
$ rpki-client -vvf repo-rpki.idnic.net/repo/4227b176-4c17-4244-badf-f496bcb15e20/0/3130332e32372e3139322e302f32332d3233203d3e20313530323632.roa
File: 3130332e32372e3139322e302f32332d3233203d3e20313530323632.roa (raw, json)
Hash identifier: DnN4DbVNjWnQCkjXwlNPMidCO0/mBYN6hm7/J4O2GDg=
Subject key identifier: 96:5B:FD:0C:8B:0B:23:3C:D0:3E:AE:54:92:E9:B1:44:7B:14:7B:1B
Certificate issuer: /CN=7DA5F7B42931EE3A414B9A5B7996703DF70BD897
Certificate serial: 52C68D832D2580798465F156653028E020948F49
Authority key identifier: 7D:A5:F7:B4:29:31:EE:3A:41:4B:9A:5B:79:96:70:3D:F7:0B:D8:97
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7DA5F7B42931EE3A414B9A5B7996703DF70BD897.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4227b176-4c17-4244-badf-f496bcb15e20/0/3130332e32372e3139322e302f32332d3233203d3e20313530323632.roa
Signing time: Wed 11 Feb 2026 10:00:03 +0000
ROA not before: Wed 11 Feb 2026 09:55:03 +0000
ROA not after: Wed 10 Feb 2027 10:00:03 +0000
asID: 150262
IP address blocks: 103.27.192.0/23 maxlen: 23
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/4227b176-4c17-4244-badf-f496bcb15e20/0/7DA5F7B42931EE3A414B9A5B7996703DF70BD897.crl
rsync://repo-rpki.idnic.net/repo/4227b176-4c17-4244-badf-f496bcb15e20/0/7DA5F7B42931EE3A414B9A5B7996703DF70BD897.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7DA5F7B42931EE3A414B9A5B7996703DF70BD897.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Mar 2026 06:25:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:c6:8d:83:2d:25:80:79:84:65:f1:56:65:30:28:e0:20:94:8f:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7DA5F7B42931EE3A414B9A5B7996703DF70BD897
Validity
Not Before: Feb 11 09:55:03 2026 GMT
Not After : Feb 10 10:00:03 2027 GMT
Subject: CN=965BFD0C8B0B233CD03EAE5492E9B1447B147B1B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:b0:4d:cd:6f:78:8a:b6:0f:2a:0c:4e:71:83:
0e:ac:27:6e:41:56:da:80:2f:43:20:e9:0d:46:0c:
6d:0b:76:5c:47:5e:78:86:b7:7a:dd:b7:e2:d8:75:
1e:c4:2f:ed:9c:3d:24:96:59:15:5a:ba:f6:98:ce:
64:de:c6:90:39:5f:f7:0a:d4:db:ac:ba:75:92:22:
e1:0f:91:da:fa:83:a9:7b:06:6f:c8:1e:e3:44:80:
d0:34:af:50:f3:57:cd:42:0c:b2:99:dc:da:71:47:
ed:de:12:44:85:40:36:89:4c:a1:e2:83:fa:a6:f1:
23:88:39:aa:fb:bb:9f:b4:9a:46:14:c7:f8:93:40:
9f:2d:f4:e6:a8:74:8b:60:59:9b:e2:fe:56:43:19:
19:8c:98:b3:49:e2:8c:80:1d:fa:0c:9a:ca:2b:a0:
e5:08:c8:52:b4:c9:42:8a:0f:64:2a:98:63:e0:59:
db:09:e0:6e:ea:a8:33:cf:4a:0b:b2:d6:5f:4f:19:
52:9a:92:ea:23:3c:b9:27:39:67:e6:2e:a2:02:8b:
bc:0b:29:4d:90:70:67:23:12:88:6d:84:79:b0:4d:
60:08:00:37:55:00:25:22:7d:12:2f:16:f4:27:2f:
50:0c:92:a4:3c:76:dd:bb:b6:d5:89:b9:4d:9b:80:
2a:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:5B:FD:0C:8B:0B:23:3C:D0:3E:AE:54:92:E9:B1:44:7B:14:7B:1B
X509v3 Authority Key Identifier:
keyid:7D:A5:F7:B4:29:31:EE:3A:41:4B:9A:5B:79:96:70:3D:F7:0B:D8:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4227b176-4c17-4244-badf-f496bcb15e20/0/7DA5F7B42931EE3A414B9A5B7996703DF70BD897.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7DA5F7B42931EE3A414B9A5B7996703DF70BD897.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4227b176-4c17-4244-badf-f496bcb15e20/0/3130332e32372e3139322e302f32332d3233203d3e20313530323632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.27.192.0/23
Signature Algorithm: sha256WithRSAEncryption
13:a2:3e:e2:db:1b:05:23:9c:d8:cf:24:be:22:9d:01:47:71:
7b:26:95:d2:41:7c:01:d6:44:3a:88:f3:36:7b:78:ce:63:50:
87:9a:fd:8a:46:36:de:18:54:1f:16:3d:82:04:ff:0d:c2:36:
2f:01:09:2b:45:f6:93:27:19:31:75:18:e0:e2:12:d9:ba:24:
16:68:aa:cd:26:26:a2:67:5e:69:2e:d1:1b:28:9b:4a:f5:3a:
66:f2:8b:8b:84:74:fe:de:37:3b:dc:71:29:53:ed:aa:1f:b2:
51:d8:9d:47:91:37:14:d0:dc:d7:8a:3d:6b:b1:c4:6c:f7:19:
b7:3e:97:bc:19:8a:f3:ed:aa:24:fa:ff:1f:dc:2c:9e:78:e1:
24:40:ed:08:84:a7:11:5d:63:11:3b:86:7e:f4:d5:55:ec:59:
c9:77:53:82:bc:79:2d:7a:59:a2:2d:d5:31:b1:f8:05:72:b2:
88:f9:7c:c9:c5:4a:24:3e:cc:cd:30:f6:12:1d:ed:4f:ef:56:
45:0a:a3:56:a4:90:31:b5:3f:f7:d8:fb:76:73:69:d0:52:20:
d5:62:a3:45:6a:4a:c1:46:72:3e:c5:5a:3f:fe:c2:8e:82:b4:
a7:e1:60:c0:17:47:24:f5:a4:98:16:8d:d3:23:9e:27:5f:3d:
84:6b:ae:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 00:31:13 2026 by rpki-client