$ rpki-client -vvf repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/36362e39362e3233372e302f32342d3234203d3e203633383539.roa File: 36362e39362e3233372e302f32342d3234203d3e203633383539.roa (raw, json) Hash identifier: 4kP9QfHyYA+4OzeOqq639x8lUwsExAOt2TIVWOFXLe4= Subject key identifier: C5:2E:91:32:1B:16:BE:6B:11:22:6C:00:89:C9:7D:C8:3E:65:03:90 Certificate issuer: /CN=7D0C886CFBAF0624029CCAE57824C3CF470E8FCF Certificate serial: 06C65880216608F4A341ACC39EF56573143C0B44 Authority key identifier: 7D:0C:88:6C:FB:AF:06:24:02:9C:CA:E5:78:24:C3:CF:47:0E:8F:CF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/36362e39362e3233372e302f32342d3234203d3e203633383539.roa Signing time: Sun 13 Jul 2025 12:00:05 +0000 ROA not before: Sun 13 Jul 2025 11:55:05 +0000 ROA not after: Sun 12 Jul 2026 12:00:05 +0000 asID: 63859 IP address blocks: 66.96.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.crl rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 18:58:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:c6:58:80:21:66:08:f4:a3:41:ac:c3:9e:f5:65:73:14:3c:0b:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7D0C886CFBAF0624029CCAE57824C3CF470E8FCF Validity Not Before: Jul 13 11:55:05 2025 GMT Not After : Jul 12 12:00:05 2026 GMT Subject: CN=C52E91321B16BE6B11226C0089C97DC83E650390 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:27:96:dd:71:fa:08:70:1e:c3:c8:37:ca:2d: c8:05:8e:64:fb:49:a9:ba:9e:44:7f:f9:8d:94:fd: ba:9b:e2:f2:4f:4d:c6:d8:c1:95:f6:ef:78:3d:15: 9e:dd:d4:57:06:47:44:5a:93:c2:c9:70:77:fa:cd: e8:16:89:42:68:46:3e:7b:19:30:67:ed:39:b0:da: 05:e9:b9:4c:e3:6b:5d:bf:e8:ad:fc:16:ac:df:e3: d0:cb:31:c4:34:8b:53:1e:a3:7c:37:66:f5:ba:38: 07:31:00:10:51:c5:e3:75:18:16:cc:b3:e6:09:a3: cc:4d:d3:8f:60:18:70:db:05:88:49:df:e9:d8:e1: 75:7a:ca:16:64:99:c9:c3:93:83:2d:22:19:46:ab: 5a:ca:e0:a5:22:68:b9:79:27:24:cb:ea:94:71:23: cd:30:1f:7f:9f:55:52:c4:7f:0e:a9:5d:d0:a4:27: 84:98:21:94:62:88:20:7c:c7:f0:b4:d0:e2:f4:78: fa:23:0b:58:63:44:09:f8:fd:65:a5:68:ec:6c:b2: 5e:02:87:13:37:17:4d:c7:f5:8c:64:68:cc:f0:2d: 8c:6e:08:23:23:5b:f3:58:d0:54:08:d2:88:13:e9: a4:59:9c:ed:8b:ee:5a:de:2e:0a:3d:9a:f9:e1:6e: b4:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:2E:91:32:1B:16:BE:6B:11:22:6C:00:89:C9:7D:C8:3E:65:03:90 X509v3 Authority Key Identifier: keyid:7D:0C:88:6C:FB:AF:06:24:02:9C:CA:E5:78:24:C3:CF:47:0E:8F:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/36362e39362e3233372e302f32342d3234203d3e203633383539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 66.96.237.0/24 Signature Algorithm: sha256WithRSAEncryption 