$ rpki-client -vvf rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/36362e39362e3233352e302f32342d3234203d3e203633383539.roa File: 36362e39362e3233352e302f32342d3234203d3e203633383539.roa (raw, json) Hash identifier: jVjDVQ3hghVCPs948aasL3AVOZNwNJB2rut6pPSG6bI= Subject key identifier: 49:E9:AD:B5:C1:22:EE:15:21:F5:BD:C4:27:8C:4E:1E:E4:B5:8E:BA Certificate issuer: /CN=579C296CFBD13B33CD249F0CE7D1C489D7106B97 Certificate serial: 36E39D19203BB77678B445BA3ACB9902655B6422 Authority key identifier: 57:9C:29:6C:FB:D1:3B:33:CD:24:9F:0C:E7:D1:C4:89:D7:10:6B:97 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/579C296CFBD13B33CD249F0CE7D1C489D7106B97.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/36362e39362e3233352e302f32342d3234203d3e203633383539.roa Signing time: Sun 03 May 2026 02:27:27 +0000 ROA not before: Sun 03 May 2026 02:22:27 +0000 ROA not after: Sun 02 May 2027 02:27:27 +0000 asID: 63859 IP address blocks: 66.96.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/579C296CFBD13B33CD249F0CE7D1C489D7106B97.crl rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/579C296CFBD13B33CD249F0CE7D1C489D7106B97.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/579C296CFBD13B33CD249F0CE7D1C489D7106B97.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 12:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:e3:9d:19:20:3b:b7:76:78:b4:45:ba:3a:cb:99:02:65:5b:64:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=579C296CFBD13B33CD249F0CE7D1C489D7106B97 Validity Not Before: May 3 02:22:27 2026 GMT Not After : May 2 02:27:27 2027 GMT Subject: CN=49E9ADB5C122EE1521F5BDC4278C4E1EE4B58EBA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:a9:fb:6a:c4:a5:f4:3c:73:6d:b0:3c:a4:c8: e2:55:2b:9a:78:d3:5c:09:fd:40:9c:1f:38:2e:66: 98:38:78:f3:1d:16:30:ac:75:14:5a:56:7b:48:ef: 67:66:6f:d7:f7:f7:01:8f:d9:1b:57:8e:81:fc:6a: a4:07:52:f7:aa:81:11:1a:c2:81:2e:67:30:de:2b: 5e:f5:db:02:c9:37:e8:7a:5d:f2:da:83:74:e3:83: 7f:95:43:ce:b4:9b:4b:12:38:80:b3:3b:0a:04:95: 64:15:9e:af:c7:0f:3c:b7:29:c4:69:74:83:3e:07: ad:a9:69:b8:10:f2:49:ba:6a:ca:86:75:64:59:2b: 45:4a:4b:a4:02:49:04:7d:2a:f9:e1:63:d7:cb:90: 2f:b9:d4:c5:e0:66:09:86:14:7b:43:95:47:a4:0f: 4d:2e:1a:2a:cd:ff:26:00:d5:88:7b:4d:5d:c8:26: fe:ba:19:86:1c:8e:32:87:d1:02:ed:5d:bd:0e:4b: 71:eb:57:b3:9d:49:63:b2:30:f4:d2:8c:d0:aa:49: e0:30:1d:8f:a7:6b:04:d1:c2:a1:11:f8:a4:78:50: 90:f7:2e:d7:c1:f6:f4:e3:be:e3:c0:4c:68:ac:5a: b8:8b:93:93:5f:7a:f3:14:0b:6f:79:b3:b9:93:06: d8:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:E9:AD:B5:C1:22:EE:15:21:F5:BD:C4:27:8C:4E:1E:E4:B5:8E:BA X509v3 Authority Key Identifier: keyid:57:9C:29:6C:FB:D1:3B:33:CD:24:9F:0C:E7:D1:C4:89:D7:10:6B:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/579C296CFBD13B33CD249F0CE7D1C489D7106B97.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/579C296CFBD13B33CD249F0CE7D1C489D7106B97.