
$ rpki-client -vvf rpki-rsync.idnic.net/repo/bd1ee5e2-338c-4d20-807e-e50b75583db8/0/3130332e32342e35392e302f32342d3234203d3e203436303532.roa
File: 3130332e32342e35392e302f32342d3234203d3e203436303532.roa (raw, json)
Hash identifier: zFIO9wiF748rHmRcjoZ1ZZ07oJftCfa8w4TwQheX8tM=
Subject key identifier: ED:1D:D9:C7:6E:02:B3:D7:F1:BF:E4:39:FB:02:2D:67:45:4F:6D:B5
Certificate issuer: /CN=59406D6B894D2596F895003DEE4D8D96CC43B39F
Certificate serial: 34A06D5924295B3008ADC55CD94B3F9027E0AE1A
Authority key identifier: 59:40:6D:6B:89:4D:25:96:F8:95:00:3D:EE:4D:8D:96:CC:43:B3:9F
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/59406D6B894D2596F895003DEE4D8D96CC43B39F.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/bd1ee5e2-338c-4d20-807e-e50b75583db8/0/3130332e32342e35392e302f32342d3234203d3e203436303532.roa
Signing time: Sun 03 May 2026 03:02:30 +0000
ROA not before: Sun 03 May 2026 02:57:30 +0000
ROA not after: Sun 02 May 2027 03:02:30 +0000
asID: 46052
IP address blocks: 103.24.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/bd1ee5e2-338c-4d20-807e-e50b75583db8/0/59406D6B894D2596F895003DEE4D8D96CC43B39F.crl
rsync://rpki-rsync.idnic.net/repo/bd1ee5e2-338c-4d20-807e-e50b75583db8/0/59406D6B894D2596F895003DEE4D8D96CC43B39F.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/59406D6B894D2596F895003DEE4D8D96CC43B39F.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 05:52:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:a0:6d:59:24:29:5b:30:08:ad:c5:5c:d9:4b:3f:90:27:e0:ae:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59406D6B894D2596F895003DEE4D8D96CC43B39F
Validity
Not Before: May 3 02:57:30 2026 GMT
Not After : May 2 03:02:30 2027 GMT
Subject: CN=ED1DD9C76E02B3D7F1BFE439FB022D67454F6DB5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:8a:19:ff:f3:bf:3b:d3:cf:43:eb:e3:fb:2d:
6a:02:8c:c2:a9:c0:3b:13:d3:cb:1c:46:97:7d:e6:
f0:3d:ef:7a:f2:76:40:a3:e7:16:5f:af:f2:e8:fb:
99:70:fb:95:11:ec:5d:61:bd:f5:d3:e6:13:c0:9c:
c2:e7:04:97:46:43:b7:04:82:90:5b:1e:42:a3:f8:
f0:27:f6:ac:1d:38:2f:23:36:7e:a7:e5:7f:b3:8c:
e9:d6:69:76:49:5f:50:6e:2c:d0:74:d4:2e:8b:f8:
6a:74:ef:6b:7b:04:15:6b:9c:8b:a2:4e:56:01:ef:
ff:75:09:ea:29:5e:2b:c4:aa:a2:d6:7c:40:b8:29:
ff:32:a6:62:d2:2a:03:a9:0c:d9:53:21:d5:37:0d:
71:5b:6f:94:4c:0c:31:e1:70:16:b5:d7:31:05:1a:
1f:4e:93:93:33:fa:78:f9:cc:ad:43:98:b1:23:94:
e6:55:43:24:59:3b:c6:d2:2d:49:f6:fc:7b:33:9e:
20:1b:cb:c0:68:00:d3:a7:82:04:e8:f5:98:ac:c5:
d8:aa:6c:15:42:ab:83:3b:20:ee:8a:76:46:65:07:
45:3f:71:b3:0f:91:22:79:c6:18:df:6d:8a:23:b0:
7f:6c:f7:b2:04:2b:ce:ff:1e:7e:4d:9d:77:46:9d:
3f:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:1D:D9:C7:6E:02:B3:D7:F1:BF:E4:39:FB:02:2D:67:45:4F:6D:B5
X509v3 Authority Key Identifier:
