
$ rpki-client -vvf rpki-rsync.idnic.net/repo/f700292f-2868-47b3-ac21-600a467a7237/0/33362e35302e3135342e302f32332d3234203d3e20313532303738.roa
File: 33362e35302e3135342e302f32332d3234203d3e20313532303738.roa (raw, json)
Hash identifier: 8bdm59nV7JGD6nAo69wqK5zS2ZyFtuzqAXaUdVJTTG8=
Subject key identifier: 58:5D:BF:B9:DC:3B:C1:81:2E:C5:86:80:C0:B6:B9:3E:85:71:FA:30
Certificate issuer: /CN=C444FB9EA5E4CA4DA5FB85BA131C62C012402C80
Certificate serial: 5793592282B368083D34ADCFA318CEDC92156D3B
Authority key identifier: C4:44:FB:9E:A5:E4:CA:4D:A5:FB:85:BA:13:1C:62:C0:12:40:2C:80
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C444FB9EA5E4CA4DA5FB85BA131C62C012402C80.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/f700292f-2868-47b3-ac21-600a467a7237/0/33362e35302e3135342e302f32332d3234203d3e20313532303738.roa
Signing time: Sun 03 May 2026 03:18:02 +0000
ROA not before: Sun 03 May 2026 03:13:02 +0000
ROA not after: Sun 02 May 2027 03:18:02 +0000
asID: 152078
IP address blocks: 36.50.154.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/f700292f-2868-47b3-ac21-600a467a7237/0/C444FB9EA5E4CA4DA5FB85BA131C62C012402C80.crl
rsync://rpki-rsync.idnic.net/repo/f700292f-2868-47b3-ac21-600a467a7237/0/C444FB9EA5E4CA4DA5FB85BA131C62C012402C80.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C444FB9EA5E4CA4DA5FB85BA131C62C012402C80.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 00:39:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:93:59:22:82:b3:68:08:3d:34:ad:cf:a3:18:ce:dc:92:15:6d:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C444FB9EA5E4CA4DA5FB85BA131C62C012402C80
Validity
Not Before: May 3 03:13:02 2026 GMT
Not After : May 2 03:18:02 2027 GMT
Subject: CN=585DBFB9DC3BC1812EC58680C0B6B93E8571FA30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:93:ec:55:f1:39:17:1a:59:be:bb:0f:42:0f:
2a:23:b4:a5:bd:8e:7a:ea:83:eb:10:f9:be:3f:e5:
e7:01:87:79:e6:10:82:c7:43:c6:f6:76:7f:e6:14:
53:70:95:59:7f:ab:e3:0a:bb:cf:fe:87:fc:0c:48:
8c:63:1e:01:cc:37:73:f8:9a:7f:8a:96:1f:22:ce:
09:9d:36:81:13:72:f3:71:44:38:fd:cc:d2:98:1f:
fe:77:77:d8:36:05:60:35:52:a2:47:a4:72:b5:02:
9c:70:2b:be:89:cc:58:38:39:97:9f:8a:bb:de:4a:
86:0e:7f:7d:de:bb:78:13:78:60:9a:8d:16:d2:96:
d0:66:8a:83:57:27:6d:76:f2:35:db:9b:79:07:ef:
71:93:2e:70:31:59:ce:36:4f:a1:48:40:77:ef:db:
c9:d8:e8:e6:ee:3b:0a:76:11:33:bf:87:70:02:a8:
0e:5b:c4:86:83:7b:9b:d5:2f:6b:ba:05:b2:ef:9d:
19:7b:dc:b8:f6:23:bd:da:fc:77:85:78:69:21:c2:
d7:50:50:35:a1:8c:dd:2c:ae:4e:14:60:7d:70:82:
28:88:c4:bc:85:bb:8a:da:06:fb:54:71:f2:49:fc:
5c:1b:ad:7e:c1:a2:bc:a7:aa:4a:a7:1d:a0:b4:09:
49:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:5D:BF:B9:DC:3B:C1:81:2E:C5:86:80:C0:B6:B9:3E:85:71:FA:30
X509v3 Authority Key Identifier:
