
$ rpki-client -vvf rpki-rsync.idnic.net/repo/fcde1cfd-cbbc-4f08-89cb-435a5911f2c2/0/3130332e3132372e3135342e302f32342d3234203d3e20313530353138.roa
File: 3130332e3132372e3135342e302f32342d3234203d3e20313530353138.roa (raw, json)
Hash identifier: hWMY9RV6tjoaYaPOGZQpY6qftIWF9uA81eVJc//u+sM=
Subject key identifier: 5F:82:DB:74:21:BB:96:A9:43:7C:AE:39:22:6E:80:DF:BF:BF:22:F4
Certificate issuer: /CN=3C20DFEA9E4BD8CF35FA02E92CC9F5A1543BB570
Certificate serial: 79C683000EB47DD3DFD42DCBBF6FEBB7B896A945
Authority key identifier: 3C:20:DF:EA:9E:4B:D8:CF:35:FA:02:E9:2C:C9:F5:A1:54:3B:B5:70
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3C20DFEA9E4BD8CF35FA02E92CC9F5A1543BB570.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/fcde1cfd-cbbc-4f08-89cb-435a5911f2c2/0/3130332e3132372e3135342e302f32342d3234203d3e20313530353138.roa
Signing time: Sun 03 May 2026 03:19:23 +0000
ROA not before: Sun 03 May 2026 03:14:23 +0000
ROA not after: Sun 02 May 2027 03:19:23 +0000
asID: 150518
IP address blocks: 103.127.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/fcde1cfd-cbbc-4f08-89cb-435a5911f2c2/0/3C20DFEA9E4BD8CF35FA02E92CC9F5A1543BB570.crl
rsync://rpki-rsync.idnic.net/repo/fcde1cfd-cbbc-4f08-89cb-435a5911f2c2/0/3C20DFEA9E4BD8CF35FA02E92CC9F5A1543BB570.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3C20DFEA9E4BD8CF35FA02E92CC9F5A1543BB570.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:c6:83:00:0e:b4:7d:d3:df:d4:2d:cb:bf:6f:eb:b7:b8:96:a9:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3C20DFEA9E4BD8CF35FA02E92CC9F5A1543BB570
Validity
Not Before: May 3 03:14:23 2026 GMT
Not After : May 2 03:19:23 2027 GMT
Subject: CN=5F82DB7421BB96A9437CAE39226E80DFBFBF22F4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:87:7e:1d:00:44:5c:4b:cd:97:9f:1c:c6:94:
5f:ea:2b:4c:69:7a:86:a1:c3:48:93:0f:56:01:e8:
cb:15:18:14:75:b2:a0:b4:01:6a:78:e8:fc:c5:20:
e3:69:c0:12:70:5e:94:93:11:ba:16:90:3f:6e:cc:
56:18:61:f8:27:c4:17:1e:12:34:17:5f:d8:d2:2f:
0b:6b:7f:e9:46:d8:b2:ab:a2:38:97:fc:59:6e:b5:
ff:26:66:72:a9:9f:85:b2:4c:fe:c4:d5:ca:51:3a:
bf:67:3c:37:03:b9:e7:88:77:f6:dd:bd:20:66:71:
57:f2:57:7e:58:c8:77:a3:5c:d5:82:bb:9c:fc:c5:
b6:05:66:83:c7:19:a6:32:56:c1:d1:1c:e4:ae:3f:
0f:bc:3d:31:be:44:cb:63:6d:10:80:27:5c:a3:54:
6d:94:13:ea:dd:c5:a4:03:16:b7:99:31:74:69:d3:
44:d5:89:d6:b0:ea:50:37:97:94:7e:4e:4a:97:a7:
50:e9:74:52:17:47:c0:76:ae:c1:64:b2:f6:3d:a5:
ba:be:ac:8b:1e:06:08:d1:b4:b8:b1:87:4e:14:f6:
a4:c3:3d:4c:77:25:4d:cf:06:34:d4:7c:66:7d:26:
c3:22:a7:07:90:b1:e5:89:4e:31:84:f1:a2:27:fa:
d8:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:82:DB:74:21:BB:96:A9:43:7C:AE:39:22:6E:80:DF:BF:BF:22:F4
X509v3 Authority Key Identifier:
