
$ rpki-client -vvf repo-rpki.idnic.net/repo/e5c8b9e3-b44f-490b-bf51-99f2dd2a1364/0/3130332e37392e3132382e302f32342d3234203d3e20313339393531.roa
File: 3130332e37392e3132382e302f32342d3234203d3e20313339393531.roa (raw, json)
Hash identifier: n5pDNX/VGS6AiUSXackAqMHnsF6+3nXN2svM9swor8M=
Subject key identifier: 3A:D1:31:6C:94:13:3C:54:46:49:72:32:BB:C2:BA:BE:8D:D2:31:06
Certificate issuer: /CN=27114CFC585C5DB2E0AC5DA74F04C66C319492F1
Certificate serial: 4888B080F509E102739ADC80E8A37DEE789AA441
Authority key identifier: 27:11:4C:FC:58:5C:5D:B2:E0:AC:5D:A7:4F:04:C6:6C:31:94:92:F1
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27114CFC585C5DB2E0AC5DA74F04C66C319492F1.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e5c8b9e3-b44f-490b-bf51-99f2dd2a1364/0/3130332e37392e3132382e302f32342d3234203d3e20313339393531.roa
Signing time: Wed 04 Mar 2026 15:00:03 +0000
ROA not before: Wed 04 Mar 2026 14:55:03 +0000
ROA not after: Wed 03 Mar 2027 15:00:03 +0000
asID: 139951
IP address blocks: 103.79.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/e5c8b9e3-b44f-490b-bf51-99f2dd2a1364/0/27114CFC585C5DB2E0AC5DA74F04C66C319492F1.crl
rsync://repo-rpki.idnic.net/repo/e5c8b9e3-b44f-490b-bf51-99f2dd2a1364/0/27114CFC585C5DB2E0AC5DA74F04C66C319492F1.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27114CFC585C5DB2E0AC5DA74F04C66C319492F1.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 21 Mar 2026 00:32:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:88:b0:80:f5:09:e1:02:73:9a:dc:80:e8:a3:7d:ee:78:9a:a4:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27114CFC585C5DB2E0AC5DA74F04C66C319492F1
Validity
Not Before: Mar 4 14:55:03 2026 GMT
Not After : Mar 3 15:00:03 2027 GMT
Subject: CN=3AD1316C94133C5446497232BBC2BABE8DD23106
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:dc:5c:95:bc:f4:a3:64:0b:80:3c:1e:f9:6c:
3f:54:74:92:51:5d:c6:e6:28:ca:3e:df:85:b1:1d:
d3:74:62:10:6f:56:14:e8:4c:5b:ae:be:a2:4a:65:
db:d1:c5:96:4c:63:4f:2e:5a:3c:6c:d8:5d:0c:07:
9a:e1:4a:3b:a6:64:56:76:c7:31:47:e6:42:1f:14:
b2:30:95:ef:03:97:58:88:21:56:43:d1:cc:78:71:
d6:55:12:67:2f:8b:a0:0b:24:6c:81:5a:19:8b:35:
35:ce:e1:d5:e1:89:a4:70:d1:f4:b7:0c:6b:d4:67:
4e:af:5c:b7:32:36:e1:5d:8d:a4:d7:30:bb:4c:66:
e4:b2:77:84:18:8a:b7:ef:c5:c3:a3:55:ca:38:cf:
fe:6e:88:39:7d:e8:a3:4a:8d:30:2b:f8:08:e7:98:
3d:64:39:6f:86:ee:d3:e4:df:b3:3a:a1:43:bc:09:
bf:e1:2f:a7:2b:c3:e1:be:57:eb:f0:e4:97:30:38:
2d:a1:94:e8:41:d3:f8:df:e2:fe:07:48:8e:5e:42:
4d:a6:d3:de:70:bc:e5:67:43:21:fb:19:98:d6:d1:
31:21:f0:4a:af:25:30:40:76:58:f2:2c:71:7e:39:
75:39:b5:8f:5e:98:69:21:38:21:ad:54:6f:62:a5:
de:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:D1:31:6C:94:13:3C:54:46:49:72:32:BB:C2:BA:BE:8D:D2:31:06
X509v3 Authority Key Identifier:
keyid:27:11:4C:FC:58:5C:5D:B2:E0:AC:5D:A7:4F:04:C6:6C:31:94:92:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e5c8b9e3-b44f-490b-bf51-99f2dd2a1364/0/27114CFC585C5DB2E0AC5DA74F04C66C319492F1.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27114CFC585C5DB2E0AC5DA74F04C66C319492F1.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e5c8b9e3-b44f-490b-bf51-99f2dd2a1364/0/3130332e37392e3132382e302f32342d3234203d3e20313339393531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.79.128.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:58:37:18:4a:73:db:54:f5:37:29:08:cc:ba:ca:6b:7a:60:
d1:d8:aa:97:9a:70:e1:31:44:66:78:6c:cc:29:fe:1f:9a:bf:
e1:7e:cf:b7:40:f8:a2:a4:b7:00:81:11:77:3f:b9:76:7b:b3:
b9:fc:a0:a7:ba:14:49:96:a4:6d:3f:04:6d:d9:2c:e4:79:11:
4a:30:d2:b8:d6:ee:1b:a9:6c:ac:66:fb:c5:0d:9a:f2:b2:56:
ee:31:d1:0e:2c:5c:e2:44:a4:0b:58:75:0d:de:22:2d:8f:dd:
ca:94:7a:7d:ac:08:21:ac:de:c3:76:eb:00:c2:86:63:43:28:
19:5a:66:d5:da:bb:c2:2f:a6:f5:e8:55:68:5b:55:56:05:a0:
83:3c:59:06:b7:2a:64:74:1f:22:d4:02:bc:d7:41:c8:2c:d8:
88:52:f1:bc:1a:26:e3:a2:4a:35:7c:de:37:11:31:ff:bc:74:
ac:e8:d9:ef:2a:2b:a7:01:08:05:33:36:50:68:3f:bc:05:f7:
d1:d9:6a:a1:ea:89:d6:cc:3c:66:d0:b5:21:25:fd:cb:dc:be:
88:77:47:a6:8e:6f:2d:6b:84:b0:46:2d:01:4e:52:8f:e0:c0:
b2:c3:11:89:66:f1:eb:72:e9:b8:0c:b0:0c:69:6b:5e:d3:6b:
34:a6:d1:61
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUSIiwgPUJ4QJzmtyA6KN97niapEEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjcxMTRDRkM1ODVDNURCMkUwQUM1REE3NEYwNEM2NkMz
MTk0OTJGMTAeFw0yNjAzMDQxNDU1MDNaFw0yNzAzMDMxNTAwMDNaMDMxMTAvBgNV
BAMTKDNBRDEzMTZDOTQxMzNDNTQ0NjQ5NzIzMkJCQzJCQUJFOEREMjMxMDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu3FyVvPSjZAuAPB75bD9UdJJR
XcbmKMo+34WxHdN0YhBvVhToTFuuvqJKZdvRxZZMY08uWjxs2F0MB5rhSjumZFZ2
xzFH5kIfFLIwle8Dl1iIIVZD0cx4cdZVEmcvi6ALJGyBWhmLNTXO4dXhiaRw0fS3
DGvUZ06vXLcyNuFdjaTXMLtMZuSyd4QYirfvxcOjVco4z/5uiDl96KNKjTAr+Ajn
mD1kOW+G7tPk37M6oUO8Cb/hL6crw+G+V+vw5JcwOC2hlOhB0/jf4v4HSI5eQk2m
095wvOVnQyH7GZjW0TEh8EqvJTBAdljyLHF+OXU5tY9emGkhOCGtVG9ipd7xAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUOtExbJQTPFRGSXIyu8K6vo3SMQYwHwYDVR0j
BBgwFoAUJxFM/FhcXbLgrF2nTwTGbDGUkvEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l
NWM4YjllMy1iNDRmLTQ5MGItYmY1MS05OWYyZGQyYTEzNjQvMC8yNzExNENGQzU4
NUM1REIyRTBBQzVEQTc0RjA0QzY2QzMxOTQ5MkYxLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMjcxMTRDRkM1ODVDNURCMkUwQUM1REE3NEYwNEM2NkMzMTk0
OTJGMS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U1YzhiOWUzLWI0NGYtNDkwYi1i
ZjUxLTk5ZjJkZDJhMTM2NC8wLzMxMzAzMzJlMzczOTJlMzEzMjM4MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzMzM5MzkzNTMxLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ0+AMA0GCSqG
SIb3DQEBCwUAA4IBAQBNWDcYSnPbVPU3KQjMuspremDR2KqXmnDhMURmeGzMKf4f
mr/hfs+3QPiipLcAgRF3P7l2e7O5/KCnuhRJlqRtPwRt2SzkeRFKMNK41u4bqWys
ZvvFDZryslbuMdEOLFziRKQLWHUN3iItj93KlHp9rAghrN7DdusAwoZjQygZWmbV
2rvCL6b16FVoW1VWBaCDPFkGtypkdB8i1AK810HILNiIUvG8Gibjoko1fN43ETH/
vHSs6NnvKiunAQgFMzZQaD+8BffR2Wqh6onWzDxm0LUhJf3L3L6Id0emjm8ta4Sw
Ri0BTlKP4MCywxGJZvHrcum4DLAMaWte02s0ptFh
-----END CERTIFICATE-----
Generated at Thu Mar 19 10:53:45 2026 by rpki-client