
$ rpki-client -vvf rpki-rsync.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/33362e35302e39372e302f32342d3234203d3e20313532333939.roa
File: 33362e35302e39372e302f32342d3234203d3e20313532333939.roa (raw, json)
Hash identifier: /O1DIN2LGe+ZJwc8ZWebbywDWBuMgUXGIAei2neb/A0=
Subject key identifier: DC:F3:18:C9:66:D4:9F:67:D8:31:94:20:55:8C:EB:C4:52:DA:25:A1
Certificate issuer: /CN=7E8D665F4A7B1F5145CEBB0B96D7385B6ECA154A
Certificate serial: 68044816C255DA76CB53C28082D71F95795798CE
Authority key identifier: 7E:8D:66:5F:4A:7B:1F:51:45:CE:BB:0B:96:D7:38:5B:6E:CA:15:4A
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7E8D665F4A7B1F5145CEBB0B96D7385B6ECA154A.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/33362e35302e39372e302f32342d3234203d3e20313532333939.roa
Signing time: Sun 03 May 2026 02:30:58 +0000
ROA not before: Sun 03 May 2026 02:25:58 +0000
ROA not after: Sun 02 May 2027 02:30:58 +0000
asID: 152399
IP address blocks: 36.50.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/7E8D665F4A7B1F5145CEBB0B96D7385B6ECA154A.crl
rsync://rpki-rsync.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/7E8D665F4A7B1F5145CEBB0B96D7385B6ECA154A.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7E8D665F4A7B1F5145CEBB0B96D7385B6ECA154A.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:04:48:16:c2:55:da:76:cb:53:c2:80:82:d7:1f:95:79:57:98:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7E8D665F4A7B1F5145CEBB0B96D7385B6ECA154A
Validity
Not Before: May 3 02:25:58 2026 GMT
Not After : May 2 02:30:58 2027 GMT
Subject: CN=DCF318C966D49F67D8319420558CEBC452DA25A1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:1c:03:13:6a:e2:4d:4f:31:f4:b3:5d:aa:a7:
4d:50:4b:60:9b:fc:e9:35:38:0a:b7:11:f4:54:be:
42:ae:92:e2:65:a3:3f:cf:b1:83:31:03:0f:5b:72:
3f:fb:34:18:66:ed:f2:51:79:d1:f8:d8:e0:a3:ca:
d2:0f:75:13:6f:90:2f:dc:b0:95:15:bc:51:0b:b2:
b0:0c:db:43:d6:e0:90:bf:92:65:1a:d7:3c:c9:e2:
38:b6:44:1f:b9:83:ab:e5:ef:30:a8:0e:1d:42:a1:
e7:fb:e2:5a:da:99:e4:fb:e8:1d:75:a6:9c:ac:16:
51:68:88:56:7b:96:6a:af:ce:16:a0:16:69:ac:fa:
6f:f3:eb:d3:8c:8d:88:05:03:51:98:8d:6d:ee:d6:
fa:32:c8:b6:d4:f9:82:85:79:36:c4:dd:0b:f8:e8:
53:51:52:2f:9c:df:00:84:e6:a7:9a:47:40:34:95:
20:b3:5e:1d:5b:a8:53:df:16:16:cf:ff:fd:6f:58:
4c:59:e6:81:02:eb:78:cf:3c:a4:31:dd:b1:4e:1c:
1a:c3:2e:39:fa:ac:89:38:65:5d:8a:ec:fe:40:2d:
89:ec:85:3a:79:26:9a:ca:dd:11:a3:33:69:22:01:
50:9d:b0:c4:e4:ac:3f:a5:dd:76:8e:aa:ab:06:6e:
28:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:F3:18:C9:66:D4:9F:67:D8:31:94:20:55:8C:EB:C4:52:DA:25:A1
X509v3 Authority Key Identifier:
keyid:7E:8D:66:5F:4A:7B:1F:51:45:CE:BB:0B:96:D7:38:5B:6E:CA:15:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/7E8D665F4A7B1F5145CEBB0B96D7385B6ECA154A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7E8D665F4A7B1F5145CEBB0B96D7385B6ECA154A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/33362e35302e39372e302f32342d3234203d3e20313532333939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
