$ rpki-client -vvf rpki-rsync.idnic.net/repo/7f4fc340-af69-4e8e-a777-747dd829dc3f/0/33362e35302e3232322e302f32332d3233203d3e20313532303636.roa File: 33362e35302e3232322e302f32332d3233203d3e20313532303636.roa (raw, json) Hash identifier: GPkDk8p+ymgPw22DEbeL3w08iezz7zNE3/x03JFcyqM= Subject key identifier: F0:31:16:C0:D8:63:20:A4:4F:EF:AA:A0:9E:9C:00:4D:F9:64:44:55 Certificate issuer: /CN=5ABD75609EEB0674A51335F6DE524A79441BA605 Certificate serial: 059A9B188423B18606430B67F74D46CD22F5EC56 Authority key identifier: 5A:BD:75:60:9E:EB:06:74:A5:13:35:F6:DE:52:4A:79:44:1B:A6:05 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5ABD75609EEB0674A51335F6DE524A79441BA605.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7f4fc340-af69-4e8e-a777-747dd829dc3f/0/33362e35302e3232322e302f32332d3233203d3e20313532303636.roa Signing time: Sun 03 May 2026 02:46:19 +0000 ROA not before: Sun 03 May 2026 02:41:19 +0000 ROA not after: Sun 02 May 2027 02:46:19 +0000 asID: 152066 IP address blocks: 36.50.222.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7f4fc340-af69-4e8e-a777-747dd829dc3f/0/5ABD75609EEB0674A51335F6DE524A79441BA605.crl rsync://rpki-rsync.idnic.net/repo/7f4fc340-af69-4e8e-a777-747dd829dc3f/0/5ABD75609EEB0674A51335F6DE524A79441BA605.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5ABD75609EEB0674A51335F6DE524A79441BA605.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:9a:9b:18:84:23:b1:86:06:43:0b:67:f7:4d:46:cd:22:f5:ec:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ABD75609EEB0674A51335F6DE524A79441BA605 Validity Not Before: May 3 02:41:19 2026 GMT Not After : May 2 02:46:19 2027 GMT Subject: CN=F03116C0D86320A44FEFAAA09E9C004DF9644455 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:67:76:24:3f:5c:6f:93:09:5f:76:ee:56:74: e4:21:06:ed:20:a3:84:e0:13:3e:d0:33:bd:90:03: 87:ac:04:74:5f:45:4a:8e:37:fa:f6:95:4f:d0:f8: ba:75:8a:99:44:0e:3c:f6:0a:60:52:2d:7a:58:63: 70:a7:4e:44:52:dc:11:4f:64:c0:4d:ba:bf:35:2f: ca:34:a4:8a:ec:af:b8:c8:fb:b3:76:26:38:6b:09: 44:4d:ad:9a:6f:75:89:18:47:f8:37:12:cb:b8:39: 62:dc:64:3b:3a:36:ab:99:1a:90:00:11:b7:c0:6e: 19:e1:9a:f8:17:54:d2:5e:7b:4a:27:08:91:91:99: 85:fd:ba:f9:e6:01:97:92:f9:20:a4:3e:28:cd:64: 29:b9:d2:63:3c:17:66:a3:08:ad:86:1d:44:a0:40: f1:1a:d5:4f:0b:46:68:49:7f:4b:f0:f8:f0:5e:23: 42:7e:3d:59:5e:f6:c0:7e:cb:14:bb:8c:7e:2e:20: 31:61:6f:8a:de:c9:d2:2a:79:9a:ec:4f:6c:6e:6f: 6a:3c:e7:ac:d9:c0:0e:7b:5a:03:3e:08:16:1e:31: 74:b9:bc:6c:6f:b3:c9:b4:8e:54:bf:37:6a:1e:92: 91:07:18:16:07:0b:f7:44:72:82:81:f0:36:87:14: 16:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:31:16:C0:D8:63:20:A4:4F:EF:AA:A0:9E:9C:00:4D:F9:64:44:55 X509v3 Authority Key Identifier: keyid:5A:BD:75:60:9E:EB:06:74:A5:13:35:F6:DE:52:4A:79:44:1B:A6:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7f4fc340-af69-4e8e-a777-747dd829dc3f/0/5ABD75609EEB0674A51335F6DE524A79441BA605.