
$ rpki-client -vvf rpki-rsync.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/3130332e3131382e3137342e302f32342d3234203d3e20313339323035.roa
File: 3130332e3131382e3137342e302f32342d3234203d3e20313339323035.roa (raw, json)
Hash identifier: EZ+ZMEszQ0FNnAyScxrOoCf6N5MbYNv0AIqesnyNkY8=
Subject key identifier: 88:BA:8F:46:7C:A5:3F:F0:B7:C7:2A:04:91:38:BD:3E:78:D6:64:20
Certificate issuer: /CN=595ADE95CD3971264537934C7A4061E2FCA6CCC2
Certificate serial: 4DE3F35971B7E1BC2D5B845730C487677743C6E9
Authority key identifier: 59:5A:DE:95:CD:39:71:26:45:37:93:4C:7A:40:61:E2:FC:A6:CC:C2
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/595ADE95CD3971264537934C7A4061E2FCA6CCC2.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/3130332e3131382e3137342e302f32342d3234203d3e20313339323035.roa
Signing time: Sun 03 May 2026 02:21:04 +0000
ROA not before: Sun 03 May 2026 02:16:04 +0000
ROA not after: Sun 02 May 2027 02:21:04 +0000
asID: 139205
IP address blocks: 103.118.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/595ADE95CD3971264537934C7A4061E2FCA6CCC2.crl
rsync://rpki-rsync.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/595ADE95CD3971264537934C7A4061E2FCA6CCC2.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/595ADE95CD3971264537934C7A4061E2FCA6CCC2.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 07 May 2026 19:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:e3:f3:59:71:b7:e1:bc:2d:5b:84:57:30:c4:87:67:77:43:c6:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=595ADE95CD3971264537934C7A4061E2FCA6CCC2
Validity
Not Before: May 3 02:16:04 2026 GMT
Not After : May 2 02:21:04 2027 GMT
Subject: CN=88BA8F467CA53FF0B7C72A049138BD3E78D66420
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:da:9a:bc:2d:64:61:07:cb:45:e9:fe:ee:8a:
33:6e:1d:fe:49:2d:41:d3:1f:a6:68:3e:0a:37:3e:
29:64:23:75:4f:2f:cf:b0:01:1a:25:29:d2:5d:3b:
66:e6:04:71:e6:4e:d0:48:fc:bb:0f:82:4b:74:fd:
f2:57:97:c6:d1:2c:c7:3b:30:23:70:ca:c4:ef:55:
88:d0:8a:dc:7b:8e:5a:9b:4e:55:fa:ea:14:e6:01:
ed:f7:9e:e3:71:89:c8:34:52:27:80:de:e9:bb:26:
3a:03:14:59:c5:32:d6:21:5c:fe:d6:7d:ed:e5:88:
d0:19:e6:8a:a7:ea:cc:45:ec:b3:5d:e6:55:d5:98:
bc:4a:43:7e:fc:f3:25:bf:4b:9e:1a:e6:8b:81:21:
61:11:52:51:5b:98:ee:0c:c7:86:20:2d:b5:15:9a:
1a:b2:0a:8e:dc:b3:98:1f:82:be:de:8d:1f:fa:15:
d7:c1:ea:55:f5:ce:bc:13:f2:06:a5:1e:89:0d:49:
da:5b:ab:f1:77:ad:3b:50:04:bd:d0:a2:28:32:1d:
9c:ce:40:bb:ef:90:43:39:b4:ee:70:3e:a6:80:70:
c6:31:5b:0b:a2:1c:45:9d:76:d1:1f:76:4c:3b:36:
f2:1d:b3:3b:63:76:52:6c:9f:62:91:25:75:82:e7:
37:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:BA:8F:46:7C:A5:3F:F0:B7:C7:2A:04:91:38:BD:3E:78:D6:64:20
X509v3 Authority Key Identifier:
keyid:59:5A:DE:95:CD:39:71:26:45:37:93:4C:7A:40:61:E2:FC:A6:CC:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/595ADE95CD3971264537934C7A4061E2FCA6CCC2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/595ADE95CD3971264537934C7A4061E2FCA6CCC2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/3130332e3131382e3137342e302f32342d3234203d3e20313339323035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.118.174.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:db:43:c5:39:f1:cc:72:24:65:d5:e5:0c:c6:42:1d:5d:4f:
7b:35:66:5a:92:a6:d1:d7:4f:e4:57:4c:60:be:8a:e6:dc:4b:
3b:93:53:4e:ac:a6:ea:36:6c:aa:78:ac:4b:be:93:44:69:2b:
66:ad:9c:ca:b5:a4:50:54:63:44:5b:2a:c1:18:44:1f:9d:db:
fa:33:8e:57:10:d1:02:8a:09:d1:46:65:f6:f3:2b:09:06:10:
cc:f9:ba:a7:d0:67:f0:1a:39:fa:30:0e:c1:3f:f8:56:84:bf:
8b:60:df:bf:21:b1:9d:45:9d:92:86:0b:35:50:10:95:a0:f3:
0e:d9:0d:b4:c6:fa:b2:81:f4:e8:98:a7:75:7e:dd:d0:3a:9b:
13:c6:a8:30:fe:7f:85:fa:d4:e4:65:8e:16:32:f3:7b:66:60:
98:3f:c9:5b:1f:ae:ab:b6:34:0f:a8:3e:9a:74:91:13:8c:32:
59:e6:f5:c2:5d:b5:c5:fc:7f:70:a2:b4:6d:e8:41:c9:b1:bc:
b7:73:4d:7a:6c:2c:a0:0d:3c:e2:28:47:76:ec:b5:7d:4f:da:
32:a9:64:94:0d:71:20:0c:78:d3:2b:3d:62:ef:ec:66:be:b2:
32:57:6e:b0:fc:23:35:e8:50:16:1a:a6:a7:d3:46:e0:c1:52:
6f:2d:23:a2
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUTePzWXG34bwtW4RXMMSHZ3dDxukwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTk1QURFOTVDRDM5NzEyNjQ1Mzc5MzRDN0E0MDYxRTJG
Q0E2Q0NDMjAeFw0yNjA1MDMwMjE2MDRaFw0yNzA1MDIwMjIxMDRaMDMxMTAvBgNV
BAMTKDg4QkE4RjQ2N0NBNTNGRjBCN0M3MkEwNDkxMzhCRDNFNzhENjY0MjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC2pq8LWRhB8tF6f7uijNuHf5J
LUHTH6ZoPgo3PilkI3VPL8+wARolKdJdO2bmBHHmTtBI/LsPgkt0/fJXl8bRLMc7
MCNwysTvVYjQitx7jlqbTlX66hTmAe33nuNxicg0UieA3um7JjoDFFnFMtYhXP7W
fe3liNAZ5oqn6sxF7LNd5lXVmLxKQ3788yW/S54a5ouBIWERUlFbmO4Mx4YgLbUV
mhqyCo7cs5gfgr7ejR/6FdfB6lX1zrwT8galHokNSdpbq/F3rTtQBL3QoigyHZzO
QLvvkEM5tO5wPqaAcMYxWwuiHEWddtEfdkw7NvIdsztjdlJsn2KRJXWC5zdBAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUiLqPRnylP/C3xyoEkTi9PnjWZCAwHwYDVR0j
BBgwFoAUWVrelc05cSZFN5NMekBh4vymzMIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MjdkOWQ3Y2ItNmNmYi00ZGUwLTlkYWEtZDIyMmI3YTg5MDcyLzAvNTk1QURFOTVD
RDM5NzEyNjQ1Mzc5MzRDN0E0MDYxRTJGQ0E2Q0NDMi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS81OTVBREU5NUNEMzk3MTI2NDUzNzkzNEM3QTQwNjFFMkZDQTZD
Q0MyLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzI3ZDlkN2NiLTZjZmItNGRlMC05
ZGFhLWQyMjJiN2E4OTA3Mi8wLzMxMzAzMzJlMzEzMTM4MmUzMTM3MzQyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzkzMjMwMzUucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABndq4wDQYJ
KoZIhvcNAQELBQADggEBALbbQ8U58cxyJGXV5QzGQh1dT3s1ZlqSptHXT+RXTGC+
iubcSzuTU06spuo2bKp4rEu+k0RpK2atnMq1pFBUY0RbKsEYRB+d2/ozjlcQ0QKK
CdFGZfbzKwkGEMz5uqfQZ/AaOfowDsE/+FaEv4tg378hsZ1FnZKGCzVQEJWg8w7Z
DbTG+rKB9OiYp3V+3dA6mxPGqDD+f4X61ORljhYy83tmYJg/yVsfrqu2NA+oPpp0
kROMMlnm9cJdtcX8f3CitG3oQcmxvLdzTXpsLKANPOIoR3bstX1P2jKpZJQNcSAM
eNMrPWLv7Ga+sjJXbrD8IzXoUBYapqfTRuDBUm8tI6I=
-----END CERTIFICATE-----
Generated at Thu May 7 05:38:06 2026 by rpki-client