$ rpki-client -vvf rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/36362e39362e3232342e302f32342d3234203d3e203633383539.roa File: 36362e39362e3232342e302f32342d3234203d3e203633383539.roa (raw, json) Hash identifier: o/snCgvQCWZXKuawRGR5TkAabAkJEECPAe8IylHHHtc= Subject key identifier: E8:DA:08:56:1E:7D:C1:11:0B:31:0B:D9:8B:3C:CC:D0:DE:C8:98:67 Certificate issuer: /CN=579C296CFBD13B33CD249F0CE7D1C489D7106B97 Certificate serial: 1D86665AC21F80AB66D9F72DFFD1617B10ADDD82 Authority key identifier: 57:9C:29:6C:FB:D1:3B:33:CD:24:9F:0C:E7:D1:C4:89:D7:10:6B:97 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/579C296CFBD13B33CD249F0CE7D1C489D7106B97.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/36362e39362e3232342e302f32342d3234203d3e203633383539.roa Signing time: Sun 03 May 2026 02:27:31 +0000 ROA not before: Sun 03 May 2026 02:22:31 +0000 ROA not after: Sun 02 May 2027 02:27:31 +0000 asID: 63859 IP address blocks: 66.96.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/579C296CFBD13B33CD249F0CE7D1C489D7106B97.crl rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/579C296CFBD13B33CD249F0CE7D1C489D7106B97.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/579C296CFBD13B33CD249F0CE7D1C489D7106B97.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:86:66:5a:c2:1f:80:ab:66:d9:f7:2d:ff:d1:61:7b:10:ad:dd:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=579C296CFBD13B33CD249F0CE7D1C489D7106B97 Validity Not Before: May 3 02:22:31 2026 GMT Not After : May 2 02:27:31 2027 GMT Subject: CN=E8DA08561E7DC1110B310BD98B3CCCD0DEC89867 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:65:aa:f4:00:53:56:21:8f:f7:4a:1d:08:5c: a6:d8:af:33:ad:84:f4:7b:f8:f9:3e:dc:ae:c4:13: e4:df:11:bc:0a:bb:a8:c2:f0:30:86:83:fa:85:5a: ad:d6:e2:35:97:89:c5:c5:ac:a2:9e:71:cc:3e:ea: 60:5e:a5:ef:8a:73:87:ac:f1:d5:56:e1:73:e0:aa: ad:d8:73:de:3e:3e:c6:aa:05:48:26:86:aa:42:51: 5e:f6:0e:a4:e0:87:23:0e:03:15:37:b3:0c:38:89: 60:49:0b:34:2a:94:f6:fd:b3:87:c0:d6:39:b9:16: d5:8f:18:19:9e:61:ea:88:13:af:96:6f:51:8a:a3: fa:01:e2:6d:97:c1:09:57:d8:2b:5b:d3:02:57:e1: 08:62:0d:c7:84:79:82:fa:f0:89:c6:f7:91:e3:f9: d1:04:8d:a8:85:1e:d1:3b:92:7f:b9:67:93:b6:4d: 08:85:01:89:57:2f:00:ce:9e:56:82:7e:e8:13:7e: 69:c9:66:ac:c3:a6:d8:cd:3d:16:20:e3:96:12:a4: b9:22:04:ad:11:d2:7d:0e:ef:71:47:4a:b8:e1:34: 5f:29:e4:f4:db:f4:37:85:0f:c7:8a:f0:7e:2a:6f: a4:9a:04:e6:34:74:19:f8:02:b4:b7:64:df:bb:99: 14:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:DA:08:56:1E:7D:C1:11:0B:31:0B:D9:8B:3C:CC:D0:DE:C8:98:67 X509v3 Authority Key Identifier: keyid:57:9C:29:6C:FB:D1:3B:33:CD:24:9F:0C:E7:D1:C4:89:D7:10:6B:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/579C296CFBD13B33CD249F0CE7D1C489D7106B97.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/579C296CFBD13B33CD249F0CE7D1C489D7106B97.