keyid:C4:44:FB:9E:A5:E4:CA:4D:A5:FB:85:BA:13:1C:62:C0:12:40:2C:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/f700292f-2868-47b3-ac21-600a467a7237/0/C444FB9EA5E4CA4DA5FB85BA131C62C012402C80.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C444FB9EA5E4CA4DA5FB85BA131C62C012402C80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f700292f-2868-47b3-ac21-600a467a7237/0/33362e35302e3135342e302f32332d3234203d3e20313532303738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
36.50.154.0/23
Signature Algorithm: sha256WithRSAEncryption
3e:36:5a:de:4f:b7:2a:a8:8f:2b:e1:91:64:e7:76:ba:8a:e5:
08:28:c2:f7:55:26:26:0f:9a:8c:b2:c3:11:c9:c4:65:76:3b:
68:8b:e9:21:ba:7a:2b:f5:63:1d:e8:62:71:25:09:18:af:03:
0b:ca:14:24:f1:df:cb:12:81:43:ed:bb:8d:b9:56:46:24:27:
b4:e6:b0:5f:e3:8d:b4:fb:e6:2c:aa:f0:81:8a:07:ca:20:1c:
ad:7b:3c:11:d9:fc:a3:49:df:95:c2:89:60:0d:52:ec:3f:cf:
f0:ef:8b:1d:00:fa:0b:fc:48:6b:52:7d:87:cc:6d:44:c5:87:
5b:89:be:5e:38:b6:4e:e1:8d:b3:f9:d4:15:e2:40:9b:cc:05:
3c:95:88:a9:74:d0:4a:8a:72:89:8e:86:bb:21:0a:cf:50:17:
85:44:08:64:f0:81:2e:f7:88:d7:11:a6:04:4d:15:10:51:8d:
7e:59:5a:3f:7d:a2:06:1b:62:1f:b0:f5:c7:a2:af:cb:1f:0e:
72:12:0a:84:98:fa:53:7d:68:14:ba:40:f2:56:d0:76:45:99:
7b:42:ca:63:5e:3c:e7:a2:bb:9c:bb:92:c0:39:19:09:34:10:
90:3f:c5:ab:20:7c:75:a6:c8:f6:56:27:d1:90:ad:53:85:49:
7e:0c:6e:01
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUV5NZIoKzaAg9NK3PoxjO3JIVbTswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzQ0NEZCOUVBNUU0Q0E0REE1RkI4NUJBMTMxQzYyQzAx
MjQwMkM4MDAeFw0yNjA1MDMwMzEzMDJaFw0yNzA1MDIwMzE4MDJaMDMxMTAvBgNV
BAMTKDU4NURCRkI5REMzQkMxODEyRUM1ODY4MEMwQjZCOTNFODU3MUZBMzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCNk+xV8TkXGlm+uw9CDyojtKW9
jnrqg+sQ+b4/5ecBh3nmEILHQ8b2dn/mFFNwlVl/q+MKu8/+h/wMSIxjHgHMN3P4
mn+Klh8izgmdNoETcvNxRDj9zNKYH/53d9g2BWA1UqJHpHK1ApxwK76JzFg4OZef
irveSoYOf33eu3gTeGCajRbSltBmioNXJ2128jXbm3kH73GTLnAxWc42T6FIQHfv
28nY6ObuOwp2ETO/h3ACqA5bxIaDe5vVL2u6BbLvnRl73Lj2I73a/HeFeGkhwtdQ
UDWhjN0srk4UYH1wgiiIxLyFu4raBvtUcfJJ/FwbrX7BorynqkqnHaC0CUlVAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUWF2/udw7wYEuxYaAwLa5PoVx+jAwHwYDVR0j
BBgwFoAUxET7nqXkyk2l+4W6ExxiwBJALIAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZjcwMDI5MmYtMjg2OC00N2IzLWFjMjEtNjAwYTQ2N2E3MjM3LzAvQzQ0NEZCOUVB
NUU0Q0E0REE1RkI4NUJBMTMxQzYyQzAxMjQwMkM4MC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9DNDQ0RkI5RUE1RTRDQTREQTVGQjg1QkExMzFDNjJDMDEyNDAy
QzgwLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2Y3MDAyOTJmLTI4NjgtNDdiMy1h
YzIxLTYwMGE0NjdhNzIzNy8wLzMzMzYyZTM1MzAyZTMxMzUzNDJlMzAyZjMyMzMy
ZDMyMzQyMDNkM2UyMDMxMzUzMjMwMzczOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEASQymjANBgkqhkiG
9w0BAQsFAAOCAQEAPjZa3k+3KqiPK+GRZOd2uorlCCjC91UmJg+ajLLDEcnEZXY7
aIvpIbp6K/VjHehicSUJGK8DC8oUJPHfyxKBQ+27jblWRiQntOawX+ONtPvmLKrw
gYoHyiAcrXs8Edn8o0nflcKJYA1S7D/P8O+LHQD6C/xIa1J9h8xtRMWHW4m+Xji2
TuGNs/nUFeJAm8wFPJWIqXTQSopyiY6GuyEKz1AXhUQIZPCBLveI1xGmBE0VEFGN
fllaP32iBhtiH7D1x6Kvyx8OchIKhJj6U31oFLpA8lbQdkWZe0LKY14856K7nLuS
wDkZCTQQkD/FqyB8dabI9lYn0ZCtU4VJfgxuAQ==
-----END CERTIFICATE-----
Generated at Wed May 13 12:50:53 2026 by rpki-client