$ rpki-client -vvf repo-rpki.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/323430313a663938303a3a2f33362d3336203d3e203633383632.roa File: 323430313a663938303a3a2f33362d3336203d3e203633383632.roa (raw, json) Hash identifier: HCKRR7Yvu8AkSEZO+RpqEPEhCQGAmhX74tzgagWiyVg= Subject key identifier: 40:68:7B:64:68:DA:46:48:3C:8B:7A:F7:1E:17:96:FF:8F:9D:E2:A0 Certificate issuer: /CN=764B23EB6C63FFCAA305F37DBE9B904AE01D60C9 Certificate serial: 78F4221C9616809375418CF9559F425D7485D2C3 Authority key identifier: 76:4B:23:EB:6C:63:FF:CA:A3:05:F3:7D:BE:9B:90:4A:E0:1D:60:C9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/764B23EB6C63FFCAA305F37DBE9B904AE01D60C9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/323430313a663938303a3a2f33362d3336203d3e203633383632.roa Signing time: Thu 14 Aug 2025 06:00:41 +0000 ROA not before: Thu 14 Aug 2025 05:55:41 +0000 ROA not after: Thu 13 Aug 2026 06:00:41 +0000 asID: 63862 IP address blocks: 2401:f980::/36 maxlen: 36 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/764B23EB6C63FFCAA305F37DBE9B904AE01D60C9.crl rsync://repo-rpki.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/764B23EB6C63FFCAA305F37DBE9B904AE01D60C9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/764B23EB6C63FFCAA305F37DBE9B904AE01D60C9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 02:48:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:f4:22:1c:96:16:80:93:75:41:8c:f9:55:9f:42:5d:74:85:d2:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=764B23EB6C63FFCAA305F37DBE9B904AE01D60C9 Validity Not Before: Aug 14 05:55:41 2025 GMT Not After : Aug 13 06:00:41 2026 GMT Subject: CN=40687B6468DA46483C8B7AF71E1796FF8F9DE2A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:dd:59:e7:54:91:93:94:88:da:e3:97:95:ce: 51:29:0a:3c:e8:25:11:2c:81:b5:c9:16:61:d9:6e: 4d:6f:21:9a:1a:0b:f6:0c:fc:a2:cb:08:e6:a8:12: 1c:6f:a5:d3:f9:cd:8e:9d:a3:84:c5:fd:fa:9d:fb: 47:00:fc:0c:bc:7c:55:45:f2:cf:38:e4:3f:0f:81: ec:32:f7:6d:e5:80:52:b5:5c:ad:5a:d7:23:6a:df: 2b:76:3a:a0:dd:cd:5d:51:2f:33:74:0b:54:54:1c: 00:7a:38:ef:11:99:75:97:21:62:44:67:bd:4f:95: 1d:27:e8:14:e6:3f:aa:a6:80:7b:3b:62:90:60:25: 16:02:84:5f:da:e5:b4:8a:3f:bc:21:d4:5b:5d:a7: b8:1c:37:bb:63:9d:6c:d0:31:e0:03:77:f7:21:b6: 14:a0:43:6d:1d:5c:9b:18:45:16:a5:8a:da:40:85: 2e:e3:b1:1f:62:e1:40:08:6a:97:00:32:a1:3d:8d: ee:57:e6:d8:ed:1a:9a:1f:67:ca:8d:ee:f6:8b:04: ee:8d:5a:e7:9e:df:5d:36:04:49:06:3e:a9:36:69: 69:6d:99:8d:8c:fa:dd:57:86:15:95:01:53:ba:e1: 99:e2:72:be:fe:2f:e4:52:55:c4:39:24:16:06:7e: b0:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:68:7B:64:68:DA:46:48:3C:8B:7A:F7:1E:17:96:FF:8F:9D:E2:A0 X509v3 Authority Key Identifier: keyid:76:4B:23:EB:6C:63:FF:CA:A3:05:F3:7D:BE:9B:90:4A:E0:1D:60:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/764B23EB6C63FFCAA305F37DBE9B904AE01D60C9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/764B23EB6C63FFCAA305F37DBE9B904AE01D60C9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/323430313a663938303a3a2f33362d3336203d3e203633383632.