keyid:3C:20:DF:EA:9E:4B:D8:CF:35:FA:02:E9:2C:C9:F5:A1:54:3B:B5:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/fcde1cfd-cbbc-4f08-89cb-435a5911f2c2/0/3C20DFEA9E4BD8CF35FA02E92CC9F5A1543BB570.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3C20DFEA9E4BD8CF35FA02E92CC9F5A1543BB570.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fcde1cfd-cbbc-4f08-89cb-435a5911f2c2/0/3130332e3132372e3135342e302f32342d3234203d3e20313530353138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.127.154.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:74:2e:dc:07:08:45:2d:f6:ef:d9:c9:74:b6:50:1e:4b:d7:
bc:3a:03:7e:ee:6b:cd:20:53:02:6e:dd:34:31:c3:ef:76:41:
53:c6:cc:6e:3e:43:5a:cc:d8:5e:88:c8:b2:f6:24:4d:32:bb:
0d:b3:ce:23:62:be:23:39:f6:9f:ac:5e:7c:83:6e:84:5d:51:
50:77:53:05:f4:09:71:af:70:31:0a:b4:0d:07:76:b8:b6:42:
6e:85:71:b7:b8:c4:2e:6f:29:2c:09:8e:c9:fa:9e:80:5e:51:
be:04:bd:aa:44:3b:52:09:ba:42:15:da:0d:51:a6:f5:14:6d:
f7:f0:c0:5e:38:e0:25:cb:6f:25:a0:5a:43:b1:ae:6a:50:3c:
bc:b7:00:3d:06:08:ba:1a:8d:a5:9e:0f:a6:85:38:c3:f7:43:
e9:05:e0:80:df:32:9e:3e:47:4c:d2:e4:03:37:b8:e3:df:9b:
eb:fa:e3:53:a0:cd:20:08:f9:ad:f3:d7:4a:be:ad:f5:74:52:
97:96:1b:52:86:56:6e:6d:e2:3f:a6:aa:ef:c5:0e:0d:79:b6:
44:18:0e:0a:5b:6f:bd:7e:21:0e:e9:e6:6e:44:83:49:e1:1c:
a9:5f:05:f3:57:ef:ac:80:da:ef:07:37:f6:45:d9:3b:2d:51:
fd:42:2d:86
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUecaDAA60fdPf1C3Lv2/rt7iWqUUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0MyMERGRUE5RTRCRDhDRjM1RkEwMkU5MkNDOUY1QTE1
NDNCQjU3MDAeFw0yNjA1MDMwMzE0MjNaFw0yNzA1MDIwMzE5MjNaMDMxMTAvBgNV
BAMTKDVGODJEQjc0MjFCQjk2QTk0MzdDQUUzOTIyNkU4MERGQkZCRjIyRjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDyh34dAERcS82XnxzGlF/qK0xp
eoahw0iTD1YB6MsVGBR1sqC0AWp46PzFIONpwBJwXpSTEboWkD9uzFYYYfgnxBce
EjQXX9jSLwtrf+lG2LKrojiX/Flutf8mZnKpn4WyTP7E1cpROr9nPDcDueeId/bd
vSBmcVfyV35YyHejXNWCu5z8xbYFZoPHGaYyVsHRHOSuPw+8PTG+RMtjbRCAJ1yj
VG2UE+rdxaQDFreZMXRp00TVidaw6lA3l5R+TkqXp1DpdFIXR8B2rsFksvY9pbq+
rIseBgjRtLixh04U9qTDPUx3JU3PBjTUfGZ9JsMipweQseWJTjGE8aIn+tjJAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUX4LbdCG7lqlDfK45Im6A37+/IvQwHwYDVR0j
BBgwFoAUPCDf6p5L2M81+gLpLMn1oVQ7tXAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZmNkZTFjZmQtY2JiYy00ZjA4LTg5Y2ItNDM1YTU5MTFmMmMyLzAvM0MyMERGRUE5
RTRCRDhDRjM1RkEwMkU5MkNDOUY1QTE1NDNCQjU3MC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8zQzIwREZFQTlFNEJEOENGMzVGQTAyRTkyQ0M5RjVBMTU0M0JC
NTcwLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2ZjZGUxY2ZkLWNiYmMtNGYwOC04
OWNiLTQzNWE1OTExZjJjMi8wLzMxMzAzMzJlMzEzMjM3MmUzMTM1MzQyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM1MzAzNTMxMzgucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnf5owDQYJ
KoZIhvcNAQELBQADggEBALF0LtwHCEUt9u/ZyXS2UB5L17w6A37ua80gUwJu3TQx
w+92QVPGzG4+Q1rM2F6IyLL2JE0yuw2zziNiviM59p+sXnyDboRdUVB3UwX0CXGv
cDEKtA0Hdri2Qm6Fcbe4xC5vKSwJjsn6noBeUb4EvapEO1IJukIV2g1RpvUUbffw
wF444CXLbyWgWkOxrmpQPLy3AD0GCLoajaWeD6aFOMP3Q+kF4IDfMp4+R0zS5AM3
uOPfm+v641OgzSAI+a3z10q+rfV0UpeWG1KGVm5t4j+mqu/FDg15tkQYDgpbb71+
IQ7p5m5Eg0nhHKlfBfNX76yA2u8HN/ZF2TstUf1CLYY=
-----END CERTIFICATE-----
Generated at Wed May 13 02:41:27 2026 by rpki-client