
$ rpki-client -vvf rpki-rsync.idnic.net/repo/0268462e-bfa5-4337-9153-c556d9d771fa/0/33362e35302e34372e302f32342d3234203d3e20313338383838.roa
File: 33362e35302e34372e302f32342d3234203d3e20313338383838.roa (raw, json)
Hash identifier: i4qKsTrQYXXhXKXalOlOEUcc525wPy7zaNFMk5Bgx/c=
Subject key identifier: FF:47:9E:C8:F5:07:BD:87:81:2A:D3:B9:97:7E:0C:B0:16:27:BB:C3
Certificate issuer: /CN=D85F97EC289823A0FEC59A16FEDFA09F72EBC835
Certificate serial: 75C606D13E13D0F9C744292C8E3EE1B34F00001B
Authority key identifier: D8:5F:97:EC:28:98:23:A0:FE:C5:9A:16:FE:DF:A0:9F:72:EB:C8:35
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D85F97EC289823A0FEC59A16FEDFA09F72EBC835.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/0268462e-bfa5-4337-9153-c556d9d771fa/0/33362e35302e34372e302f32342d3234203d3e20313338383838.roa
Signing time: Sun 03 May 2026 02:10:17 +0000
ROA not before: Sun 03 May 2026 02:05:17 +0000
ROA not after: Sun 02 May 2027 02:10:17 +0000
asID: 138888
IP address blocks: 36.50.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/0268462e-bfa5-4337-9153-c556d9d771fa/0/D85F97EC289823A0FEC59A16FEDFA09F72EBC835.crl
rsync://rpki-rsync.idnic.net/repo/0268462e-bfa5-4337-9153-c556d9d771fa/0/D85F97EC289823A0FEC59A16FEDFA09F72EBC835.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D85F97EC289823A0FEC59A16FEDFA09F72EBC835.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 17:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:c6:06:d1:3e:13:d0:f9:c7:44:29:2c:8e:3e:e1:b3:4f:00:00:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D85F97EC289823A0FEC59A16FEDFA09F72EBC835
Validity
Not Before: May 3 02:05:17 2026 GMT
Not After : May 2 02:10:17 2027 GMT
Subject: CN=FF479EC8F507BD87812AD3B9977E0CB01627BBC3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:6e:58:3a:97:32:69:4e:5c:32:e2:48:f0:8e:
7f:4a:7d:3c:b1:2b:71:52:57:75:dc:e7:a3:5a:49:
b6:d7:7f:03:a3:26:2b:bc:c7:be:ed:8b:ef:46:6d:
38:d8:47:b6:ec:8b:4d:6f:50:13:e0:09:c2:06:67:
df:70:f4:c8:4b:c2:9d:99:75:3d:b7:b0:d5:d5:be:
15:b5:dd:2b:56:42:56:2b:67:c8:71:8d:e7:54:83:
a0:36:16:1f:50:2b:e0:66:b8:1e:da:34:ba:28:4d:
63:25:6c:05:cf:18:a3:bf:7e:62:be:5b:b7:70:6f:
91:94:08:9a:0c:e1:0c:03:5c:46:c9:eb:66:f6:8b:
0e:b3:ab:3d:e0:04:66:59:59:46:36:c5:99:18:35:
d1:12:11:98:f2:f5:b5:84:ae:67:20:a6:d8:1d:83:
ec:cc:37:ef:78:42:d4:36:2b:d1:56:79:d1:5b:44:
da:ad:fc:57:1d:65:96:6b:a6:32:7f:14:f7:1c:b8:
26:a8:3d:ce:77:04:2e:6d:bd:c7:5e:d3:8e:8f:26:
1b:95:d4:d6:74:35:3e:79:00:40:2c:29:d0:cb:20:
80:c8:2d:57:af:06:89:01:a2:37:f1:25:a5:4e:76:
32:d7:3b:a7:39:d9:f9:6b:56:ee:66:42:38:79:59:
9b:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:47:9E:C8:F5:07:BD:87:81:2A:D3:B9:97:7E:0C:B0:16:27:BB:C3
X509v3 Authority Key Identifier:
keyid:D8:5F:97:EC:28:98:23:A0:FE:C5:9A:16:FE:DF:A0:9F:72:EB:C8:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/0268462e-bfa5-4337-9153-c556d9d771fa/0/D85F97EC289823A0FEC59A16FEDFA09F72EBC835.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D85F97EC289823A0FEC59A16FEDFA09F72EBC835.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0268462e-bfa5-4337-9153-c556d9d771fa/0/33362e35302e34372e302f32342d3234203d3e20313338383838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
36.50.47.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:67:d6:c4:f2:42:88:fd:e0:33:f0:00:dd:e3:57:d4:9c:79:
b2:90:7d:d8:ab:90:10:1b:2f:25:42:7e:dc:18:e7:cc:14:b6:
df:d5:57:af:17:81:8b:f4:2e:42:6c:55:d0:33:89:74:b7:3b:
79:a5:df:ed:d5:0d:9b:b8:ed:31:93:f1:66:e6:c8:cd:27:e9:
39:e8:cd:8d:0c:cc:34:aa:79:2d:8f:cd:99:aa:13:a2:7d:e3:
0b:5b:a1:fb:cf:a8:59:d6:90:9d:c9:e4:c2:83:cb:4b:3c:77:
20:c2:a2:95:38:c8:ec:70:18:c3:f1:c2:07:55:09:9f:d2:3e:
94:98:bd:60:a4:4c:55:87:a2:96:04:6e:8d:59:66:2f:27:7c:
06:d8:1f:6e:fe:b2:9a:c9:06:b0:5f:58:22:f8:c5:7e:b1:0b:
df:8f:3b:d1:34:80:4f:3e:25:9e:77:ea:9e:b4:46:25:80:f4:
10:af:10:d3:d3:b1:09:c0:7b:64:b1:bc:33:94:54:91:da:8a:
e9:ec:a7:a2:31:f9:5c:f7:3c:39:cc:05:35:cb:33:8b:96:86:
09:97:7c:41:a1:b4:c2:61:a0:b2:9f:15:2e:62:f8:94:63:10:
bc:63:01:14:23:fb:86:b8:8f:9a:4a:d2:35:32:ea:e0:28:16:
59:7e:25:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:56:33 2026 by rpki-client