$ rpki-client -vvf repo-rpki.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/323430313a663938303a643030303a3a2f33362d3336203d3e203633383632.roa File: 323430313a663938303a643030303a3a2f33362d3336203d3e203633383632.roa (raw, json) Hash identifier: vMFZ3J2IVHCkbQrjErXMN4qM62WgQCjGOgATugsFtb0= Subject key identifier: FF:5E:2B:4B:E5:2A:D8:4B:18:F6:6B:B1:42:6A:64:FA:17:F9:10:E5 Certificate issuer: /CN=764B23EB6C63FFCAA305F37DBE9B904AE01D60C9 Certificate serial: 4BD53FDB92CDF51DA0201FE706E5B7992197BFB6 Authority key identifier: 76:4B:23:EB:6C:63:FF:CA:A3:05:F3:7D:BE:9B:90:4A:E0:1D:60:C9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/764B23EB6C63FFCAA305F37DBE9B904AE01D60C9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/323430313a663938303a643030303a3a2f33362d3336203d3e203633383632.roa Signing time: Thu 14 Aug 2025 07:01:54 +0000 ROA not before: Thu 14 Aug 2025 06:56:54 +0000 ROA not after: Thu 13 Aug 2026 07:01:54 +0000 asID: 63862 IP address blocks: 2401:f980:d000::/36 maxlen: 36 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/764B23EB6C63FFCAA305F37DBE9B904AE01D60C9.crl rsync://repo-rpki.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/764B23EB6C63FFCAA305F37DBE9B904AE01D60C9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/764B23EB6C63FFCAA305F37DBE9B904AE01D60C9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 02:48:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:d5:3f:db:92:cd:f5:1d:a0:20:1f:e7:06:e5:b7:99:21:97:bf:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=764B23EB6C63FFCAA305F37DBE9B904AE01D60C9 Validity Not Before: Aug 14 06:56:54 2025 GMT Not After : Aug 13 07:01:54 2026 GMT Subject: CN=FF5E2B4BE52AD84B18F66BB1426A64FA17F910E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:92:85:42:3d:34:51:90:76:b6:54:4e:06:98: 45:91:a5:d3:e3:8f:12:4d:c6:33:fe:46:2e:e7:62: 5e:24:36:0f:c8:e4:ef:b7:63:db:6a:d4:48:85:7a: 65:47:9f:86:98:6a:d7:ab:d3:ce:6a:aa:5a:b2:f0: 3d:7b:b8:a3:a4:ad:c4:e6:d2:6a:b5:31:1e:74:51: b1:63:13:2d:42:7f:ae:c5:41:05:75:69:22:03:08: a5:cc:08:42:58:89:f9:00:3f:75:e4:fb:40:73:bb: ca:c3:c7:94:a0:93:09:71:7c:8b:5a:06:11:82:54: fe:44:3c:74:23:de:50:44:99:b6:76:c9:49:43:b6: a7:a0:12:e4:d6:cd:a8:dc:eb:52:e4:f6:ed:01:6e: c9:95:ea:8a:30:6b:3e:57:21:e7:06:51:4e:94:69: 34:19:28:44:b8:a1:92:8d:ba:7f:f5:96:0c:0b:c6: 70:4b:d7:c7:ed:9b:fc:d9:c7:1e:fb:1d:ce:43:12: 79:88:79:0e:3a:f2:09:ba:a6:75:22:f2:e5:c4:75: b8:9a:d8:9b:69:85:d6:85:93:3e:d9:55:e7:8b:3c: 2b:cb:25:4a:66:06:8e:12:24:3e:bf:f7:f1:0d:8d: a0:48:ed:60:1a:02:e5:06:2f:78:10:14:a2:94:8c: 1c:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:5E:2B:4B:E5:2A:D8:4B:18:F6:6B:B1:42:6A:64:FA:17:F9:10:E5 X509v3 Authority Key Identifier: keyid:76:4B:23:EB:6C:63:FF:CA:A3:05:F3:7D:BE:9B:90:4A:E0:1D:60:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/764B23EB6C63FFCAA305F37DBE9B904AE01D60C9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/764B23EB6C63FFCAA305F37DBE9B904AE01D60C9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/323430313a663938303a643030303a3a2f33362d3336203d3e203633383632.