$ rpki-client -vvf rpki-rsync.idnic.net/repo/0268462e-bfa5-4337-9153-c556d9d771fa/0/33362e35302e34362e302f32342d3234203d3e20313338383838.roa File: 33362e35302e34362e302f32342d3234203d3e20313338383838.roa (raw, json) Hash identifier: Nvdk0iQE3TVdSwCANLKWH60xsOqyH90GO9904bD5/jk= Subject key identifier: 60:7A:CC:24:AE:98:3F:EC:39:38:C3:57:50:74:F1:54:2C:1B:47:1F Certificate issuer: /CN=D85F97EC289823A0FEC59A16FEDFA09F72EBC835 Certificate serial: 335246F1F01F7D993331935B1509A7F4E0BF388F Authority key identifier: D8:5F:97:EC:28:98:23:A0:FE:C5:9A:16:FE:DF:A0:9F:72:EB:C8:35 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D85F97EC289823A0FEC59A16FEDFA09F72EBC835.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0268462e-bfa5-4337-9153-c556d9d771fa/0/33362e35302e34362e302f32342d3234203d3e20313338383838.roa Signing time: Sun 03 May 2026 02:10:16 +0000 ROA not before: Sun 03 May 2026 02:05:16 +0000 ROA not after: Sun 02 May 2027 02:10:16 +0000 asID: 138888 IP address blocks: 36.50.46.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0268462e-bfa5-4337-9153-c556d9d771fa/0/D85F97EC289823A0FEC59A16FEDFA09F72EBC835.crl rsync://rpki-rsync.idnic.net/repo/0268462e-bfa5-4337-9153-c556d9d771fa/0/D85F97EC289823A0FEC59A16FEDFA09F72EBC835.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D85F97EC289823A0FEC59A16FEDFA09F72EBC835.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 17:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:52:46:f1:f0:1f:7d:99:33:31:93:5b:15:09:a7:f4:e0:bf:38:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D85F97EC289823A0FEC59A16FEDFA09F72EBC835 Validity Not Before: May 3 02:05:16 2026 GMT Not After : May 2 02:10:16 2027 GMT Subject: CN=607ACC24AE983FEC3938C3575074F1542C1B471F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:03:34:22:84:d0:be:b7:11:20:92:e0:fc:37: d9:14:8f:bb:a4:c3:1a:3e:f2:33:62:3d:66:11:9c: 41:d7:ac:4e:94:47:ce:c4:0f:14:63:84:ab:b5:55: 4d:a4:52:ed:24:f7:7f:a2:dc:7d:1d:a3:c1:b2:90: 4a:18:eb:70:a1:a8:4d:4d:71:4b:b6:ed:59:dc:f3: 06:c0:89:19:89:91:74:ff:41:4e:93:c3:da:7e:16: 49:3a:5e:5b:52:4f:82:d6:2b:ba:b6:94:c4:7f:1b: 81:6d:8c:3d:ca:ff:34:d5:e2:25:62:82:6f:63:47: 77:2f:06:d5:00:73:70:8e:e5:b2:3c:eb:b7:a6:1d: 2d:f1:01:91:2f:df:9d:e9:c5:ff:68:49:43:2c:cc: dc:3f:02:2b:f1:60:a0:96:fa:9c:14:41:aa:a0:b2: f0:15:45:57:80:cd:be:71:0e:f8:5f:cd:4c:01:bb: d0:22:ee:14:c9:83:d6:6a:5a:5d:76:fa:95:ca:64: be:2e:50:b6:a7:8a:07:cf:3e:da:9a:80:b1:23:b5: 13:2a:ec:2e:a5:ab:8f:02:9b:96:e5:cd:5c:f8:cb: 7d:0d:91:fd:ec:e4:b4:f9:59:26:b6:8f:1f:4c:04: e0:cd:a6:eb:82:00:4b:91:62:f3:c8:a3:7c:de:66: a8:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:7A:CC:24:AE:98:3F:EC:39:38:C3:57:50:74:F1:54:2C:1B:47:1F X509v3 Authority Key Identifier: keyid:D8:5F:97:EC:28:98:23:A0:FE:C5:9A:16:FE:DF:A0:9F:72:EB:C8:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0268462e-bfa5-4337-9153-c556d9d771fa/0/D85F97EC289823A0FEC59A16FEDFA09F72EBC835.