
$ rpki-client -vvf repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a383030353a3a2f34382d3438203d3e203338353236.roa
File: 323430353a333734303a383030353a3a2f34382d3438203d3e203338353236.roa (raw, json)
Hash identifier: AEZRpPWBACfL44qTYViw0xm3AzF34UtRMgoH1g527Jw=
Subject key identifier: 7C:EC:37:66:29:F0:E3:2C:0E:0F:2F:8F:C2:FB:B2:3F:67:25:AB:7E
Certificate issuer: /CN=560CF5B1622CB492E1C603F69D4FB9C11322520D
Certificate serial: 5FFAE61EB3F97445451A17C871A866044765F023
Authority key identifier: 56:0C:F5:B1:62:2C:B4:92:E1:C6:03:F6:9D:4F:B9:C1:13:22:52:0D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/560CF5B1622CB492E1C603F69D4FB9C11322520D.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a383030353a3a2f34382d3438203d3e203338353236.roa
Signing time: Wed 20 Aug 2025 03:02:26 +0000
ROA not before: Wed 20 Aug 2025 02:57:26 +0000
ROA not after: Wed 19 Aug 2026 03:02:26 +0000
asID: 38526
IP address blocks: 2405:3740:8005::/48 maxlen: 48
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/560CF5B1622CB492E1C603F69D4FB9C11322520D.crl
rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/560CF5B1622CB492E1C603F69D4FB9C11322520D.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/560CF5B1622CB492E1C603F69D4FB9C11322520D.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Oct 2025 04:03:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:fa:e6:1e:b3:f9:74:45:45:1a:17:c8:71:a8:66:04:47:65:f0:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=560CF5B1622CB492E1C603F69D4FB9C11322520D
Validity
Not Before: Aug 20 02:57:26 2025 GMT
Not After : Aug 19 03:02:26 2026 GMT
Subject: CN=7CEC376629F0E32C0E0F2F8FC2FBB23F6725AB7E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c3:ef:33:18:c7:40:eb:18:6b:c6:5d:36:43:
f9:31:13:03:25:9f:18:57:87:21:ae:7b:84:2d:7e:
2d:1d:30:f2:73:58:7c:d5:c3:5c:2b:3b:6d:12:66:
d7:ff:63:8b:51:04:b4:c6:fa:10:40:c5:42:f6:67:
eb:34:c8:92:9c:05:15:53:44:49:f0:0f:53:7b:50:
c0:5b:f6:7c:00:4e:19:e8:c1:65:6a:86:2d:62:b2:
70:2f:70:ee:ca:be:f8:47:7e:5c:bd:3a:61:8e:b7:
79:d3:12:5d:c1:bf:dc:46:2b:5e:a3:c5:8d:75:b2:
81:a7:a3:7e:d4:37:9a:fa:9f:a0:b2:a3:b4:2d:b6:
7d:de:f7:64:55:b3:cf:a4:5e:96:19:2e:e0:dd:30:
e5:cc:51:32:28:04:97:84:a4:98:cb:ee:9e:15:f1:
36:44:09:84:20:70:63:d3:20:11:5f:13:cd:0b:4e:
e6:82:6c:34:e9:de:1f:7f:f7:37:38:2f:aa:2d:04:
ab:97:dc:fd:69:94:a3:e7:80:4b:7e:64:3f:8e:e4:
09:4d:9b:2f:22:53:58:60:39:9a:33:0f:17:a9:b2:
97:2c:cd:8d:3c:d2:8d:fa:f0:f6:de:ed:ff:4d:a4:
b0:22:87:9f:ff:6a:b0:5e:19:4e:4f:2b:e4:9d:39:
a7:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:EC:37:66:29:F0:E3:2C:0E:0F:2F:8F:C2:FB:B2:3F:67:25:AB:7E
X509v3 Authority Key Identifier:
keyid:56:0C:F5:B1:62:2C:B4:92:E1:C6:03:F6:9D:4F:B9:C1:13:22:52:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/560CF5B1622CB492E1C603F69D4FB9C11322520D.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/560CF5B1622CB492E1C603F69D4FB9C11322520D.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a383030353a3a2f34382d3438203d3e203338353236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2405:3740:8005::/48
Signature Algorithm: sha256WithRSAEncryption
12:0c:fa:34:27:f7:b5:4e:01:5c:dd:fb:3f:23:ad:65:db:d6:
25:23:db:6d:f7:5f:ae:7a:af:93:77:0b:5e:af:93:30:12:75:
20:2c:fc:01:92:3a:e0:33:c9:23:b1:aa:90:20:2c:37:1f:be:
a9:b0:83:1a:8d:29:4c:24:8a:a2:40:22:1c:e9:58:32:58:19:
93:7d:d6:ea:83:62:24:b2:e1:e6:da:1a:e0:a0:da:33:25:ad:
b8:44:02:95:0e:55:c2:38:c6:b6:32:a5:f7:5b:3e:62:37:5c:
45:87:f6:73:00:cc:dc:dc:da:57:02:d3:b5:36:d0:31:2d:8e:
e2:d9:1c:dc:33:f3:9c:53:57:51:28:f1:c6:39:35:70:fe:83:
59:33:90:79:7c:b1:68:52:e3:b6:68:94:82:b9:95:06:d3:69:
ff:72:bb:cf:d3:a5:10:e4:4d:4f:f5:f6:4a:e4:f6:b1:14:12:
08:44:fa:f6:e0:b1:95:34:ae:8e:6f:44:80:c3:0f:52:98:92:
d8:8c:fc:f0:3b:2b:4a:7d:ac:d4:ad:36:5f:9b:a8:9b:b0:2d:
3e:13:e4:21:a2:4d:e1:75:bb:f5:0a:e9:cf:72:9a:97:1c:fc:
d2:9f:ae:90:21:d9:a2:93:0b:2f:0f:69:90:e5:7d:2f:35:ab:
1b:8e:44:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 06:23:10 2025 by rpki-client