$ rpki-client -vvf rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/36362e39362e3233302e302f32342d3234203d3e203633383539.roa File: 36362e39362e3233302e302f32342d3234203d3e203633383539.roa (raw, json) Hash identifier: S/y5Bfp5ucC3E/zmEFRo+dIALXZyub4Rp2PbuHKe8F0= Subject key identifier: C9:74:BD:FF:15:96:AA:64:12:D3:21:8F:8D:74:37:B0:34:C5:FF:62 Certificate issuer: /CN=579C296CFBD13B33CD249F0CE7D1C489D7106B97 Certificate serial: 7E09A89E4DBB19A8D6D066598F15F50E46460BF0 Authority key identifier: 57:9C:29:6C:FB:D1:3B:33:CD:24:9F:0C:E7:D1:C4:89:D7:10:6B:97 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/579C296CFBD13B33CD249F0CE7D1C489D7106B97.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/36362e39362e3233302e302f32342d3234203d3e203633383539.roa Signing time: Sun 03 May 2026 02:27:26 +0000 ROA not before: Sun 03 May 2026 02:22:26 +0000 ROA not after: Sun 02 May 2027 02:27:26 +0000 asID: 63859 IP address blocks: 66.96.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/579C296CFBD13B33CD249F0CE7D1C489D7106B97.crl rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/579C296CFBD13B33CD249F0CE7D1C489D7106B97.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/579C296CFBD13B33CD249F0CE7D1C489D7106B97.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:09:a8:9e:4d:bb:19:a8:d6:d0:66:59:8f:15:f5:0e:46:46:0b:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=579C296CFBD13B33CD249F0CE7D1C489D7106B97 Validity Not Before: May 3 02:22:26 2026 GMT Not After : May 2 02:27:26 2027 GMT Subject: CN=C974BDFF1596AA6412D3218F8D7437B034C5FF62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:8b:14:db:77:e3:3b:3a:8e:71:eb:c7:e2:d7: ce:c6:76:44:b8:2e:07:e2:3f:cf:b1:03:44:78:09: 69:15:cf:bf:44:ee:a7:64:a0:ba:e0:93:f2:b4:8c: 8a:e2:e5:b4:a1:16:e7:d1:f3:ae:da:88:bf:0f:36: aa:cb:af:46:88:cd:95:aa:ae:46:32:aa:fe:76:86: 27:0f:c7:b8:6d:7e:04:03:23:84:7d:c6:74:59:eb: 21:20:86:c0:35:17:84:f8:69:a3:3d:82:b9:40:3a: a3:d7:e5:21:41:e7:28:77:3e:44:4c:d3:59:8c:3a: 4f:ba:25:b9:0f:64:9e:48:73:0e:79:55:35:97:0f: 2d:9f:41:8c:43:ee:03:a0:b1:a7:5d:d5:60:b0:5d: c4:d1:b5:d1:11:ee:c6:e5:76:79:9d:8f:75:31:c8: 13:42:b6:00:e2:9e:3e:4b:fa:80:ac:23:47:46:bf: 84:ac:af:62:2f:d3:d3:1b:c0:f3:ff:85:68:78:af: fd:b1:87:fe:d6:6d:5c:a7:8e:44:c3:55:9b:08:a0: e0:a0:19:1d:67:45:e8:16:83:d6:e8:c6:aa:16:64: 9d:18:b0:2e:a7:f8:f8:5f:3c:a7:9d:b3:fd:a9:22: cb:db:c8:95:7e:b9:06:fb:05:a6:07:e0:5b:1b:19: f0:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:74:BD:FF:15:96:AA:64:12:D3:21:8F:8D:74:37:B0:34:C5:FF:62 X509v3 Authority Key Identifier: keyid:57:9C:29:6C:FB:D1:3B:33:CD:24:9F:0C:E7:D1:C4:89:D7:10:6B:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/579C296CFBD13B33CD249F0CE7D1C489D7106B97.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/579C296CFBD13B33CD249F0CE7D1C489D7106B97.