$ rpki-client -vvf rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/36362e39362e3232362e302f32342d3234203d3e203633383539.roa File: 36362e39362e3232362e302f32342d3234203d3e203633383539.roa (raw, json) Hash identifier: Jjqo144Rv5iMjWby4rZpieutvMUMZyAG38t3DeDnhy4= Subject key identifier: 4B:32:3C:87:88:B3:F8:19:45:3A:96:70:2F:60:B8:52:D9:4B:0D:A8 Certificate issuer: /CN=579C296CFBD13B33CD249F0CE7D1C489D7106B97 Certificate serial: 14C01ACDE737B67A865AA7EF7BE9BA8F7EC0D6C4 Authority key identifier: 57:9C:29:6C:FB:D1:3B:33:CD:24:9F:0C:E7:D1:C4:89:D7:10:6B:97 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/579C296CFBD13B33CD249F0CE7D1C489D7106B97.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/36362e39362e3232362e302f32342d3234203d3e203633383539.roa Signing time: Sun 03 May 2026 02:27:27 +0000 ROA not before: Sun 03 May 2026 02:22:27 +0000 ROA not after: Sun 02 May 2027 02:27:27 +0000 asID: 63859 IP address blocks: 66.96.226.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/579C296CFBD13B33CD249F0CE7D1C489D7106B97.crl rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/579C296CFBD13B33CD249F0CE7D1C489D7106B97.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/579C296CFBD13B33CD249F0CE7D1C489D7106B97.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:c0:1a:cd:e7:37:b6:7a:86:5a:a7:ef:7b:e9:ba:8f:7e:c0:d6:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=579C296CFBD13B33CD249F0CE7D1C489D7106B97 Validity Not Before: May 3 02:22:27 2026 GMT Not After : May 2 02:27:27 2027 GMT Subject: CN=4B323C8788B3F819453A96702F60B852D94B0DA8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:85:52:5d:24:96:ee:47:0e:a1:32:72:7a:7b: 15:69:18:91:1e:d1:bb:67:a5:fc:d2:91:d3:17:bc: dd:15:12:33:ed:51:ae:39:a2:be:f7:af:bc:8b:38: 81:9e:d8:77:67:79:6d:7f:1b:b7:67:f4:33:ae:b9: ed:fa:8c:42:2e:9c:65:f5:1d:ef:9d:41:e9:9a:1b: 1b:dd:74:ee:50:56:60:3c:b9:66:19:b0:dc:dc:80: 72:4b:47:b5:ce:fc:b6:20:4e:7b:f5:25:12:01:b0: f1:3e:2c:d0:b2:5a:4f:b6:af:b1:24:2e:36:a8:1e: c1:0a:df:af:a7:b2:4c:51:39:1b:89:e9:61:b1:bd: 74:85:53:e5:ee:2e:cd:32:d9:14:b5:a8:c5:29:b3: 95:47:93:bf:c8:0a:a7:5d:a7:51:49:12:87:19:b3: e2:fe:49:c5:a3:1f:51:0d:70:46:9d:14:56:83:4f: 29:c6:c8:34:10:5b:8b:2d:b9:96:9d:dc:b4:d8:7e: 0c:35:8f:c2:39:bf:32:79:28:ca:b1:2a:e6:fd:92: 1c:69:d9:17:83:3a:14:77:af:c5:01:59:bf:21:02: 91:df:ff:4b:7e:a9:06:72:07:99:66:2e:51:90:66: 4a:7b:d2:e1:a9:e5:3f:ef:11:12:74:61:80:1e:1e: b3:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:32:3C:87:88:B3:F8:19:45:3A:96:70:2F:60:B8:52:D9:4B:0D:A8 X509v3 Authority Key Identifier: keyid:57:9C:29:6C:FB:D1:3B:33:CD:24:9F:0C:E7:D1:C4:89:D7:10:6B:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/579C296CFBD13B33CD249F0CE7D1C489D7106B97.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/579C296CFBD13B33CD249F0CE7D1C489D7106B97.