
$ rpki-client -vvf rpki-rsync.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/3130332e3131382e3137342e302f32342d3234203d3e20313532333638.roa
File: 3130332e3131382e3137342e302f32342d3234203d3e20313532333638.roa (raw, json)
Hash identifier: Gf7+JDdgZXaOoBD3FCXccmzSiqspLprw2RT0W6wNy+U=
Subject key identifier: DC:16:06:1E:DB:56:15:14:16:94:96:C2:65:D9:7B:37:63:E9:1D:F2
Certificate issuer: /CN=595ADE95CD3971264537934C7A4061E2FCA6CCC2
Certificate serial: 39A828C0267EE3800E9F88B27327BAF4D17E592F
Authority key identifier: 59:5A:DE:95:CD:39:71:26:45:37:93:4C:7A:40:61:E2:FC:A6:CC:C2
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/595ADE95CD3971264537934C7A4061E2FCA6CCC2.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/3130332e3131382e3137342e302f32342d3234203d3e20313532333638.roa
Signing time: Sun 03 May 2026 02:21:01 +0000
ROA not before: Sun 03 May 2026 02:16:01 +0000
ROA not after: Sun 02 May 2027 02:21:01 +0000
asID: 152368
IP address blocks: 103.118.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/595ADE95CD3971264537934C7A4061E2FCA6CCC2.crl
rsync://rpki-rsync.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/595ADE95CD3971264537934C7A4061E2FCA6CCC2.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/595ADE95CD3971264537934C7A4061E2FCA6CCC2.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 07 May 2026 19:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:a8:28:c0:26:7e:e3:80:0e:9f:88:b2:73:27:ba:f4:d1:7e:59:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=595ADE95CD3971264537934C7A4061E2FCA6CCC2
Validity
Not Before: May 3 02:16:01 2026 GMT
Not After : May 2 02:21:01 2027 GMT
Subject: CN=DC16061EDB561514169496C265D97B3763E91DF2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:fe:52:2d:19:d0:01:3d:c2:87:dc:11:da:f0:
c1:dc:29:83:ed:4f:52:d2:9a:de:ef:c1:da:a2:ae:
dd:d7:2c:d7:05:6e:8a:99:d0:5f:62:20:83:fb:9f:
bc:be:ac:8b:84:ff:1b:28:de:1e:a0:44:5f:1a:74:
9a:a3:0b:4a:ad:a4:ae:10:68:28:c4:fa:eb:fb:5f:
00:cd:42:b5:93:0d:4e:ff:60:1d:91:15:7d:d9:97:
d9:7a:58:b2:d6:ed:77:0a:06:27:34:8d:e3:54:d4:
85:77:40:ea:67:05:20:2d:43:30:d2:54:17:fe:a7:
ca:55:78:02:96:04:73:a0:98:41:c1:52:33:dc:23:
73:28:2e:2e:79:cb:69:16:3b:0a:5a:8c:f3:9a:86:
83:b6:26:b2:c5:03:4a:6c:f1:e5:4e:5c:62:80:16:
3a:04:8f:f5:8d:51:2f:77:99:a0:8d:80:f6:24:be:
f3:6c:5c:c2:1a:81:a2:f9:18:92:de:94:59:25:85:
bd:df:81:80:84:bd:ba:d0:72:35:f6:77:b6:9e:5b:
27:f8:74:3f:3e:e5:20:ea:70:ac:67:3d:e2:fa:b5:
bf:5b:5d:d6:f5:ee:9f:2a:9d:69:8b:47:37:88:21:
e3:23:f9:86:b7:76:6c:e3:9c:e3:1c:90:75:75:0e:
d7:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:16:06:1E:DB:56:15:14:16:94:96:C2:65:D9:7B:37:63:E9:1D:F2
X509v3 Authority Key Identifier:
keyid:59:5A:DE:95:CD:39:71:26:45:37:93:4C:7A:40:61:E2:FC:A6:CC:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/595ADE95CD3971264537934C7A4061E2FCA6CCC2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/595ADE95CD3971264537934C7A4061E2FCA6CCC2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/3130332e3131382e3137342e302f32342d3234203d3e20313532333638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.118.174.0/24
Signature Algorithm: sha256WithRSAEncryption
51:d1:f1:90:b6:51:03:ce:59:b2:e4:ea:fd:4d:ef:6f:30:d4:
5b:69:3c:70:fd:bc:8f:89:0f:df:58:04:20:9f:b6:fc:bd:81:
aa:8e:fc:7a:e4:b4:4c:0c:4f:83:21:23:ee:8b:f3:f3:22:b9:
ff:76:fd:f3:f0:3d:14:66:91:c2:ad:4a:d7:b6:a6:6f:ff:14:
27:b5:ad:cd:f9:5f:fb:53:53:a0:75:42:2b:4f:f4:af:cb:d1:
7f:43:66:c7:4f:0a:78:58:58:69:c0:42:c6:d4:99:c2:cb:fe:
d4:02:d7:ba:c9:08:bb:2c:67:42:de:42:19:61:48:2c:2f:90:
cd:06:0e:7e:c9:78:23:3b:51:67:f9:9e:9b:54:c5:e2:05:48:
37:e7:9a:dc:36:32:9e:a1:80:dd:94:29:6a:cc:fd:27:c5:47:
a1:f9:d6:fb:a6:93:69:5e:a3:12:aa:a0:f3:dc:c3:f5:7b:b3:
a3:ed:56:69:bf:ce:74:4b:04:7e:8b:67:c1:ed:35:4c:08:54:
16:08:0e:b6:87:b8:31:79:e5:a5:58:57:3e:3c:38:ca:7c:49:
57:ab:73:7c:fe:dd:09:15:ea:b5:bf:16:dc:72:a8:66:71:22:
50:e5:66:a9:bc:b4:a9:6c:7a:be:1d:d3:c2:bc:ad:0a:a5:8a:
b2:09:6c:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 05:38:32 2026 by rpki-client