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D85F97EC289823A0FEC59A16FEDFA09F72EBC835.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0268462e-bfa5-4337-9153-c556d9d771fa/0/33362e35302e34362e302f32342d3234203d3e20313338383838.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 36.50.46.0/24 Signature Algorithm: sha256WithRSAEncryption 3b:04:e9:d8:87:db:d1:b1:59:2b:9b:cb:88:78:e8:86:33:f5: 04:e0:0e:9c:1d:d1:54:a6:76:4e:3c:5c:0b:6b:34:ae:58:4a: 45:0a:53:2d:59:d2:ac:9d:3a:81:c3:7b:0f:45:f6:05:fd:78: b0:3b:d8:98:5d:2d:5b:c7:a0:30:c9:74:21:33:e3:c9:f7:ad: 88:30:e1:cf:90:de:3d:6d:c2:a7:e0:28:2b:e2:95:76:83:fa: 30:bf:28:bd:90:3a:41:62:6f:81:c3:f7:b1:3d:c1:c0:bd:6e: 5e:16:4b:7e:ab:cd:96:1b:00:64:ed:08:cc:4e:db:3f:e2:70: 6d:75:0b:01:2b:f6:3f:da:c9:ed:07:3f:f6:44:65:35:ed:65: 42:86:66:08:82:00:f4:4d:28:ab:c2:35:37:56:9b:cb:78:4c: 2a:99:0e:88:91:bf:e7:7e:e2:be:55:eb:1a:45:85:04:d6:0b: 41:eb:8f:7c:49:a1:67:13:30:ec:05:3b:6a:95:5c:8b:e6:98: cd:80:aa:d1:e7:b2:54:78:0c:ff:a6:70:b6:53:1d:d6:20:36: 4b:72:a4:42:a1:58:0e:c5:97:08:86:c8:e0:e9:14:2c:69:57: 90:c9:57:e7:e9:b0:b5:82:01:1b:61:52:bb:e0:cf:8a:0e:6c: b0:2d:eb:6d -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUM1JG8fAffZkzMZNbFQmn9OC/OI8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDg1Rjk3RUMyODk4MjNBMEZFQzU5QTE2RkVERkEwOUY3 MkVCQzgzNTAeFw0yNjA1MDMwMjA1MTZaFw0yNzA1MDIwMjEwMTZaMDMxMTAvBgNV BAMTKDYwN0FDQzI0QUU5ODNGRUMzOTM4QzM1NzUwNzRGMTU0MkMxQjQ3MUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIAzQihNC+txEgkuD8N9kUj7uk wxo+8jNiPWYRnEHXrE6UR87EDxRjhKu1VU2kUu0k93+i3H0do8GykEoY63ChqE1N cUu27Vnc8wbAiRmJkXT/QU6Tw9p+Fkk6XltST4LWK7q2lMR/G4FtjD3K/zTV4iVi gm9jR3cvBtUAc3CO5bI867emHS3xAZEv353pxf9oSUMszNw/AivxYKCW+pwUQaqg svAVRVeAzb5xDvhfzUwBu9Ai7hTJg9ZqWl12+pXKZL4uULanigfPPtqagLEjtRMq 7C6lq48Cm5blzVz4y30Nkf3s5LT5WSa2jx9MBODNpuuCAEuRYvPIo3zeZqgzAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUYHrMJK6YP+w5OMNXUHTxVCwbRx8wHwYDVR0j BBgwFoAU2F+X7CiYI6D+xZoW/t+gn3LryDUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDI2ODQ2MmUtYmZhNS00MzM3LTkxNTMtYzU1NmQ5ZDc3MWZhLzAvRDg1Rjk3RUMy ODk4MjNBMEZFQzU5QTE2RkVERkEwOUY3MkVCQzgzNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EODVGOTdFQzI4OTgyM0EwRkVDNTlBMTZGRURGQTA5RjcyRUJD ODM1LmNlcjCBoQYIKwYBBQUHAQsEgZQwgZEwgY4GCCsGAQUFBzALhoGBcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzAyNjg0NjJlLWJmYTUtNDMzNy05 MTUzLWM1NTZkOWQ3NzFmYS8wLzMzMzYyZTM1MzAyZTM0MzYyZTMwMmYzMjM0MmQz MjM0MjAzZDNlMjAzMTMzMzgzODM4Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAkMi4wDQYJKoZIhvcN AQELBQADggEBADsE6diH29GxWSuby4h46IYz9QTgDpwd0VSmdk48XAtrNK5YSkUK Uy1Z0qydOoHDew9F9gX9eLA72JhdLVvHoDDJdCEz48n3rYgw4c+Q3j1twqfgKCvi lXaD+jC/KL2QOkFib4HD97E9wcC9bl4WS36rzZYbAGTtCMxO2z/icG11CwEr9j/a ye0HP/ZEZTXtZUKGZgiCAPRNKKvCNTdWm8t4TCqZDoiRv+d+4r5V6xpFhQTWC0Hr j3xJoWcTMOwFO2qVXIvmmM2AqtHnslR4DP+mcLZTHdYgNktypEKhWA7FlwiGyODp FCxpV5DJV+fpsLWCARthUrvgz4oObLAt620= -----END CERTIFICATE-----Generated at Wed May 13 03:54:58 2026 by rpki-client