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/36362e39362e3232362e302f32342d3234203d3e203633383539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 66.96.226.0/24 Signature Algorithm: sha256WithRSAEncryption 23:ea:be:05:98:40:9d:72:b2:1e:e5:13:8b:4e:e8:60:de:e2: e5:d6:41:a3:17:c7:82:4b:ff:79:44:b0:c0:ff:ed:29:24:29: 30:12:02:2e:ab:5a:ff:94:e3:4f:cc:0e:ec:70:80:b3:da:f2: 3b:61:14:60:df:fa:0e:1e:8c:4c:66:8b:96:28:ff:84:c7:f8: 30:25:93:06:85:53:a4:16:b2:76:3a:be:01:bf:16:bb:03:a3: 23:93:e8:df:a5:31:54:dc:0a:83:bf:6a:66:64:69:d7:43:e1: 8b:5c:b3:6a:90:54:8d:a6:33:48:67:b6:58:e9:61:d9:f2:1b: 0e:d9:b5:6b:50:72:53:72:30:f5:71:67:15:d2:7d:fb:85:7f: f5:5e:17:e9:bd:77:4b:eb:16:78:2c:0f:69:cb:44:b7:bc:fa: 82:2a:28:ae:78:68:dc:1b:3b:28:95:f0:e7:19:81:45:95:8f: f0:f3:23:e5:88:0b:44:e9:a1:8d:ac:6a:90:d4:ed:5a:ac:0c: ae:ec:58:9e:3a:06:fb:74:35:86:ae:2b:24:1a:d1:65:ef:26: 3d:16:ad:22:b8:e7:62:e2:fb:ea:cd:78:b1:4e:d4:a1:16:4a: 65:24:96:53:b2:3c:c3:4c:56:74:0e:73:e6:68:f2:5e:f7:f5: c4:2d:a6:71 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUFMAazec3tnqGWqfve+m6j37A1sQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTc5QzI5NkNGQkQxM0IzM0NEMjQ5RjBDRTdEMUM0ODlE NzEwNkI5NzAeFw0yNjA1MDMwMjIyMjdaFw0yNzA1MDIwMjI3MjdaMDMxMTAvBgNV BAMTKDRCMzIzQzg3ODhCM0Y4MTk0NTNBOTY3MDJGNjBCODUyRDk0QjBEQTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKhVJdJJbuRw6hMnJ6exVpGJEe 0btnpfzSkdMXvN0VEjPtUa45or73r7yLOIGe2HdneW1/G7dn9DOuue36jEIunGX1 He+dQemaGxvddO5QVmA8uWYZsNzcgHJLR7XO/LYgTnv1JRIBsPE+LNCyWk+2r7Ek LjaoHsEK36+nskxRORuJ6WGxvXSFU+XuLs0y2RS1qMUps5VHk7/ICqddp1FJEocZ s+L+ScWjH1ENcEadFFaDTynGyDQQW4stuZad3LTYfgw1j8I5vzJ5KMqxKub9khxp 2ReDOhR3r8UBWb8hApHf/0t+qQZyB5lmLlGQZkp70uGp5T/vERJ0YYAeHrPjAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUSzI8h4iz+BlFOpZwL2C4UtlLDagwHwYDVR0j BBgwFoAUV5wpbPvROzPNJJ8M59HEidcQa5cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2JiYjI3MzQtZTVmYS00MGViLTg1OTgtYjdjZDEwMTM0M2NhLzAvNTc5QzI5NkNG QkQxM0IzM0NEMjQ5RjBDRTdEMUM0ODlENzEwNkI5Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC81NzlDMjk2Q0ZCRDEzQjMzQ0QyNDlGMENFN0QxQzQ4OUQ3MTA2 Qjk3LmNlcjCBoQYIKwYBBQUHAQsEgZQwgZEwgY4GCCsGAQUFBzALhoGBcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzNiYmIyNzM0LWU1ZmEtNDBlYi04 NTk4LWI3Y2QxMDEzNDNjYS8wLzM2MzYyZTM5MzYyZTMyMzIzNjJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDM2MzMzODM1Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABCYOIwDQYJKoZIhvcN AQELBQADggEBACPqvgWYQJ1ysh7lE4tO6GDe4uXWQaMXx4JL/3lEsMD/7SkkKTAS Ai6rWv+U40/MDuxwgLPa8jthFGDf+g4ejExmi5Yo/4TH+DAlkwaFU6QWsnY6vgG/ FrsDoyOT6N+lMVTcCoO/amZkaddD4Ytcs2qQVI2mM0hntljpYdnyGw7ZtWtQclNy MPVxZxXSffuFf/VeF+m9d0vrFngsD2nLRLe8+oIqKK54aNwbOyiV8OcZgUWVj/Dz I+WIC0TpoY2sapDU7VqsDK7sWJ46Bvt0NYauKyQa0WXvJj0WrSK452Li++rNeLFO 1KEWSmUkllOyPMNMVnQOc+Zo8l739cQtpnE= -----END CERTIFICATE-----Generated at Wed May 13 00:43:57 2026 by rpki-client