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5ABD75609EEB0674A51335F6DE524A79441BA605.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7f4fc340-af69-4e8e-a777-747dd829dc3f/0/33362e35302e3232322e302f32332d3233203d3e20313532303636.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 36.50.222.0/23 Signature Algorithm: sha256WithRSAEncryption 23:a1:f5:83:e0:29:f4:31:9f:f3:11:68:5a:5d:21:50:61:b7: f8:d0:c7:cd:d2:1f:d1:ee:78:01:64:76:9d:c1:2c:cc:ce:74: 42:95:25:85:67:08:7d:66:b5:64:1d:b2:47:74:81:25:d7:ea: fe:0e:3f:69:f3:92:b4:88:ab:20:8b:ef:c3:9e:fa:9f:31:d1: 28:15:59:29:e8:19:f0:6b:75:ea:13:40:b7:b4:d2:5c:e5:c7: 24:e2:62:f1:75:f7:44:2e:95:1c:aa:c4:23:08:28:42:41:a1: 3e:d9:2c:f5:5e:4b:3e:dc:01:11:b6:5f:a4:a2:d6:cb:2e:74: 9f:7d:68:fa:85:1b:e8:1f:b3:63:f5:76:c2:28:85:a9:ea:7c: e3:38:25:ca:1d:6c:92:8f:48:73:08:ad:ff:90:6a:5f:25:e7: b5:58:9c:55:38:fe:cb:51:91:4b:29:9f:43:32:ed:25:3d:d0: 2b:c1:d9:9e:5a:d1:c9:c9:e2:69:7f:9f:7e:54:f0:34:38:52: f6:b4:94:5c:24:80:87:39:37:2c:04:2f:64:de:00:68:a9:b4: eb:cd:26:20:d4:79:6f:bd:b1:b1:3d:6d:f5:94:de:49:98:c5: d2:f2:76:56:bd:61:86:23:5c:18:a7:6f:00:74:5c:12:8a:3a: 39:d4:bd:0e -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUBZqbGIQjsYYGQwtn901GzSL17FYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUFCRDc1NjA5RUVCMDY3NEE1MTMzNUY2REU1MjRBNzk0 NDFCQTYwNTAeFw0yNjA1MDMwMjQxMTlaFw0yNzA1MDIwMjQ2MTlaMDMxMTAvBgNV BAMTKEYwMzExNkMwRDg2MzIwQTQ0RkVGQUFBMDlFOUMwMDRERjk2NDQ0NTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0Z3YkP1xvkwlfdu5WdOQhBu0g o4TgEz7QM72QA4esBHRfRUqON/r2lU/Q+Lp1iplEDjz2CmBSLXpYY3CnTkRS3BFP ZMBNur81L8o0pIrsr7jI+7N2JjhrCURNrZpvdYkYR/g3Esu4OWLcZDs6NquZGpAA EbfAbhnhmvgXVNJee0onCJGRmYX9uvnmAZeS+SCkPijNZCm50mM8F2ajCK2GHUSg QPEa1U8LRmhJf0vw+PBeI0J+PVle9sB+yxS7jH4uIDFhb4reydIqeZrsT2xub2o8 56zZwA57WgM+CBYeMXS5vGxvs8m0jlS/N2oekpEHGBYHC/dEcoKB8DaHFBYVAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQU8DEWwNhjIKRP76qgnpwATflkRFUwHwYDVR0j BBgwFoAUWr11YJ7rBnSlEzX23lJKeUQbpgUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2Y0ZmMzNDAtYWY2OS00ZThlLWE3NzctNzQ3ZGQ4MjlkYzNmLzAvNUFCRDc1NjA5 RUVCMDY3NEE1MTMzNUY2REU1MjRBNzk0NDFCQTYwNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81QUJENzU2MDlFRUIwNjc0QTUxMzM1RjZERTUyNEE3OTQ0MUJB NjA1LmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzdmNGZjMzQwLWFmNjktNGU4ZS1h Nzc3LTc0N2RkODI5ZGMzZi8wLzMzMzYyZTM1MzAyZTMyMzIzMjJlMzAyZjMyMzMy ZDMyMzMyMDNkM2UyMDMxMzUzMjMwMzYzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEASQy3jANBgkqhkiG 9w0BAQsFAAOCAQEAI6H1g+Ap9DGf8xFoWl0hUGG3+NDHzdIf0e54AWR2ncEszM50 QpUlhWcIfWa1ZB2yR3SBJdfq/g4/afOStIirIIvvw576nzHRKBVZKegZ8Gt16hNA t7TSXOXHJOJi8XX3RC6VHKrEIwgoQkGhPtks9V5LPtwBEbZfpKLWyy50n31o+oUb 6B+zY/V2wiiFqep84zglyh1sko9Icwit/5BqXyXntVicVTj+y1GRSymfQzLtJT3Q K8HZnlrRycniaX+fflTwNDhS9rSUXCSAhzk3LAQvZN4AaKm0680mINR5b72xsT1t 9ZTeSZjF0vJ2Vr1hhiNcGKdvAHRcEoo6OdS9Dg== -----END CERTIFICATE-----Generated at Wed May 13 00:43:54 2026 by rpki-client