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/36362e39362e3232342e302f32342d3234203d3e203633383539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 66.96.224.0/24 Signature Algorithm: sha256WithRSAEncryption 56:b1:06:ba:59:a8:bc:36:a5:a2:49:f9:10:c1:20:4d:36:1c: 98:a6:b6:95:1c:26:df:c3:45:ff:0e:a8:07:6b:63:96:bd:d8: 3c:37:82:4e:77:53:d2:e6:6a:f3:80:60:62:83:a8:a4:62:0a: ff:ed:8c:4d:61:8c:b3:e9:ae:21:a8:06:9f:bc:da:75:ed:71: 73:cf:40:8c:d0:3e:2a:3e:7b:d2:90:3b:40:cd:9f:89:f6:f0: 72:76:77:64:98:15:50:a0:94:dc:14:4c:89:1f:63:73:92:0c: 57:af:b1:95:64:bf:e0:3c:2e:23:c4:f9:b9:b3:c3:08:a4:a6: 9e:f3:0e:11:be:9e:5a:44:a9:06:84:05:58:3d:c5:23:fb:bc: 00:bb:ac:c6:fc:17:e7:7c:6b:ee:ea:f6:f4:14:3f:94:44:cf: 9c:ac:49:f6:da:e2:ea:27:e3:f5:a3:6a:ff:83:8b:0e:39:5c: 72:0d:e3:36:3f:8b:32:71:bd:82:7d:28:eb:06:a6:ae:b1:9a: 21:8b:5d:4b:f2:a7:39:1b:b1:c1:36:b7:0b:ae:95:a3:fc:54: 4e:2a:db:eb:b6:10:65:16:b1:5f:b9:d6:84:4d:88:7b:db:74: 98:1e:3f:9f:e2:9e:10:90:02:52:cb:92:d4:8d:59:82:47:c4: d3:59:15:cd -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUHYZmWsIfgKtm2fct/9FhexCt3YIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTc5QzI5NkNGQkQxM0IzM0NEMjQ5RjBDRTdEMUM0ODlE NzEwNkI5NzAeFw0yNjA1MDMwMjIyMzFaFw0yNzA1MDIwMjI3MzFaMDMxMTAvBgNV BAMTKEU4REEwODU2MUU3REMxMTEwQjMxMEJEOThCM0NDQ0QwREVDODk4NjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrZar0AFNWIY/3Sh0IXKbYrzOt hPR7+Pk+3K7EE+TfEbwKu6jC8DCGg/qFWq3W4jWXicXFrKKeccw+6mBepe+Kc4es 8dVW4XPgqq3Yc94+PsaqBUgmhqpCUV72DqTghyMOAxU3sww4iWBJCzQqlPb9s4fA 1jm5FtWPGBmeYeqIE6+Wb1GKo/oB4m2XwQlX2Ctb0wJX4QhiDceEeYL68InG95Hj +dEEjaiFHtE7kn+5Z5O2TQiFAYlXLwDOnlaCfugTfmnJZqzDptjNPRYg45YSpLki BK0R0n0O73FHSrjhNF8p5PTb9DeFD8eK8H4qb6SaBOY0dBn4ArS3ZN+7mRSLAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQU6NoIVh59wRELMQvZizzM0N7ImGcwHwYDVR0j BBgwFoAUV5wpbPvROzPNJJ8M59HEidcQa5cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2JiYjI3MzQtZTVmYS00MGViLTg1OTgtYjdjZDEwMTM0M2NhLzAvNTc5QzI5NkNG QkQxM0IzM0NEMjQ5RjBDRTdEMUM0ODlENzEwNkI5Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC81NzlDMjk2Q0ZCRDEzQjMzQ0QyNDlGMENFN0QxQzQ4OUQ3MTA2 Qjk3LmNlcjCBoQYIKwYBBQUHAQsEgZQwgZEwgY4GCCsGAQUFBzALhoGBcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzNiYmIyNzM0LWU1ZmEtNDBlYi04 NTk4LWI3Y2QxMDEzNDNjYS8wLzM2MzYyZTM5MzYyZTMyMzIzNDJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDM2MzMzODM1Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABCYOAwDQYJKoZIhvcN AQELBQADggEBAFaxBrpZqLw2paJJ+RDBIE02HJimtpUcJt/DRf8OqAdrY5a92Dw3 gk53U9LmavOAYGKDqKRiCv/tjE1hjLPpriGoBp+82nXtcXPPQIzQPio+e9KQO0DN n4n28HJ2d2SYFVCglNwUTIkfY3OSDFevsZVkv+A8LiPE+bmzwwikpp7zDhG+nlpE qQaEBVg9xSP7vAC7rMb8F+d8a+7q9vQUP5REz5ysSfba4uon4/Wjav+Diw45XHIN 4zY/izJxvYJ9KOsGpq6xmiGLXUvypzkbscE2twuulaP8VE4q2+u2EGUWsV+51oRN iHvbdJgeP5/inhCQAlLLktSNWYJHxNNZFc0= -----END CERTIFICATE-----Generated at Tue May 12 23:46:07 2026 by rpki-client