
$ rpki-client -vvf rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/36362e39362e3233392e302f32342d3234203d3e203633383539.roa
File: 36362e39362e3233392e302f32342d3234203d3e203633383539.roa (raw, json)
Hash identifier: TWtH0snkmyvPbM3KXTxVuZ8snRCPYMLTUgWDmAZ2ibE=
Subject key identifier: F7:3F:A3:72:BD:01:03:7F:54:12:60:1F:B5:D9:9C:6C:3F:AC:59:2B
Certificate issuer: /CN=579C296CFBD13B33CD249F0CE7D1C489D7106B97
Certificate serial: 76170A375CB1AA684A0C38F385D7EB698FCB95C9
Authority key identifier: 57:9C:29:6C:FB:D1:3B:33:CD:24:9F:0C:E7:D1:C4:89:D7:10:6B:97
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/579C296CFBD13B33CD249F0CE7D1C489D7106B97.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/36362e39362e3233392e302f32342d3234203d3e203633383539.roa
Signing time: Sun 03 May 2026 02:27:25 +0000
ROA not before: Sun 03 May 2026 02:22:25 +0000
ROA not after: Sun 02 May 2027 02:27:25 +0000
asID: 63859
IP address blocks: 66.96.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/579C296CFBD13B33CD249F0CE7D1C489D7106B97.crl
rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/579C296CFBD13B33CD249F0CE7D1C489D7106B97.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/579C296CFBD13B33CD249F0CE7D1C489D7106B97.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 12:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:17:0a:37:5c:b1:aa:68:4a:0c:38:f3:85:d7:eb:69:8f:cb:95:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=579C296CFBD13B33CD249F0CE7D1C489D7106B97
Validity
Not Before: May 3 02:22:25 2026 GMT
Not After : May 2 02:27:25 2027 GMT
Subject: CN=F73FA372BD01037F5412601FB5D99C6C3FAC592B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:97:db:51:fd:f1:60:5d:03:32:55:e8:8a:d8:
8d:dc:1e:77:4a:fe:61:b1:7b:eb:6e:cf:b2:4c:43:
9f:0c:bc:08:28:15:f1:38:e5:24:fa:39:49:e2:41:
9f:ed:02:51:2a:bb:aa:e4:7b:89:c0:1c:b8:b0:d2:
0b:03:63:8b:fb:38:77:e4:c9:bf:d8:6c:e3:12:b5:
3b:57:b1:89:98:a5:1a:95:33:e6:c2:a0:8c:fe:93:
66:eb:8c:39:b7:a3:bd:45:cb:9f:b4:d0:c1:dd:92:
ea:ed:4f:c3:d8:b1:52:d7:a9:09:5f:e9:6c:41:b3:
73:59:f3:b4:6f:57:11:48:31:0f:f8:9f:1f:fb:2b:
75:26:61:64:58:6d:43:15:4f:b7:cf:9e:ae:ec:6f:
d1:1b:1a:4f:8f:61:a0:ea:fd:dc:1b:45:78:8e:fa:
39:85:e4:16:13:97:71:9e:7d:c6:81:54:c6:32:d9:
c3:7a:9d:7f:5a:f2:84:01:ec:4b:04:2a:3e:9c:21:
02:95:f8:10:c6:de:a0:98:7e:8b:db:84:71:a4:a5:
18:72:ad:89:b7:27:93:19:b8:8a:44:12:d2:b0:b8:
1c:29:64:41:e6:10:15:2c:86:ac:40:19:7e:f7:5d:
8a:2b:56:cd:3a:aa:5c:73:c4:20:c7:1d:6a:8f:bf:
1e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:3F:A3:72:BD:01:03:7F:54:12:60:1F:B5:D9:9C:6C:3F:AC:59:2B
X509v3 Authority Key Identifier:
keyid:57:9C:29:6C:FB:D1:3B:33:CD:24:9F:0C:E7:D1:C4:89:D7:10:6B:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/579C296CFBD13B33CD249F0CE7D1C489D7106B97.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/579C296CFBD13B33CD249F0CE7D1C489D7106B97.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/36362e39362e3233392e302f32342d3234203d3e203633383539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
66.96.239.0/24
Signature Algorithm: sha256WithRSAEncryption
24:4e:30:bc:b9:24:1a:ce:d5:d7:43:6f:4c:44:b2:de:ee:b9:
69:c1:65:92:7a:8a:3e:e3:45:a0:5c:f2:01:e4:1d:3e:e0:f7:
b0:08:4c:03:66:85:c9:f3:7b:f5:ec:2f:c0:47:87:90:10:bb:
29:6c:a1:f3:0c:53:b8:cc:3e:f5:c3:64:eb:5c:e5:89:c3:19:
08:45:9d:ea:11:5b:41:3f:35:9d:5e:f4:25:03:a1:7a:e6:e2:
c8:3d:23:44:69:61:b8:8c:04:a3:91:cb:22:77:76:6e:59:2e:
81:0e:9f:d3:25:39:ec:d0:85:fd:f0:2c:97:3a:8a:2a:00:42:
61:8c:70:17:a6:30:96:24:d9:4b:02:f5:bb:bf:df:04:e3:e5:
a2:64:ee:92:b1:19:83:e6:a2:40:59:13:be:a2:5a:4f:db:18:
da:9c:c4:75:59:c7:d8:e5:db:4b:0c:01:c4:5b:fa:ea:d3:51:
9c:e6:16:12:c3:f1:68:72:43:ec:07:16:ad:21:5d:58:fe:ab:
ad:20:b6:e6:f7:ef:7f:1f:6b:15:3f:44:6a:8f:d8:58:3b:a0:
0f:bb:c7:e1:b8:bb:b0:eb:fd:88:06:3d:a0:54:42:8c:a0:fc:
b0:25:93:1c:75:75:3b:1c:50:8b:74:38:59:6d:1c:c0:67:7d:
5f:89:3e:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 23:07:15 2026 by rpki-client