1C603F69D4FB9C11322520D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393031643a3a2f34382d3438203d3e203338353236.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:3740:901d::/48 Signature Algorithm: sha256WithRSAEncryption 30:84:be:ba:4b:ad:aa:32:e5:c5:87:2e:e9:79:f5:ef:5e:be: 85:12:a9:fa:80:5d:65:ab:4d:74:37:58:dd:07:15:2a:73:61: c0:6c:70:e9:dc:94:61:0f:16:85:3e:f8:b1:23:56:b1:e2:04: 38:9e:6f:2a:a7:02:70:d7:db:79:63:42:6b:63:dc:1d:32:7b: 8c:8e:67:7a:a0:bd:ca:81:0f:7c:6c:da:49:ca:61:80:2d:1e: f6:63:46:18:b0:d5:ff:06:53:83:7d:37:1a:be:cd:af:27:02: d8:98:2a:4c:13:d9:6e:7a:90:6b:f8:6e:9b:d7:ae:7c:d4:d3: 15:44:8c:48:42:d8:e9:ff:d6:d0:9e:96:4b:e3:e3:68:34:7a: 1f:d0:56:89:04:57:18:51:49:3f:1f:0a:76:0a:c8:cb:c8:fe: 49:44:47:79:80:9b:b9:28:95:df:d6:66:8e:17:04:23:3b:06: e6:57:02:65:8e:fc:c4:24:ee:06:fe:7e:0d:67:93:1b:fd:a2: ab:e3:9d:b5:78:00:b7:99:5b:38:65:4d:0a:59:61:13:9d:f0: 0a:37:07:9f:14:80:1b:10:01:08:c9:8e:40:57:f8:0f:0b:a6: 1e:ee:80:98:36:81:34:94:35:0a:61:18:d6:aa:44:df:5b:f9: c8:45:ed:59 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUPykI5q+2xBHq6k/01fNswjh26QEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTYwQ0Y1QjE2MjJDQjQ5MkUxQzYwM0Y2OUQ0RkI5QzEx MzIyNTIwRDAeFw0yNjAxMjgwMjU1MDJaFw0yNzAxMjcwMzAwMDJaMDMxMTAvBgNV BAMTKDRGRjRBMzIzNzZFM0I4OENFRTE0NDE0NEYyMkUyMUY2MDczMkZCODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCm6ATJbvx2BD2mx53Or9zRRrwZ zlR1hm6eDonABCNMteBIXX9VcnSOd+BD6BqF8JkMpqOeT1TdLJbrNzwGgTJTrQkx YWozdy1WADqZm5DjdvSMKTB3xSjhtAhhmGC0h+HEY4fezg4XRIWYlo12Fqa0owhZ RO/Tf+bP+xdTVlO6SV3VROq3iGcvQ8140idfls5ppnrm+SbAgSmK54pkGBwvDMN1 46dK9KJAcfZVygqhQYN2ra9RLXN1r1gKTCiaBK4+JUICk98FtBGipy+nG5xPXpeW 3WUgkURncBSdXvCXYFJzfx1hT7uiU77UnPc9CaA6w1gje1deBodqo41g2X1zAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUT/SjI3bjuIzuFEFE8i4h9gcy+4IwHwYDVR0j BBgwFoAUVgz1sWIstJLhxgP2nU+5wRMiUg0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NjVlNzgxMC02N2Y0LTQxYzItODAzNC00NjUyNzMzYjhkZDIvMC81NjBDRjVCMTYy MkNCNDkyRTFDNjAzRjY5RDRGQjlDMTEzMjI1MjBELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTYwQ0Y1QjE2MjJDQjQ5MkUxQzYwM0Y2OUQ0RkI5QzExMzIy NTIwRC5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U2NWU3ODEwLTY3ZjQtNDFjMi04 MDM0LTQ2NTI3MzNiOGRkMi8wLzMyMzQzMDM1M2EzMzM3MzQzMDNhMzkzMDMxNjQz YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMzM4MzUzMjM2LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAU3 QJAdMA0GCSqGSIb3DQEBCwUAA4IBAQAwhL66S62qMuXFhy7pefXvXr6FEqn6gF1l q010N1jdBxUqc2HAbHDp3JRhDxaFPvixI1ax4gQ4nm8qpwJw19t5Y0JrY9wdMnuM jmd6oL3KgQ98bNpJymGALR72Y0YYsNX/BlODfTcavs2vJwLYmCpME9luepBr+G6b 16581NMVRIxIQtjp/9bQnpZL4+NoNHof0FaJBFcYUUk/Hwp2CsjLyP5JREd5gJu5 KJXf1maOFwQjOwbmVwJljvzEJO4G/n4NZ5Mb/aKr4521eAC3mVs4ZU0KWWETnfAK NwefFIAbEAEIyY5AV/gPC6Ye7oCYNoE0lDUKYRjWqkTfW/nIRe1Z -----END CERTIFICATE-----Generated at Mon Mar 2 21:58:04 2026 by rpki-client