$ rpki-client -vvf repo-rpki.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/323430313a663938303a383030303a3a2f33362d3336203d3e203633383632.roa File: 323430313a663938303a383030303a3a2f33362d3336203d3e203633383632.roa (raw, json) Hash identifier: Iq/SBWkbL1WifsnbkuHlgUB3Ay9q9AsfpCUsgBLRWpg= Subject key identifier: 97:C1:6F:99:1D:43:1F:3A:00:72:DA:47:42:E3:78:37:0B:56:56:94 Certificate issuer: /CN=764B23EB6C63FFCAA305F37DBE9B904AE01D60C9 Certificate serial: 569052FAF70D42F35C1D7347139E4B4B80AC6DC9 Authority key identifier: 76:4B:23:EB:6C:63:FF:CA:A3:05:F3:7D:BE:9B:90:4A:E0:1D:60:C9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/764B23EB6C63FFCAA305F37DBE9B904AE01D60C9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/323430313a663938303a383030303a3a2f33362d3336203d3e203633383632.roa Signing time: Thu 14 Aug 2025 06:00:42 +0000 ROA not before: Thu 14 Aug 2025 05:55:42 +0000 ROA not after: Thu 13 Aug 2026 06:00:42 +0000 asID: 63862 IP address blocks: 2401:f980:8000::/36 maxlen: 36 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/764B23EB6C63FFCAA305F37DBE9B904AE01D60C9.crl rsync://repo-rpki.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/764B23EB6C63FFCAA305F37DBE9B904AE01D60C9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/764B23EB6C63FFCAA305F37DBE9B904AE01D60C9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 02:48:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:90:52:fa:f7:0d:42:f3:5c:1d:73:47:13:9e:4b:4b:80:ac:6d:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=764B23EB6C63FFCAA305F37DBE9B904AE01D60C9 Validity Not Before: Aug 14 05:55:42 2025 GMT Not After : Aug 13 06:00:42 2026 GMT Subject: CN=97C16F991D431F3A0072DA4742E378370B565694 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:72:a4:0f:a1:ab:eb:2a:1c:20:0e:de:09:db: 94:de:d5:78:15:90:e4:22:b9:36:58:9c:af:41:65: 2a:18:ae:e5:fa:a0:46:a2:6d:d8:63:26:93:6c:f3: da:0d:a3:50:a6:82:fc:38:37:33:33:65:e9:71:c9: 24:0e:97:4c:5d:7a:8c:a1:14:36:2e:c9:b7:16:e9: 13:03:47:34:dd:b3:ff:ae:4b:a8:2b:13:cf:33:7b: de:67:72:69:6d:5b:28:bb:c5:5d:94:2e:20:a0:d4: c5:0c:fc:57:b3:62:cf:a6:c1:9b:2e:9e:5f:3d:7c: 87:61:2c:9b:a1:c5:e8:9c:3b:8b:13:8c:08:38:3c: 85:ee:22:c0:2d:13:89:04:48:37:fc:2a:41:3b:16: 64:ad:84:68:71:25:96:fc:96:58:46:0b:84:c3:16: a1:e7:0e:49:28:e5:ba:cf:f2:09:ff:a1:0d:29:ff: 46:03:d1:2e:1b:73:08:30:d6:6e:21:26:6b:91:c5: 44:40:e1:37:08:0c:13:c6:6b:37:52:7b:67:77:28: a8:3f:e0:cf:82:59:d5:90:d7:8c:31:a7:79:af:8f: a0:4b:22:e1:2d:d0:ea:4f:74:e7:b2:78:9b:ab:68: f8:b4:5d:49:c8:72:bd:96:0c:1d:a8:d4:25:f0:aa: a0:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:C1:6F:99:1D:43:1F:3A:00:72:DA:47:42:E3:78:37:0B:56:56:94 X509v3 Authority Key Identifier: keyid:76:4B:23:EB:6C:63:FF:CA:A3:05:F3:7D:BE:9B:90:4A:E0:1D:60:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/764B23EB6C63FFCAA305F37DBE9B904AE01D60C9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/764B23EB6C63FFCAA305F37DBE9B904AE01D60C9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/323430313a663938303a383030303a3a2f33362d3336203d3e203633383632.