
$ rpki-client -vvf rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/36362e39362e3233382e302f32342d3234203d3e203633383539.roa
File: 36362e39362e3233382e302f32342d3234203d3e203633383539.roa (raw, json)
Hash identifier: I/Y0zDnD8eSddmL9ZGozTFxyJGihXZBqSvkyafD6HLU=
Subject key identifier: 05:50:CE:5B:FD:69:F1:3D:44:A3:DC:ED:12:71:3D:7F:39:C5:E9:22
Certificate issuer: /CN=579C296CFBD13B33CD249F0CE7D1C489D7106B97
Certificate serial: 597CAC18BC55CA3DE0C3A877DBE814A2D11E1CA8
Authority key identifier: 57:9C:29:6C:FB:D1:3B:33:CD:24:9F:0C:E7:D1:C4:89:D7:10:6B:97
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/579C296CFBD13B33CD249F0CE7D1C489D7106B97.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/36362e39362e3233382e302f32342d3234203d3e203633383539.roa
Signing time: Sun 03 May 2026 02:27:18 +0000
ROA not before: Sun 03 May 2026 02:22:18 +0000
ROA not after: Sun 02 May 2027 02:27:18 +0000
asID: 63859
IP address blocks: 66.96.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/579C296CFBD13B33CD249F0CE7D1C489D7106B97.crl
rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/579C296CFBD13B33CD249F0CE7D1C489D7106B97.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/579C296CFBD13B33CD249F0CE7D1C489D7106B97.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 07:47:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:7c:ac:18:bc:55:ca:3d:e0:c3:a8:77:db:e8:14:a2:d1:1e:1c:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=579C296CFBD13B33CD249F0CE7D1C489D7106B97
Validity
Not Before: May 3 02:22:18 2026 GMT
Not After : May 2 02:27:18 2027 GMT
Subject: CN=0550CE5BFD69F13D44A3DCED12713D7F39C5E922
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:5f:28:f0:c4:17:43:98:b5:e3:e5:5a:ed:46:
ac:6c:a5:ce:7a:b6:88:9b:5c:ac:f3:ce:d4:ba:1f:
85:4f:fc:74:8c:ba:d1:8f:0e:c5:f8:bb:0b:a0:72:
f5:b0:6b:e6:8d:84:7b:7c:d0:b8:b9:88:14:18:06:
90:8c:6f:62:36:1f:d9:57:f0:24:52:51:a7:e7:6f:
42:c0:2a:90:2a:03:e6:14:65:bc:66:c1:80:ea:59:
67:50:3e:1e:59:47:e7:64:f9:d1:11:23:47:4a:e2:
a6:9c:5e:3b:83:2b:1a:51:41:b6:a2:17:15:94:a4:
37:70:87:c9:b2:4f:52:f1:28:53:1b:21:b4:df:b3:
32:62:1e:d5:38:8f:d8:8e:9d:2c:35:d1:2d:b0:81:
c7:41:43:f9:4b:af:51:08:30:89:da:45:0f:3b:6e:
a5:c1:d9:76:74:ac:21:2d:31:ce:7f:09:a0:ed:1f:
39:2e:74:8e:da:07:d2:b2:61:ac:f2:58:11:c2:c8:
cb:65:77:80:4b:08:35:93:6f:2a:c5:7c:4c:bc:79:
9f:a6:37:b3:c6:ec:d2:a0:66:28:e8:ac:0d:51:09:
f4:f4:e4:f9:17:8b:10:90:99:3b:88:c7:81:22:bc:
f9:66:b7:4b:3f:b8:d4:79:ce:40:86:c2:ca:7e:21:
a1:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:50:CE:5B:FD:69:F1:3D:44:A3:DC:ED:12:71:3D:7F:39:C5:E9:22
X509v3 Authority Key Identifier:
keyid:57:9C:29:6C:FB:D1:3B:33:CD:24:9F:0C:E7:D1:C4:89:D7:10:6B:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/579C296CFBD13B33CD249F0CE7D1C489D7106B97.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/579C296CFBD13B33CD249F0CE7D1C489D7106B97.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/36362e39362e3233382e302f32342d3234203d3e203633383539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
66.96.238.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:aa:af:d5:24:50:49:36:52:b0:48:e3:a4:5c:67:99:af:f9:
12:ea:61:6d:16:76:68:77:f9:3d:dc:52:bf:f1:63:85:ec:5d:
34:e3:67:1d:53:2e:f8:e1:4b:5e:bf:6a:6f:bb:ce:0d:64:e7:
37:75:ca:f1:0f:37:37:47:74:f5:3e:12:c1:2b:da:bc:13:52:
9e:b7:76:59:9b:7b:5d:5e:72:98:1c:bd:df:0b:d3:01:20:bb:
86:74:fb:7e:9c:d4:b5:de:e1:9d:03:f4:d3:46:8f:41:38:5a:
69:a0:ff:51:18:08:55:0d:51:f2:6c:6d:cc:c5:ce:41:7f:f3:
fe:6e:38:90:d1:dd:0c:bf:b8:e4:15:0a:e2:0b:0e:49:a3:e6:
72:78:fb:bb:e1:3e:e2:fe:af:8a:02:be:94:dc:3a:91:79:e2:
51:96:9d:87:12:36:88:db:d0:ca:a1:49:02:48:92:a9:69:a2:
44:5f:70:62:3e:e1:f3:63:e2:e7:83:fa:f8:72:a6:50:cf:d4:
74:06:ce:1f:fa:df:ad:94:e1:3a:ad:bc:82:4d:80:90:2c:14:
5c:22:d9:c2:a8:18:ef:88:1e:17:a9:89:58:78:a6:22:4c:db:
9b:59:8d:38:fb:b0:9f:ef:f0:71:1d:c0:fc:4e:1d:14:0f:e6:
0d:4f:0f:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:14:17 2026 by rpki-client