36.50.97.0/24
Signature Algorithm: sha256WithRSAEncryption
d7:7d:8d:ec:83:46:cd:65:08:60:c0:7b:51:0c:31:b1:5e:92:
29:72:d5:94:d1:d8:9c:f9:9c:6b:76:f9:a9:91:97:2e:1a:37:
8b:63:25:9b:f7:1f:04:f6:ee:7b:49:e9:67:c6:04:ca:cc:c3:
77:4b:3b:66:93:b7:05:7e:a1:04:2f:d6:24:11:1f:11:3c:d8:
02:4b:99:96:13:d3:65:64:2b:7a:ed:f7:14:f6:4b:a9:55:5d:
56:96:c7:4e:3b:ee:fa:34:d6:ba:77:51:0d:ee:3a:ed:eb:8d:
3c:59:0d:40:36:fa:fb:0b:4b:59:29:32:8c:9a:82:17:25:64:
f9:45:a1:59:df:dc:25:42:34:dd:1b:e7:51:2c:15:f4:51:f5:
6a:fa:d8:f9:c5:44:62:bb:80:87:7c:ed:95:0a:b4:33:f0:6e:
3c:fd:df:86:25:ac:c8:c7:62:b3:0b:e3:fb:e5:d4:71:a1:17:
54:69:3e:31:bb:ac:36:7a:8b:c8:c5:b7:7b:f5:da:f2:27:d2:
3c:5d:71:5c:90:9f:56:7e:5c:36:7a:ba:58:5f:9a:1e:24:d3:
a5:67:9c:18:21:b5:32:86:40:d8:00:7d:9d:38:db:79:3d:76:
fc:40:6f:21:ac:a9:f3:e7:2c:ec:3d:4b:d4:8a:61:71:d6:47:
d3:a8:2f:3e
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUaARIFsJV2nbLU8KAgtcflXlXmM4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0U4RDY2NUY0QTdCMUY1MTQ1Q0VCQjBCOTZENzM4NUI2
RUNBMTU0QTAeFw0yNjA1MDMwMjI1NThaFw0yNzA1MDIwMjMwNThaMDMxMTAvBgNV
BAMTKERDRjMxOEM5NjZENDlGNjdEODMxOTQyMDU1OENFQkM0NTJEQTI1QTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+HAMTauJNTzH0s12qp01QS2Cb
/Ok1OAq3EfRUvkKukuJloz/PsYMxAw9bcj/7NBhm7fJRedH42OCjytIPdRNvkC/c
sJUVvFELsrAM20PW4JC/kmUa1zzJ4ji2RB+5g6vl7zCoDh1Coef74lrameT76B11
ppysFlFoiFZ7lmqvzhagFmms+m/z69OMjYgFA1GYjW3u1voyyLbU+YKFeTbE3Qv4
6FNRUi+c3wCE5qeaR0A0lSCzXh1bqFPfFhbP//1vWExZ5oEC63jPPKQx3bFOHBrD
Ljn6rIk4ZV2K7P5ALYnshTp5JprK3RGjM2kiAVCdsMTkrD+l3XaOqqsGbijTAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQU3PMYyWbUn2fYMZQgVYzrxFLaJaEwHwYDVR0j
BBgwFoAUfo1mX0p7H1FFzrsLltc4W27KFUowDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NDhjMDc0NDEtY2Q5ZC00ZDg1LWFhYjQtNjVmNWRkNGVkN2UwLzAvN0U4RDY2NUY0
QTdCMUY1MTQ1Q0VCQjBCOTZENzM4NUI2RUNBMTU0QS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS83RThENjY1RjRBN0IxRjUxNDVDRUJCMEI5NkQ3Mzg1QjZFQ0Ex
NTRBLmNlcjCBoQYIKwYBBQUHAQsEgZQwgZEwgY4GCCsGAQUFBzALhoGBcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzQ4YzA3NDQxLWNkOWQtNGQ4NS1h
YWI0LTY1ZjVkZDRlZDdlMC8wLzMzMzYyZTM1MzAyZTM5MzcyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzMTM1MzIzMzM5Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAkMmEwDQYJKoZIhvcN
AQELBQADggEBANd9jeyDRs1lCGDAe1EMMbFekily1ZTR2Jz5nGt2+amRly4aN4tj
JZv3HwT27ntJ6WfGBMrMw3dLO2aTtwV+oQQv1iQRHxE82AJLmZYT02VkK3rt9xT2
S6lVXVaWx0477vo01rp3UQ3uOu3rjTxZDUA2+vsLS1kpMoyaghclZPlFoVnf3CVC
NN0b51EsFfRR9Wr62PnFRGK7gId87ZUKtDPwbjz934YlrMjHYrML4/vl1HGhF1Rp
PjG7rDZ6i8jFt3v12vIn0jxdcVyQn1Z+XDZ6ulhfmh4k06VnnBghtTKGQNgAfZ04
23k9dvxAbyGsqfPnLOw9S9SKYXHWR9OoLz4=
-----END CERTIFICATE-----
Generated at Tue May 12 21:53:17 2026 by rpki-client