$ rpki-client -vvf repo-rpki.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/323430313a663938303a393030303a3a2f33362d3336203d3e203633383632.roa File: 323430313a663938303a393030303a3a2f33362d3336203d3e203633383632.roa (raw, json) Hash identifier: ORRj6N+z+lWYq/tm4C40gunFOFz4fBOQOt4AnDlgOcU= Subject key identifier: D6:30:09:80:4C:5D:9A:AD:E3:7E:DD:DE:55:0C:F8:CB:6A:73:01:02 Certificate issuer: /CN=764B23EB6C63FFCAA305F37DBE9B904AE01D60C9 Certificate serial: 1243A9063C5E5CC67D2CEFE2D8AC3A87314428F7 Authority key identifier: 76:4B:23:EB:6C:63:FF:CA:A3:05:F3:7D:BE:9B:90:4A:E0:1D:60:C9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/764B23EB6C63FFCAA305F37DBE9B904AE01D60C9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/323430313a663938303a393030303a3a2f33362d3336203d3e203633383632.roa Signing time: Thu 14 Aug 2025 07:01:54 +0000 ROA not before: Thu 14 Aug 2025 06:56:54 +0000 ROA not after: Thu 13 Aug 2026 07:01:54 +0000 asID: 63862 IP address blocks: 2401:f980:9000::/36 maxlen: 36 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/764B23EB6C63FFCAA305F37DBE9B904AE01D60C9.crl rsync://repo-rpki.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/764B23EB6C63FFCAA305F37DBE9B904AE01D60C9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/764B23EB6C63FFCAA305F37DBE9B904AE01D60C9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 02:48:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:43:a9:06:3c:5e:5c:c6:7d:2c:ef:e2:d8:ac:3a:87:31:44:28:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=764B23EB6C63FFCAA305F37DBE9B904AE01D60C9 Validity Not Before: Aug 14 06:56:54 2025 GMT Not After : Aug 13 07:01:54 2026 GMT Subject: CN=D63009804C5D9AADE37EDDDE550CF8CB6A730102 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:95:5a:07:e8:10:3c:07:8c:33:fe:80:ee:82: b0:01:40:c5:02:ff:d8:0c:f9:90:04:69:fe:f6:6e: 7f:55:f6:68:9e:c1:b1:e1:04:ad:eb:2c:87:3d:8d: 87:35:d0:11:23:ed:54:b7:59:45:2d:52:bd:cf:f1: b2:89:1a:b2:df:7e:43:33:fb:76:a8:15:4f:f3:57: 9e:0b:93:ae:55:ad:b0:68:30:d0:ba:c5:32:bf:ae: 3c:1e:25:14:73:46:eb:e6:2b:96:db:e0:87:76:36: c2:36:1e:9d:e3:1b:44:e7:0d:d3:b7:90:f9:f6:b1: f0:e6:e3:90:4a:18:be:a5:a1:09:24:32:64:2c:f1: 04:03:70:e8:3a:89:67:8a:8c:04:b9:11:b4:90:75: 31:3a:2b:f1:b2:f9:17:ec:c9:b2:54:61:05:a2:38: 58:6b:ec:7c:81:54:86:9a:c8:5a:b7:35:6c:e8:df: c7:4a:3b:4f:a8:f3:96:91:89:c6:ad:79:77:8e:ec: 16:ab:ac:ef:2d:94:1c:61:31:e3:cf:26:99:6f:e6: ed:28:1c:5a:00:17:0e:2c:9b:4b:4d:ff:6d:98:5e: 47:12:f9:b9:83:23:12:8e:59:d7:8e:e5:c5:87:f4: 2b:4c:fd:0e:98:61:41:0a:8f:46:c7:96:c0:88:a8: 4c:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:30:09:80:4C:5D:9A:AD:E3:7E:DD:DE:55:0C:F8:CB:6A:73:01:02 X509v3 Authority Key Identifier: keyid:76:4B:23:EB:6C:63:FF:CA:A3:05:F3:7D:BE:9B:90:4A:E0:1D:60:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/764B23EB6C63FFCAA305F37DBE9B904AE01D60C9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/764B23EB6C63FFCAA305F37DBE9B904AE01D60C9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/323430313a663938303a393030303a3a2f33362d3336203d3e203633383632.