$ rpki-client -vvf repo-rpki.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/33362e35302e3231362e302f32342d3234203d3e20313437313238.roa File: 33362e35302e3231362e302f32342d3234203d3e20313437313238.roa (raw, json) Hash identifier: bQWsJUVOFWO1OALxa+/tLK32/KVg6IEzubWKGYNkAVw= Subject key identifier: 70:2D:FE:39:E9:A7:B8:B2:E7:B0:CE:E8:BF:01:27:8D:22:72:D2:DE Certificate issuer: /CN=6DBB100D8D4669AB8A5C7EE057228ED67A98099E Certificate serial: 72B1D440ECC26901D2D356DA4C8DC5449F3D60DC Authority key identifier: 6D:BB:10:0D:8D:46:69:AB:8A:5C:7E:E0:57:22:8E:D6:7A:98:09:9E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DBB100D8D4669AB8A5C7EE057228ED67A98099E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/33362e35302e3231362e302f32342d3234203d3e20313437313238.roa Signing time: Sat 14 Mar 2026 13:00:02 +0000 ROA not before: Sat 14 Mar 2026 12:55:02 +0000 ROA not after: Sat 13 Mar 2027 13:00:02 +0000 asID: 147128 IP address blocks: 36.50.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/6DBB100D8D4669AB8A5C7EE057228ED67A98099E.crl rsync://repo-rpki.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/6DBB100D8D4669AB8A5C7EE057228ED67A98099E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DBB100D8D4669AB8A5C7EE057228ED67A98099E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 04:12:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:b1:d4:40:ec:c2:69:01:d2:d3:56:da:4c:8d:c5:44:9f:3d:60:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6DBB100D8D4669AB8A5C7EE057228ED67A98099E Validity Not Before: Mar 14 12:55:02 2026 GMT Not After : Mar 13 13:00:02 2027 GMT Subject: CN=702DFE39E9A7B8B2E7B0CEE8BF01278D2272D2DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:08:06:1b:c3:79:d1:6a:87:92:67:44:82:50: b7:a1:09:81:21:e2:bc:b7:f9:5f:de:f0:3a:75:f4: 1b:8c:8a:a4:06:84:a1:d7:e7:11:45:fd:c2:87:b5: 32:26:de:8e:7d:2c:62:a3:87:73:02:2e:1d:a5:73: cd:70:32:1d:82:38:37:11:86:ae:ef:1e:3e:8b:e7: dc:2f:58:fa:b0:11:01:1e:f4:ac:8e:df:4e:8d:a3: 11:96:92:ca:2d:df:49:8b:9e:35:dc:e8:95:0f:f2: a6:61:66:60:9c:95:c4:e2:4d:08:25:98:bf:b5:d8: 65:8a:64:db:52:6e:aa:20:b8:80:94:d7:df:71:c9: 0a:82:00:34:be:a1:62:fc:fe:08:e1:2f:11:ee:4f: e9:8f:bf:ee:86:75:d0:fd:72:3f:39:e4:31:7c:fe: 41:b2:4d:f5:e1:aa:09:ca:20:53:e2:96:a3:42:ef: e0:50:5c:52:a4:67:75:87:0d:a6:de:93:b0:a4:c9: 07:7b:89:d2:05:c6:9c:54:11:13:d0:11:86:21:3a: 0f:ac:61:44:e5:a0:ae:9b:d7:f4:d6:19:2e:89:93: cc:80:ec:73:c2:26:2a:26:87:82:4e:bf:a0:ae:ab: 05:79:19:11:64:81:01:08:41:1a:91:46:8e:0f:7d: cd:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:2D:FE:39:E9:A7:B8:B2:E7:B0:CE:E8:BF:01:27:8D:22:72:D2:DE X509v3 Authority Key Identifier: keyid:6D:BB:10:0D:8D:46:69:AB:8A:5C:7E:E0:57:22:8E:D6:7A:98:09:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/6DBB100D8D4669AB8A5C7EE057228ED67A98099E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DBB100D8D4669AB8A5C7EE057228ED67A98099E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/33362e35302e3231362e302f32342d3234203d3e20313437313238.