
$ rpki-client -vvf repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/3131302e37362e3134362e302f32342d3234203d3e20313430343831.roa
File: 3131302e37362e3134362e302f32342d3234203d3e20313430343831.roa (raw, json)
Hash identifier: yc5NmKqgc087/1Q1aK0xzmJOjZX9anqvOxLY60HOjzI=
Subject key identifier: 6B:53:29:16:E0:21:C4:B8:24:55:C9:9D:CE:00:E6:84:C2:A3:A8:92
Certificate issuer: /CN=0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2
Certificate serial: 3491EE7EF8F4F6719AD64B091ECDED0F67E072E8
Authority key identifier: 0F:D0:44:D6:13:48:C8:8D:DC:FF:C4:F3:C3:3B:FB:C4:51:BC:17:A2
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/3131302e37362e3134362e302f32342d3234203d3e20313430343831.roa
Signing time: Mon 16 Mar 2026 16:00:00 +0000
ROA not before: Mon 16 Mar 2026 15:55:00 +0000
ROA not after: Mon 15 Mar 2027 16:00:00 +0000
asID: 140481
IP address blocks: 110.76.146.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.crl
rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 28 Mar 2026 16:54:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:91:ee:7e:f8:f4:f6:71:9a:d6:4b:09:1e:cd:ed:0f:67:e0:72:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2
Validity
Not Before: Mar 16 15:55:00 2026 GMT
Not After : Mar 15 16:00:00 2027 GMT
Subject: CN=6B532916E021C4B82455C99DCE00E684C2A3A892
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:55:74:dc:5d:1f:d5:c9:f3:67:97:d2:3f:64:
ee:55:76:03:84:53:60:68:0b:cd:21:34:2f:2f:60:
ca:29:a4:67:39:9f:57:6b:4c:8c:94:73:d1:aa:31:
2f:81:23:f1:5d:dc:14:aa:63:3f:65:a2:94:bc:89:
56:7d:f6:76:1c:99:9e:d8:e8:83:de:07:cb:11:70:
22:67:cd:86:5d:0e:54:04:5a:7f:db:b2:9d:d3:18:
0e:67:d9:86:a1:14:3c:05:5a:42:c1:6d:0c:5b:7f:
b4:5d:6f:8e:27:a9:50:65:2d:dc:d9:0b:8f:8a:c7:
b7:7e:c3:2f:c0:35:a4:71:65:b4:3c:02:99:59:82:
be:b3:2b:ed:c6:2d:93:61:44:bd:22:55:b2:f4:be:
3b:1d:6a:fe:55:80:e3:77:e6:3f:55:a1:dc:fb:c0:
61:a3:a9:d5:e1:49:33:5d:b2:1a:e0:ac:ab:70:37:
bd:fa:94:57:33:08:32:da:7b:f4:e9:e2:66:b8:91:
1b:80:bf:38:06:a9:b6:9e:67:08:86:33:98:a1:08:
e2:ff:30:66:db:1d:55:c1:71:b4:00:48:8d:51:7f:
76:39:1d:f5:07:dd:d5:23:99:3d:f9:3b:7f:64:8e:
5c:d0:72:be:fb:09:52:66:d6:ee:73:2b:89:e8:4c:
c8:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:53:29:16:E0:21:C4:B8:24:55:C9:9D:CE:00:E6:84:C2:A3:A8:92
X509v3 Authority Key Identifier:
keyid:0F:D0:44:D6:13:48:C8:8D:DC:FF:C4:F3:C3:3B:FB:C4:51:BC:17:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/3131302e37362e3134362e302f32342d3234203d3e20313430343831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
110.76.146.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:df:f0:50:b7:d1:7d:41:9d:4e:fa:5e:fa:57:28:d0:74:a8:
f4:0c:cf:6b:9d:a4:df:31:b7:82:dc:df:45:93:34:e7:ea:15:
9b:6f:f5:31:ec:44:2b:b1:07:19:1c:70:1c:6a:5d:a2:16:67:
24:eb:35:20:ce:ea:43:30:5b:79:fc:30:06:3d:36:76:6c:62:
6a:38:49:cc:57:d9:ee:8e:d1:02:22:a5:c8:c0:d0:e7:ab:95:
33:86:58:0f:35:9f:14:e8:fd:27:0b:8e:6b:0e:05:91:50:6c:
f7:a9:3a:2a:31:a9:29:e4:b3:f6:67:d5:ba:d9:7b:65:23:5d:
c4:3c:51:7b:cb:c5:bd:ed:10:5b:9e:fb:41:a3:bb:5d:22:42:
f4:58:f5:f7:b8:9b:4f:f3:75:09:2f:b4:5c:eb:4f:32:47:20:
86:2b:15:ad:39:3b:a8:25:25:42:6a:b4:4b:77:42:1e:b9:e8:
a7:43:0e:2c:bf:ef:fe:cd:e2:2e:a9:14:0f:ba:bc:3f:64:2c:
4c:99:b2:c9:b9:29:94:bf:2c:85:30:09:97:95:e0:6d:13:95:
3d:50:53:a9:ef:5e:45:b5:00:7a:4a:b9:a5:2b:87:b6:87:b8:
7c:fe:a1:75:e3:db:5c:f0:c3:56:37:f5:2d:50:21:ba:0e:2d:
01:4d:2d:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:08:09 2026 by rpki-client