$ rpki-client -vvf repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/3131302e37362e3134372e302f32342d3234203d3e20313430343831.roa File: 3131302e37362e3134372e302f32342d3234203d3e20313430343831.roa (raw, json) Hash identifier: +XLAGZaO1CUhgIfOrcy+sNRJJiCj6bewjgriX63Ik2M= Subject key identifier: 3E:1F:FA:BE:51:A3:07:0E:9F:55:15:C4:F5:97:53:E8:93:88:19:EF Certificate issuer: /CN=0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2 Certificate serial: 3D336983764498A68F121AA443E38E5A65064201 Authority key identifier: 0F:D0:44:D6:13:48:C8:8D:DC:FF:C4:F3:C3:3B:FB:C4:51:BC:17:A2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/3131302e37362e3134372e302f32342d3234203d3e20313430343831.roa Signing time: Mon 16 Mar 2026 16:00:00 +0000 ROA not before: Mon 16 Mar 2026 15:55:00 +0000 ROA not after: Mon 15 Mar 2027 16:00:00 +0000 asID: 140481 IP address blocks: 110.76.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.crl rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 16:54:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:33:69:83:76:44:98:a6:8f:12:1a:a4:43:e3:8e:5a:65:06:42:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2 Validity Not Before: Mar 16 15:55:00 2026 GMT Not After : Mar 15 16:00:00 2027 GMT Subject: CN=3E1FFABE51A3070E9F5515C4F59753E8938819EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:7d:09:e0:5d:6f:7f:70:09:81:75:80:61:4d: 03:0a:e1:78:20:a5:fd:61:48:a6:40:a6:49:d7:52: 77:0f:b2:37:91:e4:68:85:60:e8:81:bd:da:a6:d6: 87:86:19:67:c5:84:ba:88:c8:6f:dd:8a:76:bf:f5: 80:d0:2d:51:cc:7a:57:1e:ab:89:b8:27:b1:64:c9: fd:df:79:31:7c:c9:2e:05:be:3f:fa:5c:0d:c0:6f: 6c:33:5c:51:b6:06:a8:97:c8:df:d2:3c:67:5b:88: a3:2d:dd:66:12:a9:11:4b:15:fa:e9:b0:0b:ed:d3: a3:fe:af:ee:03:4f:f0:5e:e3:06:9b:87:e5:2d:0f: 58:a4:94:07:99:5c:c4:11:31:db:c9:fa:da:fd:83: ae:eb:a1:ff:04:7d:90:e0:0e:30:40:a0:99:c2:55: 81:1d:5f:e9:7a:20:6e:4b:4d:a1:94:d8:4f:74:20: 00:f4:1f:cb:dc:2e:d3:7a:44:7c:c2:d6:26:41:a9: 68:d1:d4:9e:f8:98:c8:d4:3d:62:d2:65:54:59:fb: 26:2a:21:d3:14:77:7d:4d:d4:84:d8:ef:f3:11:b3: eb:cc:d9:b2:60:9d:e5:f4:85:ce:e1:2e:63:03:93: 05:c2:c2:38:7b:21:95:77:7b:c4:9e:5d:d6:c0:2e: 2f:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:1F:FA:BE:51:A3:07:0E:9F:55:15:C4:F5:97:53:E8:93:88:19:EF X509v3 Authority Key Identifier: keyid:0F:D0:44:D6:13:48:C8:8D:DC:FF:C4:F3:C3:3B:FB:C4:51:BC:17:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/3131302e37362e3134372e302f32342d3234203d3e20313430343831.