
$ rpki-client -vvf repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a383030343a3a2f34382d3438203d3e203338353236.roa
File: 323430353a333734303a383030343a3a2f34382d3438203d3e203338353236.roa (raw, json)
Hash identifier: 1xAqRebeHvhqKu16IbhId8MDc4KlvHJKCFol3SC2N3I=
Subject key identifier: F5:01:D8:6C:B1:77:1A:41:E4:99:F5:6A:0F:31:C0:2E:33:0D:61:B7
Certificate issuer: /CN=560CF5B1622CB492E1C603F69D4FB9C11322520D
Certificate serial: 148DD523971CB55D9A99EC8DC577685DE182772F
Authority key identifier: 56:0C:F5:B1:62:2C:B4:92:E1:C6:03:F6:9D:4F:B9:C1:13:22:52:0D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/560CF5B1622CB492E1C603F69D4FB9C11322520D.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a383030343a3a2f34382d3438203d3e203338353236.roa
Signing time: Wed 20 Aug 2025 03:02:26 +0000
ROA not before: Wed 20 Aug 2025 02:57:26 +0000
ROA not after: Wed 19 Aug 2026 03:02:26 +0000
asID: 38526
IP address blocks: 2405:3740:8004::/48 maxlen: 48
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/560CF5B1622CB492E1C603F69D4FB9C11322520D.crl
rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/560CF5B1622CB492E1C603F69D4FB9C11322520D.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/560CF5B1622CB492E1C603F69D4FB9C11322520D.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Oct 2025 04:03:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:8d:d5:23:97:1c:b5:5d:9a:99:ec:8d:c5:77:68:5d:e1:82:77:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=560CF5B1622CB492E1C603F69D4FB9C11322520D
Validity
Not Before: Aug 20 02:57:26 2025 GMT
Not After : Aug 19 03:02:26 2026 GMT
Subject: CN=F501D86CB1771A41E499F56A0F31C02E330D61B7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:5c:19:7a:fa:fa:cb:78:bd:8a:84:99:f7:a5:
bd:f6:42:64:f9:12:67:ab:dd:b4:8f:d5:2f:82:a9:
e3:dc:f6:95:fd:e9:0d:80:17:b8:40:7b:65:78:e9:
60:4e:85:67:be:b4:a2:2a:02:55:c1:75:1c:a7:0f:
f7:ad:f7:9b:0e:f0:25:48:be:b9:23:11:6a:74:07:
31:50:9f:83:7c:1b:51:52:36:f2:c9:db:24:f3:46:
27:f3:c0:1e:cd:cf:60:ba:54:0f:6e:2d:e6:16:f7:
48:41:e7:58:98:4b:16:90:45:1b:b5:2f:8d:57:10:
ad:22:d1:75:9f:12:ca:b1:da:8b:54:10:bc:e4:f8:
56:40:e8:5f:17:16:1f:4b:b2:c0:35:3b:86:c8:f2:
ac:c6:04:d0:0f:71:a4:a3:99:49:7c:b8:e5:de:56:
23:bd:65:4c:fd:32:e6:74:43:76:ad:e5:06:c5:ab:
ff:22:4a:1b:b5:59:ce:c6:85:17:25:eb:ca:cc:10:
30:1a:be:6d:f2:89:10:00:08:a4:b7:f1:92:87:f1:
24:77:c1:c3:f0:4f:9a:e6:9e:30:c3:b5:df:9a:09:
b9:35:9d:79:4c:de:e6:31:3e:9d:b4:64:3e:63:df:
6b:bc:28:42:c5:b5:6c:09:4c:d2:02:4b:43:df:0d:
74:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:01:D8:6C:B1:77:1A:41:E4:99:F5:6A:0F:31:C0:2E:33:0D:61:B7
X509v3 Authority Key Identifier:
keyid:56:0C:F5:B1:62:2C:B4:92:E1:C6:03:F6:9D:4F:B9:C1:13:22:52:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/560CF5B1622CB492E1C603F69D4FB9C11322520D.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/560CF5B1622CB492E1C603F69D4FB9C11322520D.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a383030343a3a2f34382d3438203d3e203338353236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2405:3740:8004::/48
Signature Algorithm: sha256WithRSAEncryption
7f:d7:2f:4f:d5:7d:6c:b4:8c:8d:ae:09:4f:9e:3c:c2:1d:a6:
e6:09:14:40:75:1f:2c:e2:81:cf:88:5d:ad:28:73:ed:77:b9:
18:7a:64:ce:4f:b6:60:66:63:dd:1b:60:24:8c:ce:d7:43:bd:
56:66:1f:20:0d:55:e7:69:5c:66:3e:b4:67:d4:e2:67:a0:9e:
fa:1d:a0:84:df:47:10:6d:5e:45:5d:48:4f:36:0a:ac:33:27:
32:d0:c6:81:8c:b3:e9:3b:2a:6e:b3:72:d7:7b:08:56:77:40:
c9:50:63:47:37:fa:97:b6:25:c2:b6:2a:36:40:bf:67:6b:61:
02:53:fc:6b:41:ef:c0:4a:df:27:77:4e:1e:25:a3:cc:60:5f:
1e:3d:eb:49:48:d8:51:cf:f9:87:ed:b6:07:cb:51:58:01:5f:
2d:2b:b0:00:41:e0:59:41:a5:00:ee:a7:07:9f:f2:2f:ca:7f:
1e:99:83:11:f4:52:89:dc:94:7b:73:e4:6c:bb:4a:8e:4a:e4:
14:ea:cc:80:aa:e9:c5:13:e7:61:de:5d:96:93:1d:a6:f3:08:
41:65:6b:b0:de:69:29:40:41:38:32:ee:a3:2e:50:ad:37:ff:
be:69:67:8b:8a:bc:08:51:0c:ae:ad:07:f7:10:2f:1a:27:5a:
e5:3b:3d:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 06:23:09 2025 by rpki-client