$ rpki-client -vvf repo-rpki.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/323430313a663938303a613030303a3a2f33362d3336203d3e203633383632.roa File: 323430313a663938303a613030303a3a2f33362d3336203d3e203633383632.roa (raw, json) Hash identifier: PJfON3J1hibYxig1JJVo+LbXyiXk9NNpTQwuQ3g8s5A= Subject key identifier: DE:6A:A1:9D:B1:0A:D1:BF:AA:6E:BE:51:ED:60:36:D6:94:E9:57:CE Certificate issuer: /CN=764B23EB6C63FFCAA305F37DBE9B904AE01D60C9 Certificate serial: 5C36E05E4CCC2C6BBB635B17133EC1D37678A451 Authority key identifier: 76:4B:23:EB:6C:63:FF:CA:A3:05:F3:7D:BE:9B:90:4A:E0:1D:60:C9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/764B23EB6C63FFCAA305F37DBE9B904AE01D60C9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/323430313a663938303a613030303a3a2f33362d3336203d3e203633383632.roa Signing time: Thu 14 Aug 2025 07:01:54 +0000 ROA not before: Thu 14 Aug 2025 06:56:54 +0000 ROA not after: Thu 13 Aug 2026 07:01:54 +0000 asID: 63862 IP address blocks: 2401:f980:a000::/36 maxlen: 36 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/764B23EB6C63FFCAA305F37DBE9B904AE01D60C9.crl rsync://repo-rpki.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/764B23EB6C63FFCAA305F37DBE9B904AE01D60C9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/764B23EB6C63FFCAA305F37DBE9B904AE01D60C9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 02:48:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:36:e0:5e:4c:cc:2c:6b:bb:63:5b:17:13:3e:c1:d3:76:78:a4:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=764B23EB6C63FFCAA305F37DBE9B904AE01D60C9 Validity Not Before: Aug 14 06:56:54 2025 GMT Not After : Aug 13 07:01:54 2026 GMT Subject: CN=DE6AA19DB10AD1BFAA6EBE51ED6036D694E957CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:37:2b:41:62:40:0f:39:58:57:e9:09:60:9e: 33:d0:eb:31:fb:04:26:aa:06:f3:15:4c:45:5e:23: aa:4b:11:76:7b:c9:da:20:72:e9:58:8e:d4:aa:a0: 77:f1:d8:d6:a9:bd:d0:a3:45:54:e5:4e:88:43:ec: bd:7b:9b:38:e5:5a:54:8a:56:3e:7a:87:6e:4e:60: d7:d1:48:ca:ae:f5:eb:e1:d9:13:20:78:8a:f2:e8: cd:47:05:6b:09:96:96:26:b4:db:46:d3:41:80:29: 0a:71:3f:b9:2d:ab:1a:3b:b3:a7:ee:6c:cb:f0:8a: 7c:bd:15:6f:72:97:6c:f8:0f:7a:73:1c:91:23:09: 74:c6:f3:3b:b7:cf:79:68:e7:97:d1:0e:22:cf:08: 06:b7:10:58:5c:2a:72:7e:e1:dc:e3:ca:d1:5e:4b: ad:37:e7:78:bc:80:a7:f6:ff:56:b5:d0:f0:2f:89: bb:b4:e0:e7:d2:90:96:9e:88:05:70:15:b8:b7:95: ba:28:f6:92:3f:f8:e1:a8:c6:0b:9a:78:f5:4a:23: e8:70:dd:c6:7a:ef:11:30:a3:2c:bc:e2:ed:5d:58: c7:19:34:25:ea:41:49:fe:7b:94:05:66:d9:2c:d0: 40:e0:35:f6:ec:38:38:c6:98:17:c9:8d:c7:ae:ba: ff:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:6A:A1:9D:B1:0A:D1:BF:AA:6E:BE:51:ED:60:36:D6:94:E9:57:CE X509v3 Authority Key Identifier: keyid:76:4B:23:EB:6C:63:FF:CA:A3:05:F3:7D:BE:9B:90:4A:E0:1D:60:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/764B23EB6C63FFCAA305F37DBE9B904AE01D60C9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/764B23EB6C63FFCAA305F37DBE9B904AE01D60C9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/323430313a663938303a613030303a3a2f33362d3336203d3e203633383632.