$ rpki-client -vvf rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/36362e39362e3233332e302f32342d3234203d3e203633383539.roa File: 36362e39362e3233332e302f32342d3234203d3e203633383539.roa (raw, json) Hash identifier: pJREQv4nBph/BUID9qnc4ET1RZuyJMrO2PqI7wKcMB0= Subject key identifier: 2E:CB:78:05:0B:EB:87:0B:57:FD:0B:4A:77:A6:94:7D:E7:4C:B7:B4 Certificate issuer: /CN=579C296CFBD13B33CD249F0CE7D1C489D7106B97 Certificate serial: 546850B7E04B120AA86C42D76F8664D34654DE06 Authority key identifier: 57:9C:29:6C:FB:D1:3B:33:CD:24:9F:0C:E7:D1:C4:89:D7:10:6B:97 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/579C296CFBD13B33CD249F0CE7D1C489D7106B97.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/36362e39362e3233332e302f32342d3234203d3e203633383539.roa Signing time: Sun 03 May 2026 02:27:23 +0000 ROA not before: Sun 03 May 2026 02:22:23 +0000 ROA not after: Sun 02 May 2027 02:27:23 +0000 asID: 63859 IP address blocks: 66.96.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/579C296CFBD13B33CD249F0CE7D1C489D7106B97.crl rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/579C296CFBD13B33CD249F0CE7D1C489D7106B97.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/579C296CFBD13B33CD249F0CE7D1C489D7106B97.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 12:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:68:50:b7:e0:4b:12:0a:a8:6c:42:d7:6f:86:64:d3:46:54:de:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=579C296CFBD13B33CD249F0CE7D1C489D7106B97 Validity Not Before: May 3 02:22:23 2026 GMT Not After : May 2 02:27:23 2027 GMT Subject: CN=2ECB78050BEB870B57FD0B4A77A6947DE74CB7B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:53:9b:d7:59:62:75:1f:50:54:02:29:c9:87: 04:36:ce:08:d1:ec:88:64:c2:cf:30:50:aa:46:5f: de:c2:c9:ae:24:f8:48:d7:e9:de:f1:5c:16:bf:02: 11:f5:72:91:7e:91:e4:ee:4c:59:52:17:b6:5c:3a: 31:01:50:1f:c1:89:ee:2a:73:34:6a:2c:3e:b0:85: ec:c7:50:11:57:a5:a6:af:48:2f:27:c5:ac:c4:b0: 19:b8:5c:22:a4:dd:73:d2:d2:46:8d:a5:c0:fd:b5: 69:27:da:98:6c:d6:e2:25:ca:95:be:d9:0b:53:fa: 6a:4f:3b:e3:bb:7a:47:ac:00:48:b9:50:b2:5b:89: 6e:ec:fd:2e:d0:4a:9c:0f:49:76:e8:ff:a0:48:ac: b9:4e:9e:81:69:aa:f4:be:36:56:a7:fc:89:17:a7: 37:e5:83:f1:4a:40:49:50:3a:6b:20:5b:8b:0d:76: 94:ae:1a:7f:c3:6e:b3:77:5c:ea:b8:36:65:7c:59: 05:ed:72:ab:b3:88:53:de:fe:94:27:5e:9f:8e:65: e9:76:d2:77:9c:c1:52:a4:01:90:ec:f3:e7:36:56: 75:18:ed:9b:3d:8e:47:b2:b3:28:a0:77:ac:64:89: f4:e7:8d:3c:97:87:78:ed:dc:f6:f3:6f:25:34:77: 5f:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:CB:78:05:0B:EB:87:0B:57:FD:0B:4A:77:A6:94:7D:E7:4C:B7:B4 X509v3 Authority Key Identifier: keyid:57:9C:29:6C:FB:D1:3B:33:CD:24:9F:0C:E7:D1:C4:89:D7:10:6B:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/579C296CFBD13B33CD249F0CE7D1C489D7106B97.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/579C296CFBD13B33CD249F0CE7D1C489D7106B97.