$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/3131302e37362e3135302e302f32332d3234203d3e20313331373036.roa File: 3131302e37362e3135302e302f32332d3234203d3e20313331373036.roa (raw, json) Hash identifier: eIeeAogwPWqdsxBa/LDDrPIQ2YgZ4wEqVY2TiS9bi9w= Subject key identifier: 7C:2A:C0:FA:B9:31:0A:C8:1C:DD:AB:31:CA:61:09:5D:96:B1:33:DA Certificate issuer: /CN=21A1AF13820FECAAC871E77BA706DF913EB6445B Certificate serial: 4F379354AF24600BC11004C88CC243183C490C70 Authority key identifier: 21:A1:AF:13:82:0F:EC:AA:C8:71:E7:7B:A7:06:DF:91:3E:B6:44:5B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/21A1AF13820FECAAC871E77BA706DF913EB6445B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/3131302e37362e3135302e302f32332d3234203d3e20313331373036.roa Signing time: Mon 05 Oct 2026 09:40:38 +0000 ROA not before: Mon 05 Oct 2026 09:35:38 +0000 ROA not after: Mon 04 Oct 2027 09:40:38 +0000 asID: 131706 IP address blocks: 110.76.150.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/21A1AF13820FECAAC871E77BA706DF913EB6445B.crl rsync://rpki-rsync.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/21A1AF13820FECAAC871E77BA706DF913EB6445B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/21A1AF13820FECAAC871E77BA706DF913EB6445B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 30 Oct 2026 16:34:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:37:93:54:af:24:60:0b:c1:10:04:c8:8c:c2:43:18:3c:49:0c:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21A1AF13820FECAAC871E77BA706DF913EB6445B Validity Not Before: Oct 5 09:35:38 2026 GMT Not After : Oct 4 09:40:38 2027 GMT Subject: CN=7C2AC0FAB9310AC81CDDAB31CA61095D96B133DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:fe:f6:7f:2e:69:07:52:ac:6b:87:54:47:48: c1:4f:e6:4c:02:20:0e:77:2c:bc:71:85:ba:de:ba: ed:02:64:f8:34:52:78:6a:a5:37:e3:16:06:f3:53: 15:c7:fe:23:ad:96:1d:1e:4a:0d:20:68:52:a9:4c: 45:64:16:dd:b1:af:d5:2e:b4:fa:92:cd:02:52:a2: 2c:0a:e4:23:0a:7b:44:f8:98:4b:f4:7b:dc:7d:04: 92:b9:a5:e3:b0:94:f7:7b:c1:56:f9:12:35:80:a9: d6:b4:71:4a:54:99:90:9e:5d:9f:42:52:35:44:18: 19:e8:3c:46:b5:11:98:83:6e:25:93:c9:e4:77:3e: ab:b2:78:42:0e:6d:5d:7c:30:de:0d:a2:84:fb:01: 49:f8:ae:9b:1f:0f:e5:9e:4f:93:96:a9:21:5e:59: d0:03:3b:b4:89:2f:f2:dd:26:b4:35:70:50:a0:06: a1:fc:be:25:a7:c2:c9:dc:1f:60:d4:83:63:1f:55: 9d:49:be:7f:c1:7a:41:26:30:ec:f1:6e:14:56:60: 80:81:e9:cc:e1:b9:f9:e0:91:c4:c2:c6:56:de:59: a0:3e:61:a8:cd:63:ae:dc:b0:a0:bb:80:b6:ec:9c: 0e:69:b0:5a:25:ff:04:af:68:61:12:8d:c1:d9:97: 37:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:2A:C0:FA:B9:31:0A:C8:1C:DD:AB:31:CA:61:09:5D:96:B1:33:DA X509v3 Authority Key Identifier: keyid:21:A1:AF:13:82:0F:EC:AA:C8:71:E7:7B:A7:06:DF:91:3E:B6:44:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/21A1AF13820FECAAC871E77BA706DF913EB6445B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/21A1AF13820FECAAC871E77BA706DF913EB6445B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/3131302e37362e3135302e302f32332d3234203d3e20313331373036.