4f:ef:9e:b9:b2:d1:1a:b7:90:12:b5:3c:22:77:2c:01:0d:36: dc:95:0a:1e:06:f3:b2:2a:1c:77:30:45:0d:64:33:a5:17:5c: f2:52:de:30:b6:92:37:86:42:e5:6b:c8:cf:0b:2a:d1:dd:4d: e7:42:a5:f6:8f:39:5b:19:da:78:c0:f7:b1:db:b7:a2:64:94: a0:44:10:c5:09:26:0a:1d:6d:d0:a3:67:e3:0d:b9:37:26:31: 5b:06:7e:93:0a:1a:56:c7:6c:44:93:eb:01:5e:85:07:4b:68: ae:35:3f:0c:54:ad:7d:e7:8f:74:b9:08:b2:49:1e:fd:59:36: 71:8f:5d:7a:85:e1:00:f3:61:ef:95:ac:e3:f3:42:20:dc:c8: b8:e0:ae:66:3d:1a:a1:3c:e5:02:16:96:f6:e3:e1:d1:67:1f: 15:a9:00:cb:07:3d:fd:41:e1:77:7d:cd:33:77:b5:66:20:5f: 78:cf:f9:b4:8f:9c:aa:f5:b0:65:47:24:6b:a7:f3:1b:80:80: 01:e9:7f:3b:f4:5a:26:b5:09:a1:c7:a4:3d:25:42:ca:f4:1e: 9a:6f:18:89:aa:57:9f:1a:e5:67:cf:fe:e8:99:84:ea:d1:87: 60:96:1d:1f:3b:10:f1:a3:fe:69:a9:43:c8:de:47:b5:c2:84: 4c:17:e1:5c -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUBsZYgCFmCPSjQazDnvVlcxQ8C0QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0QwQzg4NkNGQkFGMDYyNDAyOUNDQUU1NzgyNEMzQ0Y0 NzBFOEZDRjAeFw0yNTA3MTMxMTU1MDVaFw0yNjA3MTIxMjAwMDVaMDMxMTAvBgNV BAMTKEM1MkU5MTMyMUIxNkJFNkIxMTIyNkMwMDg5Qzk3REM4M0U2NTAzOTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEJ5bdcfoIcB7DyDfKLcgFjmT7 Sam6nkR/+Y2U/bqb4vJPTcbYwZX273g9FZ7d1FcGR0Rak8LJcHf6zegWiUJoRj57 GTBn7Tmw2gXpuUzja12/6K38Fqzf49DLMcQ0i1Meo3w3ZvW6OAcxABBRxeN1GBbM s+YJo8xN049gGHDbBYhJ3+nY4XV6yhZkmcnDk4MtIhlGq1rK4KUiaLl5JyTL6pRx I80wH3+fVVLEfw6pXdCkJ4SYIZRiiCB8x/C00OL0ePojC1hjRAn4/WWlaOxssl4C hxM3F03H9YxkaMzwLYxuCCMjW/NY0FQI0ogT6aRZnO2L7lreLgo9mvnhbrSnAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUxS6RMhsWvmsRImwAicl9yD5lA5AwHwYDVR0j BBgwFoAUfQyIbPuvBiQCnMrleCTDz0cOj88wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YmJiMjczNC1lNWZhLTQwZWItODU5OC1iN2NkMTAxMzQzY2EvMS83RDBDODg2Q0ZC QUYwNjI0MDI5Q0NBRTU3ODI0QzNDRjQ3MEU4RkNGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvN0QwQzg4NkNGQkFGMDYyNDAyOUNDQUU1NzgyNEMzQ0Y0NzBF OEZDRi5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzNiYmIyNzM0LWU1ZmEtNDBlYi04 NTk4LWI3Y2QxMDEzNDNjYS8xLzM2MzYyZTM5MzYyZTMyMzMzNzJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDM2MzMzODM1Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABCYO0wDQYJKoZIhvcN AQELBQADggEBAE/vnrmy0Rq3kBK1PCJ3LAENNtyVCh4G87IqHHcwRQ1kM6UXXPJS 3jC2kjeGQuVryM8LKtHdTedCpfaPOVsZ2njA97Hbt6JklKBEEMUJJgodbdCjZ+MN uTcmMVsGfpMKGlbHbEST6wFehQdLaK41PwxUrX3nj3S5CLJJHv1ZNnGPXXqF4QDz Ye+VrOPzQiDcyLjgrmY9GqE85QIWlvbj4dFnHxWpAMsHPf1B4Xd9zTN3tWYgX3jP +bSPnKr1sGVHJGun8xuAgAHpfzv0Wia1CaHHpD0lQsr0HppvGImqV58a5WfP/uiZ hOrRh2CWHR87EPGj/mmpQ8jeR7XChEwX4Vw= -----END CERTIFICATE-----Generated at Sat Aug 23 16:30:04 2025 by rpki-client