$ rpki-client -vvf repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/36362e39362e3233392e302f32342d3234203d3e203633383539.roa File: 36362e39362e3233392e302f32342d3234203d3e203633383539.roa (raw, json) Hash identifier: MXuffFLREl0AnKg3egKtJAWj7FEtIsjNHkzddXaftbo= Subject key identifier: F1:73:A4:1B:2E:27:D8:3A:40:B0:D1:15:C6:F2:5A:FB:85:90:A4:06 Certificate issuer: /CN=7D0C886CFBAF0624029CCAE57824C3CF470E8FCF Certificate serial: 6827C9DFAC8CE754451A6C606B1D214D1F4CEE96 Authority key identifier: 7D:0C:88:6C:FB:AF:06:24:02:9C:CA:E5:78:24:C3:CF:47:0E:8F:CF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/36362e39362e3233392e302f32342d3234203d3e203633383539.roa Signing time: Sun 13 Jul 2025 12:00:03 +0000 ROA not before: Sun 13 Jul 2025 11:55:03 +0000 ROA not after: Sun 12 Jul 2026 12:00:03 +0000 asID: 63859 IP address blocks: 66.96.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.crl rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 18:58:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:27:c9:df:ac:8c:e7:54:45:1a:6c:60:6b:1d:21:4d:1f:4c:ee:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7D0C886CFBAF0624029CCAE57824C3CF470E8FCF Validity Not Before: Jul 13 11:55:03 2025 GMT Not After : Jul 12 12:00:03 2026 GMT Subject: CN=F173A41B2E27D83A40B0D115C6F25AFB8590A406 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:e8:6c:66:cf:85:19:18:72:67:5f:ef:8b:9f: 4b:48:66:c5:d5:93:53:09:12:a5:7e:7b:db:1a:2c: eb:73:1a:fe:66:59:9c:5b:c2:1d:2e:e4:8a:1e:1e: 6d:9a:e4:06:81:6b:2b:e0:fd:7c:eb:c3:17:16:f3: 67:85:aa:27:05:d2:db:f9:1f:83:c9:cc:0d:65:4b: 04:56:d3:cc:0d:6f:04:f1:ca:ff:ff:2f:e1:d8:f6: 4f:bc:d1:3f:43:9d:13:cd:66:a2:7d:27:72:d9:05: 1d:d1:b9:d1:72:6a:a5:02:0c:1a:42:b4:1e:56:02: 6e:1b:5f:da:05:60:dc:8c:17:fa:7c:8b:07:30:ae: 68:24:93:9e:a7:9e:be:a0:23:33:5a:71:06:5f:9a: 9d:52:6e:f7:b9:90:83:73:8d:8c:af:e5:7e:7a:48: de:79:44:4e:9d:81:07:cd:5a:0a:28:b6:52:b1:02: c6:04:02:95:02:41:69:76:b5:f8:df:6b:c0:93:77: ec:96:f8:a5:b9:64:0f:19:a5:a9:86:15:d0:2d:d2: 93:d8:77:0c:7a:70:56:4c:7e:d1:ac:e0:ed:c0:09: 5d:71:21:83:9a:ad:47:a1:b8:39:31:3e:ac:e4:86: 44:97:ca:9c:7c:69:2b:c1:db:d8:74:cc:99:93:78: c4:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:73:A4:1B:2E:27:D8:3A:40:B0:D1:15:C6:F2:5A:FB:85:90:A4:06 X509v3 Authority Key Identifier: keyid:7D:0C:88:6C:FB:AF:06:24:02:9C:CA:E5:78:24:C3:CF:47:0E:8F:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/36362e39362e3233392e302f32342d3234203d3e203633383539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 66.96.239.0/24 Signature Algorithm: sha256WithRSAEncryption 