keyid:59:40:6D:6B:89:4D:25:96:F8:95:00:3D:EE:4D:8D:96:CC:43:B3:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/bd1ee5e2-338c-4d20-807e-e50b75583db8/0/59406D6B894D2596F895003DEE4D8D96CC43B39F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/59406D6B894D2596F895003DEE4D8D96CC43B39F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bd1ee5e2-338c-4d20-807e-e50b75583db8/0/3130332e32342e35392e302f32342d3234203d3e203436303532.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.24.59.0/24
Signature Algorithm: sha256WithRSAEncryption
96:71:21:64:e9:61:5f:67:6e:e7:9e:ac:c4:35:f6:27:0c:da:
d4:f6:10:11:fd:98:07:88:bd:a8:f6:3f:89:88:97:c0:b2:9c:
e4:35:d2:be:96:ed:19:8c:77:4f:3b:9c:57:14:69:7d:08:9d:
47:b2:92:a6:14:df:eb:cb:c9:f6:68:04:73:bb:ea:ff:c5:42:
d1:9d:05:e9:9b:94:50:10:8b:a5:89:c1:69:e4:52:fa:e5:65:
16:ad:0d:ad:d5:a9:94:1c:5d:88:6d:ef:48:ce:3e:30:98:ac:
5c:97:44:9b:fa:32:f4:8d:e5:53:a7:2d:da:01:51:73:f2:42:
65:5b:4c:bc:31:d4:26:7b:e6:a1:6f:38:cc:2c:c1:6a:fe:03:
e2:48:9d:7a:31:5c:00:f7:68:67:4e:84:a7:3e:8c:0e:6c:71:
3c:52:6c:d3:ee:ee:60:2f:3c:60:c7:63:23:5c:51:6f:66:dd:
ce:2e:39:d7:4b:df:ab:1f:fc:8b:d6:a9:21:23:fc:b7:1e:6a:
81:e3:ae:f8:e1:4a:ba:86:fe:b6:b4:9d:06:d5:8c:bd:db:86:
1a:20:65:4a:e4:97:71:41:be:36:f5:93:3c:c2:8d:a6:6b:09:
71:f9:f3:7f:2a:f4:e1:ef:79:fa:f6:81:9c:54:ac:61:ef:f6:
94:f7:cc:75
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUNKBtWSQpWzAIrcVc2Us/kCfgrhowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTk0MDZENkI4OTREMjU5NkY4OTUwMDNERUU0RDhEOTZD
QzQzQjM5RjAeFw0yNjA1MDMwMjU3MzBaFw0yNzA1MDIwMzAyMzBaMDMxMTAvBgNV
BAMTKEVEMUREOUM3NkUwMkIzRDdGMUJGRTQzOUZCMDIyRDY3NDU0RjZEQjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxihn/8787089D6+P7LWoCjMKp
wDsT08scRpd95vA973rydkCj5xZfr/Lo+5lw+5UR7F1hvfXT5hPAnMLnBJdGQ7cE
gpBbHkKj+PAn9qwdOC8jNn6n5X+zjOnWaXZJX1BuLNB01C6L+Gp072t7BBVrnIui
TlYB7/91CeopXivEqqLWfEC4Kf8ypmLSKgOpDNlTIdU3DXFbb5RMDDHhcBa11zEF
Gh9Ok5Mz+nj5zK1DmLEjlOZVQyRZO8bSLUn2/HszniAby8BoANOnggTo9Zisxdiq
bBVCq4M7IO6KdkZlB0U/cbMPkSJ5xhjfbYojsH9s97IEK87/Hn5NnXdGnT+nAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQU7R3Zx24Cs9fxv+Q5+wItZ0VPbbUwHwYDVR0j
BBgwFoAUWUBta4lNJZb4lQA97k2NlsxDs58wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YmQxZWU1ZTItMzM4Yy00ZDIwLTgwN2UtZTUwYjc1NTgzZGI4LzAvNTk0MDZENkI4
OTREMjU5NkY4OTUwMDNERUU0RDhEOTZDQzQzQjM5Ri5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS81OTQwNkQ2Qjg5NEQyNTk2Rjg5NTAwM0RFRTREOEQ5NkNDNDNC
MzlGLmNlcjCBoQYIKwYBBQUHAQsEgZQwgZEwgY4GCCsGAQUFBzALhoGBcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2JkMWVlNWUyLTMzOGMtNGQyMC04
MDdlLWU1MGI3NTU4M2RiOC8wLzMxMzAzMzJlMzIzNDJlMzUzOTJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDM0MzYzMDM1MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnGDswDQYJKoZIhvcN
AQELBQADggEBAJZxIWTpYV9nbueerMQ19icM2tT2EBH9mAeIvaj2P4mIl8CynOQ1
0r6W7RmMd087nFcUaX0InUeykqYU3+vLyfZoBHO76v/FQtGdBemblFAQi6WJwWnk
UvrlZRatDa3VqZQcXYht70jOPjCYrFyXRJv6MvSN5VOnLdoBUXPyQmVbTLwx1CZ7
5qFvOMwswWr+A+JInXoxXAD3aGdOhKc+jA5scTxSbNPu7mAvPGDHYyNcUW9m3c4u
OddL36sf/IvWqSEj/LceaoHjrvjhSrqG/ra0nQbVjL3bhhogZUrkl3FBvjb1kzzC
jaZrCXH5838q9OHvefr2gZxUrGHv9pT3zHU=
-----END CERTIFICATE-----
Generated at Tue May 12 22:56:43 2026 by rpki-client