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 110.76.150.0/23 Signature Algorithm: sha256WithRSAEncryption 8f:a9:7c:2c:37:0a:62:ef:37:97:fe:0b:7a:f8:d7:3b:ea:cc: a1:f1:b8:8d:2d:ff:a5:de:83:1d:62:2a:d0:4a:e9:f5:85:86: c0:b7:7b:44:6c:13:e5:18:37:81:ae:25:10:aa:b4:7f:65:2e: d8:db:d1:dc:a7:44:20:25:80:26:f4:80:58:44:4e:5b:77:d0: 11:39:19:53:12:4a:bf:d1:6c:36:ad:e2:1e:17:d4:31:c6:92: 9f:68:9e:0b:ef:ab:4b:ac:d5:fa:92:22:44:67:24:c3:74:06: 7a:22:5f:5f:a1:8c:d3:16:76:26:ce:52:a6:a7:5c:25:af:8c: 68:bb:17:2f:b2:95:58:30:04:9e:92:f5:d4:52:1a:eb:b9:ba: ab:db:0c:11:b1:d4:1e:93:39:81:7e:b1:3a:d8:72:b8:97:e6: b7:57:32:65:01:28:d5:0b:c6:af:2f:1b:66:20:35:58:f9:d2: 70:03:5d:77:c8:a8:f9:f0:e2:62:a0:ef:b8:da:9c:68:b2:fb: 08:da:57:bd:67:9a:44:2f:1f:56:13:91:11:53:b9:14:41:fe: f3:46:e9:96:03:6f:52:db:a9:3c:e6:9a:da:8b:75:66:aa:8c: 09:7d:86:fe:98:a9:59:88:eb:e8:a4:98:23:a2:7c:68:5c:94: 7c:df:ae:f2 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUTzeTVK8kYAvBEATIjMJDGDxJDHAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFBMUFGMTM4MjBGRUNBQUM4NzFFNzdCQTcwNkRGOTEz RUI2NDQ1QjAeFw0yNjEwMDUwOTM1MzhaFw0yNzEwMDQwOTQwMzhaMDMxMTAvBgNV BAMTKDdDMkFDMEZBQjkzMTBBQzgxQ0REQUIzMUNBNjEwOTVEOTZCMTMzREEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC/vZ/LmkHUqxrh1RHSMFP5kwC IA53LLxxhbreuu0CZPg0UnhqpTfjFgbzUxXH/iOtlh0eSg0gaFKpTEVkFt2xr9Uu tPqSzQJSoiwK5CMKe0T4mEv0e9x9BJK5peOwlPd7wVb5EjWAqda0cUpUmZCeXZ9C UjVEGBnoPEa1EZiDbiWTyeR3PquyeEIObV18MN4NooT7AUn4rpsfD+WeT5OWqSFe WdADO7SJL/LdJrQ1cFCgBqH8viWnwsncH2DUg2MfVZ1Jvn/BekEmMOzxbhRWYICB 6czhufngkcTCxlbeWaA+YajNY67csKC7gLbsnA5psFol/wSvaGESjcHZlzf1AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUfCrA+rkxCsgc3asxymEJXZaxM9owHwYDVR0j BBgwFoAUIaGvE4IP7KrIced7pwbfkT62RFswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGI1NDhiYWQtN2ZlZC00MWZkLWI0MmUtNzgwMzcyYzQ1MjU1LzAvMjFBMUFGMTM4 MjBGRUNBQUM4NzFFNzdCQTcwNkRGOTEzRUI2NDQ1Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yMUExQUYxMzgyMEZFQ0FBQzg3MUU3N0JBNzA2REY5MTNFQjY0 NDVCLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzhiNTQ4YmFkLTdmZWQtNDFmZC1i NDJlLTc4MDM3MmM0NTI1NS8wLzMxMzEzMDJlMzczNjJlMzEzNTMwMmUzMDJmMzIz MzJkMzIzNDIwM2QzZTIwMzEzMzMxMzczMDM2LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBbkyWMA0GCSqG SIb3DQEBCwUAA4IBAQCPqXwsNwpi7zeX/gt6+Nc76syh8biNLf+l3oMdYirQSun1 hYbAt3tEbBPlGDeBriUQqrR/ZS7Y29Hcp0QgJYAm9IBYRE5bd9ARORlTEkq/0Ww2 reIeF9QxxpKfaJ4L76tLrNX6kiJEZyTDdAZ6Il9foYzTFnYmzlKmp1wlr4xouxcv spVYMASekvXUUhrrubqr2wwRsdQekzmBfrE62HK4l+a3VzJlASjVC8avLxtmIDVY +dJwA113yKj58OJioO+42pxosvsI2le9Z5pELx9WE5ERU7kUQf7zRumWA29S26k8 5prai3VmqowJfYb+mKlZiOvopJgjonxoXJR8367y -----END CERTIFICATE-----Generated at Fri Oct 30 10:15:30 2026 by rpki-client