5a:3b:13:f7:7c:2d:65:82:b7:7a:07:6d:15:e2:e2:65:a7:3a: eb:43:13:7d:e2:8d:5f:c9:e6:6f:fe:05:7d:cd:19:3e:92:1f: a9:b5:80:8e:2d:65:e5:a8:05:20:9f:b4:bc:2c:fd:f4:24:9d: d2:49:fb:f2:b1:45:cd:6f:59:2f:71:b7:d8:5c:bc:98:01:27: 1f:01:fb:15:76:e9:f8:cf:bc:39:a0:cd:49:ad:83:5b:4c:6c: 34:60:4c:21:0d:8a:bc:24:d2:9d:ac:b9:95:d2:7b:81:ee:ff: 1c:47:05:2a:9b:8b:1f:cb:e4:73:28:99:71:83:0f:69:c9:4d: 28:30:24:e7:99:05:59:1d:61:81:1a:bc:8c:29:00:48:01:71: c5:04:f4:4a:5c:8a:ed:64:da:5a:a9:00:9e:2d:1d:90:18:5d: 9b:0c:99:a1:cc:74:40:3a:4d:3c:5b:54:3e:9d:fd:e8:cd:29: 80:10:70:1c:c8:75:ef:fb:1a:9c:60:d5:58:c7:a0:e3:ad:a7: 5e:9c:7d:73:63:1c:f3:20:03:a1:11:e4:cf:a6:c1:29:8e:b6: 6c:34:e9:20:ec:12:fb:cd:31:2b:69:f9:e0:61:2e:a3:50:b0: 83:a0:dd:f6:7b:b7:52:13:a8:fc:2b:ae:08:0c:47:1a:3b:f0: 9f:1d:0c:d7 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUaCfJ36yM51RFGmxgax0hTR9M7pYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0QwQzg4NkNGQkFGMDYyNDAyOUNDQUU1NzgyNEMzQ0Y0 NzBFOEZDRjAeFw0yNTA3MTMxMTU1MDNaFw0yNjA3MTIxMjAwMDNaMDMxMTAvBgNV BAMTKEYxNzNBNDFCMkUyN0Q4M0E0MEIwRDExNUM2RjI1QUZCODU5MEE0MDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCa6Gxmz4UZGHJnX++Ln0tIZsXV k1MJEqV+e9saLOtzGv5mWZxbwh0u5IoeHm2a5AaBayvg/XzrwxcW82eFqicF0tv5 H4PJzA1lSwRW08wNbwTxyv//L+HY9k+80T9DnRPNZqJ9J3LZBR3RudFyaqUCDBpC tB5WAm4bX9oFYNyMF/p8iwcwrmgkk56nnr6gIzNacQZfmp1Sbve5kINzjYyv5X56 SN55RE6dgQfNWgootlKxAsYEApUCQWl2tfjfa8CTd+yW+KW5ZA8ZpamGFdAt0pPY dwx6cFZMftGs4O3ACV1xIYOarUehuDkxPqzkhkSXypx8aSvB29h0zJmTeMQVAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQU8XOkGy4n2DpAsNEVxvJa+4WQpAYwHwYDVR0j BBgwFoAUfQyIbPuvBiQCnMrleCTDz0cOj88wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YmJiMjczNC1lNWZhLTQwZWItODU5OC1iN2NkMTAxMzQzY2EvMS83RDBDODg2Q0ZC QUYwNjI0MDI5Q0NBRTU3ODI0QzNDRjQ3MEU4RkNGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvN0QwQzg4NkNGQkFGMDYyNDAyOUNDQUU1NzgyNEMzQ0Y0NzBF OEZDRi5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzNiYmIyNzM0LWU1ZmEtNDBlYi04 NTk4LWI3Y2QxMDEzNDNjYS8xLzM2MzYyZTM5MzYyZTMyMzMzOTJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDM2MzMzODM1Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABCYO8wDQYJKoZIhvcN AQELBQADggEBAFo7E/d8LWWCt3oHbRXi4mWnOutDE33ijV/J5m/+BX3NGT6SH6m1 gI4tZeWoBSCftLws/fQkndJJ+/KxRc1vWS9xt9hcvJgBJx8B+xV26fjPvDmgzUmt g1tMbDRgTCENirwk0p2suZXSe4Hu/xxHBSqbix/L5HMomXGDD2nJTSgwJOeZBVkd YYEavIwpAEgBccUE9Epciu1k2lqpAJ4tHZAYXZsMmaHMdEA6TTxbVD6d/ejNKYAQ cBzIde/7Gpxg1VjHoOOtp16cfXNjHPMgA6ER5M+mwSmOtmw06SDsEvvNMStp+eBh LqNQsIOg3fZ7t1ITqPwrrggMRxo78J8dDNc= -----END CERTIFICATE-----Generated at Sat Aug 23 21:05:13 2025 by rpki-client