$ rpki-client -vvf repo-rpki.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/33362e35302e3231362e302f32332d3233203d3e20313437313238.roa File: 33362e35302e3231362e302f32332d3233203d3e20313437313238.roa (raw, json) Hash identifier: vcGZX4iuBt1A6+2sE99JWAst4OX3Kku9u32aVhGx/Cw= Subject key identifier: 2D:09:A8:A6:D4:4D:4F:11:A9:41:3D:47:7A:3F:A7:C2:7E:F3:29:2E Certificate issuer: /CN=6DBB100D8D4669AB8A5C7EE057228ED67A98099E Certificate serial: 2D3CDBD9DA3649632EC6A469385511EDB9698F44 Authority key identifier: 6D:BB:10:0D:8D:46:69:AB:8A:5C:7E:E0:57:22:8E:D6:7A:98:09:9E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DBB100D8D4669AB8A5C7EE057228ED67A98099E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/33362e35302e3231362e302f32332d3233203d3e20313437313238.roa Signing time: Sat 14 Mar 2026 13:00:01 +0000 ROA not before: Sat 14 Mar 2026 12:55:01 +0000 ROA not after: Sat 13 Mar 2027 13:00:01 +0000 asID: 147128 IP address blocks: 36.50.216.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/6DBB100D8D4669AB8A5C7EE057228ED67A98099E.crl rsync://repo-rpki.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/6DBB100D8D4669AB8A5C7EE057228ED67A98099E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DBB100D8D4669AB8A5C7EE057228ED67A98099E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 04:12:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:3c:db:d9:da:36:49:63:2e:c6:a4:69:38:55:11:ed:b9:69:8f:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6DBB100D8D4669AB8A5C7EE057228ED67A98099E Validity Not Before: Mar 14 12:55:01 2026 GMT Not After : Mar 13 13:00:01 2027 GMT Subject: CN=2D09A8A6D44D4F11A9413D477A3FA7C27EF3292E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:28:66:56:70:2c:eb:c3:fb:b4:28:78:76:6b: 5b:6b:be:01:d2:5a:b4:e3:c9:50:b1:5e:41:b6:ad: 76:78:1e:d1:29:4b:e0:30:af:80:fc:23:19:9a:65: 7b:b6:29:d3:a6:21:5a:4f:ac:69:80:f4:98:da:57: 25:c9:95:e6:27:16:6f:7c:e5:a8:ec:b9:23:27:28: 59:cc:08:dd:6c:52:4d:40:15:96:1b:50:a1:a2:d4: 81:28:c8:7d:08:f4:ee:c1:fe:37:d3:3f:62:ed:40: 9b:bd:7c:54:4d:ea:02:08:b2:bf:ab:b4:12:62:e1: 6f:ad:14:69:13:65:bf:e6:57:58:96:3c:2e:e2:28: e3:10:fc:c7:a6:75:c1:f5:3d:14:90:ca:b0:2b:36: 45:78:6b:30:86:8f:ed:80:f1:4f:85:70:58:b4:48: 92:55:ef:35:4c:17:9a:a9:af:b6:52:91:75:30:07: c3:0d:e8:01:17:e6:24:d8:3f:14:49:3c:a8:9a:7a: 7a:8f:70:87:a5:9d:43:74:f9:9d:14:c0:2f:21:47: e1:73:46:11:36:e2:0f:4d:35:2a:4f:ff:95:80:5e: 45:ac:90:74:1b:28:d7:b4:4d:6b:a0:ec:f9:6b:c4: 92:7c:4d:bd:d8:f1:ee:8d:38:bf:20:5f:73:68:cd: 4a:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:09:A8:A6:D4:4D:4F:11:A9:41:3D:47:7A:3F:A7:C2:7E:F3:29:2E X509v3 Authority Key Identifier: keyid:6D:BB:10:0D:8D:46:69:AB:8A:5C:7E:E0:57:22:8E:D6:7A:98:09:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/6DBB100D8D4669AB8A5C7EE057228ED67A98099E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DBB100D8D4669AB8A5C7EE057228ED67A98099E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/33362e35302e3231362e302f32332d3233203d3e20313437313238.