
$ rpki-client -vvf rpki-rsync.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/33362e35302e3231372e302f32342d3234203d3e20313437313238.roa
File: 33362e35302e3231372e302f32342d3234203d3e20313437313238.roa (raw, json)
Hash identifier: a0WkNfgenwL8uanzYTK3X5NWHEPbQxyelea8H/bwYP4=
Subject key identifier: 66:FC:66:B0:8B:91:81:F9:BD:7F:CB:FE:84:E3:88:87:2F:B8:2D:1C
Certificate issuer: /CN=34CFDEB3ED75C02C37413C2029C2C5C9BD282951
Certificate serial: 413A954B494094BB17815FD161C71FBE046F55E2
Authority key identifier: 34:CF:DE:B3:ED:75:C0:2C:37:41:3C:20:29:C2:C5:C9:BD:28:29:51
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/34CFDEB3ED75C02C37413C2029C2C5C9BD282951.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/33362e35302e3231372e302f32342d3234203d3e20313437313238.roa
Signing time: Sun 03 May 2026 02:39:36 +0000
ROA not before: Sun 03 May 2026 02:34:36 +0000
ROA not after: Sun 02 May 2027 02:39:36 +0000
asID: 147128
IP address blocks: 36.50.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/34CFDEB3ED75C02C37413C2029C2C5C9BD282951.crl
rsync://rpki-rsync.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/34CFDEB3ED75C02C37413C2029C2C5C9BD282951.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/34CFDEB3ED75C02C37413C2029C2C5C9BD282951.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:3a:95:4b:49:40:94:bb:17:81:5f:d1:61:c7:1f:be:04:6f:55:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34CFDEB3ED75C02C37413C2029C2C5C9BD282951
Validity
Not Before: May 3 02:34:36 2026 GMT
Not After : May 2 02:39:36 2027 GMT
Subject: CN=66FC66B08B9181F9BD7FCBFE84E388872FB82D1C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:8c:fe:70:e7:ba:bd:b6:98:8d:38:d0:3a:17:
fb:df:78:fa:c7:06:39:1b:f3:c3:d6:99:b0:72:56:
34:07:ad:bc:1d:b5:22:84:c0:d6:48:92:bf:06:22:
f9:a7:4a:f3:ab:8d:94:7c:d5:17:16:ba:76:98:f3:
2d:d2:af:98:fc:1e:36:47:ad:17:95:fa:37:14:43:
0d:a5:2b:23:2d:2e:80:cb:81:19:d4:cb:ca:fa:45:
a0:e8:9a:6e:57:d3:18:17:01:a6:ba:79:8d:fa:78:
bb:11:df:38:b4:4b:ab:ef:d4:a3:71:a5:1a:6c:69:
a1:5b:5d:13:9f:a1:2a:8f:f1:b4:25:75:89:d0:08:
f3:e1:4d:8f:de:89:35:f7:91:dd:05:52:b9:c8:be:
89:17:0a:9e:be:b9:7a:20:dc:bc:5e:cb:72:e1:fc:
35:74:f5:89:f8:d8:36:10:f1:12:af:2d:cf:95:63:
49:52:82:70:45:d3:d8:2f:24:dc:29:05:a3:1e:4c:
4b:3b:b3:d3:ca:92:77:ff:a1:b6:2b:36:8b:cd:9d:
75:f5:a7:09:b1:19:ee:ef:2f:57:8d:7a:ef:90:a5:
f8:7d:b7:06:1c:83:ef:e5:56:22:74:ce:73:7c:12:
28:c2:e2:5a:7f:c9:40:f4:32:07:f5:8a:9e:68:cb:
cc:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:FC:66:B0:8B:91:81:F9:BD:7F:CB:FE:84:E3:88:87:2F:B8:2D:1C
X509v3 Authority Key Identifier:
keyid:34:CF:DE:B3:ED:75:C0:2C:37:41:3C:20:29:C2:C5:C9:BD:28:29:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/34CFDEB3ED75C02C37413C2029C2C5C9BD282951.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/34CFDEB3ED75C02C37413C2029C2C5C9BD282951.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/33362e35302e3231372e302f32342d3234203d3e20313437313238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
