
$ rpki-client -vvf rpki-rsync.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/3131302e37362e3134342e302f32332d3234203d3e20313430343831.roa
File: 3131302e37362e3134342e302f32332d3234203d3e20313430343831.roa (raw, json)
Hash identifier: x0+nTiLuywHrbCvvzbq5AhPaFfQTWXHRzoe0pMzs92s=
Subject key identifier: 03:52:3B:C6:02:7B:BE:7D:20:13:4F:48:3B:6E:A9:A0:F8:B3:05:34
Certificate issuer: /CN=21A1AF13820FECAAC871E77BA706DF913EB6445B
Certificate serial: 5A4CB1F83FB220B15AA0707CC8F03D1681B59541
Authority key identifier: 21:A1:AF:13:82:0F:EC:AA:C8:71:E7:7B:A7:06:DF:91:3E:B6:44:5B
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/21A1AF13820FECAAC871E77BA706DF913EB6445B.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/3131302e37362e3134342e302f32332d3234203d3e20313430343831.roa
Signing time: Sun 03 May 2026 02:49:41 +0000
ROA not before: Sun 03 May 2026 02:44:41 +0000
ROA not after: Sun 02 May 2027 02:49:41 +0000
asID: 140481
IP address blocks: 110.76.144.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/21A1AF13820FECAAC871E77BA706DF913EB6445B.crl
rsync://rpki-rsync.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/21A1AF13820FECAAC871E77BA706DF913EB6445B.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/21A1AF13820FECAAC871E77BA706DF913EB6445B.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:4c:b1:f8:3f:b2:20:b1:5a:a0:70:7c:c8:f0:3d:16:81:b5:95:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21A1AF13820FECAAC871E77BA706DF913EB6445B
Validity
Not Before: May 3 02:44:41 2026 GMT
Not After : May 2 02:49:41 2027 GMT
Subject: CN=03523BC6027BBE7D20134F483B6EA9A0F8B30534
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a5:ab:5f:f8:73:f7:ef:af:97:18:22:f8:37:
ae:a7:fc:28:ce:b0:da:63:fc:74:7c:ff:bb:d8:51:
76:c4:b7:f2:9a:18:a3:ff:07:43:ca:8a:6e:63:1d:
85:8b:89:eb:3b:c8:79:c5:77:8b:59:8f:1d:16:6c:
39:2e:20:96:76:f5:de:58:ca:c3:db:73:86:6f:63:
72:5f:4e:61:de:74:81:e2:fa:60:5a:1a:6e:dd:5f:
6c:2b:46:33:89:ff:0e:cd:28:fc:c5:5e:f1:22:9e:
cc:ec:9f:7e:cc:4e:90:d2:d9:3e:b2:5e:a2:e9:8b:
bb:6a:2f:19:22:e2:52:f7:d2:6e:d5:e3:06:62:31:
7d:5f:d6:7f:e7:83:5e:a3:5b:74:ec:5b:a8:e4:52:
a2:c2:67:ce:ea:6f:61:3c:de:62:56:a0:d5:dd:a9:
6f:36:89:0c:31:d2:ce:40:20:cc:fc:12:1e:18:2c:
72:10:30:5e:59:c2:77:ec:8d:e8:85:98:2e:ac:54:
19:a6:51:df:ed:ea:36:78:45:8a:52:e4:3f:c3:14:
4d:f1:86:aa:2f:57:82:d7:c9:0b:7b:e7:e7:4a:24:
2c:72:51:97:cc:60:03:56:1b:b9:37:87:86:e8:7c:
fb:ed:d0:a3:85:6b:75:04:89:27:3f:bb:dc:2e:31:
ba:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:52:3B:C6:02:7B:BE:7D:20:13:4F:48:3B:6E:A9:A0:F8:B3:05:34
X509v3 Authority Key Identifier:
keyid:21:A1:AF:13:82:0F:EC:AA:C8:71:E7:7B:A7:06:DF:91:3E:B6:44:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/21A1AF13820FECAAC871E77BA706DF913EB6445B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/21A1AF13820FECAAC871E77BA706DF913EB6445B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/3131302e37362e3134342e302f32332d3234203d3e20313430343831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
110.76.144.0/23
Signature Algorithm: sha256WithRSAEncryption
86:08:a2:89:d7:78:d6:3a:9d:e0:c7:ad:d7:ee:17:14:69:93:
1a:4c:ea:f7:be:dc:f9:21:07:c2:74:ae:f5:6a:f1:b8:6f:6d:
a1:a7:39:9e:29:6b:a5:00:d1:39:71:10:32:b3:4b:b4:3f:49:
10:6f:38:73:2d:64:43:da:ba:63:2b:21:ea:17:34:cd:ff:3c:
4a:12:fd:f5:dc:63:86:b7:d2:5c:fa:22:e5:18:67:4c:b8:6d:
dc:8e:88:d9:c2:24:cc:e9:8d:98:77:29:12:4b:4f:17:a6:ba:
1c:ae:df:f5:1a:36:dc:91:cd:d0:6e:4e:d3:25:d3:51:8c:ad:
c5:0c:8d:ee:1b:30:ea:cf:1b:c3:45:73:9a:02:3b:1f:e5:ed:
91:c9:9b:4a:37:e8:25:f6:92:4b:75:65:8a:e8:da:49:05:f3:
01:b3:8b:a0:b7:4a:df:88:7c:da:91:ac:63:bc:d0:bf:03:e9:
ad:56:7f:6e:0f:61:dd:ef:ce:d7:71:c1:54:8f:51:9e:fa:88:
8a:02:95:8c:c7:5e:c6:2b:1c:94:4f:9e:eb:2e:c2:74:44:6a:
88:37:12:df:b2:13:77:1a:ac:5b:41:0a:e0:1d:59:b9:0a:b3:
55:76:62:5d:9e:a8:78:45:12:58:f5:c5:17:64:21:7c:f9:c7:
67:33:85:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:15:47 2026 by rpki-client