
$ rpki-client -vvf rpki-rsync.idnic.net/repo/21db6c9b-d8fc-4d8c-80cb-fd2241208dde/0/3130332e3137322e3137302e302f32342d3234203d3e20313432333936.roa
File: 3130332e3137322e3137302e302f32342d3234203d3e20313432333936.roa (raw, json)
Hash identifier: 4usmrutgY/beqY8KttmIEGM6ND+uj+WPCIUZTt7ix2A=
Subject key identifier: 59:CC:B9:2F:2F:59:22:55:93:5B:93:00:DA:C3:35:A6:74:C6:E8:BE
Certificate issuer: /CN=07036C5527255D59345E40A173983EEEA0C09FD0
Certificate serial: 58EFF258932104EC9E936D915B14E3A7EECFEDBE
Authority key identifier: 07:03:6C:55:27:25:5D:59:34:5E:40:A1:73:98:3E:EE:A0:C0:9F:D0
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/07036C5527255D59345E40A173983EEEA0C09FD0.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/21db6c9b-d8fc-4d8c-80cb-fd2241208dde/0/3130332e3137322e3137302e302f32342d3234203d3e20313432333936.roa
Signing time: Sun 03 May 2026 02:19:37 +0000
ROA not before: Sun 03 May 2026 02:14:37 +0000
ROA not after: Sun 02 May 2027 02:19:37 +0000
asID: 142396
IP address blocks: 103.172.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/21db6c9b-d8fc-4d8c-80cb-fd2241208dde/0/07036C5527255D59345E40A173983EEEA0C09FD0.crl
rsync://rpki-rsync.idnic.net/repo/21db6c9b-d8fc-4d8c-80cb-fd2241208dde/0/07036C5527255D59345E40A173983EEEA0C09FD0.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/07036C5527255D59345E40A173983EEEA0C09FD0.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 23:37:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:ef:f2:58:93:21:04:ec:9e:93:6d:91:5b:14:e3:a7:ee:cf:ed:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07036C5527255D59345E40A173983EEEA0C09FD0
Validity
Not Before: May 3 02:14:37 2026 GMT
Not After : May 2 02:19:37 2027 GMT
Subject: CN=59CCB92F2F592255935B9300DAC335A674C6E8BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:be:db:18:fe:81:db:6b:3c:c9:c9:be:d1:5f:
6d:de:35:72:21:87:b2:10:2c:a7:de:51:ec:5a:82:
9b:bd:da:4f:49:96:ec:41:c2:04:f2:97:2d:01:c1:
63:e7:76:b5:25:88:c2:dc:7a:25:5e:a9:3d:f5:37:
1e:f5:dd:88:fe:00:4a:8b:df:ed:1f:83:21:56:81:
9d:34:6e:f1:f3:de:13:a1:35:92:25:7c:ba:91:82:
2c:d3:08:35:6d:cb:af:a1:0d:c3:5b:c9:9d:83:d6:
b7:9e:30:cb:e1:7e:21:08:b4:f0:ae:9c:f9:6a:1f:
ab:70:05:94:ee:50:30:dc:67:9d:c3:7f:2c:05:70:
48:2b:4e:a4:4c:ab:1b:de:dc:c9:98:69:75:e8:92:
20:5b:d1:3f:f8:29:83:14:63:a4:27:b7:31:34:8f:
b9:b4:23:07:60:08:5f:24:89:84:00:70:93:20:15:
0b:fa:eb:5b:be:8d:73:a5:fc:4b:de:a2:fb:05:13:
18:76:7b:64:b0:9c:49:bd:40:06:00:3b:d7:c2:5f:
f8:27:51:d4:47:ae:85:da:30:7d:0c:ec:73:88:bf:
39:45:25:1f:b7:76:b9:ff:4a:86:0d:3f:e2:8f:2e:
4e:c5:ce:37:d0:e5:08:3c:bd:9f:14:4f:a0:6f:0a:
f3:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:CC:B9:2F:2F:59:22:55:93:5B:93:00:DA:C3:35:A6:74:C6:E8:BE
X509v3 Authority Key Identifier:
keyid:07:03:6C:55:27:25:5D:59:34:5E:40:A1:73:98:3E:EE:A0:C0:9F:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/21db6c9b-d8fc-4d8c-80cb-fd2241208dde/0/07036C5527255D59345E40A173983EEEA0C09FD0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/07036C5527255D59345E40A173983EEEA0C09FD0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/21db6c9b-d8fc-4d8c-80cb-fd2241208dde/0/3130332e3137322e3137302e302f32342d3234203d3e20313432333936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.172.170.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:4e:5b:d9:35:d0:aa:9c:fe:4f:d9:fc:ec:d5:f6:8e:99:f3:
bc:60:fa:6f:4f:79:53:30:03:17:23:c7:b2:dc:a5:27:66:c0:
05:ad:60:86:9f:59:f3:f7:14:f5:31:0e:bf:f5:87:20:42:77:
71:9d:5b:11:ef:61:e7:96:5f:52:02:20:9f:71:4d:45:14:8a:
40:0b:52:1f:27:9f:e5:58:d4:02:a7:40:b6:49:bb:80:a4:63:
d4:8a:55:0e:f8:12:5b:91:12:c5:2c:12:b5:57:71:4d:6f:4f:
a0:7e:31:00:33:33:51:9b:0c:9a:03:85:0e:b3:ae:41:00:f7:
69:61:59:3e:de:41:a0:97:d5:0a:0f:d7:70:a7:32:fa:46:ee:
80:71:b9:f2:b9:92:31:30:f4:3d:5a:3a:ce:0a:c8:1d:8e:44:
8a:b3:1a:d2:c8:9f:14:27:26:4e:a2:f0:50:98:9c:9d:9f:20:
34:ee:a9:c4:44:06:5c:90:b9:36:ba:31:a0:13:1e:bf:13:03:
39:6b:f4:48:0f:40:fd:0c:a1:33:ef:41:71:98:70:ab:36:fd:
49:b0:45:be:05:02:6c:57:74:25:8e:12:95:3d:2d:bd:63:7e:
11:80:49:20:38:38:94:09:70:31:0c:a1:68:c6:06:71:23:e5:
49:d8:af:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:47:49 2026 by rpki-client