
$ rpki-client -vvf rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/36362e39362e3232362e302f32342d3234203d3e203633383539.roa
File: 36362e39362e3232362e302f32342d3234203d3e203633383539.roa (raw, json)
Hash identifier: Jjqo144Rv5iMjWby4rZpieutvMUMZyAG38t3DeDnhy4=
Subject key identifier: 4B:32:3C:87:88:B3:F8:19:45:3A:96:70:2F:60:B8:52:D9:4B:0D:A8
Certificate issuer: /CN=579C296CFBD13B33CD249F0CE7D1C489D7106B97
Certificate serial: 14C01ACDE737B67A865AA7EF7BE9BA8F7EC0D6C4
Authority key identifier: 57:9C:29:6C:FB:D1:3B:33:CD:24:9F:0C:E7:D1:C4:89:D7:10:6B:97
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/579C296CFBD13B33CD249F0CE7D1C489D7106B97.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/36362e39362e3232362e302f32342d3234203d3e203633383539.roa
Signing time: Sun 03 May 2026 02:27:27 +0000
ROA not before: Sun 03 May 2026 02:22:27 +0000
ROA not after: Sun 02 May 2027 02:27:27 +0000
asID: 63859
IP address blocks: 66.96.226.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/579C296CFBD13B33CD249F0CE7D1C489D7106B97.crl
rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/579C296CFBD13B33CD249F0CE7D1C489D7106B97.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/579C296CFBD13B33CD249F0CE7D1C489D7106B97.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 12:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:c0:1a:cd:e7:37:b6:7a:86:5a:a7:ef:7b:e9:ba:8f:7e:c0:d6:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=579C296CFBD13B33CD249F0CE7D1C489D7106B97
Validity
Not Before: May 3 02:22:27 2026 GMT
Not After : May 2 02:27:27 2027 GMT
Subject: CN=4B323C8788B3F819453A96702F60B852D94B0DA8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:85:52:5d:24:96:ee:47:0e:a1:32:72:7a:7b:
15:69:18:91:1e:d1:bb:67:a5:fc:d2:91:d3:17:bc:
dd:15:12:33:ed:51:ae:39:a2:be:f7:af:bc:8b:38:
81:9e:d8:77:67:79:6d:7f:1b:b7:67:f4:33:ae:b9:
ed:fa:8c:42:2e:9c:65:f5:1d:ef:9d:41:e9:9a:1b:
1b:dd:74:ee:50:56:60:3c:b9:66:19:b0:dc:dc:80:
72:4b:47:b5:ce:fc:b6:20:4e:7b:f5:25:12:01:b0:
f1:3e:2c:d0:b2:5a:4f:b6:af:b1:24:2e:36:a8:1e:
c1:0a:df:af:a7:b2:4c:51:39:1b:89:e9:61:b1:bd:
74:85:53:e5:ee:2e:cd:32:d9:14:b5:a8:c5:29:b3:
95:47:93:bf:c8:0a:a7:5d:a7:51:49:12:87:19:b3:
e2:fe:49:c5:a3:1f:51:0d:70:46:9d:14:56:83:4f:
29:c6:c8:34:10:5b:8b:2d:b9:96:9d:dc:b4:d8:7e:
0c:35:8f:c2:39:bf:32:79:28:ca:b1:2a:e6:fd:92:
1c:69:d9:17:83:3a:14:77:af:c5:01:59:bf:21:02:
91:df:ff:4b:7e:a9:06:72:07:99:66:2e:51:90:66:
4a:7b:d2:e1:a9:e5:3f:ef:11:12:74:61:80:1e:1e:
b3:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:32:3C:87:88:B3:F8:19:45:3A:96:70:2F:60:B8:52:D9:4B:0D:A8
X509v3 Authority Key Identifier:
keyid:57:9C:29:6C:FB:D1:3B:33:CD:24:9F:0C:E7:D1:C4:89:D7:10:6B:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/579C296CFBD13B33CD249F0CE7D1C489D7106B97.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/579C296CFBD13B33CD249F0CE7D1C489D7106B97.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/36362e39362e3232362e302f32342d3234203d3e203633383539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
66.96.226.0/24
Signature Algorithm: sha256WithRSAEncryption
23:ea:be:05:98:40:9d:72:b2:1e:e5:13:8b:4e:e8:60:de:e2:
e5:d6:41:a3:17:c7:82:4b:ff:79:44:b0:c0:ff:ed:29:24:29:
30:12:02:2e:ab:5a:ff:94:e3:4f:cc:0e:ec:70:80:b3:da:f2:
3b:61:14:60:df:fa:0e:1e:8c:4c:66:8b:96:28:ff:84:c7:f8:
30:25:93:06:85:53:a4:16:b2:76:3a:be:01:bf:16:bb:03:a3:
23:93:e8:df:a5:31:54:dc:0a:83:bf:6a:66:64:69:d7:43:e1:
8b:5c:b3:6a:90:54:8d:a6:33:48:67:b6:58:e9:61:d9:f2:1b:
0e:d9:b5:6b:50:72:53:72:30:f5:71:67:15:d2:7d:fb:85:7f:
f5:5e:17:e9:bd:77:4b:eb:16:78:2c:0f:69:cb:44:b7:bc:fa:
82:2a:28:ae:78:68:dc:1b:3b:28:95:f0:e7:19:81:45:95:8f:
f0:f3:23:e5:88:0b:44:e9:a1:8d:ac:6a:90:d4:ed:5a:ac:0c:
ae:ec:58:9e:3a:06:fb:74:35:86:ae:2b:24:1a:d1:65:ef:26:
3d:16:ad:22:b8:e7:62:e2:fb:ea:cd:78:b1:4e:d4:a1:16:4a:
65:24:96:53:b2:3c:c3:4c:56:74:0e:73:e6:68:f2:5e:f7:f5:
c4:2d:a6:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 23:07:14 2026 by rpki-client