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 36.50.216.0/23 Signature Algorithm: sha256WithRSAEncryption 0a:63:46:da:25:4f:8f:72:4b:ef:f3:bf:c7:4d:94:04:a2:f4: ea:a8:04:5a:6d:e3:45:bf:90:ef:7e:c3:85:c4:54:4f:37:b2: b9:fa:7e:6f:9d:db:88:5a:35:f7:16:d1:c2:90:83:99:bd:7f: c3:97:3f:df:52:95:5f:00:39:2c:51:d5:1f:cb:49:c2:00:68: 46:d2:a4:5f:ef:c9:a6:4e:b0:3f:8d:08:01:76:75:e1:c6:00: d1:9d:79:9f:79:9f:a9:60:34:94:41:aa:3d:51:c7:11:48:0c: 14:d7:e2:02:2e:3d:70:36:12:66:39:05:0a:fb:1d:6b:d1:0b: 9b:40:5e:bc:a8:6d:2c:18:7e:15:fd:13:30:c8:17:22:3c:34: bb:cb:8c:2c:fc:37:a9:46:40:a2:a5:a7:9f:f7:b9:b1:4e:fe: 4a:fa:c2:e9:b2:ca:63:04:b0:7f:cc:47:82:b4:f8:6f:75:3f: 50:cf:9a:5e:af:a7:03:8b:6d:ef:82:22:f8:e1:6d:dd:9d:27: f2:ac:4e:de:7f:d4:45:60:69:a8:3e:78:4c:f5:25:46:55:3a: 6d:d2:dc:fa:00:aa:25:54:46:ee:2e:5a:55:c6:41:14:02:79: 04:78:74:6f:bb:17:77:df:65:11:7b:a7:95:a1:42:c3:f9:1a: 72:14:02:50 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIULTzb2do2SWMuxqRpOFUR7blpj0QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkRCQjEwMEQ4RDQ2NjlBQjhBNUM3RUUwNTcyMjhFRDY3 QTk4MDk5RTAeFw0yNjAzMTQxMjU1MDFaFw0yNzAzMTMxMzAwMDFaMDMxMTAvBgNV BAMTKDJEMDlBOEE2RDQ0RDRGMTFBOTQxM0Q0NzdBM0ZBN0MyN0VGMzI5MkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXKGZWcCzrw/u0KHh2a1trvgHS WrTjyVCxXkG2rXZ4HtEpS+Awr4D8IxmaZXu2KdOmIVpPrGmA9JjaVyXJleYnFm98 5ajsuSMnKFnMCN1sUk1AFZYbUKGi1IEoyH0I9O7B/jfTP2LtQJu9fFRN6gIIsr+r tBJi4W+tFGkTZb/mV1iWPC7iKOMQ/MemdcH1PRSQyrArNkV4azCGj+2A8U+FcFi0 SJJV7zVMF5qpr7ZSkXUwB8MN6AEX5iTYPxRJPKiaenqPcIelnUN0+Z0UwC8hR+Fz RhE24g9NNSpP/5WAXkWskHQbKNe0TWug7PlrxJJ8Tb3Y8e6NOL8gX3NozUo7AgMB AAGjggIyMIICLjAdBgNVHQ4EFgQULQmoptRNTxGpQT1Hej+nwn7zKS4wHwYDVR0j BBgwFoAUbbsQDY1GaauKXH7gVyKO1nqYCZ4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NTk4OWZhZi00OGZiLTRmNDAtOWU3Ny0yNDNkNzhhNWI1YzQvMC82REJCMTAwRDhE NDY2OUFCOEE1QzdFRTA1NzIyOEVENjdBOTgwOTlFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkRCQjEwMEQ4RDQ2NjlBQjhBNUM3RUUwNTcyMjhFRDY3QTk4 MDk5RS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzY1OTg5ZmFmLTQ4ZmItNGY0MC05 ZTc3LTI0M2Q3OGE1YjVjNC8wLzMzMzYyZTM1MzAyZTMyMzEzNjJlMzAyZjMyMzMy ZDMyMzMyMDNkM2UyMDMxMzQzNzMxMzIzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEASQy2DANBgkqhkiG 9w0BAQsFAAOCAQEACmNG2iVPj3JL7/O/x02UBKL06qgEWm3jRb+Q737DhcRUTzey ufp+b53biFo19xbRwpCDmb1/w5c/31KVXwA5LFHVH8tJwgBoRtKkX+/Jpk6wP40I AXZ14cYA0Z15n3mfqWA0lEGqPVHHEUgMFNfiAi49cDYSZjkFCvsda9ELm0BevKht LBh+Ff0TMMgXIjw0u8uMLPw3qUZAoqWnn/e5sU7+SvrC6bLKYwSwf8xHgrT4b3U/ UM+aXq+nA4tt74Ii+OFt3Z0n8qxO3n/URWBpqD54TPUlRlU6bdLc+gCqJVRG7i5a VcZBFAJ5BHh0b7sXd99lEXunlaFCw/kachQCUA== -----END CERTIFICATE-----Generated at Thu Mar 26 18:19:55 2026 by rpki-client