36.50.217.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:a7:35:a6:b2:0c:c4:1c:34:1e:fb:be:3a:5a:75:ad:7d:84:
13:06:bf:da:a4:a4:25:7a:95:dc:32:8c:00:49:0e:b2:a3:93:
f2:6f:a9:90:6e:d0:a2:eb:7c:33:ff:8e:af:22:ea:80:c1:3c:
6e:c4:63:06:02:f6:26:c0:a7:f9:a5:60:fd:6c:bd:47:38:d9:
37:9f:d0:47:81:2e:4f:3d:18:50:93:62:1c:40:54:2d:f7:3a:
0a:cf:e1:76:a5:d2:2c:e2:70:90:1f:96:e4:53:94:bf:56:3d:
51:99:d5:b3:84:c4:ba:af:4b:2b:9c:5a:7d:2e:5f:55:08:c5:
17:a3:f6:2f:fd:00:54:8f:7b:29:e1:73:95:01:71:f6:a8:09:
f5:93:cb:c1:fc:a8:4f:29:b2:79:1f:e6:8b:fd:01:84:ac:17:
b1:36:f7:ab:db:33:bd:9d:12:2a:ba:6a:67:7c:6c:42:84:ba:
b7:f8:26:b3:f7:3e:27:14:8f:51:51:3e:d7:94:fb:39:8b:1d:
f5:58:36:72:da:28:c6:16:68:99:db:73:f8:e4:91:39:62:57:
10:1d:8d:c8:68:2b:76:6b:12:3c:4a:5f:f4:4b:ba:4a:d8:96:
48:58:2f:35:2b:54:97:3b:d3:89:e6:71:3e:f5:60:71:e5:c6:
34:05:83:6d
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUQTqVS0lAlLsXgV/RYccfvgRvVeIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzRDRkRFQjNFRDc1QzAyQzM3NDEzQzIwMjlDMkM1QzlC
RDI4Mjk1MTAeFw0yNjA1MDMwMjM0MzZaFw0yNzA1MDIwMjM5MzZaMDMxMTAvBgNV
BAMTKDY2RkM2NkIwOEI5MTgxRjlCRDdGQ0JGRTg0RTM4ODg3MkZCODJEMUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/jP5w57q9tpiNONA6F/vfePrH
Bjkb88PWmbByVjQHrbwdtSKEwNZIkr8GIvmnSvOrjZR81RcWunaY8y3Sr5j8HjZH
rReV+jcUQw2lKyMtLoDLgRnUy8r6RaDomm5X0xgXAaa6eY36eLsR3zi0S6vv1KNx
pRpsaaFbXROfoSqP8bQldYnQCPPhTY/eiTX3kd0FUrnIvokXCp6+uXog3Lxey3Lh
/DV09Yn42DYQ8RKvLc+VY0lSgnBF09gvJNwpBaMeTEs7s9PKknf/obYrNovNnXX1
pwmxGe7vL1eNeu+Qpfh9twYcg+/lViJ0znN8EijC4lp/yUD0Mgf1ip5oy8xDAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUZvxmsIuRgfm9f8v+hOOIhy+4LRwwHwYDVR0j
BBgwFoAUNM/es+11wCw3QTwgKcLFyb0oKVEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NjU5ODlmYWYtNDhmYi00ZjQwLTllNzctMjQzZDc4YTViNWM0LzAvMzRDRkRFQjNF
RDc1QzAyQzM3NDEzQzIwMjlDMkM1QzlCRDI4Mjk1MS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8zNENGREVCM0VENzVDMDJDMzc0MTNDMjAyOUMyQzVDOUJEMjgy
OTUxLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzY1OTg5ZmFmLTQ4ZmItNGY0MC05
ZTc3LTI0M2Q3OGE1YjVjNC8wLzMzMzYyZTM1MzAyZTMyMzEzNzJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMxMzQzNzMxMzIzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEACQy2TANBgkqhkiG
9w0BAQsFAAOCAQEACqc1prIMxBw0Hvu+Olp1rX2EEwa/2qSkJXqV3DKMAEkOsqOT
8m+pkG7Qout8M/+OryLqgME8bsRjBgL2JsCn+aVg/Wy9RzjZN5/QR4EuTz0YUJNi
HEBULfc6Cs/hdqXSLOJwkB+W5FOUv1Y9UZnVs4TEuq9LK5xafS5fVQjFF6P2L/0A
VI97KeFzlQFx9qgJ9ZPLwfyoTymyeR/mi/0BhKwXsTb3q9szvZ0SKrpqZ3xsQoS6
t/gms/c+JxSPUVE+15T7OYsd9Vg2ctooxhZomdtz+OSROWJXEB2NyGgrdmsSPEpf
9Eu6StiWSFgvNStUlzvTieZxPvVgceXGNAWDbQ==
-----END CERTIFICATE-----
Generated at Wed May 13 02:49:23 2026 by rpki-client