
$ rpki-client -vvf rpki-rsync.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/3130332e3131382e3137352e302f32342d3234203d3e203530313034.roa
File: 3130332e3131382e3137352e302f32342d3234203d3e203530313034.roa (raw, json)
Hash identifier: kbsHwCF+kLPIM6LmBzd7ReTnbGaVE3pJ2tb1Y6LGrMo=
Subject key identifier: 58:D3:85:72:D3:9D:65:2D:9B:D4:B0:86:B0:AB:87:24:55:FE:DC:DE
Certificate issuer: /CN=595ADE95CD3971264537934C7A4061E2FCA6CCC2
Certificate serial: 4F8CDE716DD096969FFE1820DB8F6FF20CD00116
Authority key identifier: 59:5A:DE:95:CD:39:71:26:45:37:93:4C:7A:40:61:E2:FC:A6:CC:C2
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/595ADE95CD3971264537934C7A4061E2FCA6CCC2.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/3130332e3131382e3137352e302f32342d3234203d3e203530313034.roa
Signing time: Sun 03 May 2026 02:21:02 +0000
ROA not before: Sun 03 May 2026 02:16:02 +0000
ROA not after: Sun 02 May 2027 02:21:02 +0000
asID: 50104
IP address blocks: 103.118.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/595ADE95CD3971264537934C7A4061E2FCA6CCC2.crl
rsync://rpki-rsync.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/595ADE95CD3971264537934C7A4061E2FCA6CCC2.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/595ADE95CD3971264537934C7A4061E2FCA6CCC2.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 07 May 2026 19:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:8c:de:71:6d:d0:96:96:9f:fe:18:20:db:8f:6f:f2:0c:d0:01:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=595ADE95CD3971264537934C7A4061E2FCA6CCC2
Validity
Not Before: May 3 02:16:02 2026 GMT
Not After : May 2 02:21:02 2027 GMT
Subject: CN=58D38572D39D652D9BD4B086B0AB872455FEDCDE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:5f:7a:00:a9:9c:59:2a:1c:0d:b0:cd:8c:b6:
ca:e7:f8:7b:6b:23:a3:72:04:3c:4c:5f:96:5d:37:
4a:80:54:18:de:0d:f1:23:a7:94:f6:24:03:ab:36:
9c:ba:0e:30:15:8c:ae:31:b6:3c:11:2e:94:fd:19:
b1:22:f1:df:f6:d6:b3:2b:f5:e8:7a:f5:0d:b0:9b:
e3:0e:74:12:87:0b:7a:d7:b8:be:41:5e:a7:60:c4:
e8:a5:71:4e:97:3e:77:c2:bd:b0:d2:b2:dc:69:72:
8e:ef:74:00:4a:d1:3f:17:10:d7:1d:d5:7b:a0:f0:
29:bb:96:c8:e6:10:95:68:19:37:af:b9:b4:86:60:
5a:24:af:bf:f1:6c:ae:53:39:6e:79:67:cb:e6:b3:
fa:70:da:1b:b8:c7:90:97:94:35:c2:31:ee:cc:5b:
2c:3b:cb:59:32:b4:13:a8:68:8f:bf:d2:f5:f9:aa:
c4:14:1d:39:44:ab:fe:82:7d:33:84:8d:d1:e4:06:
51:97:fe:cd:8d:e2:ee:68:2a:1b:84:99:aa:cd:a7:
59:f5:7f:3c:dd:16:0d:94:42:21:29:a6:dc:91:b4:
9d:36:97:36:f5:83:9f:dd:1c:89:42:89:14:cf:0a:
6d:68:25:d8:25:c1:f6:80:d7:9e:fb:af:3b:3f:17:
29:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:D3:85:72:D3:9D:65:2D:9B:D4:B0:86:B0:AB:87:24:55:FE:DC:DE
X509v3 Authority Key Identifier:
keyid:59:5A:DE:95:CD:39:71:26:45:37:93:4C:7A:40:61:E2:FC:A6:CC:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/595ADE95CD3971264537934C7A4061E2FCA6CCC2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/595ADE95CD3971264537934C7A4061E2FCA6CCC2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/3130332e3131382e3137352e302f32342d3234203d3e203530313034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.118.175.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:41:17:5b:5b:fb:24:5c:bd:97:f9:6e:ee:91:7f:03:42:a2:
f8:bb:14:ff:88:6e:24:42:16:b2:b4:2a:b1:b4:cb:21:be:27:
a0:96:64:b2:ac:ca:c2:01:a2:1c:8a:0c:2e:bd:cb:cf:08:57:
39:6a:a5:b5:6d:6d:9f:af:37:1c:05:22:f0:cf:81:f9:50:86:
87:f7:62:1f:4f:08:09:23:28:a7:7f:da:5d:dc:1f:44:c3:7e:
39:be:b8:ba:fd:65:d5:8d:d6:2d:4f:40:e6:01:b3:85:15:b9:
06:09:09:05:8d:2d:53:6b:d6:ac:cf:ea:1b:e4:ab:82:cf:ad:
7c:24:13:40:b1:76:99:57:38:d6:07:f4:33:22:ae:df:e7:3d:
c3:8e:a8:4d:21:17:b8:67:a7:b2:aa:bb:19:0e:af:1f:c4:2c:
26:d1:59:69:00:b6:cb:99:20:ae:f5:54:40:34:a8:34:c9:7d:
ae:56:1f:e5:b4:14:04:9c:c7:22:76:35:d1:18:45:82:ee:02:
71:2c:90:48:a0:0d:60:6f:32:70:64:16:32:e7:1e:09:c8:d8:
55:0c:83:45:c8:ca:d8:5b:b6:b2:ce:76:72:6b:1a:25:ca:64:
2b:7a:d4:b6:b5:f4:10:fd:05:39:c2:6d:20:f1:dc:0f:0b:f5:
cd:ea:19:0a
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUT4zecW3Qlpaf/hgg249v8gzQARYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTk1QURFOTVDRDM5NzEyNjQ1Mzc5MzRDN0E0MDYxRTJG
Q0E2Q0NDMjAeFw0yNjA1MDMwMjE2MDJaFw0yNzA1MDIwMjIxMDJaMDMxMTAvBgNV
BAMTKDU4RDM4NTcyRDM5RDY1MkQ5QkQ0QjA4NkIwQUI4NzI0NTVGRURDREUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+X3oAqZxZKhwNsM2Mtsrn+Htr
I6NyBDxMX5ZdN0qAVBjeDfEjp5T2JAOrNpy6DjAVjK4xtjwRLpT9GbEi8d/21rMr
9eh69Q2wm+MOdBKHC3rXuL5BXqdgxOilcU6XPnfCvbDSstxpco7vdABK0T8XENcd
1Xug8Cm7lsjmEJVoGTevubSGYFokr7/xbK5TOW55Z8vms/pw2hu4x5CXlDXCMe7M
Wyw7y1kytBOoaI+/0vX5qsQUHTlEq/6CfTOEjdHkBlGX/s2N4u5oKhuEmarNp1n1
fzzdFg2UQiEpptyRtJ02lzb1g5/dHIlCiRTPCm1oJdglwfaA1577rzs/FymjAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUWNOFctOdZS2b1LCGsKuHJFX+3N4wHwYDVR0j
BBgwFoAUWVrelc05cSZFN5NMekBh4vymzMIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MjdkOWQ3Y2ItNmNmYi00ZGUwLTlkYWEtZDIyMmI3YTg5MDcyLzAvNTk1QURFOTVD
RDM5NzEyNjQ1Mzc5MzRDN0E0MDYxRTJGQ0E2Q0NDMi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS81OTVBREU5NUNEMzk3MTI2NDUzNzkzNEM3QTQwNjFFMkZDQTZD
Q0MyLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzI3ZDlkN2NiLTZjZmItNGRlMC05
ZGFhLWQyMjJiN2E4OTA3Mi8wLzMxMzAzMzJlMzEzMTM4MmUzMTM3MzUyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzNTMwMzEzMDM0LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ3avMA0GCSqG
SIb3DQEBCwUAA4IBAQA6QRdbW/skXL2X+W7ukX8DQqL4uxT/iG4kQhaytCqxtMsh
vieglmSyrMrCAaIcigwuvcvPCFc5aqW1bW2frzccBSLwz4H5UIaH92IfTwgJIyin
f9pd3B9Ew345vri6/WXVjdYtT0DmAbOFFbkGCQkFjS1Ta9asz+ob5KuCz618JBNA
sXaZVzjWB/QzIq7f5z3DjqhNIRe4Z6eyqrsZDq8fxCwm0VlpALbLmSCu9VRANKg0
yX2uVh/ltBQEnMcidjXRGEWC7gJxLJBIoA1gbzJwZBYy5x4JyNhVDINFyMrYW7ay
znZyaxolymQretS2tfQQ/QU5wm0g8dwPC/XN6hkK
-----END CERTIFICATE-----
Generated at Thu May 7 05:37:56 2026 by rpki-client