
$ rpki-client -vvf rpki-rsync.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/3130332e3138302e35382e302f32332d3233203d3e2039333431.roa
File: 3130332e3138302e35382e302f32332d3233203d3e2039333431.roa (raw, json)
Hash identifier: 9g7qK44kNZNkc5s9DYu864dbcgLL2OYqPHQVtd+AZyk=
Subject key identifier: AF:DD:51:99:5A:1F:A9:B6:9A:76:31:53:C9:AD:BF:D7:15:FE:95:D0
Certificate issuer: /CN=65BD8BDB0F0688479A1741E2BD6624408DA567AB
Certificate serial: 04537116F800F046F6450DF5DBFB1D12C7E91FF9
Authority key identifier: 65:BD:8B:DB:0F:06:88:47:9A:17:41:E2:BD:66:24:40:8D:A5:67:AB
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/65BD8BDB0F0688479A1741E2BD6624408DA567AB.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/3130332e3138302e35382e302f32332d3233203d3e2039333431.roa
Signing time: Sun 03 May 2026 02:15:40 +0000
ROA not before: Sun 03 May 2026 02:10:40 +0000
ROA not after: Sun 02 May 2027 02:15:40 +0000
asID: 9341
IP address blocks: 103.180.58.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/65BD8BDB0F0688479A1741E2BD6624408DA567AB.crl
rsync://rpki-rsync.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/65BD8BDB0F0688479A1741E2BD6624408DA567AB.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/65BD8BDB0F0688479A1741E2BD6624408DA567AB.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 06 May 2026 10:15:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:53:71:16:f8:00:f0:46:f6:45:0d:f5:db:fb:1d:12:c7:e9:1f:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65BD8BDB0F0688479A1741E2BD6624408DA567AB
Validity
Not Before: May 3 02:10:40 2026 GMT
Not After : May 2 02:15:40 2027 GMT
Subject: CN=AFDD51995A1FA9B69A763153C9ADBFD715FE95D0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:58:0c:74:d6:66:5d:8e:60:18:4e:52:05:1e:
2d:06:bb:66:50:0e:52:7f:67:52:2f:ec:e8:7b:3a:
08:5a:7a:6d:24:b9:07:b7:4f:ee:c3:63:bc:45:74:
94:de:f6:52:6c:8c:9c:73:e6:18:01:6e:0b:16:a5:
bb:7a:ce:c5:43:de:ad:1b:b0:28:56:6d:dc:39:46:
ee:00:bc:0c:64:b6:82:bd:cb:38:94:e6:6e:2c:56:
93:b5:bc:53:b3:81:20:66:2b:44:e6:ce:ba:6e:00:
fc:df:cb:e1:b5:aa:65:9b:68:4f:45:09:08:88:e8:
b2:fe:e6:43:ed:47:95:a5:2a:e4:27:88:73:db:1a:
aa:cc:d6:d5:81:a3:cb:7e:d2:43:a3:7d:28:dc:9e:
01:d3:cf:86:85:2f:18:72:e2:be:c8:cb:a4:78:77:
af:6d:2e:46:ee:20:d3:ff:ff:39:43:17:2e:23:f8:
66:a1:e4:70:3c:49:3b:08:b5:9a:80:e2:4e:ce:e4:
fe:97:9f:5b:52:3b:89:0f:ef:59:6d:32:68:ea:6b:
61:6b:0d:94:d3:c4:df:12:ff:16:09:a7:00:7c:33:
59:07:88:43:d8:4a:c3:2c:26:97:12:03:80:d0:c4:
d1:31:5a:dd:53:b3:8a:d0:71:12:4e:da:89:a5:39:
48:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:DD:51:99:5A:1F:A9:B6:9A:76:31:53:C9:AD:BF:D7:15:FE:95:D0
X509v3 Authority Key Identifier:
keyid:65:BD:8B:DB:0F:06:88:47:9A:17:41:E2:BD:66:24:40:8D:A5:67:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/65BD8BDB0F0688479A1741E2BD6624408DA567AB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/65BD8BDB0F0688479A1741E2BD6624408DA567AB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/3130332e3138302e35382e302f32332d3233203d3e2039333431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.180.58.0/23
