$ rpki-client -vvf repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393030323a3a2f34382d3438203d3e203338353236.roa File: 323430353a333734303a393030323a3a2f34382d3438203d3e203338353236.roa (raw, json) Hash identifier: 3kmrJwgI1O8Zbk1kxDZLJ2KddvB3fAzjIrwViCX6rt4= Subject key identifier: 27:10:F6:73:99:43:3D:51:C1:42:5D:19:B2:15:43:3D:1B:CC:AC:A5 Certificate issuer: /CN=560CF5B1622CB492E1C603F69D4FB9C11322520D Certificate serial: 390CAA2DEF41415A8DCED8FC3980693F3D9C0816 Authority key identifier: 56:0C:F5:B1:62:2C:B4:92:E1:C6:03:F6:9D:4F:B9:C1:13:22:52:0D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/560CF5B1622CB492E1C603F69D4FB9C11322520D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393030323a3a2f34382d3438203d3e203338353236.roa Signing time: Wed 26 Feb 2025 02:00:03 +0000 ROA not before: Wed 26 Feb 2025 01:55:03 +0000 ROA not after: Wed 25 Feb 2026 02:00:03 +0000 asID: 38526 IP address blocks: 2405:3740:9002::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/560CF5B1622CB492E1C603F69D4FB9C11322520D.crl rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/560CF5B1622CB492E1C603F69D4FB9C11322520D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/560CF5B1622CB492E1C603F69D4FB9C11322520D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Oct 2025 04:03:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:0c:aa:2d:ef:41:41:5a:8d:ce:d8:fc:39:80:69:3f:3d:9c:08:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=560CF5B1622CB492E1C603F69D4FB9C11322520D Validity Not Before: Feb 26 01:55:03 2025 GMT Not After : Feb 25 02:00:03 2026 GMT Subject: CN=2710F67399433D51C1425D19B215433D1BCCACA5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:64:30:5c:d0:b9:0c:f7:da:ce:40:4c:a9:81: 56:18:b1:92:d6:1e:7b:52:6b:22:97:8e:3c:4f:cc: 32:26:18:bf:cd:cb:fb:0e:a8:09:0a:65:8e:60:c2: 37:e4:3a:d3:ff:54:82:80:36:55:49:8d:02:df:7a: e8:db:44:1b:6a:6b:4d:55:ce:d3:ef:18:e1:57:d5: cd:d0:74:b4:64:e9:92:84:3a:bd:16:c5:7b:70:2a: 2a:6b:cf:53:3b:25:1c:f8:0f:2b:19:a3:3e:c4:4c: 1b:f0:dc:d9:dd:c7:e8:a9:20:b4:d6:98:db:f4:1f: 6e:5f:fb:2b:3d:a1:02:7a:b0:e9:c1:7a:1b:3a:54: f8:14:e5:d7:f6:ac:79:93:7c:71:ec:9e:1f:9c:6f: ec:01:43:78:cd:7a:6f:aa:e4:8e:d7:61:be:29:84: 91:cb:2b:64:1c:82:c8:29:ee:b0:07:0b:72:08:91: 1a:a9:ac:ee:35:b0:9f:86:1a:91:b0:2f:d3:26:bc: 74:f3:38:9b:ed:43:ad:b5:cb:0b:1e:3c:04:9a:89: 2d:ca:e2:e1:40:23:35:f2:d6:a0:ea:bc:45:a3:be: f0:f1:7d:18:d0:7e:e8:38:be:38:5c:10:25:3d:4d: 93:19:78:77:71:67:88:2c:4d:a2:82:aa:03:58:ec: 68:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:10:F6:73:99:43:3D:51:C1:42:5D:19:B2:15:43:3D:1B:CC:AC:A5 X509v3 Authority Key Identifier: keyid:56:0C:F5:B1:62:2C:B4:92:E1:C6:03:F6:9D:4F:B9:C1:13:22:52:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/560CF5B1622CB492E1C603F69D4FB9C11322520D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/560CF5B1622CB492E1C603F69D4FB9C11322520D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393030323a3a2f34382d3438203d3e203338353236.