
$ rpki-client -vvf rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/36362e39362e3232372e302f32342d3234203d3e203633383539.roa
File: 36362e39362e3232372e302f32342d3234203d3e203633383539.roa (raw, json)
Hash identifier: 6q/WC8ifb4jsmDMXKtRDJKLcTEj4B3yiFcTxYSzfq/c=
Subject key identifier: AB:26:29:B3:A4:D9:07:51:F1:60:9A:0D:E6:69:BF:CC:F9:AC:16:18
Certificate issuer: /CN=579C296CFBD13B33CD249F0CE7D1C489D7106B97
Certificate serial: 51E92650BA939CF3D35CDC0F1DD6F47E6FA8FD77
Authority key identifier: 57:9C:29:6C:FB:D1:3B:33:CD:24:9F:0C:E7:D1:C4:89:D7:10:6B:97
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/579C296CFBD13B33CD249F0CE7D1C489D7106B97.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/36362e39362e3232372e302f32342d3234203d3e203633383539.roa
Signing time: Sun 03 May 2026 02:27:21 +0000
ROA not before: Sun 03 May 2026 02:22:21 +0000
ROA not after: Sun 02 May 2027 02:27:21 +0000
asID: 63859
IP address blocks: 66.96.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/579C296CFBD13B33CD249F0CE7D1C489D7106B97.crl
rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/579C296CFBD13B33CD249F0CE7D1C489D7106B97.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/579C296CFBD13B33CD249F0CE7D1C489D7106B97.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 07:47:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:e9:26:50:ba:93:9c:f3:d3:5c:dc:0f:1d:d6:f4:7e:6f:a8:fd:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=579C296CFBD13B33CD249F0CE7D1C489D7106B97
Validity
Not Before: May 3 02:22:21 2026 GMT
Not After : May 2 02:27:21 2027 GMT
Subject: CN=AB2629B3A4D90751F1609A0DE669BFCCF9AC1618
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:26:84:53:4c:cc:14:85:33:a1:ed:39:5d:9c:
cd:3d:67:d7:02:62:91:af:72:1c:c0:1b:13:a2:4b:
c1:85:df:0a:11:d8:14:9e:89:7a:db:80:02:ac:4e:
5a:2c:b1:5a:fe:cb:82:79:41:3c:04:33:e9:27:71:
7a:0b:a9:a7:be:2a:bf:8f:5c:5d:b7:d6:fa:59:46:
6b:d7:81:02:c4:96:ab:45:75:53:ce:e1:b9:31:5f:
3a:26:93:06:7c:28:26:5c:26:5a:c5:fb:e4:27:7b:
5c:38:1d:44:b1:29:d2:03:ef:f8:b9:94:10:84:88:
67:0b:76:33:10:26:a1:82:07:c3:4b:fe:ea:b9:33:
16:2f:8a:3c:89:1a:a2:9d:b8:da:24:97:30:cb:a6:
e8:52:70:de:a1:61:5c:8f:02:09:af:ba:b0:47:33:
eb:dd:08:36:83:dd:95:16:7e:f5:5d:8e:4b:84:e1:
cd:97:ef:86:1a:55:ae:5a:92:f6:6b:ce:b8:37:21:
e3:66:4b:ab:58:05:c8:13:c7:02:b8:f8:ac:ba:61:
33:1c:ce:1f:07:e1:b3:fb:e3:67:9a:9f:61:bf:a4:
29:42:a8:a4:b6:65:0d:a8:b2:85:d7:e4:30:c9:a3:
66:b2:a0:41:b3:90:43:24:b4:ca:68:7f:f8:f7:8a:
81:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:26:29:B3:A4:D9:07:51:F1:60:9A:0D:E6:69:BF:CC:F9:AC:16:18
X509v3 Authority Key Identifier:
keyid:57:9C:29:6C:FB:D1:3B:33:CD:24:9F:0C:E7:D1:C4:89:D7:10:6B:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/579C296CFBD13B33CD249F0CE7D1C489D7106B97.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/579C296CFBD13B33CD249F0CE7D1C489D7106B97.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/36362e39362e3232372e302f32342d3234203d3e203633383539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
66.96.227.0/24
Signature Algorithm: sha256WithRSAEncryption
76:92:fe:b3:a5:4d:f6:b3:f3:f8:81:20:6a:32:d9:18:37:76:
bd:92:85:53:d8:59:6d:84:9b:d9:a2:b0:39:ea:e8:9d:6c:56:
2a:b0:11:fe:c0:5d:fc:a8:2a:41:0d:83:12:5d:78:2e:7d:60:
ce:93:98:d1:c4:dc:55:1c:a9:23:5f:e0:3f:2e:99:4f:de:25:
b9:c5:41:93:f2:2d:ad:72:c1:f0:bb:73:67:41:29:46:e2:d7:
c0:66:ce:47:bd:32:75:99:ab:46:c4:da:9c:5c:1a:cd:5c:c7:
34:30:a6:d2:68:08:bd:07:9a:91:55:f0:88:35:ea:90:22:df:
26:90:c8:9c:0b:ba:82:2b:cc:96:e5:9e:e2:01:b1:4f:36:6f:
45:8c:ae:5d:f0:79:eb:71:ed:04:9d:38:51:af:b5:ee:be:d7:
c2:e6:a7:47:2b:81:4a:9d:19:2b:f6:3e:f7:9d:c4:fa:66:b3:
c3:4e:9e:6b:6f:14:88:9f:2e:0d:94:76:a9:9c:40:84:4a:a3:
ad:89:32:6a:40:84:e4:f6:b1:4b:73:02:26:50:67:b8:d3:54:
80:7d:e4:30:4a:3f:d2:73:53:3c:d7:56:a9:2d:ec:7e:29:13:
ea:d8:dc:8d:8d:6e:68:d7:0a:ab:19:cf:2c:e2:a2:10:fd:98:
62:8d:b3:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:44:21 2026 by rpki-client