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:f980:8000::/36 Signature Algorithm: sha256WithRSAEncryption 2b:ac:ad:4f:3d:e0:d8:2b:27:ac:ec:44:75:25:30:f1:45:e5: 5b:31:d7:4c:c7:28:44:b5:fd:c9:9b:1a:34:e0:8c:f0:6f:f4: 5d:ea:bf:59:45:2e:8d:ee:50:57:b3:83:e6:1a:eb:3d:1c:12: bb:03:2f:1f:08:e5:67:5a:ee:8b:62:ac:bd:73:39:85:8b:cf: 3d:de:00:80:38:3b:0d:a7:7e:e0:8f:01:62:bc:df:a4:d0:92: 61:4a:f5:dd:71:4d:37:1f:41:96:09:69:f7:72:4a:a9:bc:43: 82:be:2f:a2:7c:62:d4:7b:b9:fd:a0:6b:25:61:e0:fe:88:21: 31:36:b5:3e:f2:5d:a5:90:2a:fb:35:7c:fd:05:f1:ae:2d:5b: 4c:34:d4:98:d6:77:12:ba:aa:f1:7f:d7:55:cf:56:0f:e2:30: 31:bd:f1:56:71:1b:1e:86:a8:0e:69:28:e8:8e:6b:74:9d:58: 2f:01:9a:cb:37:17:73:1a:13:3f:bd:28:9d:71:d0:17:a4:59: 7c:95:ff:f5:b3:1d:04:b9:64:2a:61:9a:54:04:0d:69:5e:5e: 5a:6c:3c:bb:2a:13:c5:a8:6b:af:eb:96:d1:db:4d:64:d8:bf: d6:98:18:80:ec:68:44:3c:22:3c:88:50:1e:26:36:dd:17:0d: 71:fe:6f:36 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVpBS+vcNQvNcHXNHE55LS4CsbckwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzY0QjIzRUI2QzYzRkZDQUEzMDVGMzdEQkU5QjkwNEFF MDFENjBDOTAeFw0yNTA4MTQwNTU1NDJaFw0yNjA4MTMwNjAwNDJaMDMxMTAvBgNV BAMTKDk3QzE2Rjk5MUQ0MzFGM0EwMDcyREE0NzQyRTM3ODM3MEI1NjU2OTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbcqQPoavrKhwgDt4J25Te1XgV kOQiuTZYnK9BZSoYruX6oEaibdhjJpNs89oNo1Cmgvw4NzMzZelxySQOl0xdeoyh FDYuybcW6RMDRzTds/+uS6grE88ze95ncmltWyi7xV2ULiCg1MUM/FezYs+mwZsu nl89fIdhLJuhxeicO4sTjAg4PIXuIsAtE4kESDf8KkE7FmSthGhxJZb8llhGC4TD FqHnDkko5brP8gn/oQ0p/0YD0S4bcwgw1m4hJmuRxURA4TcIDBPGazdSe2d3KKg/ 4M+CWdWQ14wxp3mvj6BLIuEt0OpPdOeyeJuraPi0XUnIcr2WDB2o1CXwqqDXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUl8FvmR1DHzoActpHQuN4NwtWVpQwHwYDVR0j BBgwFoAUdksj62xj/8qjBfN9vpuQSuAdYMkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 N2U4MzBjOC1kNTU5LTQ1NmEtODgzNS00ZjZlYjU1MjdhYTIvMC83NjRCMjNFQjZD NjNGRkNBQTMwNUYzN0RCRTlCOTA0QUUwMUQ2MEM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzY0QjIzRUI2QzYzRkZDQUEzMDVGMzdEQkU5QjkwNEFFMDFE NjBDOS5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzg3ZTgzMGM4LWQ1NTktNDU2YS04 ODM1LTRmNmViNTUyN2FhMi8wLzMyMzQzMDMxM2E2NjM5MzgzMDNhMzgzMDMwMzAz YTNhMmYzMzM2MmQzMzM2MjAzZDNlMjAzNjMzMzgzNjMyLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJAH5 gIAwDQYJKoZIhvcNAQELBQADggEBACusrU894NgrJ6zsRHUlMPFF5Vsx10zHKES1 /cmbGjTgjPBv9F3qv1lFLo3uUFezg+Ya6z0cErsDLx8I5Wda7otirL1zOYWLzz3e AIA4Ow2nfuCPAWK836TQkmFK9d1xTTcfQZYJafdySqm8Q4K+L6J8YtR7uf2gayVh 4P6IITE2tT7yXaWQKvs1fP0F8a4tW0w01JjWdxK6qvF/11XPVg/iMDG98VZxGx6G qA5pKOiOa3SdWC8Bmss3F3MaEz+9KJ1x0BekWXyV//WzHQS5ZCphmlQEDWleXlps PLsqE8Woa6/rltHbTWTYv9aYGIDsaEQ8IjyIUB4mNt0XDXH+bzY= -----END CERTIFICATE-----Generated at Sat Aug 23 21:22:53 2025 by rpki-client