
$ rpki-client -vvf rpki-rsync.idnic.net/repo/a17598e4-2064-4ecb-98f6-b259a74996a1/0/3130332e35392e34342e302f32342d3234203d3e20313338383831.roa
File: 3130332e35392e34342e302f32342d3234203d3e20313338383831.roa (raw, json)
Hash identifier: /165UFjNpwWW+EZFcjl+71+ujJPspyfJC04aoRjZsKo=
Subject key identifier: 60:5A:0F:B4:84:6B:17:0D:AD:F6:82:D0:BC:2E:CF:E4:85:02:59:C2
Certificate issuer: /CN=94036675301DBECEA598F27C69DCB2391E3C2886
Certificate serial: 0E1FD3AA0D4F0E85DA4FC77E9D11E48EEA049E00
Authority key identifier: 94:03:66:75:30:1D:BE:CE:A5:98:F2:7C:69:DC:B2:39:1E:3C:28:86
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/94036675301DBECEA598F27C69DCB2391E3C2886.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/a17598e4-2064-4ecb-98f6-b259a74996a1/0/3130332e35392e34342e302f32342d3234203d3e20313338383831.roa
Signing time: Sun 03 May 2026 02:55:56 +0000
ROA not before: Sun 03 May 2026 02:50:56 +0000
ROA not after: Sun 02 May 2027 02:55:56 +0000
asID: 138881
IP address blocks: 103.59.44.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/a17598e4-2064-4ecb-98f6-b259a74996a1/0/94036675301DBECEA598F27C69DCB2391E3C2886.crl
rsync://rpki-rsync.idnic.net/repo/a17598e4-2064-4ecb-98f6-b259a74996a1/0/94036675301DBECEA598F27C69DCB2391E3C2886.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/94036675301DBECEA598F27C69DCB2391E3C2886.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 15:46:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:1f:d3:aa:0d:4f:0e:85:da:4f:c7:7e:9d:11:e4:8e:ea:04:9e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94036675301DBECEA598F27C69DCB2391E3C2886
Validity
Not Before: May 3 02:50:56 2026 GMT
Not After : May 2 02:55:56 2027 GMT
Subject: CN=605A0FB4846B170DADF682D0BC2ECFE4850259C2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:51:f8:88:27:db:5f:0b:ff:88:4d:ec:50:41:
e2:7c:66:1f:5c:26:03:82:2a:46:d4:40:58:5f:2f:
02:ad:01:a6:d2:b5:b1:09:f3:98:c0:32:0a:b6:c2:
e9:c5:03:74:d7:02:07:fb:55:ed:c7:c0:4a:e6:7d:
ea:f0:ed:3a:32:be:0c:66:00:2f:3b:19:5f:cd:41:
dc:9e:36:61:6e:5f:e9:ab:9c:74:5d:a6:8b:c7:fb:
bb:75:18:84:74:c0:78:28:ae:af:0b:e8:01:18:37:
dc:b8:d5:48:a5:f4:ec:0d:68:3d:3c:0b:ca:fb:69:
5c:92:81:02:e9:4c:64:c8:67:6d:68:5f:84:93:65:
c5:64:7e:c0:af:9f:55:e4:4d:2f:3e:6b:5c:21:51:
10:e1:e0:f1:48:94:b4:92:9f:fc:17:29:63:b7:a1:
31:52:08:d4:4d:ea:bc:56:7c:55:e8:d3:d6:f7:6c:
f5:0c:58:11:e8:89:75:e8:ca:f6:ba:09:cb:17:7c:
c6:13:d6:d4:c8:07:df:0c:c6:d8:af:e0:8d:5e:49:
1d:6f:81:69:3f:ab:12:1a:29:35:f9:f0:d6:89:3e:
9a:38:dd:45:10:a0:61:89:ad:6c:40:9d:43:86:c4:
f7:a7:ca:54:a7:f2:1b:7c:77:31:f1:dd:d3:2d:16:
10:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:5A:0F:B4:84:6B:17:0D:AD:F6:82:D0:BC:2E:CF:E4:85:02:59:C2
X509v3 Authority Key Identifier:
keyid:94:03:66:75:30:1D:BE:CE:A5:98:F2:7C:69:DC:B2:39:1E:3C:28:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/a17598e4-2064-4ecb-98f6-b259a74996a1/0/94036675301DBECEA598F27C69DCB2391E3C2886.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/94036675301DBECEA598F27C69DCB2391E3C2886.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a17598e4-2064-4ecb-98f6-b259a74996a1/0/3130332e35392e34342e302f32342d3234203d3e20313338383831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.59.44.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:7a:48:9a:21:cc:6a:f7:52:e3:27:65:6b:04:51:1a:5a:bc:
2d:a3:60:ab:1d:db:d2:94:9d:0d:4e:5e:a7:98:be:1d:d2:ab:
40:76:ec:3f:7f:68:09:d1:57:8a:b7:30:97:fc:2c:58:b7:e3:
5c:3f:ef:0c:81:53:3b:80:fd:a8:98:0f:d7:d3:70:41:1e:a8:
87:1e:1b:ea:97:4c:28:7b:42:c8:be:b3:83:71:c5:12:b3:f8:
09:42:59:ca:af:a6:ad:55:82:c6:b0:01:66:fc:95:0e:29:a4:
a3:cb:ff:83:c5:f4:5b:df:26:2f:7d:5e:4b:25:a0:ac:73:d8:
8b:88:bb:5f:b8:2b:a0:85:ea:cd:47:51:e2:54:f6:b7:8f:55:
f5:93:de:be:56:0b:cc:8a:e9:64:d8:2f:12:00:56:41:85:97:
b9:45:88:c4:7c:7b:10:6b:1f:d6:be:39:65:13:44:d0:a8:29:
0e:41:b1:bd:13:c5:28:f0:db:b8:e0:8b:4b:dc:96:ab:fa:95:
ff:ef:42:80:6c:f1:d6:a9:7c:92:df:8b:5e:60:9d:d8:04:75:
2f:91:53:94:08:40:23:29:a0:b1:c6:96:f6:62:a3:58:e0:50:
2c:f6:21:8b:0a:de:fd:5c:60:0c:5e:3e:a2:bf:af:d6:67:84:
de:f9:ba:ab
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUDh/Tqg1PDoXaT8d+nRHkjuoEngAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTQwMzY2NzUzMDFEQkVDRUE1OThGMjdDNjlEQ0IyMzkx
RTNDMjg4NjAeFw0yNjA1MDMwMjUwNTZaFw0yNzA1MDIwMjU1NTZaMDMxMTAvBgNV
BAMTKDYwNUEwRkI0ODQ2QjE3MERBREY2ODJEMEJDMkVDRkU0ODUwMjU5QzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVUfiIJ9tfC/+ITexQQeJ8Zh9c
JgOCKkbUQFhfLwKtAabStbEJ85jAMgq2wunFA3TXAgf7Ve3HwErmferw7Toyvgxm
AC87GV/NQdyeNmFuX+mrnHRdpovH+7t1GIR0wHgorq8L6AEYN9y41Uil9OwNaD08
C8r7aVySgQLpTGTIZ21oX4STZcVkfsCvn1XkTS8+a1whURDh4PFIlLSSn/wXKWO3
oTFSCNRN6rxWfFXo09b3bPUMWBHoiXXoyva6CcsXfMYT1tTIB98Mxtiv4I1eSR1v
gWk/qxIaKTX58NaJPpo43UUQoGGJrWxAnUOGxPenylSn8ht8dzHx3dMtFhBfAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUYFoPtIRrFw2t9oLQvC7P5IUCWcIwHwYDVR0j
BBgwFoAUlANmdTAdvs6lmPJ8adyyOR48KIYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YTE3NTk4ZTQtMjA2NC00ZWNiLTk4ZjYtYjI1OWE3NDk5NmExLzAvOTQwMzY2NzUz
MDFEQkVDRUE1OThGMjdDNjlEQ0IyMzkxRTNDMjg4Ni5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS85NDAzNjY3NTMwMURCRUNFQTU5OEYyN0M2OURDQjIzOTFFM0My
ODg2LmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2ExNzU5OGU0LTIwNjQtNGVjYi05
OGY2LWIyNTlhNzQ5OTZhMS8wLzMxMzAzMzJlMzUzOTJlMzQzNDJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMxMzMzODM4MzgzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGc7LDANBgkqhkiG
9w0BAQsFAAOCAQEALXpImiHMavdS4ydlawRRGlq8LaNgqx3b0pSdDU5ep5i+HdKr
QHbsP39oCdFXircwl/wsWLfjXD/vDIFTO4D9qJgP19NwQR6ohx4b6pdMKHtCyL6z
g3HFErP4CUJZyq+mrVWCxrABZvyVDimko8v/g8X0W98mL31eSyWgrHPYi4i7X7gr
oIXqzUdR4lT2t49V9ZPevlYLzIrpZNgvEgBWQYWXuUWIxHx7EGsf1r45ZRNE0Kgp
DkGxvRPFKPDbuOCLS9yWq/qV/+9CgGzx1ql8kt+LXmCd2AR1L5FTlAhAIymgscaW
9mKjWOBQLPYhiwre/VxgDF4+or+v1meE3vm6qw==
-----END CERTIFICATE-----
Generated at Wed May 13 08:39:37 2026 by rpki-client