
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS135477.roa
File: AS135477.roa (raw, json)
Hash identifier: jo7RC8neuUewT59X7v35RD8GA//z7nuttv536aQxgz4=
Subject key identifier: AF:10:46:11:12:E8:FD:5F:96:AB:E5:5A:8B:0D:3F:0F:1A:AD:3A:C0
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 0668FFD21CAA5653AB7A071290557F220D94627F
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS135477.roa
Signing time: Tue 26 Aug 2025 07:10:31 +0000
ROA not before: Tue 26 Aug 2025 07:05:31 +0000
ROA not after: Tue 25 Aug 2026 07:10:31 +0000
asID: 135477
IP address blocks: 103.241.178.0/24 maxlen: 24
202.47.88.0/24 maxlen: 24
203.29.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 07 Nov 2025 00:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:68:ff:d2:1c:aa:56:53:ab:7a:07:12:90:55:7f:22:0d:94:62:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Aug 26 07:05:31 2025 GMT
Not After : Aug 25 07:10:31 2026 GMT
Subject: CN=AF10461112E8FD5F96ABE55A8B0D3F0F1AAD3AC0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b7:99:b7:ff:99:cd:a2:f8:6a:b8:74:d2:01:
54:f5:eb:d8:4b:61:f1:22:d3:01:ca:ce:32:6c:e6:
92:c6:09:e2:43:de:44:ec:6e:16:c8:fa:e1:ba:2e:
7f:76:b0:a3:2a:4a:bd:ce:ae:f3:0c:80:35:f3:a9:
38:32:f5:da:13:14:72:a9:97:4c:24:4b:bf:a2:3f:
de:1c:12:6e:f1:b1:34:93:30:24:4c:bd:32:31:ff:
7a:4d:93:1c:6a:69:86:d8:3a:0e:52:92:7c:e7:27:
b2:42:53:ef:1d:4e:e6:a6:fb:dd:85:e4:95:05:3a:
52:d7:58:3c:21:85:0f:8d:9e:92:0a:58:89:0e:80:
5f:de:a9:29:6d:53:1d:bf:66:16:56:c2:cf:5e:00:
9d:9a:29:5c:56:79:18:03:91:88:8c:30:8c:e9:28:
1b:55:26:2b:8c:eb:06:87:42:cd:1b:7a:bb:74:d4:
c2:cb:4e:14:64:20:62:4e:e4:9f:b3:d3:cc:a1:44:
55:a6:ee:a5:5b:d4:78:3e:fc:3c:f3:8d:fc:5a:5e:
9c:8a:fd:af:8b:a0:3e:24:3e:e2:fd:32:5e:8f:82:
9b:f1:3e:b7:13:9e:c6:ff:84:31:17:d6:5c:68:fa:
19:9b:31:ff:d0:af:fc:bd:c3:33:5a:69:10:a5:cb:
62:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:10:46:11:12:E8:FD:5F:96:AB:E5:5A:8B:0D:3F:0F:1A:AD:3A:C0
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS135477.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.241.178.0/24
202.47.88.0/24
203.29.27.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:d9:61:9a:83:0d:de:6e:d7:84:f3:a5:e7:5c:f2:a4:15:30:
e1:20:e7:f2:9a:fa:9c:42:37:52:c6:c4:c6:ec:39:51:d8:84:
83:79:91:ae:98:be:39:79:22:bd:d3:0d:17:af:ea:22:0c:52:
f9:ed:7b:01:ec:fd:f6:0e:84:f1:90:31:0a:ec:32:c7:03:87:
7b:a7:95:a4:e3:4e:f3:1a:39:3c:97:9c:04:3c:0c:53:c8:65:
f9:43:b9:80:29:18:ea:79:ec:cc:1b:4b:e2:54:62:67:2e:a6:
ea:0b:c7:9a:aa:44:a6:4a:08:7e:24:f0:b0:c6:26:40:33:64:
c1:6b:5d:18:67:61:23:86:c9:79:18:d4:55:ea:dd:11:d0:ae:
2d:52:66:45:86:59:95:45:c6:6a:f2:53:e0:ea:99:17:b6:bf:
f6:6f:1c:1f:74:dd:8d:d7:c4:d3:fd:78:85:d1:92:92:6b:6d:
8f:e6:e4:32:d5:59:22:7d:c4:e3:ba:12:d4:57:92:d8:df:5d:
fc:b1:20:e0:f1:77:55:5f:7d:08:f2:54:0e:80:79:8d:7e:78:
87:91:56:2f:c2:d4:94:ea:22:80:07:6b:c0:1b:36:b3:bd:6b:
83:27:0c:cf:6f:91:ff:a2:43:90:a9:03:f0:3e:e3:e6:35:8d:
94:ec:43:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 19:31:45 2025 by rpki-client