
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS131759.roa
File: AS131759.roa (raw, json)
Hash identifier: w8ftdcoxdSYV95pyF9hE3dwmIjzAzWdmFRVHs7oK56I=
Subject key identifier: E0:74:CE:72:38:F2:11:83:D2:14:B2:97:DA:EE:FE:B1:43:1F:36:18
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 49DFA8D783CE1C64690B57439C59528E3735C316
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS131759.roa
Signing time: Mon 16 Jun 2025 04:58:33 +0000
ROA not before: Mon 16 Jun 2025 04:53:33 +0000
ROA not after: Mon 15 Jun 2026 04:58:33 +0000
asID: 131759
IP address blocks: 103.244.204.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 07 Nov 2025 00:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:df:a8:d7:83:ce:1c:64:69:0b:57:43:9c:59:52:8e:37:35:c3:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Jun 16 04:53:33 2025 GMT
Not After : Jun 15 04:58:33 2026 GMT
Subject: CN=E074CE7238F21183D214B297DAEEFEB1431F3618
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:52:ce:39:ba:2f:ac:2c:32:2b:62:16:d9:3f:
02:88:d6:1c:f4:8b:68:b5:ba:99:18:1b:1b:c4:0e:
6f:18:b2:da:20:1d:30:af:3a:fa:db:9a:63:1c:c9:
fa:57:40:ff:97:88:c4:6b:0a:c3:34:20:72:5b:40:
38:eb:59:14:39:e2:83:8d:64:79:28:a2:ad:f2:ef:
1d:cc:b4:af:aa:5d:d5:2f:1c:f4:a6:05:72:b3:bd:
35:10:03:ab:92:30:7e:57:72:74:3d:38:be:b5:6b:
6d:f9:70:f8:85:7d:a7:ab:90:c0:b2:ae:62:84:51:
56:2f:19:3b:db:33:7b:9c:43:13:4c:0c:ed:bd:dc:
c5:3d:95:91:03:c8:15:e1:7e:2d:53:79:44:88:88:
60:3c:9e:38:93:02:e4:cf:e6:9d:1d:05:74:cd:2d:
62:1d:b2:c4:f5:aa:78:78:56:ef:35:49:ef:6b:62:
f3:fa:3c:3e:fe:eb:f3:91:49:90:11:43:e8:85:f9:
6f:79:08:b7:76:00:ab:9b:7f:7a:7e:b7:88:13:bf:
fb:db:e9:9f:8a:ab:bc:b0:6d:14:bb:7c:28:23:65:
7d:47:a9:92:c6:b4:ef:bf:b3:e2:f6:fb:79:6a:4a:
5c:81:02:2a:64:67:fb:09:3a:83:05:6f:28:39:69:
9b:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:74:CE:72:38:F2:11:83:D2:14:B2:97:DA:EE:FE:B1:43:1F:36:18
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS131759.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.244.204.0/22
Signature Algorithm: sha256WithRSAEncryption
3d:ac:50:65:f7:03:d1:86:da:03:6c:e9:a7:2e:b7:f1:8d:9c:
e4:40:06:9b:79:a5:30:c9:20:39:5e:91:0b:da:75:fa:80:2e:
ee:59:0d:e5:82:8f:83:b1:08:35:41:e3:0c:37:6b:85:df:22:
e4:ca:72:ef:1c:1a:ac:da:21:67:71:00:da:46:69:37:9f:0e:
22:7c:df:92:54:54:88:00:d7:45:7e:d5:70:87:82:7d:d3:0a:
4f:3f:f3:ea:ac:da:2b:61:aa:8c:9f:53:43:28:58:12:14:db:
30:4b:a4:3c:22:88:60:e9:e2:c9:f1:68:4c:d5:1a:e2:8e:7d:
05:d6:05:f8:aa:30:c7:46:cb:74:c8:a4:d2:b7:a7:1a:b1:62:
5c:9e:2f:96:4e:27:2b:74:31:fe:7b:45:58:fe:0a:ec:8c:fa:
79:3a:a0:31:3d:69:ba:f2:28:0f:85:af:8a:a7:36:b7:01:9c:
b3:21:00:1f:20:13:82:b1:d6:3d:b2:8b:7c:b0:74:12:c0:63:
5b:bc:1b:71:60:a8:8e:4f:b4:15:b2:0b:ea:a0:b6:86:88:d2:
2b:94:6b:37:8d:7d:bd:da:ad:ec:87:98:c9:be:9a:7a:96:19:
52:ca:3f:ad:e7:11:c0:d5:c3:6e:47:76:9d:54:37:49:f6:5e:
c2:3f:aa:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 19:31:44 2025 by rpki-client