
$ rpki-client -vvf rpki-rsync.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/33362e33372e36342e302f32342d3234203d3e2034383030.roa
File: 33362e33372e36342e302f32342d3234203d3e2034383030.roa (raw, json)
Hash identifier: PA39TYh6P41nbjHtJH0d1GIAsFc6B+1kH+m4xb6uCPI=
Subject key identifier: BF:8F:37:01:1F:5F:30:8F:7A:CA:20:88:93:00:AD:01:45:DD:4A:ED
Certificate issuer: /CN=C5528B1880D1A3C409F79997E426F977596B3E01
Certificate serial: 47A1A17155C7074CEF1EF2930E8CDFCE4F909872
Authority key identifier: C5:52:8B:18:80:D1:A3:C4:09:F7:99:97:E4:26:F9:77:59:6B:3E:01
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C5528B1880D1A3C409F79997E426F977596B3E01.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/33362e33372e36342e302f32342d3234203d3e2034383030.roa
Signing time: Sun 03 May 2026 02:34:08 +0000
ROA not before: Sun 03 May 2026 02:29:08 +0000
ROA not after: Sun 02 May 2027 02:34:08 +0000
asID: 4800
IP address blocks: 36.37.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/C5528B1880D1A3C409F79997E426F977596B3E01.crl
rsync://rpki-rsync.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/C5528B1880D1A3C409F79997E426F977596B3E01.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C5528B1880D1A3C409F79997E426F977596B3E01.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 23:29:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:a1:a1:71:55:c7:07:4c:ef:1e:f2:93:0e:8c:df:ce:4f:90:98:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C5528B1880D1A3C409F79997E426F977596B3E01
Validity
Not Before: May 3 02:29:08 2026 GMT
Not After : May 2 02:34:08 2027 GMT
Subject: CN=BF8F37011F5F308F7ACA20889300AD0145DD4AED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:79:cf:c5:da:d0:26:a6:2e:a7:52:54:a8:cb:
03:fa:df:3a:9c:62:4f:03:48:f9:a9:7b:ea:60:2f:
e1:42:b4:ac:ab:02:16:2d:1b:bb:aa:ec:a2:70:b4:
38:b0:b6:6d:1d:e1:ef:ff:31:de:5f:b1:c3:a3:6c:
00:13:74:dd:18:3e:9a:01:91:4a:d6:a1:00:10:60:
e2:76:2d:f3:eb:bc:f6:84:dd:60:d2:a8:c3:3b:d5:
c9:0b:53:c9:b9:85:f6:4e:39:13:d8:a4:8c:d3:9a:
f4:1f:7e:47:a1:a1:96:de:a2:f1:27:a1:90:a6:ff:
e2:96:36:98:04:af:81:9a:de:52:76:dd:e0:8e:5e:
01:a8:25:5a:d8:a0:e4:1b:da:73:d5:f5:05:38:95:
a1:da:17:a1:7b:4f:d9:a4:39:ff:6e:0f:2d:3f:53:
22:9a:db:80:3c:72:5c:67:47:52:c3:f7:b2:81:40:
3b:39:a9:8d:44:ef:96:3d:fb:a2:e8:e8:91:0a:62:
6a:81:88:b3:5d:51:18:1a:c8:0b:da:3f:48:d0:90:
34:e6:46:42:73:f5:d6:7e:35:bd:75:52:0f:a8:03:
39:d5:a9:b7:7f:2e:d4:21:ea:c0:cf:a4:50:4e:bb:
ca:bc:6f:d1:d1:b7:ea:1a:30:f2:a8:b8:f6:40:96:
45:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:8F:37:01:1F:5F:30:8F:7A:CA:20:88:93:00:AD:01:45:DD:4A:ED
X509v3 Authority Key Identifier:
keyid:C5:52:8B:18:80:D1:A3:C4:09:F7:99:97:E4:26:F9:77:59:6B:3E:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/C5528B1880D1A3C409F79997E426F977596B3E01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C5528B1880D1A3C409F79997E426F977596B3E01.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/33362e33372e36342e302f32342d3234203d3e2034383030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
36.37.64.0/24
Signature Algorithm: sha256WithRSAEncryption
08:ce:ea:c2:5c:6a:77:45:1f:0f:21:d3:aa:bc:fa:59:a4:1c:
91:61:c9:80:12:0a:0c:88:e4:e6:a9:4c:f1:c0:aa:db:ed:6e:
fc:b9:75:a5:72:1c:d0:f6:f3:be:4c:a0:10:b1:82:de:ce:3f:
79:5e:0a:c5:dd:e9:71:48:36:6b:86:07:e8:16:d6:54:b9:42:
d3:44:71:26:f9:81:ff:0d:4f:5c:dc:e4:e6:af:eb:bf:5b:41:
a0:61:0f:89:56:ce:9a:be:d4:fc:5f:06:89:37:c2:7c:24:c9:
3c:d7:2b:b8:90:12:82:d1:f1:37:f7:7a:36:e5:23:fe:c2:d2:
29:46:f2:3e:39:5c:36:59:e2:55:2a:78:a5:c4:9a:ea:73:70:
32:5f:69:de:26:1f:46:6e:98:f8:08:a4:43:8d:42:a0:0f:82:
19:1a:15:79:60:d9:72:4a:bb:da:69:18:1a:c7:98:88:a8:f6:
c2:01:9a:d0:94:79:f2:c9:5a:9b:c8:fb:1e:de:d2:d4:76:dc:
f3:d2:cb:18:c7:70:1f:22:03:2d:2e:4d:7b:2d:70:c1:81:19:
8a:21:db:a0:55:5e:03:49:ca:75:f8:88:52:15:96:2c:f4:19:
8e:61:be:08:a6:b4:c2:5d:aa:4a:f5:19:c3:fd:c4:44:b5:b0:
c3:7b:a1:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:28:10 2026 by rpki-client