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/36362e39362e3233302e302f32342d3234203d3e203633383539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 66.96.230.0/24 Signature Algorithm: sha256WithRSAEncryption 48:80:d5:31:9c:b9:b1:14:9b:40:aa:9b:96:67:4d:fc:85:17: ce:ff:7d:d4:80:52:dd:df:95:29:45:ae:cf:12:83:26:3b:9f: 36:23:73:72:84:9c:55:c9:9a:96:57:4e:76:b0:66:11:8a:ef: ba:aa:bf:2d:08:dd:72:6c:df:48:ff:8e:64:24:5c:ff:12:05: e5:bf:ce:15:9f:46:1f:c1:ea:1a:7c:27:0e:04:1d:1f:55:3d: bd:f3:8f:7c:14:d1:24:7a:5a:2e:3d:9c:1a:a2:60:34:ce:20: 60:89:45:f8:b0:eb:84:57:e2:cd:06:24:8a:33:74:8b:d2:21: 70:02:e0:52:97:1b:88:e5:33:fd:1a:a6:59:ad:fb:2f:e7:6b: ef:71:40:0b:1d:12:8d:c0:53:3f:4f:10:4b:04:0e:50:8c:26: 98:c7:8d:08:f9:ed:8e:ac:6a:e6:b5:f9:66:a3:bc:b8:f9:4d: f0:5e:23:56:a5:66:91:b7:ce:f0:47:25:f5:35:87:42:53:0a: d1:ba:02:cf:b5:0d:df:e7:48:cc:e2:d3:18:ef:23:ab:ad:53: 66:fd:2b:ab:34:0f:50:72:c5:19:7a:ba:6a:d5:de:c3:1e:25: 46:d2:3d:8d:fc:9e:45:c8:ad:7f:7c:cd:23:19:99:76:b3:71: fb:04:5c:68 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUfgmonk27GajW0GZZjxX1DkZGC/AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTc5QzI5NkNGQkQxM0IzM0NEMjQ5RjBDRTdEMUM0ODlE NzEwNkI5NzAeFw0yNjA1MDMwMjIyMjZaFw0yNzA1MDIwMjI3MjZaMDMxMTAvBgNV BAMTKEM5NzRCREZGMTU5NkFBNjQxMkQzMjE4RjhENzQzN0IwMzRDNUZGNjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaixTbd+M7Oo5x68fi187GdkS4 LgfiP8+xA0R4CWkVz79E7qdkoLrgk/K0jIri5bShFufR867aiL8PNqrLr0aIzZWq rkYyqv52hicPx7htfgQDI4R9xnRZ6yEghsA1F4T4aaM9grlAOqPX5SFB5yh3PkRM 01mMOk+6JbkPZJ5Icw55VTWXDy2fQYxD7gOgsadd1WCwXcTRtdER7sbldnmdj3Ux yBNCtgDinj5L+oCsI0dGv4Ssr2Iv09MbwPP/hWh4r/2xh/7WbVynjkTDVZsIoOCg GR1nRegWg9boxqoWZJ0YsC6n+PhfPKeds/2pIsvbyJV+uQb7BaYH4FsbGfChAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUyXS9/xWWqmQS0yGPjXQ3sDTF/2IwHwYDVR0j BBgwFoAUV5wpbPvROzPNJJ8M59HEidcQa5cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2JiYjI3MzQtZTVmYS00MGViLTg1OTgtYjdjZDEwMTM0M2NhLzAvNTc5QzI5NkNG QkQxM0IzM0NEMjQ5RjBDRTdEMUM0ODlENzEwNkI5Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC81NzlDMjk2Q0ZCRDEzQjMzQ0QyNDlGMENFN0QxQzQ4OUQ3MTA2 Qjk3LmNlcjCBoQYIKwYBBQUHAQsEgZQwgZEwgY4GCCsGAQUFBzALhoGBcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzNiYmIyNzM0LWU1ZmEtNDBlYi04 NTk4LWI3Y2QxMDEzNDNjYS8wLzM2MzYyZTM5MzYyZTMyMzMzMDJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDM2MzMzODM1Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABCYOYwDQYJKoZIhvcN AQELBQADggEBAEiA1TGcubEUm0Cqm5ZnTfyFF87/fdSAUt3flSlFrs8SgyY7nzYj c3KEnFXJmpZXTnawZhGK77qqvy0I3XJs30j/jmQkXP8SBeW/zhWfRh/B6hp8Jw4E HR9VPb3zj3wU0SR6Wi49nBqiYDTOIGCJRfiw64RX4s0GJIozdIvSIXAC4FKXG4jl M/0aplmt+y/na+9xQAsdEo3AUz9PEEsEDlCMJpjHjQj57Y6saua1+WajvLj5TfBe I1alZpG3zvBHJfU1h0JTCtG6As+1Dd/nSMzi0xjvI6utU2b9K6s0D1ByxRl6umrV 3sMeJUbSPY38nkXIrX98zSMZmXazcfsEXGg= -----END CERTIFICATE-----Generated at Wed May 13 00:45:19 2026 by rpki-client