
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS131705.roa
File: AS131705.roa (raw, json)
Hash identifier: vi3xfJG49rL7YdkguOw8MnP9Nn1uNBp6yznq6C7tcNY=
Subject key identifier: 9A:80:FD:BB:F8:99:C1:F8:41:C8:7D:18:E5:18:98:8A:87:CF:16:D9
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 2AD1B97725A35905BC3D38A9A3170FBB07474116
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS131705.roa
Signing time: Tue 14 Apr 2026 08:00:00 +0000
ROA not before: Tue 14 Apr 2026 07:55:00 +0000
ROA not after: Tue 13 Apr 2027 08:00:00 +0000
asID: 131705
IP address blocks: 103.23.196.0/23 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 20 Apr 2026 05:31:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:d1:b9:77:25:a3:59:05:bc:3d:38:a9:a3:17:0f:bb:07:47:41:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Apr 14 07:55:00 2026 GMT
Not After : Apr 13 08:00:00 2027 GMT
Subject: CN=9A80FDBBF899C1F841C87D18E518988A87CF16D9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:4d:1d:45:f9:45:37:f1:3f:6f:bc:24:e4:8a:
ce:95:d7:14:df:29:62:e2:3d:de:84:53:e5:a2:16:
6e:a5:37:b9:39:b6:51:d5:06:1f:58:c5:f4:5f:e7:
45:e3:f0:b4:bc:54:d6:51:93:3e:c4:f2:e5:ce:42:
77:6f:e3:91:a9:9b:85:f6:b1:88:ec:93:e9:22:91:
4e:d1:de:e4:8c:56:1e:56:8a:02:9b:de:bf:71:a5:
dc:9d:f5:58:f8:41:f1:35:71:14:1d:9c:6c:f1:5e:
52:57:8f:c1:6f:19:a4:4f:08:43:5e:6f:5b:b3:1f:
30:19:d0:5e:a9:20:5f:81:47:a3:3f:38:b8:ac:ff:
8f:a7:0b:4d:2e:f6:ba:39:4f:1f:2a:7b:39:4a:3f:
b9:1c:f2:b1:b0:20:dd:c9:d1:7a:99:ca:f1:e7:d1:
3b:cf:7c:ee:36:b3:79:30:97:bc:6c:dd:4c:d6:3f:
fa:e2:21:6c:9e:19:8d:7e:75:72:29:cb:12:1d:11:
65:35:96:3e:8c:40:73:47:44:ed:eb:29:9f:8b:00:
28:29:1f:54:56:a6:dc:dc:20:0b:7e:09:9a:6e:3a:
4c:20:05:03:03:e4:c7:39:5d:ce:c8:9f:bc:93:02:
03:ae:01:9b:ef:47:38:b0:7a:2b:8b:b7:d4:4d:8f:
93:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:80:FD:BB:F8:99:C1:F8:41:C8:7D:18:E5:18:98:8A:87:CF:16:D9
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS131705.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.23.196.0/23
Signature Algorithm: sha256WithRSAEncryption
6c:a4:2a:91:2a:6d:a8:5f:fb:c7:34:8f:a3:31:92:fe:f3:6b:
4b:f0:86:da:b4:58:0e:cc:fe:a1:a4:43:73:64:bd:fa:16:42:
9a:db:ec:40:df:31:e4:0b:79:e4:40:c4:c5:86:de:47:d0:c4:
d5:15:f2:93:36:00:ba:e7:8d:4e:d4:4e:f5:48:3b:ab:ec:8b:
dd:0f:38:7e:47:35:ff:99:70:ef:4a:30:4e:99:3e:33:94:e2:
48:90:dd:7d:b9:10:18:c8:79:24:13:fb:10:b5:8a:37:22:ad:
b1:a3:d3:4d:ae:43:fa:aa:7c:f8:74:24:c1:2a:3b:e1:a5:f7:
66:8e:10:32:ce:89:d2:55:93:a8:9f:a0:8a:10:46:0d:d5:dc:
f3:0e:b7:69:e1:3c:c3:7e:e4:51:dc:0b:79:39:e9:ab:dc:95:
4b:47:f5:ee:d0:9d:38:7e:4b:86:71:d0:8e:26:db:1f:b2:98:
64:0e:d0:ef:28:0d:5f:c2:98:4b:ca:9b:7b:7e:ac:f3:db:ab:
6b:2d:16:34:9f:6a:02:cf:b3:2f:05:b8:a6:02:ad:c9:9f:f4:
4c:65:75:df:96:70:06:bb:53:e6:13:58:8c:ef:12:36:54:c6:
26:de:e3:15:48:5c:06:f0:f0:f8:e5:49:84:12:ec:48:81:7a:
a8:9f:b1:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:17:16 2026 by rpki-client