
$ rpki-client -vvf repo-rpki.idnic.net/repo/4227b176-4c17-4244-badf-f496bcb15e20/0/3130332e32372e3139322e302f32342d3234203d3e20313530323632.roa
File: 3130332e32372e3139322e302f32342d3234203d3e20313530323632.roa (raw, json)
Hash identifier: m5zVdj5eik3LoKH8n3yc9tou1o5tmBbi5H5pOVeGB1Y=
Subject key identifier: 3D:76:09:3C:77:BE:62:D3:15:09:01:6D:F6:D6:45:7F:59:98:AA:D5
Certificate issuer: /CN=7DA5F7B42931EE3A414B9A5B7996703DF70BD897
Certificate serial: 28D954B902239F2B2FA52F2F725904FC8733D5C7
Authority key identifier: 7D:A5:F7:B4:29:31:EE:3A:41:4B:9A:5B:79:96:70:3D:F7:0B:D8:97
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7DA5F7B42931EE3A414B9A5B7996703DF70BD897.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4227b176-4c17-4244-badf-f496bcb15e20/0/3130332e32372e3139322e302f32342d3234203d3e20313530323632.roa
Signing time: Wed 11 Feb 2026 10:00:03 +0000
ROA not before: Wed 11 Feb 2026 09:55:03 +0000
ROA not after: Wed 10 Feb 2027 10:00:03 +0000
asID: 150262
IP address blocks: 103.27.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/4227b176-4c17-4244-badf-f496bcb15e20/0/7DA5F7B42931EE3A414B9A5B7996703DF70BD897.crl
rsync://repo-rpki.idnic.net/repo/4227b176-4c17-4244-badf-f496bcb15e20/0/7DA5F7B42931EE3A414B9A5B7996703DF70BD897.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7DA5F7B42931EE3A414B9A5B7996703DF70BD897.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Mar 2026 06:25:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:d9:54:b9:02:23:9f:2b:2f:a5:2f:2f:72:59:04:fc:87:33:d5:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7DA5F7B42931EE3A414B9A5B7996703DF70BD897
Validity
Not Before: Feb 11 09:55:03 2026 GMT
Not After : Feb 10 10:00:03 2027 GMT
Subject: CN=3D76093C77BE62D31509016DF6D6457F5998AAD5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:22:0c:34:68:c1:82:91:f1:7e:28:bd:63:f0:
65:ee:69:37:1f:15:63:87:99:81:cb:a2:00:40:46:
3a:bb:38:24:97:1f:89:79:5c:0b:40:6a:64:57:56:
d3:dc:47:56:c4:7b:27:e6:88:49:6a:c9:3f:4b:9d:
06:6e:6e:39:e4:08:74:5e:c1:56:8f:69:ed:87:97:
3a:47:76:32:8e:6d:39:90:b6:c1:dd:3d:60:1d:ff:
d3:8b:82:1c:6b:9b:07:fb:51:d5:18:04:f2:b8:17:
59:ca:ca:26:f1:e0:a5:6b:91:92:e3:ee:af:83:5a:
72:cb:ed:81:ad:f1:f2:e3:ac:89:41:97:3f:a4:50:
91:91:f8:f0:fc:ab:f4:1e:f9:91:e1:87:e9:b0:9a:
a3:40:d8:fb:ac:79:b2:82:f9:2e:52:97:7f:c5:43:
d5:20:57:11:a0:13:72:8c:38:cc:b6:9e:16:14:29:
de:74:9e:11:01:63:3d:ab:fa:e5:94:b3:bf:79:13:
92:e3:b7:b2:0f:01:5b:57:25:76:67:74:97:87:cf:
a3:6e:0b:c0:7f:d6:dd:54:fd:07:e6:42:60:7a:55:
4d:7c:c8:d3:8f:44:aa:02:68:94:ae:1f:3e:2a:58:
12:6b:5c:c4:25:c8:9b:e0:27:f1:c5:00:b2:7a:1d:
4b:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:76:09:3C:77:BE:62:D3:15:09:01:6D:F6:D6:45:7F:59:98:AA:D5
X509v3 Authority Key Identifier:
keyid:7D:A5:F7:B4:29:31:EE:3A:41:4B:9A:5B:79:96:70:3D:F7:0B:D8:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4227b176-4c17-4244-badf-f496bcb15e20/0/7DA5F7B42931EE3A414B9A5B7996703DF70BD897.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7DA5F7B42931EE3A414B9A5B7996703DF70BD897.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4227b176-4c17-4244-badf-f496bcb15e20/0/3130332e32372e3139322e302f32342d3234203d3e20313530323632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.27.192.0/24
Signature Algorithm: sha256WithRSAEncryption
69:e3:f6:75:9d:f5:c0:4b:d9:dc:85:e2:73:67:af:6c:18:1e:
58:18:84:ff:91:2e:b9:df:af:43:12:74:0c:4a:a7:0a:34:10:
1c:0b:32:8a:37:56:89:f8:9d:cc:a8:a8:a2:97:21:39:29:ae:
f4:25:89:ff:29:6d:ac:66:36:21:4d:b4:70:f2:35:85:8a:67:
52:b8:74:ea:a7:78:4b:4c:b6:de:44:1a:4c:ae:cc:ed:b5:b9:
dd:2c:74:b0:44:81:95:69:c7:51:33:82:54:1b:fe:39:72:8c:
51:da:af:b9:a5:74:20:26:a3:49:aa:cd:2d:9e:bc:ce:69:ad:
55:e5:d4:d5:d4:ac:d2:a6:d7:3b:29:0e:7e:c6:04:10:d6:a9:
58:59:09:66:bd:ab:da:a1:e6:c8:83:ba:d2:cd:7e:af:4c:6b:
2e:fe:e3:30:86:f5:38:d2:ec:14:de:ba:d9:e3:bf:58:da:50:
88:c2:db:9c:de:d4:df:bb:c6:4a:94:be:a0:52:95:34:22:28:
dc:d2:01:08:5f:95:34:ea:2d:22:14:07:bc:d1:25:88:17:d2:
66:28:9f:08:d2:0e:9c:4b:41:82:f8:27:50:5e:2c:ec:2d:34:
a0:12:4a:24:4c:c8:30:75:26:eb:77:67:f9:2e:4f:05:25:74:
28:cf:02:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:32:10 2026 by rpki-client