
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142373.roa
File: AS142373.roa (raw, json)
Hash identifier: IfdUeNYzBR1csRXWaMay6cFxBE2TbJjj+rpxtVpmdm8=
Subject key identifier: 9D:27:E6:B4:DA:82:25:1A:22:20:CC:CD:09:91:9B:B0:87:3E:26:41
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 6FFB409ADD529E96FF5B045F6B9F8A6388A3D50C
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142373.roa
Signing time: Thu 19 Jun 2025 02:06:59 +0000
ROA not before: Thu 19 Jun 2025 02:01:59 +0000
ROA not after: Thu 18 Jun 2026 02:06:59 +0000
asID: 142373
IP address blocks: 103.171.82.0/23 maxlen: 24
2401:c7a0::/32 maxlen: 48
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 07 Nov 2025 00:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:fb:40:9a:dd:52:9e:96:ff:5b:04:5f:6b:9f:8a:63:88:a3:d5:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Jun 19 02:01:59 2025 GMT
Not After : Jun 18 02:06:59 2026 GMT
Subject: CN=9D27E6B4DA82251A2220CCCD09919BB0873E2641
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:2e:a6:c4:f1:f4:dc:f2:e2:ae:a3:51:d0:18:
65:2e:85:b1:95:65:c6:11:6e:59:5a:24:8d:ab:e6:
76:be:18:ec:5b:ee:18:8a:19:08:0e:ec:94:f4:7f:
de:7f:1d:7f:8f:00:53:c3:24:64:ef:d4:fc:29:5d:
bc:c9:0e:fe:8c:4b:27:1b:d8:7c:a3:aa:4e:ce:47:
0c:c1:9b:b0:02:f6:c5:d9:9b:88:6e:38:95:57:b7:
45:78:41:48:40:8d:1d:fd:9e:9c:b8:bd:c2:e2:e4:
fd:5a:3d:d5:ac:1c:87:8c:34:89:0f:18:af:11:03:
ba:18:af:ba:af:a5:0c:3a:82:97:a7:42:50:68:6e:
17:10:56:b9:13:8d:72:24:39:52:5b:87:05:01:0e:
81:97:69:4d:3d:87:56:91:3b:16:1c:37:f6:4a:58:
48:69:8d:1a:0c:cf:06:94:db:dc:51:bb:17:38:6b:
6e:1b:24:0e:52:c6:38:a0:51:60:d1:f6:64:2c:95:
ef:6f:4b:45:75:33:aa:f9:b3:ab:ad:ed:4b:47:af:
ad:9a:66:b4:70:a8:0b:a7:14:75:9c:9f:8f:42:90:
d6:f8:ac:d7:fd:67:21:e1:ea:20:20:b2:f4:8f:b5:
e0:ee:4f:e9:47:b6:29:bf:49:b4:28:ca:4a:be:e5:
ab:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:27:E6:B4:DA:82:25:1A:22:20:CC:CD:09:91:9B:B0:87:3E:26:41
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142373.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.171.82.0/23
IPv6:
2401:c7a0::/32
Signature Algorithm: sha256WithRSAEncryption
7d:76:01:3e:06:ac:02:5f:c9:8d:0b:f7:fa:44:81:9c:95:74:
8d:48:c6:5c:7e:9d:d0:90:6f:89:fe:ce:50:dc:f6:3d:09:52:
55:57:f1:10:69:a2:7c:0d:b2:79:1c:33:63:aa:b0:40:98:56:
1b:ce:e9:2a:fb:d9:4d:d3:71:84:18:20:4c:c8:bf:bb:d0:79:
8b:e2:7e:e7:a0:74:cc:7f:55:0c:bd:28:d4:93:11:4d:f5:ff:
49:c8:0b:19:a7:31:10:26:6b:23:99:62:f1:7a:e7:7e:a7:14:
10:d5:f4:f1:f4:d7:a9:55:8b:ea:b1:10:35:94:4e:02:f2:da:
6e:b0:f2:0d:00:7a:8a:7e:da:fa:ae:ae:80:67:8a:ef:c6:b0:
d3:d7:aa:64:43:0b:df:87:34:43:1e:04:93:e8:8d:37:99:6e:
40:cf:a5:ed:86:f1:21:9e:4f:70:cd:12:2c:a0:90:c2:2e:7e:
97:99:2c:0e:c1:24:f7:35:42:61:19:9d:d1:cb:28:30:0b:46:
42:1a:99:81:fc:87:49:88:57:2e:26:81:31:d7:17:67:d5:4a:
86:e4:42:a3:65:fa:3a:79:3c:01:49:6f:32:25:6f:cb:08:48:
de:54:f2:8b:7b:f9:4f:be:7f:ce:9a:7c:02:f4:6c:cb:8e:b0:
69:d3:0f:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 19:33:30 2025 by rpki-client