$ rpki-client -vvf repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393031653a3a2f34382d3438203d3e203338353236.roa File: 323430353a333734303a393031653a3a2f34382d3438203d3e203338353236.roa (raw, json) Hash identifier: /TN6jSMngdX14vvQBvJfG6ipJVAdNwM/D9cb2XO8yTA= Subject key identifier: 46:A3:4D:C6:D5:97:87:59:84:12:22:14:08:36:9D:EE:42:25:D8:07 Certificate issuer: /CN=560CF5B1622CB492E1C603F69D4FB9C11322520D Certificate serial: 4C5AE2A0A27A2262ECA66192A224E2C0171A71F5 Authority key identifier: 56:0C:F5:B1:62:2C:B4:92:E1:C6:03:F6:9D:4F:B9:C1:13:22:52:0D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/560CF5B1622CB492E1C603F69D4FB9C11322520D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393031653a3a2f34382d3438203d3e203338353236.roa Signing time: Wed 28 Jan 2026 04:00:02 +0000 ROA not before: Wed 28 Jan 2026 03:55:02 +0000 ROA not after: Wed 27 Jan 2027 04:00:02 +0000 asID: 38526 IP address blocks: 2405:3740:901e::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/560CF5B1622CB492E1C603F69D4FB9C11322520D.crl rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/560CF5B1622CB492E1C603F69D4FB9C11322520D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/560CF5B1622CB492E1C603F69D4FB9C11322520D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 20:24:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:5a:e2:a0:a2:7a:22:62:ec:a6:61:92:a2:24:e2:c0:17:1a:71:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=560CF5B1622CB492E1C603F69D4FB9C11322520D Validity Not Before: Jan 28 03:55:02 2026 GMT Not After : Jan 27 04:00:02 2027 GMT Subject: CN=46A34DC6D59787598412221408369DEE4225D807 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:74:d3:3e:c2:a9:5d:19:19:7f:6d:39:ea:de: f4:04:4d:61:f6:9d:59:35:34:11:80:a1:d4:2a:c8: 06:10:d5:15:1a:c6:fb:86:4f:87:fc:ed:b7:98:3b: 6a:db:09:c9:81:1f:13:34:6c:85:9d:1e:d9:b2:c5: 9d:fe:bd:e4:74:4a:4b:07:bd:d0:cb:b5:3c:b4:20: a2:c6:6c:49:37:41:c6:58:9a:f6:16:bd:e8:8f:ec: 09:b9:d3:a3:a1:15:94:75:aa:3e:5c:65:cd:ce:a2: fb:b0:4a:1b:69:36:25:7b:64:45:2c:c7:17:70:dc: 68:f8:8b:df:07:03:59:04:9d:cd:cf:c1:16:5a:28: 70:15:0a:71:5f:86:ee:15:d6:4e:76:55:b3:00:79: 48:ad:39:16:2c:90:fe:32:96:69:68:24:bd:5f:7a: bb:47:dd:1b:8e:ff:f4:4c:8b:a1:9a:d0:c4:c0:15: 94:17:7c:41:08:69:33:55:e2:b3:45:8f:6e:5b:d1: 86:f5:f3:fa:05:1f:bd:cb:1b:4c:42:90:7a:94:11: 1b:55:08:5f:43:e3:e3:10:d6:11:42:ec:e4:c3:d0: 52:a4:45:54:3d:de:eb:52:99:cd:40:7d:48:a0:5e: 34:e4:c6:64:26:23:50:a1:c2:9d:54:0c:20:df:4c: 7c:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:A3:4D:C6:D5:97:87:59:84:12:22:14:08:36:9D:EE:42:25:D8:07 X509v3 Authority Key Identifier: keyid:56:0C:F5:B1:62:2C:B4:92:E1:C6:03:F6:9D:4F:B9:C1:13:22:52:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/560CF5B1622CB492E1C603F69D4FB9C11322520D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/560CF5B1622CB492E1C603F69D4FB9C11322520D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393031653a3a2f34382d3438203d3e203338353236.