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:3740:9002::/48 Signature Algorithm: sha256WithRSAEncryption 8d:2b:b1:5e:b5:73:f3:ca:25:f6:1a:31:a2:52:4b:c8:45:2d: 8d:4d:75:33:af:65:d6:28:b5:ff:11:ed:6a:15:2a:c6:fe:f1: 8d:65:bd:34:bd:7a:ac:0c:09:f8:83:ae:a1:7d:a0:28:33:18: 30:dd:c3:c0:57:af:83:11:68:db:42:45:af:aa:7e:9f:25:a0: a9:07:c9:bd:5d:94:02:e3:77:65:db:68:7e:5f:36:e2:41:10: ed:65:26:26:8c:9f:83:cb:18:17:f3:ee:a1:78:5e:ce:9c:3e: dc:a8:05:99:d7:89:77:81:c4:be:e2:ba:ce:b7:5f:c6:bd:57: 4a:3b:09:68:01:04:4e:be:81:5a:f9:83:4f:dd:c0:0e:33:61: d1:90:f0:9b:b3:29:74:af:e7:db:db:cf:11:b7:f5:28:bd:74: 2b:9c:ae:26:9b:1e:f8:e8:36:ae:37:b6:fb:79:31:ac:25:c7: 9f:8e:e7:3a:71:37:a5:87:a6:f7:31:0c:67:95:f3:03:64:eb: f5:96:31:7e:0e:52:7e:ed:7d:34:97:bf:e1:9c:56:66:5c:e9: 7c:0f:45:ca:ec:14:c0:7f:8a:e1:47:a1:87:9c:b3:a8:a0:11: 6c:99:8b:23:27:c6:68:58:a2:06:96:bb:f4:74:36:13:d8:a6: 22:52:1a:9b -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUOQyqLe9BQVqNztj8OYBpPz2cCBYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTYwQ0Y1QjE2MjJDQjQ5MkUxQzYwM0Y2OUQ0RkI5QzEx MzIyNTIwRDAeFw0yNTAyMjYwMTU1MDNaFw0yNjAyMjUwMjAwMDNaMDMxMTAvBgNV BAMTKDI3MTBGNjczOTk0MzNENTFDMTQyNUQxOUIyMTU0MzNEMUJDQ0FDQTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8ZDBc0LkM99rOQEypgVYYsZLW HntSayKXjjxPzDImGL/Ny/sOqAkKZY5gwjfkOtP/VIKANlVJjQLfeujbRBtqa01V ztPvGOFX1c3QdLRk6ZKEOr0WxXtwKiprz1M7JRz4DysZoz7ETBvw3Nndx+ipILTW mNv0H25f+ys9oQJ6sOnBehs6VPgU5df2rHmTfHHsnh+cb+wBQ3jNem+q5I7XYb4p hJHLK2Qcgsgp7rAHC3IIkRqprO41sJ+GGpGwL9MmvHTzOJvtQ621ywsePASaiS3K 4uFAIzXy1qDqvEWjvvDxfRjQfug4vjhcECU9TZMZeHdxZ4gsTaKCqgNY7Gh1AgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUJxD2c5lDPVHBQl0ZshVDPRvMrKUwHwYDVR0j BBgwFoAUVgz1sWIstJLhxgP2nU+5wRMiUg0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NjVlNzgxMC02N2Y0LTQxYzItODAzNC00NjUyNzMzYjhkZDIvMC81NjBDRjVCMTYy MkNCNDkyRTFDNjAzRjY5RDRGQjlDMTEzMjI1MjBELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTYwQ0Y1QjE2MjJDQjQ5MkUxQzYwM0Y2OUQ0RkI5QzExMzIy NTIwRC5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U2NWU3ODEwLTY3ZjQtNDFjMi04 MDM0LTQ2NTI3MzNiOGRkMi8wLzMyMzQzMDM1M2EzMzM3MzQzMDNhMzkzMDMwMzIz YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMzM4MzUzMjM2LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAU3 QJACMA0GCSqGSIb3DQEBCwUAA4IBAQCNK7FetXPzyiX2GjGiUkvIRS2NTXUzr2XW KLX/Ee1qFSrG/vGNZb00vXqsDAn4g66hfaAoMxgw3cPAV6+DEWjbQkWvqn6fJaCp B8m9XZQC43dl22h+XzbiQRDtZSYmjJ+DyxgX8+6heF7OnD7cqAWZ14l3gcS+4rrO t1/GvVdKOwloAQROvoFa+YNP3cAOM2HRkPCbsyl0r+fb288Rt/UovXQrnK4mmx74 6DauN7b7eTGsJcefjuc6cTelh6b3MQxnlfMDZOv1ljF+DlJ+7X00l7/hnFZmXOl8 D0XK7BTAf4rhR6GHnLOooBFsmYsjJ8ZoWKIGlrv0dDYT2KYiUhqb -----END CERTIFICATE-----Generated at Tue Oct 28 06:23:14 2025 by rpki-client