
$ rpki-client -vvf repo-rpki.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/1/33362e35302e3235332e302f32342d3234203d3e20313338383239.roa
File: 33362e35302e3235332e302f32342d3234203d3e20313338383239.roa (raw, json)
Hash identifier: K614n2L+d8fiCVgpbPYwtvyP0HHCDEIeDO9qqortOwg=
Subject key identifier: 1C:AB:88:1B:A6:B4:4D:A8:A6:A3:7E:28:0F:25:3E:84:2C:E7:01:D4
Certificate issuer: /CN=37A94886A0E275DC8F922930328C955CC4307FF1
Certificate serial: 6339BC88C53823418B6442B5CCCE6E4CFF68CCA3
Authority key identifier: 37:A9:48:86:A0:E2:75:DC:8F:92:29:30:32:8C:95:5C:C4:30:7F:F1
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/37A94886A0E275DC8F922930328C955CC4307FF1.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/1/33362e35302e3235332e302f32342d3234203d3e20313338383239.roa
Signing time: Sun 01 Feb 2026 05:00:00 +0000
ROA not before: Sun 01 Feb 2026 04:55:00 +0000
ROA not after: Sun 31 Jan 2027 05:00:00 +0000
asID: 138829
IP address blocks: 36.50.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/1/37A94886A0E275DC8F922930328C955CC4307FF1.crl
rsync://repo-rpki.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/1/37A94886A0E275DC8F922930328C955CC4307FF1.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/37A94886A0E275DC8F922930328C955CC4307FF1.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Mar 2026 15:09:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:39:bc:88:c5:38:23:41:8b:64:42:b5:cc:ce:6e:4c:ff:68:cc:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37A94886A0E275DC8F922930328C955CC4307FF1
Validity
Not Before: Feb 1 04:55:00 2026 GMT
Not After : Jan 31 05:00:00 2027 GMT
Subject: CN=1CAB881BA6B44DA8A6A37E280F253E842CE701D4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:43:dc:a5:b9:3b:c4:7f:bf:82:28:94:a5:36:
ac:47:97:d1:8c:95:c3:9d:84:f1:4c:46:40:11:26:
0f:5c:4a:ce:c6:fb:f5:75:ff:5b:c9:14:70:3e:26:
c3:cb:3d:f4:e9:f5:81:24:a9:85:d3:c4:36:67:27:
b2:f2:6f:a3:a8:ea:e7:d0:f3:d6:1e:05:12:dd:c4:
de:94:03:8d:15:3e:08:0d:b8:08:ca:3b:eb:0d:1f:
94:fc:e0:d2:a4:e0:b2:bc:51:e1:2d:0c:d9:d3:2b:
ef:37:85:01:fe:80:52:da:1b:fb:11:e1:bd:36:fe:
2e:04:56:bb:e3:a4:59:d5:34:fb:d7:ae:0c:1a:d7:
80:5c:89:92:25:20:2f:df:81:41:3e:40:ac:57:8e:
5c:2c:24:1e:ab:8e:38:e6:12:18:55:f3:d7:28:ee:
a9:cb:6d:6b:b5:75:3e:dc:88:0f:b0:9c:94:c8:5e:
84:d6:4d:d8:d3:d2:84:dd:24:b9:71:69:c4:78:17:
5f:89:9c:0b:62:d7:24:29:6e:0e:69:e3:e6:f0:1d:
83:59:c3:dd:96:5f:4d:29:60:c3:b8:3e:60:22:94:
e3:d6:1e:f3:2f:b3:aa:0b:ab:78:fc:13:f7:c9:43:
94:fa:37:5e:16:d5:14:65:51:b4:ea:da:f4:b9:3b:
66:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:AB:88:1B:A6:B4:4D:A8:A6:A3:7E:28:0F:25:3E:84:2C:E7:01:D4
X509v3 Authority Key Identifier:
keyid:37:A9:48:86:A0:E2:75:DC:8F:92:29:30:32:8C:95:5C:C4:30:7F:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/1/37A94886A0E275DC8F922930328C955CC4307FF1.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/37A94886A0E275DC8F922930328C955CC4307FF1.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/1/33362e35302e3235332e302f32342d3234203d3e20313338383239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
36.50.253.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:59:ca:04:2d:69:35:18:4f:29:56:0a:42:d6:75:e9:32:fa:
75:85:e8:14:17:56:2d:ee:4b:14:43:1c:8c:c0:eb:8c:85:9c:
01:23:01:f0:82:98:69:a1:1f:cc:35:15:90:f8:13:c1:ee:84:
4d:6a:71:43:53:52:b7:ed:06:27:96:f9:38:91:9d:9c:09:aa:
02:fc:4c:87:36:cf:69:87:e4:99:48:5f:cc:c0:5d:7e:f8:28:
a3:f2:5e:5f:45:4c:39:48:f5:fb:59:d0:11:65:08:40:49:60:
b7:e7:d2:00:c1:69:44:ab:69:1f:6f:81:bf:e5:48:22:00:8f:
35:6c:ee:b7:72:67:2d:ce:28:df:a5:33:5b:6d:37:24:96:8d:
42:d7:40:a0:35:fa:be:3a:06:df:5b:5b:87:c3:60:bc:77:7e:
93:ad:5e:30:e1:e3:d9:25:98:f6:f9:5c:ed:ab:57:e9:1d:0f:
e2:b0:f4:ce:08:bc:5b:88:d0:2b:a5:d9:ed:7e:5b:59:e5:ac:
24:b0:56:d0:26:0c:1f:02:63:d8:e3:63:cd:d9:fc:1c:23:56:
1a:03:9c:f6:70:fc:67:f6:ac:cc:90:02:42:26:34:7a:cb:97:
e5:aa:71:3e:8e:d2:ad:08:10:ac:b1:c8:c1:e1:6d:07:2c:9d:
41:19:4a:bb
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUYzm8iMU4I0GLZEK1zM5uTP9ozKMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzdBOTQ4ODZBMEUyNzVEQzhGOTIyOTMwMzI4Qzk1NUND
NDMwN0ZGMTAeFw0yNjAyMDEwNDU1MDBaFw0yNzAxMzEwNTAwMDBaMDMxMTAvBgNV
BAMTKDFDQUI4ODFCQTZCNDREQThBNkEzN0UyODBGMjUzRTg0MkNFNzAxRDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnQ9yluTvEf7+CKJSlNqxHl9GM
lcOdhPFMRkARJg9cSs7G+/V1/1vJFHA+JsPLPfTp9YEkqYXTxDZnJ7Lyb6Oo6ufQ
89YeBRLdxN6UA40VPggNuAjKO+sNH5T84NKk4LK8UeEtDNnTK+83hQH+gFLaG/sR
4b02/i4EVrvjpFnVNPvXrgwa14BciZIlIC/fgUE+QKxXjlwsJB6rjjjmEhhV89co
7qnLbWu1dT7ciA+wnJTIXoTWTdjT0oTdJLlxacR4F1+JnAti1yQpbg5p4+bwHYNZ
w92WX00pYMO4PmAilOPWHvMvs6oLq3j8E/fJQ5T6N14W1RRlUbTq2vS5O2YZAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUHKuIG6a0Taimo34oDyU+hCznAdQwHwYDVR0j
BBgwFoAUN6lIhqDiddyPkikwMoyVXMQwf/EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w
MGE2ZmVhYS02YjRmLTQ3Y2YtOWUzYy0wMGFlYWM2N2EzMmEvMS8zN0E5NDg4NkEw
RTI3NURDOEY5MjI5MzAzMjhDOTU1Q0M0MzA3RkYxLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMzdBOTQ4ODZBMEUyNzVEQzhGOTIyOTMwMzI4Qzk1NUNDNDMw
N0ZGMS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzAwYTZmZWFhLTZiNGYtNDdjZi05
ZTNjLTAwYWVhYzY3YTMyYS8xLzMzMzYyZTM1MzAyZTMyMzUzMzJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMxMzMzODM4MzIzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEACQy/TANBgkqhkiG
9w0BAQsFAAOCAQEATFnKBC1pNRhPKVYKQtZ16TL6dYXoFBdWLe5LFEMcjMDrjIWc
ASMB8IKYaaEfzDUVkPgTwe6ETWpxQ1NSt+0GJ5b5OJGdnAmqAvxMhzbPaYfkmUhf
zMBdfvgoo/JeX0VMOUj1+1nQEWUIQElgt+fSAMFpRKtpH2+Bv+VIIgCPNWzut3Jn
Lc4o36UzW203JJaNQtdAoDX6vjoG31tbh8NgvHd+k61eMOHj2SWY9vlc7atX6R0P
4rD0zgi8W4jQK6XZ7X5bWeWsJLBW0CYMHwJj2ONjzdn8HCNWGgOc9nD8Z/aszJAC
QiY0esuX5apxPo7SrQgQrLHIweFtByydQRlKuw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:55:03 2026 by rpki-client