
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS147142.roa
File: AS147142.roa (raw, json)
Hash identifier: yquJh1e7i3aQBdO39Aa2bAHWXNbbvOLYLOWvfw6f2Y4=
Subject key identifier: 24:DB:18:FB:5C:72:03:94:C3:65:AF:08:46:1E:2A:BF:FF:D1:56:78
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 4185390442F2C090C396C42017EAD667A86450D8
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS147142.roa
Signing time: Fri 13 Feb 2026 06:18:31 +0000
ROA not before: Fri 13 Feb 2026 06:13:31 +0000
ROA not after: Fri 12 Feb 2027 06:18:31 +0000
asID: 147142
IP address blocks: 103.177.60.0/24 maxlen: 24
115.84.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Mar 2026 02:17:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:85:39:04:42:f2:c0:90:c3:96:c4:20:17:ea:d6:67:a8:64:50:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Feb 13 06:13:31 2026 GMT
Not After : Feb 12 06:18:31 2027 GMT
Subject: CN=24DB18FB5C720394C365AF08461E2ABFFFD15678
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:90:b9:a2:e1:5d:29:13:ae:5f:ac:41:45:04:
f6:5e:72:34:b6:fb:28:68:ff:fc:0a:cf:77:ab:62:
8e:29:f3:45:ae:1b:40:1e:2c:5e:08:52:d7:7c:57:
28:56:12:95:24:60:4e:3c:da:b1:78:61:dd:c5:36:
8a:d1:d6:db:68:55:8c:86:a1:d8:89:1c:2b:1f:7a:
62:25:b5:65:bd:03:20:13:d9:b9:23:bc:ad:14:7a:
24:bf:8e:0a:7b:e8:35:ee:54:69:29:4a:a3:21:2c:
7a:5d:a6:94:94:6a:3c:60:9a:3b:bf:39:d1:f0:e8:
56:40:38:5c:88:df:5f:11:28:5a:3f:42:91:13:97:
cb:b5:27:fe:41:2c:c2:35:8d:c0:12:bf:fa:19:27:
8a:59:e3:e6:d2:b4:b7:bd:e3:47:09:26:cc:8b:22:
38:d9:7b:60:a2:25:27:6d:bb:83:ec:26:76:8b:59:
a5:78:19:88:a7:0a:48:f0:9b:75:28:52:81:d4:11:
38:a1:3d:6e:8d:c2:55:61:86:ff:2f:45:14:83:b0:
04:1a:62:55:d6:66:7b:5e:f4:fc:64:98:4c:44:91:
46:c6:c2:a0:eb:11:e3:23:42:51:57:6c:b1:a3:3e:
a7:72:d9:2f:d3:46:73:66:3c:f2:5c:e5:ed:f5:5e:
2c:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:DB:18:FB:5C:72:03:94:C3:65:AF:08:46:1E:2A:BF:FF:D1:56:78
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS147142.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.177.60.0/24
115.84.174.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:0f:74:5a:39:d2:e4:1b:06:69:0b:40:45:a1:b3:95:9d:6e:
a4:3e:c6:92:a0:5c:d7:7e:ad:52:2d:e5:2a:66:45:c2:1c:c3:
5b:4c:5f:65:65:b8:e0:a6:ab:f4:ac:e2:b4:f4:bb:6c:81:c5:
3c:22:0b:19:84:cb:6c:b1:de:fc:8d:d8:e3:8d:72:2a:15:fb:
f9:ad:c3:38:20:2a:7b:14:67:81:5c:77:27:17:a6:8a:bc:de:
48:ab:26:6b:e0:9a:c4:87:80:48:46:62:34:e6:4c:88:eb:c5:
99:f3:45:b1:64:00:36:c9:97:35:63:1e:87:ee:24:6f:81:0f:
f7:1f:08:d3:09:d4:a7:ac:ec:ce:91:ec:f7:35:38:e5:2c:19:
14:b0:4c:9b:4e:50:8f:9e:46:30:dd:f4:9e:42:47:46:3c:a1:
2d:02:19:93:db:8e:82:e4:3a:bf:02:f5:d9:24:aa:b4:0b:25:
1c:86:e6:62:24:96:cd:8e:30:ff:1d:c1:1d:37:7d:9d:d9:8f:
03:bf:75:5d:55:6e:21:7f:cb:df:09:f3:fa:74:8f:39:5d:fc:
b0:b2:ab:81:a7:ee:b4:6a:6c:f1:b4:e3:29:ac:fd:c8:c6:c7:
e8:fd:47:93:76:22:64:80:2b:f2:bb:9c:4c:c9:38:70:b4:7f:
88:1b:c7:2c
-----BEGIN CERTIFICATE-----
MIIE4zCCA8ugAwIBAgIUQYU5BELywJDDlsQgF+rWZ6hkUNgwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDIxMzA2MTMzMVoX
DTI3MDIxMjA2MTgzMVowMzExMC8GA1UEAxMoMjREQjE4RkI1QzcyMDM5NEMzNjVB
RjA4NDYxRTJBQkZGRkQxNTY3ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAM6QuaLhXSkTrl+sQUUE9l5yNLb7KGj//ArPd6tijinzRa4bQB4sXghS13xX
KFYSlSRgTjzasXhh3cU2itHW22hVjIah2IkcKx96YiW1Zb0DIBPZuSO8rRR6JL+O
CnvoNe5UaSlKoyEsel2mlJRqPGCaO7850fDoVkA4XIjfXxEoWj9CkROXy7Un/kEs
wjWNwBK/+hknilnj5tK0t73jRwkmzIsiONl7YKIlJ227g+wmdotZpXgZiKcKSPCb
dShSgdQROKE9bo3CVWGG/y9FFIOwBBpiVdZme170/GSYTESRRsbCoOsR4yNCUVds
saM+p3LZL9NGc2Y88lzl7fVeLP8CAwEAAaOCAdYwggHSMB0GA1UdDgQWBBQk2xj7
XHIDlMNlrwhGHiq//9FWeDAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3
azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv
LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD
OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI
KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3
RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo
V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0NzE0Mi5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQWMBQw
EgQCAAEwDAMEAGexPAMEAHNUrjANBgkqhkiG9w0BAQsFAAOCAQEAWw90WjnS5BsG
aQtARaGzlZ1upD7GkqBc136tUi3lKmZFwhzDW0xfZWW44Kar9KzitPS7bIHFPCIL
GYTLbLHe/I3Y441yKhX7+a3DOCAqexRngVx3JxemirzeSKsma+CaxIeASEZiNOZM
iOvFmfNFsWQANsmXNWMeh+4kb4EP9x8I0wnUp6zszpHs9zU45SwZFLBMm05Qj55G
MN30nkJHRjyhLQIZk9uOguQ6vwL12SSqtAslHIbmYiSWzY4w/x3BHTd9ndmPA791
XVVuIX/L3wnz+nSPOV38sLKrgafutGps8bTjKaz9yMbH6P1Hk3YiZIAr8rucTMk4
cLR/iBvHLA==
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:00:54 2026 by rpki-client