Signature Algorithm: sha256WithRSAEncryption
8d:02:d4:f1:ac:10:1b:21:b0:bc:fc:9b:7e:2c:12:83:ae:f3:
a0:59:83:6a:ef:c5:4c:ae:70:6b:df:96:ea:c4:63:b8:d7:5d:
a1:b8:59:24:b2:9a:af:73:bc:ac:01:d5:cd:49:b9:a6:94:ff:
e8:aa:1e:90:65:a0:56:1b:bf:f3:e8:0d:14:a8:78:76:e8:d4:
7e:66:8f:2b:c7:c7:02:de:41:be:ff:a5:a1:f3:00:53:7e:5f:
ce:58:03:f5:7e:7d:07:06:7b:d4:5d:b0:eb:b3:8f:b7:9c:d2:
b5:0f:f1:05:72:c7:d7:b4:fc:33:1a:a3:63:1c:26:95:f5:55:
2b:93:d7:b5:95:3b:00:ac:57:fd:ce:c0:16:57:aa:58:ed:54:
b3:a9:3f:55:a2:61:f5:e9:3b:67:ee:25:54:29:84:e5:f3:e7:
cb:79:94:e8:66:4e:b1:64:ba:97:e1:75:ff:af:fd:8d:30:39:
14:34:2a:fc:3c:ab:ab:1c:dc:26:54:4e:db:63:ba:bd:56:de:
64:a3:8d:b5:43:61:97:0b:12:f6:55:b0:0c:fa:aa:fb:3b:43:
82:41:52:8f:e5:10:a2:ef:63:d1:77:84:59:3a:a7:20:e1:80:
a3:df:9b:d4:62:f0:7e:63:6c:ae:b1:cf:f4:55:f9:c9:41:ca:
e7:25:79:af
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUBFNxFvgA8Eb2RQ312/sdEsfpH/kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjVCRDhCREIwRjA2ODg0NzlBMTc0MUUyQkQ2NjI0NDA4
REE1NjdBQjAeFw0yNjA1MDMwMjEwNDBaFw0yNzA1MDIwMjE1NDBaMDMxMTAvBgNV
BAMTKEFGREQ1MTk5NUExRkE5QjY5QTc2MzE1M0M5QURCRkQ3MTVGRTk1RDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAWAx01mZdjmAYTlIFHi0Gu2ZQ
DlJ/Z1Iv7Oh7Oghaem0kuQe3T+7DY7xFdJTe9lJsjJxz5hgBbgsWpbt6zsVD3q0b
sChWbdw5Ru4AvAxktoK9yziU5m4sVpO1vFOzgSBmK0TmzrpuAPzfy+G1qmWbaE9F
CQiI6LL+5kPtR5WlKuQniHPbGqrM1tWBo8t+0kOjfSjcngHTz4aFLxhy4r7Iy6R4
d69tLkbuINP//zlDFy4j+Gah5HA8STsItZqA4k7O5P6Xn1tSO4kP71ltMmjqa2Fr
DZTTxN8S/xYJpwB8M1kHiEPYSsMsJpcSA4DQxNExWt1Ts4rQcRJO2omlOUhXAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUr91RmVofqbaadjFTya2/1xX+ldAwHwYDVR0j
BBgwFoAUZb2L2w8GiEeaF0HivWYkQI2lZ6swDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MTcxYTg0N2QtMjUzMS00ZDdmLTkyNDEtOTc3Nzg1MDYwNWQ2LzAvNjVCRDhCREIw
RjA2ODg0NzlBMTc0MUUyQkQ2NjI0NDA4REE1NjdBQi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS82NUJEOEJEQjBGMDY4ODQ3OUExNzQxRTJCRDY2MjQ0MDhEQTU2
N0FCLmNlcjCBoQYIKwYBBQUHAQsEgZQwgZEwgY4GCCsGAQUFBzALhoGBcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzE3MWE4NDdkLTI1MzEtNGQ3Zi05
MjQxLTk3Nzc4NTA2MDVkNi8wLzMxMzAzMzJlMzEzODMwMmUzNTM4MmUzMDJmMzIz
MzJkMzIzMzIwM2QzZTIwMzkzMzM0MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFntDowDQYJKoZIhvcN
AQELBQADggEBAI0C1PGsEBshsLz8m34sEoOu86BZg2rvxUyucGvflurEY7jXXaG4
WSSymq9zvKwB1c1JuaaU/+iqHpBloFYbv/PoDRSoeHbo1H5mjyvHxwLeQb7/paHz
AFN+X85YA/V+fQcGe9RdsOuzj7ec0rUP8QVyx9e0/DMao2McJpX1VSuT17WVOwCs
V/3OwBZXqljtVLOpP1WiYfXpO2fuJVQphOXz58t5lOhmTrFkupfhdf+v/Y0wORQ0
Kvw8q6sc3CZUTttjur1W3mSjjbVDYZcLEvZVsAz6qvs7Q4JBUo/lEKLvY9F3hFk6
pyDhgKPfm9Ri8H5jbK6xz/RV+clByuclea8=
-----END CERTIFICATE-----
Generated at Tue May 5 13:31:46 2026 by rpki-client