
$ rpki-client -vvf rpki-rsync.idnic.net/repo/fe7cc976-69f6-4db8-a7ab-856a2bb8eafe/0/3130332e3132372e3136382e302f32332d3234203d3e203435323837.roa
File: 3130332e3132372e3136382e302f32332d3234203d3e203435323837.roa (raw, json)
Hash identifier: gVVcFzT/K9Q9nDNA6t6fupz9aVwPxkvvDdd7B2c399E=
Subject key identifier: 7C:38:3B:6C:7E:E8:FA:89:E6:5D:9D:06:88:A1:9F:B5:8A:2B:9B:05
Certificate issuer: /CN=5A7D374096A73D4472AE1FFEEEE24473C1EC709C
Certificate serial: 4E8F0B1EEDD2E1B4A3A3A2790B3B634F993BB6AE
Authority key identifier: 5A:7D:37:40:96:A7:3D:44:72:AE:1F:FE:EE:E2:44:73:C1:EC:70:9C
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5A7D374096A73D4472AE1FFEEEE24473C1EC709C.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/fe7cc976-69f6-4db8-a7ab-856a2bb8eafe/0/3130332e3132372e3136382e302f32332d3234203d3e203435323837.roa
Signing time: Sun 03 May 2026 03:19:36 +0000
ROA not before: Sun 03 May 2026 03:14:36 +0000
ROA not after: Sun 02 May 2027 03:19:36 +0000
asID: 45287
IP address blocks: 103.127.168.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/fe7cc976-69f6-4db8-a7ab-856a2bb8eafe/0/5A7D374096A73D4472AE1FFEEEE24473C1EC709C.crl
rsync://rpki-rsync.idnic.net/repo/fe7cc976-69f6-4db8-a7ab-856a2bb8eafe/0/5A7D374096A73D4472AE1FFEEEE24473C1EC709C.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5A7D374096A73D4472AE1FFEEEE24473C1EC709C.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:8f:0b:1e:ed:d2:e1:b4:a3:a3:a2:79:0b:3b:63:4f:99:3b:b6:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5A7D374096A73D4472AE1FFEEEE24473C1EC709C
Validity
Not Before: May 3 03:14:36 2026 GMT
Not After : May 2 03:19:36 2027 GMT
Subject: CN=7C383B6C7EE8FA89E65D9D0688A19FB58A2B9B05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a9:40:6a:7e:ed:d0:5d:4f:3a:ef:77:32:25:
a8:a1:51:9d:c7:ef:d8:09:2b:d4:69:46:5f:08:82:
62:86:c1:d4:b1:4e:e1:46:c8:ed:47:de:3d:ac:b7:
3b:84:4d:a4:c8:ef:7b:a1:16:8e:ef:58:d0:9b:e5:
4a:a6:93:58:52:59:3c:4c:2f:80:d3:a7:38:e1:24:
98:dc:fe:1d:00:d8:f0:b5:c9:48:17:48:4f:b1:19:
63:00:ed:c9:18:1a:e3:7e:b9:48:c5:5a:79:42:75:
bf:77:04:cb:1e:bf:d4:72:48:0e:c7:34:3a:40:9f:
27:88:c0:fc:1e:a7:a3:49:fd:fa:35:45:4d:bc:db:
7b:43:cc:b5:ff:22:d8:f2:fc:08:90:37:e8:c1:94:
25:99:94:5f:da:6d:0e:69:9d:f2:f9:75:0e:04:72:
de:8c:29:0d:8c:f3:de:57:a4:9f:ac:19:1b:bb:d8:
5e:e9:d6:b0:3b:9f:97:fa:e3:f1:5e:8f:ee:c1:0f:
b5:ff:5d:83:65:f0:5c:68:78:18:2a:c8:98:93:00:
e8:ae:ec:b2:be:e0:af:ca:1c:ea:7b:d7:19:3d:96:
84:13:34:a0:b9:67:85:44:5d:9d:c9:73:21:1b:61:
2b:f4:0b:92:b2:81:a1:27:23:b5:74:f6:34:31:b8:
70:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:38:3B:6C:7E:E8:FA:89:E6:5D:9D:06:88:A1:9F:B5:8A:2B:9B:05
X509v3 Authority Key Identifier:
keyid:5A:7D:37:40:96:A7:3D:44:72:AE:1F:FE:EE:E2:44:73:C1:EC:70:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/fe7cc976-69f6-4db8-a7ab-856a2bb8eafe/0/5A7D374096A73D4472AE1FFEEEE24473C1EC709C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5A7D374096A73D4472AE1FFEEEE24473C1EC709C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fe7cc976-69f6-4db8-a7ab-856a2bb8eafe/0/3130332e3132372e3136382e302f32332d3234203d3e203435323837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.127.168.0/23
Signature Algorithm: sha256WithRSAEncryption
07:19:c8:2c:35:08:3f:a4:56:c0:a9:e9:e3:36:46:af:16:92:
f2:ac:c3:03:73:13:f2:f4:25:35:0a:ca:8f:e3:19:47:72:5a:
a6:e6:d3:eb:e4:24:89:3a:b3:88:71:3e:74:84:95:e3:12:a0:
59:01:41:6f:4e:d1:01:5e:40:99:2e:65:8c:7a:c9:9a:b1:dd:
ff:b2:37:e8:25:e8:1a:a6:67:c5:50:03:3d:be:2f:e1:8d:5d:
30:0b:78:0d:a5:06:0a:dd:4a:30:0b:8b:b4:7e:9e:f3:3c:ac:
05:9e:21:ff:d3:27:c4:2d:85:99:c1:37:39:29:96:60:34:fd:
ae:03:d0:08:a3:e0:3a:d3:35:eb:62:28:d5:a5:70:07:26:03:
3e:29:f4:6f:3d:7a:75:a5:c1:41:d1:a7:dc:86:97:57:e7:31:
c0:a1:4f:7c:a7:50:10:21:8a:ac:2e:e9:b1:1b:75:00:bc:67:
59:55:b6:e1:27:75:b8:7c:cd:08:56:28:f2:f0:6c:b7:98:c2:
4a:8d:87:18:2b:75:56:ce:97:af:55:c8:6e:eb:69:be:f3:83:
b5:f5:37:d4:fd:3f:64:10:d9:f1:58:f7:5d:23:db:68:69:8c:
be:91:aa:6a:e2:df:d8:54:80:1e:7f:54:58:29:7b:b5:86:49:
28:9b:de:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:36:36 2026 by rpki-client