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:f980::/36 Signature Algorithm: sha256WithRSAEncryption 7f:a2:e2:b8:00:b3:45:0f:72:7b:08:4e:ce:35:fc:e3:d4:ee: 1a:c4:65:e0:98:f4:eb:fb:a7:e1:64:2b:93:ec:fc:b7:1b:e1: 3a:1f:41:83:10:bb:ae:f7:a9:b5:87:39:aa:37:6b:88:a8:a8: 6d:b4:e5:aa:b9:f7:bb:e4:66:89:6f:ae:8c:56:4e:74:a1:31: 4f:36:78:83:d2:09:6a:2f:18:ff:73:86:ea:fa:ef:60:d5:67: e7:d7:d4:8b:26:52:4c:f9:fe:05:ad:31:1f:a8:01:b6:04:f7: f7:18:84:6b:41:a5:55:57:58:49:bc:98:76:83:82:4c:56:9c: 8d:f8:22:41:69:9d:ef:b8:34:82:99:12:9a:2d:da:b2:64:40: 29:ff:cd:3a:3a:21:85:1a:92:73:f6:ce:5c:f4:e5:78:70:3a: c6:2b:bd:03:0c:eb:0a:b0:1a:f3:d4:b5:c8:57:3d:fe:26:4b: 9e:2d:a0:6d:72:88:8f:5a:3b:14:ef:34:ab:20:46:10:6e:9c: 12:3d:c1:1b:4f:37:fc:d2:02:14:4b:20:8e:d3:f0:20:07:ed: ac:3c:e8:6a:5e:f2:10:49:06:dd:00:3f:16:37:e2:0c:d8:41: 90:c4:e3:09:d2:bc:c6:e1:24:8b:55:17:e2:e8:44:6f:59:e4: 72:49:27:c2 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUePQiHJYWgJN1QYz5VZ9CXXSF0sMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzY0QjIzRUI2QzYzRkZDQUEzMDVGMzdEQkU5QjkwNEFF MDFENjBDOTAeFw0yNTA4MTQwNTU1NDFaFw0yNjA4MTMwNjAwNDFaMDMxMTAvBgNV BAMTKDQwNjg3QjY0NjhEQTQ2NDgzQzhCN0FGNzFFMTc5NkZGOEY5REUyQTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ3VnnVJGTlIja45eVzlEpCjzo JREsgbXJFmHZbk1vIZoaC/YM/KLLCOaoEhxvpdP5zY6do4TF/fqd+0cA/Ay8fFVF 8s845D8Pgewy923lgFK1XK1a1yNq3yt2OqDdzV1RLzN0C1RUHAB6OO8RmXWXIWJE Z71PlR0n6BTmP6qmgHs7YpBgJRYChF/a5bSKP7wh1Ftdp7gcN7tjnWzQMeADd/ch thSgQ20dXJsYRRalitpAhS7jsR9i4UAIapcAMqE9je5X5tjtGpofZ8qN7vaLBO6N Wuee3102BEkGPqk2aWltmY2M+t1XhhWVAVO64Znicr7+L+RSVcQ5JBYGfrDlAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUQGh7ZGjaRkg8i3r3HheW/4+d4qAwHwYDVR0j BBgwFoAUdksj62xj/8qjBfN9vpuQSuAdYMkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 N2U4MzBjOC1kNTU5LTQ1NmEtODgzNS00ZjZlYjU1MjdhYTIvMC83NjRCMjNFQjZD NjNGRkNBQTMwNUYzN0RCRTlCOTA0QUUwMUQ2MEM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzY0QjIzRUI2QzYzRkZDQUEzMDVGMzdEQkU5QjkwNEFFMDFE NjBDOS5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzg3ZTgzMGM4LWQ1NTktNDU2YS04 ODM1LTRmNmViNTUyN2FhMi8wLzMyMzQzMDMxM2E2NjM5MzgzMDNhM2EyZjMzMzYy ZDMzMzYyMDNkM2UyMDM2MzMzODM2MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQkAfmAADANBgkqhkiG 9w0BAQsFAAOCAQEAf6LiuACzRQ9yewhOzjX849TuGsRl4Jj06/un4WQrk+z8txvh Oh9BgxC7rveptYc5qjdriKiobbTlqrn3u+RmiW+ujFZOdKExTzZ4g9IJai8Y/3OG 6vrvYNVn59fUiyZSTPn+Ba0xH6gBtgT39xiEa0GlVVdYSbyYdoOCTFacjfgiQWmd 77g0gpkSmi3asmRAKf/NOjohhRqSc/bOXPTleHA6xiu9AwzrCrAa89S1yFc9/iZL ni2gbXKIj1o7FO80qyBGEG6cEj3BG083/NICFEsgjtPwIAftrDzoal7yEEkG3QA/ FjfiDNhBkMTjCdK8xuEki1UX4uhEb1nkckknwg== -----END CERTIFICATE-----Generated at Sat Aug 23 14:21:35 2025 by rpki-client