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/36362e39362e3233352e302f32342d3234203d3e203633383539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 66.96.235.0/24 Signature Algorithm: sha256WithRSAEncryption a7:2c:a0:07:da:9e:09:33:f0:35:c0:fb:fb:d2:72:87:66:7d: 3b:5c:d8:24:b2:0f:fc:4e:53:c0:74:dd:13:87:bf:a4:a2:dc: 82:62:8c:10:9a:3d:ee:f6:73:a0:c6:54:57:80:63:27:8d:58: 66:4c:99:22:bf:cf:4d:a2:b4:a6:a9:b6:a9:9c:8d:78:60:c8: 4d:19:f6:16:58:0a:32:80:ec:f7:fd:a7:a8:64:73:cf:d4:30: 0b:3a:33:15:87:8f:47:7b:39:80:3b:e5:d3:3d:8d:94:10:84: c8:29:13:b0:3c:ed:78:1f:c6:fa:ad:01:6c:e1:4e:61:f1:76: a8:a1:59:89:05:45:91:e3:46:6a:73:91:58:d9:2d:b7:e7:86: b2:3e:d3:c8:75:ef:9f:8c:fb:d3:dd:de:99:11:52:2d:43:9f: 91:0d:37:10:02:f5:3b:b5:17:51:63:7c:9c:25:2b:b0:fe:36: 21:29:27:79:90:81:38:39:73:9a:7e:3c:5f:65:56:c2:24:47: 59:c1:1e:dc:d6:e6:d2:f7:38:8f:03:c1:ee:c5:75:09:6f:8a: 3c:f2:b2:e6:13:1c:b7:d8:b3:03:59:81:b4:bd:f1:b2:da:ce: e0:64:da:3e:78:4f:7b:31:67:4c:d4:9e:65:fb:ee:ba:6e:30: dd:de:52:8b -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUNuOdGSA7t3Z4tEW6OsuZAmVbZCIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTc5QzI5NkNGQkQxM0IzM0NEMjQ5RjBDRTdEMUM0ODlE NzEwNkI5NzAeFw0yNjA1MDMwMjIyMjdaFw0yNzA1MDIwMjI3MjdaMDMxMTAvBgNV BAMTKDQ5RTlBREI1QzEyMkVFMTUyMUY1QkRDNDI3OEM0RTFFRTRCNThFQkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbqftqxKX0PHNtsDykyOJVK5p4 01wJ/UCcHzguZpg4ePMdFjCsdRRaVntI72dmb9f39wGP2RtXjoH8aqQHUveqgREa woEuZzDeK1712wLJN+h6XfLag3Tjg3+VQ860m0sSOICzOwoElWQVnq/HDzy3KcRp dIM+B62pabgQ8km6asqGdWRZK0VKS6QCSQR9KvnhY9fLkC+51MXgZgmGFHtDlUek D00uGirN/yYA1Yh7TV3IJv66GYYcjjKH0QLtXb0OS3HrV7OdSWOyMPTSjNCqSeAw HY+nawTRwqER+KR4UJD3LtfB9vTjvuPATGisWriLk5NfevMUC295s7mTBtgRAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUSemttcEi7hUh9b3EJ4xOHuS1jrowHwYDVR0j BBgwFoAUV5wpbPvROzPNJJ8M59HEidcQa5cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2JiYjI3MzQtZTVmYS00MGViLTg1OTgtYjdjZDEwMTM0M2NhLzAvNTc5QzI5NkNG QkQxM0IzM0NEMjQ5RjBDRTdEMUM0ODlENzEwNkI5Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC81NzlDMjk2Q0ZCRDEzQjMzQ0QyNDlGMENFN0QxQzQ4OUQ3MTA2 Qjk3LmNlcjCBoQYIKwYBBQUHAQsEgZQwgZEwgY4GCCsGAQUFBzALhoGBcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzNiYmIyNzM0LWU1ZmEtNDBlYi04 NTk4LWI3Y2QxMDEzNDNjYS8wLzM2MzYyZTM5MzYyZTMyMzMzNTJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDM2MzMzODM1Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABCYOswDQYJKoZIhvcN AQELBQADggEBAKcsoAfangkz8DXA+/vScodmfTtc2CSyD/xOU8B03ROHv6Si3IJi jBCaPe72c6DGVFeAYyeNWGZMmSK/z02itKaptqmcjXhgyE0Z9hZYCjKA7Pf9p6hk c8/UMAs6MxWHj0d7OYA75dM9jZQQhMgpE7A87XgfxvqtAWzhTmHxdqihWYkFRZHj RmpzkVjZLbfnhrI+08h175+M+9Pd3pkRUi1Dn5ENNxAC9Tu1F1FjfJwlK7D+NiEp J3mQgTg5c5p+PF9lVsIkR1nBHtzW5tL3OI8Dwe7FdQlvijzysuYTHLfYswNZgbS9 8bLazuBk2j54T3sxZ0zUnmX77rpuMN3eUos= -----END CERTIFICATE-----Generated at Wed May 13 23:07:15 2026 by rpki-client