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:f980:a000::/36 Signature Algorithm: sha256WithRSAEncryption 20:23:c7:40:46:8a:03:4d:41:a3:a6:a0:2e:d8:27:02:ed:9b: 85:08:ce:05:7b:8c:c1:72:ba:85:f3:ff:38:04:fd:65:cc:a5: 76:a7:3d:2a:4e:44:c0:24:26:01:d9:f6:6b:52:ea:67:20:03: 43:88:90:bb:51:9e:eb:81:fc:64:95:09:4e:65:73:1f:ad:76: 62:27:b9:4a:0c:55:36:30:5d:d4:fb:c0:7e:da:d6:6b:70:6a: 27:91:99:c2:f1:d9:d6:46:63:a5:7b:39:24:46:ba:77:24:1f: d1:87:d8:be:93:01:be:ab:0d:c0:e5:0b:ac:17:4b:f0:52:9a: 2f:91:ba:d7:af:af:16:bc:09:a8:ee:9f:a3:0e:2e:41:82:7f: 8e:e2:b1:0c:58:93:bc:ca:42:a0:33:f9:f2:3e:35:7e:53:af: 8d:b1:36:cd:07:d4:ae:6a:28:74:b9:be:68:ff:05:89:88:7c: ad:2a:9c:2d:2f:2c:97:5c:64:59:c6:20:0b:0a:0b:b2:02:39: 0c:10:69:b4:bb:26:81:50:18:30:25:14:60:dd:35:db:bb:67: 45:67:f1:fc:4a:94:e2:8c:8f:4c:11:91:9c:5d:fb:09:4f:5a: 2e:2c:b4:fd:e1:d9:1e:97:5d:49:b5:0a:43:72:17:77:c2:c1: d6:b2:8e:6d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXDbgXkzMLGu7Y1sXEz7B03Z4pFEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzY0QjIzRUI2QzYzRkZDQUEzMDVGMzdEQkU5QjkwNEFF MDFENjBDOTAeFw0yNTA4MTQwNjU2NTRaFw0yNjA4MTMwNzAxNTRaMDMxMTAvBgNV BAMTKERFNkFBMTlEQjEwQUQxQkZBQTZFQkU1MUVENjAzNkQ2OTRFOTU3Q0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0NytBYkAPOVhX6QlgnjPQ6zH7 BCaqBvMVTEVeI6pLEXZ7ydogculYjtSqoHfx2NapvdCjRVTlTohD7L17mzjlWlSK Vj56h25OYNfRSMqu9evh2RMgeIry6M1HBWsJlpYmtNtG00GAKQpxP7ktqxo7s6fu bMvwiny9FW9yl2z4D3pzHJEjCXTG8zu3z3lo55fRDiLPCAa3EFhcKnJ+4dzjytFe S60353i8gKf2/1a10PAvibu04OfSkJaeiAVwFbi3lboo9pI/+OGoxguaePVKI+hw 3cZ67xEwoyy84u1dWMcZNCXqQUn+e5QFZtks0EDgNfbsODjGmBfJjceuuv+7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3mqhnbEK0b+qbr5R7WA21pTpV84wHwYDVR0j BBgwFoAUdksj62xj/8qjBfN9vpuQSuAdYMkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 N2U4MzBjOC1kNTU5LTQ1NmEtODgzNS00ZjZlYjU1MjdhYTIvMC83NjRCMjNFQjZD NjNGRkNBQTMwNUYzN0RCRTlCOTA0QUUwMUQ2MEM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzY0QjIzRUI2QzYzRkZDQUEzMDVGMzdEQkU5QjkwNEFFMDFE NjBDOS5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzg3ZTgzMGM4LWQ1NTktNDU2YS04 ODM1LTRmNmViNTUyN2FhMi8wLzMyMzQzMDMxM2E2NjM5MzgzMDNhNjEzMDMwMzAz YTNhMmYzMzM2MmQzMzM2MjAzZDNlMjAzNjMzMzgzNjMyLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJAH5 gKAwDQYJKoZIhvcNAQELBQADggEBACAjx0BGigNNQaOmoC7YJwLtm4UIzgV7jMFy uoXz/zgE/WXMpXanPSpORMAkJgHZ9mtS6mcgA0OIkLtRnuuB/GSVCU5lcx+tdmIn uUoMVTYwXdT7wH7a1mtwaieRmcLx2dZGY6V7OSRGunckH9GH2L6TAb6rDcDlC6wX S/BSmi+Rutevrxa8Cajun6MOLkGCf47isQxYk7zKQqAz+fI+NX5Tr42xNs0H1K5q KHS5vmj/BYmIfK0qnC0vLJdcZFnGIAsKC7ICOQwQabS7JoFQGDAlFGDdNdu7Z0Vn 8fxKlOKMj0wRkZxd+wlPWi4stP3h2R6XXUm1CkNyF3fCwdayjm0= -----END CERTIFICATE-----Generated at Sat Aug 23 18:27:07 2025 by rpki-client