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:f980:9000::/36 Signature Algorithm: sha256WithRSAEncryption 17:ba:4b:35:d6:32:b2:6d:60:7e:23:64:73:00:e8:ac:c2:3b: 1f:a0:92:29:5c:32:8c:6c:59:6e:c0:3e:aa:4b:6b:b3:24:7d: 65:b1:a8:92:e6:8b:96:d9:b5:4d:e7:cb:7a:b4:73:68:06:f9: b2:f5:c9:32:1f:ab:60:92:4c:47:4b:aa:8d:70:78:ce:55:74: 99:8d:d4:9f:53:b8:91:d9:52:83:93:17:ce:d0:54:60:9f:ee: e0:36:15:30:ef:8f:b4:70:aa:e3:57:ee:1c:66:9c:ae:c5:0b: bb:ab:01:20:b5:28:f9:8c:db:4e:44:36:b6:c0:da:fd:f6:58: 81:e2:fc:f7:c9:30:d0:1e:90:45:a7:25:b7:f8:c7:e4:27:f4: 16:48:2e:5c:96:4c:e5:04:d6:b8:87:68:45:d6:14:0d:84:cc: e0:74:f2:3d:49:d6:84:8a:f3:7c:6e:7b:97:46:ea:53:ae:38: b5:18:d4:c4:a3:4b:b0:c7:b7:a4:66:a4:2b:16:2b:36:8e:ac: 7e:ee:a9:8d:4a:b0:0c:7d:29:9d:e7:8f:66:38:5e:3e:b9:51: 04:6a:bf:48:16:2b:9e:c1:51:51:93:82:5e:8e:15:02:88:44: f6:62:01:50:9d:b3:72:95:d9:07:ac:b4:89:45:a1:20:6e:1d: 78:22:0e:47 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEkOpBjxeXMZ9LO/i2Kw6hzFEKPcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzY0QjIzRUI2QzYzRkZDQUEzMDVGMzdEQkU5QjkwNEFF MDFENjBDOTAeFw0yNTA4MTQwNjU2NTRaFw0yNjA4MTMwNzAxNTRaMDMxMTAvBgNV BAMTKEQ2MzAwOTgwNEM1RDlBQURFMzdFRERERTU1MENGOENCNkE3MzAxMDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKlVoH6BA8B4wz/oDugrABQMUC /9gM+ZAEaf72bn9V9miewbHhBK3rLIc9jYc10BEj7VS3WUUtUr3P8bKJGrLffkMz +3aoFU/zV54Lk65VrbBoMNC6xTK/rjweJRRzRuvmK5bb4Id2NsI2Hp3jG0TnDdO3 kPn2sfDm45BKGL6loQkkMmQs8QQDcOg6iWeKjAS5EbSQdTE6K/Gy+RfsybJUYQWi OFhr7HyBVIaayFq3NWzo38dKO0+o85aRicateXeO7BarrO8tlBxhMePPJplv5u0o HFoAFw4sm0tN/22YXkcS+bmDIxKOWdeO5cWH9CtM/Q6YYUEKj0bHlsCIqEwdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1jAJgExdmq3jft3eVQz4y2pzAQIwHwYDVR0j BBgwFoAUdksj62xj/8qjBfN9vpuQSuAdYMkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 N2U4MzBjOC1kNTU5LTQ1NmEtODgzNS00ZjZlYjU1MjdhYTIvMC83NjRCMjNFQjZD NjNGRkNBQTMwNUYzN0RCRTlCOTA0QUUwMUQ2MEM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzY0QjIzRUI2QzYzRkZDQUEzMDVGMzdEQkU5QjkwNEFFMDFE NjBDOS5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzg3ZTgzMGM4LWQ1NTktNDU2YS04 ODM1LTRmNmViNTUyN2FhMi8wLzMyMzQzMDMxM2E2NjM5MzgzMDNhMzkzMDMwMzAz YTNhMmYzMzM2MmQzMzM2MjAzZDNlMjAzNjMzMzgzNjMyLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJAH5 gJAwDQYJKoZIhvcNAQELBQADggEBABe6SzXWMrJtYH4jZHMA6KzCOx+gkilcMoxs WW7APqpLa7MkfWWxqJLmi5bZtU3ny3q0c2gG+bL1yTIfq2CSTEdLqo1weM5VdJmN 1J9TuJHZUoOTF87QVGCf7uA2FTDvj7RwquNX7hxmnK7FC7urASC1KPmM205ENrbA 2v32WIHi/PfJMNAekEWnJbf4x+Qn9BZILlyWTOUE1riHaEXWFA2EzOB08j1J1oSK 83xue5dG6lOuOLUY1MSjS7DHt6RmpCsWKzaOrH7uqY1KsAx9KZ3nj2Y4Xj65UQRq v0gWK57BUVGTgl6OFQKIRPZiAVCds3KV2QestIlFoSBuHXgiDkc= -----END CERTIFICATE-----Generated at Sat Aug 23 18:27:02 2025 by rpki-client