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 36.50.216.0/24 Signature Algorithm: sha256WithRSAEncryption 46:84:b8:b6:e7:42:08:cf:6e:5e:e2:ce:6d:83:25:58:90:25: 1f:d5:14:b6:9e:28:89:81:9c:5b:f7:f7:27:a2:4e:7f:22:76: 36:32:46:63:c1:8a:5e:bc:54:a2:9b:af:68:a6:3c:cc:2a:67: 3b:36:61:86:81:86:38:e4:ff:c7:7e:98:0a:6a:c7:b6:e9:6c: 25:80:bd:86:52:75:a2:8e:fe:79:a0:48:c3:e2:1f:26:bb:97: 68:01:18:5a:57:e8:00:79:56:a5:ce:08:fe:33:97:1d:ce:be: c2:53:ce:19:29:d7:6f:bd:23:7c:7c:ab:69:ce:6f:ec:33:bf: de:95:dd:f8:55:0e:22:81:85:64:7a:d2:1e:94:27:dd:81:5b: 19:ba:ff:b9:82:47:12:3d:e3:a5:f8:16:c6:45:b5:ef:74:2a: 4d:f1:5c:36:1b:10:01:47:53:df:84:f1:ef:8d:57:f6:f4:d4: 68:f0:00:25:28:10:e9:54:f8:01:0b:0e:64:e2:60:46:d3:55: c1:c7:e7:e1:94:5d:9c:45:cb:46:1d:5b:0f:b9:45:b1:68:c4: 90:03:ef:ab:d6:ca:50:9b:77:0f:49:ea:76:ee:5a:9b:d0:31: eb:36:54:88:86:d3:85:88:17:f2:4e:a3:0d:54:c4:1e:fd:78: 75:ae:d4:5d -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUcrHUQOzCaQHS01baTI3FRJ89YNwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkRCQjEwMEQ4RDQ2NjlBQjhBNUM3RUUwNTcyMjhFRDY3 QTk4MDk5RTAeFw0yNjAzMTQxMjU1MDJaFw0yNzAzMTMxMzAwMDJaMDMxMTAvBgNV BAMTKDcwMkRGRTM5RTlBN0I4QjJFN0IwQ0VFOEJGMDEyNzhEMjI3MkQyREUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNCAYbw3nRaoeSZ0SCULehCYEh 4ry3+V/e8Dp19BuMiqQGhKHX5xFF/cKHtTIm3o59LGKjh3MCLh2lc81wMh2CODcR hq7vHj6L59wvWPqwEQEe9KyO306NoxGWksot30mLnjXc6JUP8qZhZmCclcTiTQgl mL+12GWKZNtSbqoguICU199xyQqCADS+oWL8/gjhLxHuT+mPv+6GddD9cj855DF8 /kGyTfXhqgnKIFPilqNC7+BQXFKkZ3WHDabek7CkyQd7idIFxpxUERPQEYYhOg+s YUTloK6b1/TWGS6Jk8yA7HPCJiomh4JOv6CuqwV5GRFkgQEIQRqRRo4Pfc1hAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUcC3+OemnuLLnsM7ovwEnjSJy0t4wHwYDVR0j BBgwFoAUbbsQDY1GaauKXH7gVyKO1nqYCZ4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NTk4OWZhZi00OGZiLTRmNDAtOWU3Ny0yNDNkNzhhNWI1YzQvMC82REJCMTAwRDhE NDY2OUFCOEE1QzdFRTA1NzIyOEVENjdBOTgwOTlFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkRCQjEwMEQ4RDQ2NjlBQjhBNUM3RUUwNTcyMjhFRDY3QTk4 MDk5RS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzY1OTg5ZmFmLTQ4ZmItNGY0MC05 ZTc3LTI0M2Q3OGE1YjVjNC8wLzMzMzYyZTM1MzAyZTMyMzEzNjJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMxMzQzNzMxMzIzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEACQy2DANBgkqhkiG 9w0BAQsFAAOCAQEARoS4tudCCM9uXuLObYMlWJAlH9UUtp4oiYGcW/f3J6JOfyJ2 NjJGY8GKXrxUopuvaKY8zCpnOzZhhoGGOOT/x36YCmrHtulsJYC9hlJ1oo7+eaBI w+IfJruXaAEYWlfoAHlWpc4I/jOXHc6+wlPOGSnXb70jfHyrac5v7DO/3pXd+FUO IoGFZHrSHpQn3YFbGbr/uYJHEj3jpfgWxkW173QqTfFcNhsQAUdT34Tx741X9vTU aPAAJSgQ6VT4AQsOZOJgRtNVwcfn4ZRdnEXLRh1bD7lFsWjEkAPvq9bKUJt3D0nq du5am9Ax6zZUiIbThYgX8k6jDVTEHv14da7UXQ== -----END CERTIFICATE-----Generated at Thu Mar 26 19:34:08 2026 by rpki-client