
$ rpki-client -vvf repo-rpki.idnic.net/repo/e5c8b9e3-b44f-490b-bf51-99f2dd2a1364/0/3130332e37392e3132382e302f32332d3234203d3e20313339393531.roa
File: 3130332e37392e3132382e302f32332d3234203d3e20313339393531.roa (raw, json)
Hash identifier: Lqk7sZKV0+hi1szgYX9YILOG01YWWyBiUC0FX+79Zro=
Subject key identifier: 99:A4:B8:DC:13:2D:10:EB:08:A7:12:3A:A9:79:21:47:55:BE:79:D3
Certificate issuer: /CN=27114CFC585C5DB2E0AC5DA74F04C66C319492F1
Certificate serial: 0DD1FF70F5035FF6E391E32DED1CA0B7A1530779
Authority key identifier: 27:11:4C:FC:58:5C:5D:B2:E0:AC:5D:A7:4F:04:C6:6C:31:94:92:F1
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27114CFC585C5DB2E0AC5DA74F04C66C319492F1.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e5c8b9e3-b44f-490b-bf51-99f2dd2a1364/0/3130332e37392e3132382e302f32332d3234203d3e20313339393531.roa
Signing time: Wed 04 Feb 2026 07:00:02 +0000
ROA not before: Wed 04 Feb 2026 06:55:02 +0000
ROA not after: Wed 03 Feb 2027 07:00:02 +0000
asID: 139951
IP address blocks: 103.79.128.0/23 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/e5c8b9e3-b44f-490b-bf51-99f2dd2a1364/0/27114CFC585C5DB2E0AC5DA74F04C66C319492F1.crl
rsync://repo-rpki.idnic.net/repo/e5c8b9e3-b44f-490b-bf51-99f2dd2a1364/0/27114CFC585C5DB2E0AC5DA74F04C66C319492F1.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27114CFC585C5DB2E0AC5DA74F04C66C319492F1.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Mar 2026 22:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:d1:ff:70:f5:03:5f:f6:e3:91:e3:2d:ed:1c:a0:b7:a1:53:07:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27114CFC585C5DB2E0AC5DA74F04C66C319492F1
Validity
Not Before: Feb 4 06:55:02 2026 GMT
Not After : Feb 3 07:00:02 2027 GMT
Subject: CN=99A4B8DC132D10EB08A7123AA979214755BE79D3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:81:56:a5:50:52:77:2a:f5:9f:61:6e:45:c4:
b9:a6:89:ea:bd:66:42:d1:02:ad:bb:a4:d5:36:f2:
6b:ba:8d:56:a4:e3:e9:19:01:90:26:28:14:99:f9:
b6:06:41:6e:bb:6c:94:a1:54:42:ba:97:67:e0:b9:
87:a8:ae:68:8d:be:55:ca:64:ea:41:30:2f:c2:27:
8f:ef:05:a2:4d:38:65:2e:d3:95:bf:24:70:81:a0:
36:2e:46:56:fa:03:70:fe:59:a7:30:ef:af:0a:6a:
0c:34:7f:ae:43:73:a7:a1:90:91:5c:78:de:56:e7:
fa:25:2c:fc:b3:71:bf:ce:6e:ef:b6:b3:ac:71:92:
f6:2f:0f:57:ab:b4:1e:c2:8e:57:08:a7:22:34:7d:
1f:97:55:8c:3e:48:71:ee:2d:61:21:2a:c9:03:ae:
bd:fa:06:2c:31:db:58:ea:4d:1d:cf:f3:ed:10:e2:
25:29:5a:36:8d:a8:c3:ca:57:95:c5:d1:b3:be:55:
22:98:88:1a:0d:d0:fe:3e:ec:47:76:8a:4b:cd:07:
b6:13:e6:b2:b5:62:be:30:bf:57:83:31:41:84:9e:
e4:94:c1:ba:fd:e8:93:72:74:8b:b1:52:94:46:da:
b4:14:9f:2d:84:22:78:25:da:5d:23:85:11:4d:1c:
b7:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:A4:B8:DC:13:2D:10:EB:08:A7:12:3A:A9:79:21:47:55:BE:79:D3
X509v3 Authority Key Identifier:
keyid:27:11:4C:FC:58:5C:5D:B2:E0:AC:5D:A7:4F:04:C6:6C:31:94:92:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e5c8b9e3-b44f-490b-bf51-99f2dd2a1364/0/27114CFC585C5DB2E0AC5DA74F04C66C319492F1.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27114CFC585C5DB2E0AC5DA74F04C66C319492F1.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e5c8b9e3-b44f-490b-bf51-99f2dd2a1364/0/3130332e37392e3132382e302f32332d3234203d3e20313339393531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.79.128.0/23
Signature Algorithm: sha256WithRSAEncryption
13:c5:4d:6d:5e:0e:53:c8:7f:7a:c8:24:18:1b:99:56:1f:37:
3c:29:4f:b4:4a:08:f6:2e:53:ac:58:34:8a:54:5c:b6:d3:f2:
95:d7:30:cd:3c:70:ec:96:65:68:91:ab:f5:04:9c:13:66:5c:
2e:34:d8:9a:49:d9:34:f8:7c:a6:87:1b:6f:76:a6:29:84:b8:
3f:3b:4d:77:db:b2:87:a3:14:90:ea:da:51:39:cb:00:a0:ba:
57:43:94:f5:e1:98:75:42:08:fd:83:6b:49:ef:7e:f8:cb:5d:
77:47:c5:75:77:b6:a4:c0:c7:a2:63:99:04:19:bd:3f:c1:b9:
7b:8c:46:d0:23:36:c3:91:5d:f9:47:41:56:50:c0:bb:9b:38:
b9:db:a1:1f:58:3b:cc:2c:3f:60:ab:13:75:72:31:bc:59:2b:
ba:a9:4a:fc:4f:fa:4b:1e:b2:0c:ee:ff:0c:71:27:6e:01:bb:
bd:47:c1:39:47:93:2f:a1:8c:38:a2:4f:35:d1:59:43:94:c2:
75:f7:b6:fd:8e:04:9b:46:65:e1:43:0e:00:6b:78:1e:a3:17:
e5:6a:77:95:d2:2a:e3:aa:16:01:97:64:73:47:22:75:67:58:
58:e4:95:0d:ec:70:f6:94:2f:92:9d:11:be:a4:6a:0d:24:3c:
d6:36:c3:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:31:07 2026 by rpki-client