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:3740:901e::/48 Signature Algorithm: sha256WithRSAEncryption be:c4:bd:d4:84:81:48:10:95:dd:c8:85:c9:c8:9a:4f:16:f5: 41:27:69:9d:0b:2c:fc:dc:03:0d:f4:4b:f4:a7:eb:7b:da:b6: 51:48:8d:60:08:0c:09:76:d5:0b:73:17:ca:3d:40:94:4b:5d: f2:37:6d:0b:3b:ef:16:93:50:93:4d:96:92:0d:14:da:7f:2e: 00:dc:bf:59:28:5c:66:aa:cf:f5:37:8c:68:cf:de:71:77:2b: 27:0f:4c:a2:44:ed:06:42:c1:5e:be:fb:10:2a:ca:f4:1f:da: dd:bc:87:4e:ab:51:6e:eb:2b:f9:78:b2:49:3c:f9:52:da:46: dd:bd:78:d4:d6:6d:2c:e0:c4:96:4a:e4:b5:e3:70:f6:24:2b: 2e:24:99:b9:37:70:02:ec:77:9a:be:78:e7:02:f0:be:f7:5a: 88:db:4b:21:89:72:33:24:d6:6a:a0:4f:a5:eb:0f:62:ce:1f: 9a:26:72:38:ce:8e:3a:d6:ef:e0:e9:97:fb:24:99:25:bc:66: d4:a5:37:bb:8e:e7:60:88:59:25:df:c5:61:0c:d2:1f:88:d8: 83:d5:e7:1f:a3:56:16:06:cf:02:01:32:b2:94:d6:50:4c:27: ac:36:50:5d:82:d6:46:04:72:43:d1:0b:09:68:00:d6:20:fa: 23:a4:21:4f -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUTFrioKJ6ImLspmGSoiTiwBcacfUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTYwQ0Y1QjE2MjJDQjQ5MkUxQzYwM0Y2OUQ0RkI5QzEx MzIyNTIwRDAeFw0yNjAxMjgwMzU1MDJaFw0yNzAxMjcwNDAwMDJaMDMxMTAvBgNV BAMTKDQ2QTM0REM2RDU5Nzg3NTk4NDEyMjIxNDA4MzY5REVFNDIyNUQ4MDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbdNM+wqldGRl/bTnq3vQETWH2 nVk1NBGAodQqyAYQ1RUaxvuGT4f87beYO2rbCcmBHxM0bIWdHtmyxZ3+veR0SksH vdDLtTy0IKLGbEk3QcZYmvYWveiP7Am506OhFZR1qj5cZc3OovuwShtpNiV7ZEUs xxdw3Gj4i98HA1kEnc3PwRZaKHAVCnFfhu4V1k52VbMAeUitORYskP4ylmloJL1f ertH3RuO//RMi6Ga0MTAFZQXfEEIaTNV4rNFj25b0Yb18/oFH73LG0xCkHqUERtV CF9D4+MQ1hFC7OTD0FKkRVQ93utSmc1AfUigXjTkxmQmI1Chwp1UDCDfTHz9AgMB AAGjggI9MIICOTAdBgNVHQ4EFgQURqNNxtWXh1mEEiIUCDad7kIl2AcwHwYDVR0j BBgwFoAUVgz1sWIstJLhxgP2nU+5wRMiUg0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NjVlNzgxMC02N2Y0LTQxYzItODAzNC00NjUyNzMzYjhkZDIvMC81NjBDRjVCMTYy MkNCNDkyRTFDNjAzRjY5RDRGQjlDMTEzMjI1MjBELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTYwQ0Y1QjE2MjJDQjQ5MkUxQzYwM0Y2OUQ0RkI5QzExMzIy NTIwRC5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U2NWU3ODEwLTY3ZjQtNDFjMi04 MDM0LTQ2NTI3MzNiOGRkMi8wLzMyMzQzMDM1M2EzMzM3MzQzMDNhMzkzMDMxNjUz YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMzM4MzUzMjM2LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAU3 QJAeMA0GCSqGSIb3DQEBCwUAA4IBAQC+xL3UhIFIEJXdyIXJyJpPFvVBJ2mdCyz8 3AMN9Ev0p+t72rZRSI1gCAwJdtULcxfKPUCUS13yN20LO+8Wk1CTTZaSDRTafy4A 3L9ZKFxmqs/1N4xoz95xdysnD0yiRO0GQsFevvsQKsr0H9rdvIdOq1Fu6yv5eLJJ PPlS2kbdvXjU1m0s4MSWSuS143D2JCsuJJm5N3AC7HeavnjnAvC+91qI20shiXIz JNZqoE+l6w9izh+aJnI4zo461u/g6Zf7JJklvGbUpTe7judgiFkl38VhDNIfiNiD 1ecfo1YWBs8CATKylNZQTCesNlBdgtZGBHJD0QsJaADWIPojpCFP -----END CERTIFICATE-----Generated at Mon Mar 2 17:58:34 2026 by rpki-client