$ rpki-client -vvf rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/36362e39362e3233342e302f32342d3234203d3e203633383539.roa File: 36362e39362e3233342e302f32342d3234203d3e203633383539.roa (raw, json) Hash identifier: Zdm/NVGefXiiaHpF/w+P1liD0DaE3g6UpBHQB7/ZLoc= Subject key identifier: F2:3A:E2:F3:1C:E2:A2:D1:62:C1:4C:E6:BE:E7:97:C8:33:BA:1C:30 Certificate issuer: /CN=579C296CFBD13B33CD249F0CE7D1C489D7106B97 Certificate serial: 79556524B0E72A46C6FF982060B0F752AF3454F2 Authority key identifier: 57:9C:29:6C:FB:D1:3B:33:CD:24:9F:0C:E7:D1:C4:89:D7:10:6B:97 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/579C296CFBD13B33CD249F0CE7D1C489D7106B97.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/36362e39362e3233342e302f32342d3234203d3e203633383539.roa Signing time: Sun 03 May 2026 02:27:35 +0000 ROA not before: Sun 03 May 2026 02:22:35 +0000 ROA not after: Sun 02 May 2027 02:27:35 +0000 asID: 63859 IP address blocks: 66.96.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/579C296CFBD13B33CD249F0CE7D1C489D7106B97.crl rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/579C296CFBD13B33CD249F0CE7D1C489D7106B97.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/579C296CFBD13B33CD249F0CE7D1C489D7106B97.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:55:65:24:b0:e7:2a:46:c6:ff:98:20:60:b0:f7:52:af:34:54:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=579C296CFBD13B33CD249F0CE7D1C489D7106B97 Validity Not Before: May 3 02:22:35 2026 GMT Not After : May 2 02:27:35 2027 GMT Subject: CN=F23AE2F31CE2A2D162C14CE6BEE797C833BA1C30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:29:c6:4d:74:88:57:57:a1:36:af:cc:1a:23: 3e:a0:ac:40:86:00:31:f1:13:e2:57:7e:2a:ba:98: 7a:98:07:c2:e1:fb:20:66:dd:ef:30:ae:4a:3b:32: 3b:0d:38:49:e8:b3:c2:35:85:53:74:8a:01:a7:ec: 14:24:fe:2b:68:9c:01:f0:18:3e:6f:20:1e:95:05: 8d:45:85:f4:a3:52:57:89:16:99:19:21:d6:e9:03: 37:48:40:89:7e:22:ab:34:0f:d5:a8:61:aa:43:3a: 4d:aa:87:42:86:75:35:bd:99:fc:24:5b:1f:37:9c: e6:26:9e:2f:17:3c:15:02:87:54:7d:be:2c:45:c6: 64:5e:d8:2f:c7:5c:d6:58:30:38:47:23:cc:ed:ba: 8f:8f:3f:dd:9c:b2:78:32:3c:8d:76:17:2e:24:01: 59:f3:e4:5d:a6:d6:0d:ba:6c:a6:39:66:12:ab:15: 6f:85:82:9e:83:6e:3b:ee:90:66:1f:b3:1a:2d:5e: df:28:a3:29:60:9a:41:bc:e6:e6:3e:b0:6e:2e:e8: d3:98:d3:f0:12:83:35:10:aa:2b:0a:55:6c:d6:57: 18:47:20:38:b2:ac:d2:63:a0:1d:04:74:cb:47:42: 8c:f7:f8:98:67:af:4c:d6:42:b4:83:a4:96:7d:76: 31:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:3A:E2:F3:1C:E2:A2:D1:62:C1:4C:E6:BE:E7:97:C8:33:BA:1C:30 X509v3 Authority Key Identifier: keyid:57:9C:29:6C:FB:D1:3B:33:CD:24:9F:0C:E7:D1:C4:89:D7:10:6B:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/579C296CFBD13B33CD249F0CE7D1C489D7106B97.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/579C296CFBD13B33CD249F0CE7D1C489D7106B97.