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:f980:d000::/36 Signature Algorithm: sha256WithRSAEncryption 0b:ea:05:9b:40:4a:e9:50:16:8a:3c:f1:03:28:e1:5d:52:d3: 98:b1:d6:12:3c:b9:da:1f:d8:8c:13:e1:0f:b9:eb:75:17:c4: d5:41:b8:60:51:6f:9a:6a:bd:0d:ba:60:62:fa:7d:f1:cd:f2: 68:45:80:85:ef:54:50:a9:3d:e2:50:8b:13:bf:c4:1d:6c:f6: 7d:31:ef:e4:14:e5:53:af:39:77:ff:40:82:e6:ba:98:74:8f: 6f:cd:67:93:59:b2:a8:4e:0a:26:2e:ba:0f:b8:73:0c:5a:59: 20:0e:0d:4a:71:14:ef:06:d9:b6:99:85:72:4c:d5:2a:8e:86: d2:b9:15:8e:45:d0:48:fa:46:95:da:6d:8f:94:94:1e:fb:ee: 2f:60:f6:dd:bd:b5:fe:1c:eb:34:c4:0c:92:c1:6f:49:0f:03: b2:c1:1c:3a:1e:07:06:9e:09:ae:50:5c:0e:8e:b0:64:1c:60: 34:71:c3:93:f8:6d:93:b8:b1:6e:c8:39:62:86:8e:1f:20:68: 31:06:5c:d5:52:96:8a:60:fc:76:2f:5f:06:0d:f1:f6:25:c4: 17:f8:10:98:99:b3:04:1d:9d:25:b7:0b:f3:af:14:a2:66:45: 1e:d8:92:08:0c:ae:11:8b:ce:2f:73:a2:04:05:19:fb:ff:f2: be:ff:8c:47 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS9U/25LN9R2gIB/nBuW3mSGXv7YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzY0QjIzRUI2QzYzRkZDQUEzMDVGMzdEQkU5QjkwNEFF MDFENjBDOTAeFw0yNTA4MTQwNjU2NTRaFw0yNjA4MTMwNzAxNTRaMDMxMTAvBgNV BAMTKEZGNUUyQjRCRTUyQUQ4NEIxOEY2NkJCMTQyNkE2NEZBMTdGOTEwRTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9koVCPTRRkHa2VE4GmEWRpdPj jxJNxjP+Ri7nYl4kNg/I5O+3Y9tq1EiFemVHn4aYater085qqlqy8D17uKOkrcTm 0mq1MR50UbFjEy1Cf67FQQV1aSIDCKXMCEJYifkAP3Xk+0Bzu8rDx5SgkwlxfIta BhGCVP5EPHQj3lBEmbZ2yUlDtqegEuTWzajc61Lk9u0BbsmV6oowaz5XIecGUU6U aTQZKES4oZKNun/1lgwLxnBL18ftm/zZxx77Hc5DEnmIeQ468gm6pnUi8uXEdbia 2JtphdaFkz7ZVeeLPCvLJUpmBo4SJD6/9/ENjaBI7WAaAuUGL3gQFKKUjBzTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/14rS+Uq2EsY9muxQmpk+hf5EOUwHwYDVR0j BBgwFoAUdksj62xj/8qjBfN9vpuQSuAdYMkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 N2U4MzBjOC1kNTU5LTQ1NmEtODgzNS00ZjZlYjU1MjdhYTIvMC83NjRCMjNFQjZD NjNGRkNBQTMwNUYzN0RCRTlCOTA0QUUwMUQ2MEM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzY0QjIzRUI2QzYzRkZDQUEzMDVGMzdEQkU5QjkwNEFFMDFE NjBDOS5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzg3ZTgzMGM4LWQ1NTktNDU2YS04 ODM1LTRmNmViNTUyN2FhMi8wLzMyMzQzMDMxM2E2NjM5MzgzMDNhNjQzMDMwMzAz YTNhMmYzMzM2MmQzMzM2MjAzZDNlMjAzNjMzMzgzNjMyLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJAH5 gNAwDQYJKoZIhvcNAQELBQADggEBAAvqBZtASulQFoo88QMo4V1S05ix1hI8udof 2IwT4Q+563UXxNVBuGBRb5pqvQ26YGL6ffHN8mhFgIXvVFCpPeJQixO/xB1s9n0x 7+QU5VOvOXf/QILmuph0j2/NZ5NZsqhOCiYuug+4cwxaWSAODUpxFO8G2baZhXJM 1SqOhtK5FY5F0Ej6RpXabY+UlB777i9g9t29tf4c6zTEDJLBb0kPA7LBHDoeBwae Ca5QXA6OsGQcYDRxw5P4bZO4sW7IOWKGjh8gaDEGXNVSlopg/HYvXwYN8fYlxBf4 EJiZswQdnSW3C/OvFKJmRR7YkggMrhGLzi9zogQFGfv/8r7/jEc= -----END CERTIFICATE-----Generated at Sat Aug 23 18:25:22 2025 by rpki-client