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/36362e39362e3233332e302f32342d3234203d3e203633383539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 66.96.233.0/24 Signature Algorithm: sha256WithRSAEncryption 9e:6a:e1:3b:e6:58:7b:f3:db:b9:64:6a:76:76:76:ed:a7:d0: 7f:bd:7d:53:ed:0c:86:6c:9e:4d:ad:08:09:6b:5f:54:41:d2: fc:bf:60:61:bd:8d:33:8e:7d:92:c6:3b:27:1e:6f:1d:65:9a: 81:7a:23:36:63:3e:f5:84:9b:e9:d3:56:b2:c3:d7:2e:18:24: bd:35:7f:f3:49:52:f5:30:b9:d0:53:05:f8:65:d8:13:07:d0: 31:08:a2:69:4b:23:fb:00:ae:78:7e:de:94:eb:f8:27:11:d7: 2c:db:c8:1f:40:83:9f:52:62:15:43:e4:fb:01:64:4c:24:a3: be:c2:cd:ac:f5:d2:40:68:e6:ce:c7:04:d8:ad:57:09:4b:a5: 67:dc:a8:54:b2:6e:62:94:2f:1b:96:3c:03:f3:55:21:9b:ba: 18:75:0e:2d:05:7b:ef:8c:e2:64:b0:a4:90:fa:f0:26:1f:de: a8:a6:67:3b:fe:0e:87:a3:03:f6:be:32:8e:7e:95:92:9e:16: 2e:d1:d5:e1:f6:0f:4e:9d:13:a8:90:5c:b2:8b:02:c6:d4:ec: d9:7c:ec:9f:35:b0:84:06:19:30:dc:7c:3d:21:02:e5:20:de: b8:9d:a8:e3:44:87:bc:5e:25:6c:fe:86:46:bb:c8:c5:f7:6e: 48:e7:b7:8f -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUVGhQt+BLEgqobELXb4Zk00ZU3gYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTc5QzI5NkNGQkQxM0IzM0NEMjQ5RjBDRTdEMUM0ODlE NzEwNkI5NzAeFw0yNjA1MDMwMjIyMjNaFw0yNzA1MDIwMjI3MjNaMDMxMTAvBgNV BAMTKDJFQ0I3ODA1MEJFQjg3MEI1N0ZEMEI0QTc3QTY5NDdERTc0Q0I3QjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSU5vXWWJ1H1BUAinJhwQ2zgjR 7Ihkws8wUKpGX97Cya4k+EjX6d7xXBa/AhH1cpF+keTuTFlSF7ZcOjEBUB/Bie4q czRqLD6whezHUBFXpaavSC8nxazEsBm4XCKk3XPS0kaNpcD9tWkn2phs1uIlypW+ 2QtT+mpPO+O7ekesAEi5ULJbiW7s/S7QSpwPSXbo/6BIrLlOnoFpqvS+Nlan/IkX pzflg/FKQElQOmsgW4sNdpSuGn/DbrN3XOq4NmV8WQXtcquziFPe/pQnXp+OZel2 0necwVKkAZDs8+c2VnUY7Zs9jkeysyigd6xkifTnjTyXh3jt3PbzbyU0d1/BAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQULst4BQvrhwtX/QtKd6aUfedMt7QwHwYDVR0j BBgwFoAUV5wpbPvROzPNJJ8M59HEidcQa5cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2JiYjI3MzQtZTVmYS00MGViLTg1OTgtYjdjZDEwMTM0M2NhLzAvNTc5QzI5NkNG QkQxM0IzM0NEMjQ5RjBDRTdEMUM0ODlENzEwNkI5Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC81NzlDMjk2Q0ZCRDEzQjMzQ0QyNDlGMENFN0QxQzQ4OUQ3MTA2 Qjk3LmNlcjCBoQYIKwYBBQUHAQsEgZQwgZEwgY4GCCsGAQUFBzALhoGBcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzNiYmIyNzM0LWU1ZmEtNDBlYi04 NTk4LWI3Y2QxMDEzNDNjYS8wLzM2MzYyZTM5MzYyZTMyMzMzMzJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDM2MzMzODM1Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABCYOkwDQYJKoZIhvcN AQELBQADggEBAJ5q4TvmWHvz27lkanZ2du2n0H+9fVPtDIZsnk2tCAlrX1RB0vy/ YGG9jTOOfZLGOycebx1lmoF6IzZjPvWEm+nTVrLD1y4YJL01f/NJUvUwudBTBfhl 2BMH0DEIomlLI/sArnh+3pTr+CcR1yzbyB9Ag59SYhVD5PsBZEwko77Czaz10kBo 5s7HBNitVwlLpWfcqFSybmKULxuWPAPzVSGbuhh1Di0Fe++M4mSwpJD68CYf3qim Zzv+DoejA/a+Mo5+lZKeFi7R1eH2D06dE6iQXLKLAsbU7Nl87J81sIQGGTDcfD0h AuUg3ridqONEh7xeJWz+hka7yMX3bkjnt48= -----END CERTIFICATE-----Generated at Wed May 13 23:07:13 2026 by rpki-client