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/36362e39362e3233342e302f32342d3234203d3e203633383539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 66.96.234.0/24 Signature Algorithm: sha256WithRSAEncryption ab:4a:42:17:ec:a2:44:e8:a2:df:db:3d:3b:9d:65:58:de:72: 12:83:2e:47:43:d1:80:e3:07:2f:a1:e7:a6:4f:f1:15:dd:7f: b3:4a:71:5c:64:5d:36:6f:47:40:79:8a:86:fc:60:05:bf:9b: cb:b4:c1:51:32:3b:78:ee:2f:4f:34:86:8a:8d:7f:bb:7c:f8: d5:13:89:75:a8:f2:69:a4:2d:ad:e6:cf:a4:47:5c:2d:33:21: 8b:dd:5e:93:56:63:52:94:aa:4e:9b:fb:dd:0a:76:a1:9a:d9: b5:90:df:3b:e2:f5:ef:e3:a5:85:86:50:70:69:b8:a1:f5:bf: 90:c2:0a:a3:e8:37:3f:4a:6f:62:59:31:aa:74:19:73:19:32: 3c:8c:3c:73:5d:55:82:34:61:11:7a:ae:94:49:71:85:68:a8: dd:44:ac:ec:81:96:9a:54:24:f8:96:df:a2:26:07:ac:24:a8: c4:3e:b1:62:83:b4:34:50:5a:f4:8c:d2:f7:57:17:fc:bc:c6: d5:11:65:ba:54:b3:15:2b:c6:88:75:06:12:53:83:33:f3:23: cf:1a:76:5c:92:54:2e:c1:96:83:89:50:26:63:bc:9a:ea:75: bb:40:9e:02:b7:da:f7:8b:d8:37:2e:f1:5d:cd:42:c5:fa:b5: 64:ba:11:a3 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUeVVlJLDnKkbG/5ggYLD3Uq80VPIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTc5QzI5NkNGQkQxM0IzM0NEMjQ5RjBDRTdEMUM0ODlE NzEwNkI5NzAeFw0yNjA1MDMwMjIyMzVaFw0yNzA1MDIwMjI3MzVaMDMxMTAvBgNV BAMTKEYyM0FFMkYzMUNFMkEyRDE2MkMxNENFNkJFRTc5N0M4MzNCQTFDMzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVKcZNdIhXV6E2r8waIz6grECG ADHxE+JXfiq6mHqYB8Lh+yBm3e8wrko7MjsNOEnos8I1hVN0igGn7BQk/itonAHw GD5vIB6VBY1FhfSjUleJFpkZIdbpAzdIQIl+Iqs0D9WoYapDOk2qh0KGdTW9mfwk Wx83nOYmni8XPBUCh1R9vixFxmRe2C/HXNZYMDhHI8ztuo+PP92csngyPI12Fy4k AVnz5F2m1g26bKY5ZhKrFW+Fgp6DbjvukGYfsxotXt8ooylgmkG85uY+sG4u6NOY 0/ASgzUQqisKVWzWVxhHIDiyrNJjoB0EdMtHQoz3+Jhnr0zWQrSDpJZ9djGfAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQU8jri8xziotFiwUzmvueXyDO6HDAwHwYDVR0j BBgwFoAUV5wpbPvROzPNJJ8M59HEidcQa5cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2JiYjI3MzQtZTVmYS00MGViLTg1OTgtYjdjZDEwMTM0M2NhLzAvNTc5QzI5NkNG QkQxM0IzM0NEMjQ5RjBDRTdEMUM0ODlENzEwNkI5Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC81NzlDMjk2Q0ZCRDEzQjMzQ0QyNDlGMENFN0QxQzQ4OUQ3MTA2 Qjk3LmNlcjCBoQYIKwYBBQUHAQsEgZQwgZEwgY4GCCsGAQUFBzALhoGBcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzNiYmIyNzM0LWU1ZmEtNDBlYi04 NTk4LWI3Y2QxMDEzNDNjYS8wLzM2MzYyZTM5MzYyZTMyMzMzNDJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDM2MzMzODM1Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABCYOowDQYJKoZIhvcN AQELBQADggEBAKtKQhfsokToot/bPTudZVjechKDLkdD0YDjBy+h56ZP8RXdf7NK cVxkXTZvR0B5iob8YAW/m8u0wVEyO3juL080hoqNf7t8+NUTiXWo8mmkLa3mz6RH XC0zIYvdXpNWY1KUqk6b+90KdqGa2bWQ3zvi9e/jpYWGUHBpuKH1v5DCCqPoNz9K b2JZMap0GXMZMjyMPHNdVYI0YRF6rpRJcYVoqN1ErOyBlppUJPiW36ImB6wkqMQ+ sWKDtDRQWvSM0vdXF/y8xtURZbpUsxUrxoh1BhJTgzPzI88adlySVC7BloOJUCZj vJrqdbtAngK32veL2Dcu8V3NQsX6tWS6EaM= -----END CERTIFICATE-----Generated at Tue May 12 23:46:12 2026 by rpki-client