
$ rpki-client -vvf rpki-rsync.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/33362e35302e3231362e302f32332d3233203d3e20313437313238.roa
File: 33362e35302e3231362e302f32332d3233203d3e20313437313238.roa (raw, json)
Hash identifier: NfwodMU0ZpYOe0eGaroCaBHW6LXuenQTGATXpYvxAyk=
Subject key identifier: 04:18:85:98:77:6E:A2:05:88:90:81:EF:5F:F4:92:F4:15:AE:5E:B7
Certificate issuer: /CN=34CFDEB3ED75C02C37413C2029C2C5C9BD282951
Certificate serial: 270D479D03400F1FA30281CB296C6A58A5C04174
Authority key identifier: 34:CF:DE:B3:ED:75:C0:2C:37:41:3C:20:29:C2:C5:C9:BD:28:29:51
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/34CFDEB3ED75C02C37413C2029C2C5C9BD282951.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/33362e35302e3231362e302f32332d3233203d3e20313437313238.roa
Signing time: Sun 03 May 2026 02:39:36 +0000
ROA not before: Sun 03 May 2026 02:34:36 +0000
ROA not after: Sun 02 May 2027 02:39:36 +0000
asID: 147128
IP address blocks: 36.50.216.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/34CFDEB3ED75C02C37413C2029C2C5C9BD282951.crl
rsync://rpki-rsync.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/34CFDEB3ED75C02C37413C2029C2C5C9BD282951.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/34CFDEB3ED75C02C37413C2029C2C5C9BD282951.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:0d:47:9d:03:40:0f:1f:a3:02:81:cb:29:6c:6a:58:a5:c0:41:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34CFDEB3ED75C02C37413C2029C2C5C9BD282951
Validity
Not Before: May 3 02:34:36 2026 GMT
Not After : May 2 02:39:36 2027 GMT
Subject: CN=04188598776EA205889081EF5FF492F415AE5EB7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b0:bd:e7:4a:79:e7:6a:f8:9b:4d:58:28:ee:
9a:6f:98:9f:fd:e8:9f:75:61:8f:a1:03:60:a5:de:
49:7e:2c:9f:70:74:2b:08:09:b0:0a:15:ba:61:55:
77:e9:f8:d9:df:c3:29:67:a2:b7:0e:18:2b:36:b5:
79:ce:cf:d5:0e:08:b4:65:b8:22:e1:44:32:05:97:
1d:60:f1:87:92:7c:d5:fd:76:f5:89:fa:c4:50:ce:
41:1d:b3:53:e2:2d:dd:ca:50:6d:57:52:bf:7b:5e:
07:01:ad:ad:48:a1:64:6e:72:2c:b4:63:bd:36:2d:
5b:8d:7b:76:20:43:32:59:9f:b6:b2:b3:75:df:06:
41:10:fc:40:05:95:99:58:90:80:48:3e:13:de:42:
93:be:d0:0e:71:d6:72:ab:ae:20:c5:e5:22:95:f6:
84:f3:f6:75:83:37:51:b4:41:1e:99:36:eb:d0:82:
20:51:4f:c9:f8:03:6f:85:f2:ad:11:05:49:00:bb:
68:aa:69:ee:5c:1b:09:f2:ed:0a:82:11:3f:98:4b:
09:ae:c7:95:89:ec:77:91:07:37:f1:13:a6:a4:1b:
d1:d7:2c:54:ed:6b:2d:f8:62:e3:e6:95:6e:5a:bc:
7e:2d:fa:33:74:39:45:02:1f:b1:a7:03:75:66:1e:
9d:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:18:85:98:77:6E:A2:05:88:90:81:EF:5F:F4:92:F4:15:AE:5E:B7
X509v3 Authority Key Identifier:
keyid:34:CF:DE:B3:ED:75:C0:2C:37:41:3C:20:29:C2:C5:C9:BD:28:29:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/34CFDEB3ED75C02C37413C2029C2C5C9BD282951.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/34CFDEB3ED75C02C37413C2029C2C5C9BD282951.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/33362e35302e3231362e302f32332d3233203d3e20313437313238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
36.50.216.0/23
Signature Algorithm: sha256WithRSAEncryption
5f:c5:de:05:86:7c:27:20:81:29:21:81:7d:25:fc:69:f2:af:
aa:e1:8e:d5:e2:dd:a8:a8:e0:cc:64:c7:98:49:2e:49:a4:73:
0f:8a:03:da:2a:fe:c3:e6:cc:4f:dd:7e:fe:22:c3:c8:97:51:
c5:1d:02:fd:85:37:7d:66:5f:75:f4:56:4c:ed:f6:8f:3d:a6:
dd:8d:aa:27:c2:bf:96:e6:b5:71:61:07:44:db:bb:77:fd:e3:
3c:7b:a7:d8:c4:4e:33:62:de:e0:46:98:76:99:b1:74:d3:83:
f8:56:47:bf:ff:0d:d2:3a:af:52:5b:dc:f1:5e:dc:ab:24:7e:
78:1f:11:5a:a0:49:4b:fa:1d:4f:36:d3:cd:8f:bc:fc:31:e9:
e4:20:40:13:ba:86:b1:3e:e5:23:e3:96:f7:f0:d7:2c:3c:11:
15:88:97:a7:6f:89:48:3c:bb:3f:28:85:40:6c:23:6b:ae:d5:
24:4c:84:6a:fc:d3:50:14:03:42:8c:c7:7b:dc:56:e8:4d:45:
15:51:05:9c:7e:4d:41:f1:d4:b1:3b:c7:95:16:e3:90:b2:29:
8f:9b:28:86:fe:dd:7d:04:9f:64:4f:08:58:ae:d6:31:b8:60:
11:54:5c:15:b8:e0:b1:87:2f:ed:a3:b6:55:54:aa:dc:0d:fd:
a3:c6:3f:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:40:12 2026 by rpki-client