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 110.76.147.0/24 Signature Algorithm: sha256WithRSAEncryption 6f:2b:90:f3:ae:41:2b:26:98:34:ec:9b:e5:81:bb:8d:a1:cb: 8e:cd:51:a8:1a:6e:30:13:a3:f1:c3:1a:79:99:2a:b5:01:6b: d1:7e:c5:4f:fa:7d:24:79:5b:48:20:bb:bb:3e:2b:ab:2c:73: d1:7c:ff:84:ae:e8:0b:1e:54:6d:83:fa:56:96:c9:1b:2a:d7: 1c:2c:56:94:09:f1:fa:d9:5a:7a:4c:05:5a:33:3d:32:82:08: 7c:df:e7:93:6b:0d:a2:af:31:ff:f9:de:1e:c5:61:c5:8c:ba: 77:e9:32:6c:9b:91:f5:0f:ab:71:8e:57:c7:0e:29:48:a6:1e: b1:85:ed:88:41:85:b5:0e:fa:a4:cf:eb:fd:35:57:fb:71:67: 2d:17:6d:d0:eb:b0:6f:0a:c6:f5:d1:fe:d5:3c:d4:5b:a6:00: b1:f8:ae:91:26:ea:ad:d2:50:6b:9d:9d:de:d4:24:d6:79:0d: 23:1d:30:8e:66:00:e0:d0:10:09:7d:89:ea:32:a4:8d:37:b3: 3a:0d:75:6a:f0:a7:cf:1e:dd:5e:63:3f:cc:b6:7b:f0:20:37: e9:dd:76:09:36:27:42:53:2d:5f:af:2e:a5:12:42:2a:f0:99: 6f:24:e0:15:5b:10:64:c0:b7:33:a6:40:a6:d3:89:d5:7a:4e: 6f:61:42:fe -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUPTNpg3ZEmKaPEhqkQ+OOWmUGQgEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEZEMDQ0RDYxMzQ4Qzg4RERDRkZDNEYzQzMzQkZCQzQ1 MUJDMTdBMjAeFw0yNjAzMTYxNTU1MDBaFw0yNzAzMTUxNjAwMDBaMDMxMTAvBgNV BAMTKDNFMUZGQUJFNTFBMzA3MEU5RjU1MTVDNEY1OTc1M0U4OTM4ODE5RUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSfQngXW9/cAmBdYBhTQMK4Xgg pf1hSKZApknXUncPsjeR5GiFYOiBvdqm1oeGGWfFhLqIyG/dina/9YDQLVHMelce q4m4J7Fkyf3feTF8yS4Fvj/6XA3Ab2wzXFG2BqiXyN/SPGdbiKMt3WYSqRFLFfrp sAvt06P+r+4DT/Be4wabh+UtD1iklAeZXMQRMdvJ+tr9g67rof8EfZDgDjBAoJnC VYEdX+l6IG5LTaGU2E90IAD0H8vcLtN6RHzC1iZBqWjR1J74mMjUPWLSZVRZ+yYq IdMUd31N1ITY7/MRs+vM2bJgneX0hc7hLmMDkwXCwjh7IZV3e8SeXdbALi95AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUPh/6vlGjBw6fVRXE9ZdT6JOIGe8wHwYDVR0j BBgwFoAUD9BE1hNIyI3c/8Tzwzv7xFG8F6IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YjU0OGJhZC03ZmVkLTQxZmQtYjQyZS03ODAzNzJjNDUyNTUvMC8wRkQwNDRENjEz NDhDODhERENGRkM0RjNDMzNCRkJDNDUxQkMxN0EyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEZEMDQ0RDYxMzQ4Qzg4RERDRkZDNEYzQzMzQkZCQzQ1MUJD MTdBMi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzhiNTQ4YmFkLTdmZWQtNDFmZC1i NDJlLTc4MDM3MmM0NTI1NS8wLzMxMzEzMDJlMzczNjJlMzEzNDM3MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNDMwMzQzODMxLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbkyTMA0GCSqG SIb3DQEBCwUAA4IBAQBvK5DzrkErJpg07JvlgbuNocuOzVGoGm4wE6Pxwxp5mSq1 AWvRfsVP+n0keVtIILu7PiurLHPRfP+ErugLHlRtg/pWlskbKtccLFaUCfH62Vp6 TAVaMz0yggh83+eTaw2irzH/+d4exWHFjLp36TJsm5H1D6txjlfHDilIph6xhe2I QYW1Dvqkz+v9NVf7cWctF23Q67BvCsb10f7VPNRbpgCx+K6RJuqt0lBrnZ3e1CTW eQ0jHTCOZgDg0BAJfYnqMqSNN7M6DXVq8KfPHt1eYz/MtnvwIDfp3XYJNidCUy1f ry6lEkIq8JlvJOAVWxBkwLczpkCm04nVek5vYUL+ -----END CERTIFICATE-----Generated at Thu Mar 26 18:29:29 2026 by rpki-client