
$ rpki-client -vvf rpki-rsync.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/3131302e37362e3134362e302f32342d3234203d3e20313430343831.roa
File: 3131302e37362e3134362e302f32342d3234203d3e20313430343831.roa (raw, json)
Hash identifier: ENGP5zLLO55qc9V12DPptJXkXezLNtmXvdvfnad39Pw=
Subject key identifier: BF:E0:10:B1:C3:AE:32:51:70:D2:78:92:D8:73:D9:CA:66:EC:36:EC
Certificate issuer: /CN=21A1AF13820FECAAC871E77BA706DF913EB6445B
Certificate serial: 31B5A6E49195002E25EE4A18CE420B4B6E1AF875
Authority key identifier: 21:A1:AF:13:82:0F:EC:AA:C8:71:E7:7B:A7:06:DF:91:3E:B6:44:5B
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/21A1AF13820FECAAC871E77BA706DF913EB6445B.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/3131302e37362e3134362e302f32342d3234203d3e20313430343831.roa
Signing time: Sun 03 May 2026 02:49:42 +0000
ROA not before: Sun 03 May 2026 02:44:42 +0000
ROA not after: Sun 02 May 2027 02:49:42 +0000
asID: 140481
IP address blocks: 110.76.146.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/21A1AF13820FECAAC871E77BA706DF913EB6445B.crl
rsync://rpki-rsync.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/21A1AF13820FECAAC871E77BA706DF913EB6445B.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/21A1AF13820FECAAC871E77BA706DF913EB6445B.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 23:12:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:b5:a6:e4:91:95:00:2e:25:ee:4a:18:ce:42:0b:4b:6e:1a:f8:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21A1AF13820FECAAC871E77BA706DF913EB6445B
Validity
Not Before: May 3 02:44:42 2026 GMT
Not After : May 2 02:49:42 2027 GMT
Subject: CN=BFE010B1C3AE325170D27892D873D9CA66EC36EC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:3b:b0:a5:04:33:96:f9:fc:5a:0a:99:0d:e8:
87:75:d6:16:1b:1f:73:e5:a9:d7:90:aa:12:30:58:
1a:df:cf:d7:cc:d7:e1:26:f5:12:36:95:83:cb:39:
36:f8:05:f2:71:7a:e4:7e:fd:46:4b:a2:e3:6c:34:
19:58:02:ca:5d:93:af:98:31:47:5f:72:27:0d:e2:
10:65:ef:53:19:31:3c:85:af:3e:31:be:56:43:d6:
48:e6:3e:d5:95:ea:a4:db:54:45:5a:f0:89:8a:b3:
72:cd:4d:ea:c3:fb:2d:0a:cf:59:68:3a:de:ab:ee:
8c:26:28:43:32:2e:14:37:17:92:68:e1:3b:18:e5:
4a:88:aa:39:cd:cb:77:71:8d:4e:82:b6:85:00:85:
7d:ce:3c:ea:a8:93:6f:b8:11:2e:27:8c:e5:6b:ac:
16:5d:2b:ca:2c:09:f3:44:65:6f:87:01:95:db:8a:
11:d1:1f:ad:ed:88:a8:53:4f:81:24:37:07:5f:06:
e8:6b:b6:c1:7a:82:2e:76:76:c2:7d:03:7d:9e:d4:
de:cb:8b:4c:43:b0:9a:ec:db:fb:21:d2:9c:c3:3f:
80:06:13:29:2d:82:c3:42:e2:f7:c5:e5:a8:9b:84:
f7:ae:e3:31:a4:d2:75:d4:7d:b9:aa:0f:c9:91:77:
4c:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:E0:10:B1:C3:AE:32:51:70:D2:78:92:D8:73:D9:CA:66:EC:36:EC
X509v3 Authority Key Identifier:
keyid:21:A1:AF:13:82:0F:EC:AA:C8:71:E7:7B:A7:06:DF:91:3E:B6:44:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/21A1AF13820FECAAC871E77BA706DF913EB6445B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/21A1AF13820FECAAC871E77BA706DF913EB6445B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/3131302e37362e3134362e302f32342d3234203d3e20313430343831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
110.76.146.0/24
Signature Algorithm: sha256WithRSAEncryption
99:11:53:44:2b:22:0f:f8:64:b1:0d:15:ae:9a:31:73:d8:ff:
e4:53:57:7f:df:97:e5:c1:cd:81:05:36:9b:44:ab:4d:cc:7e:
6d:9b:bf:aa:f9:f7:2d:8b:f8:16:dc:a4:10:71:3e:8a:f2:81:
0e:bc:57:99:f2:7b:04:fb:80:11:95:9b:82:a6:90:9d:30:ca:
9b:d3:f1:e8:1e:ef:12:26:40:88:ec:a9:74:fa:0e:17:dc:a7:
51:4f:a8:03:8f:2b:39:5a:43:a9:e9:7a:3e:fe:1d:0d:70:af:
a3:ec:1e:dc:d1:3d:b9:89:e8:c0:f8:df:85:27:fe:fc:9a:b9:
5a:a7:82:78:bd:1b:88:65:2e:4f:ad:68:b1:c7:13:cb:59:1e:
a0:5b:97:3b:9c:84:9e:0d:e9:7b:24:e9:ca:6b:26:ce:60:2c:
d9:77:40:3e:ad:61:2e:35:b2:31:bf:36:23:9a:90:e5:98:41:
7e:5d:f1:0e:9d:87:44:32:d5:59:bd:2d:88:3c:db:a9:c9:71:
c3:33:ca:96:d4:d4:4e:84:32:a6:98:c0:c8:e8:09:58:ed:48:
a3:cd:13:1e:35:e9:7e:66:67:60:ce:89:a5:b2:5e:ab:7b:25:
cb:ac:dc:80:4c:e8:70:db:f1:a5:9e:ff:af:11:fd:9d:e3:58:
77:c0:c7:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:51:29 2026 by rpki-client