
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS59273.roa
File: AS59273.roa (raw, json)
Hash identifier: cqwZMgrS3kRF36maW3BiS2OGVmCjHuL67YmBNg+egrs=
Subject key identifier: 1A:2E:84:98:28:1A:7F:04:5C:E2:42:09:87:DE:4D:FD:21:65:DC:11
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 75BB1EF20B453EA4084BC982271E51F2A36BF7D2
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS59273.roa
Signing time: Mon 13 Apr 2026 04:00:00 +0000
ROA not before: Mon 13 Apr 2026 03:55:00 +0000
ROA not after: Mon 12 Apr 2027 04:00:00 +0000
asID: 59273
IP address blocks: 103.80.96.0/23 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 20 Apr 2026 21:51:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:bb:1e:f2:0b:45:3e:a4:08:4b:c9:82:27:1e:51:f2:a3:6b:f7:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Apr 13 03:55:00 2026 GMT
Not After : Apr 12 04:00:00 2027 GMT
Subject: CN=1A2E8498281A7F045CE2420987DE4DFD2165DC11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b7:d0:f9:55:94:41:df:08:11:9b:26:e7:05:
37:4e:5d:d5:e0:3b:1a:a3:0f:07:c3:25:3e:d0:93:
b0:fe:fd:cc:42:91:c2:4e:0a:2a:d5:ff:71:de:42:
9e:ab:ae:29:ba:52:dc:f8:1e:75:9b:52:87:60:2d:
6a:a0:85:54:8d:cc:c4:1e:65:c1:20:6e:5c:d5:8f:
ef:fd:30:f8:b1:ff:ba:c0:40:c7:f9:18:9a:69:57:
42:5e:f7:a9:18:23:3b:07:f1:bf:fd:4e:e6:6e:8b:
4d:fe:d0:9f:be:d9:c0:a6:c4:ae:60:7c:d0:06:0e:
e9:10:52:6f:e5:06:e3:43:9b:29:c3:9a:90:23:dd:
e4:32:da:15:ee:14:ff:f5:0a:66:bf:4a:ba:a0:89:
f5:d6:fb:3f:4b:6b:cb:96:c1:d6:27:65:db:0e:f7:
8a:7e:3a:da:ca:30:aa:3a:da:cd:6b:69:7d:6d:91:
c3:cb:e9:87:d5:bb:d1:12:87:25:12:00:02:83:7d:
4e:7d:8a:b9:2a:2f:8c:fb:01:6c:06:2c:cf:32:9d:
ec:14:63:4a:35:04:31:7b:9a:05:2c:3e:18:db:28:
3e:f8:68:c1:bf:77:bb:e7:d9:e9:8e:7b:7d:1f:b5:
ec:b8:0e:77:24:50:6d:d0:48:0a:40:b7:77:eb:b3:
bd:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:2E:84:98:28:1A:7F:04:5C:E2:42:09:87:DE:4D:FD:21:65:DC:11
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS59273.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.80.96.0/23
Signature Algorithm: sha256WithRSAEncryption
80:f3:34:56:41:03:26:cf:23:33:05:50:ec:5b:8e:b6:dd:f0:
5c:a0:eb:a5:d1:03:64:63:5f:85:bb:4b:bf:aa:84:6a:db:54:
16:05:10:1d:b0:5b:9b:31:b1:a6:6b:de:28:04:c2:30:0b:76:
d0:22:1f:63:e6:d1:11:31:0c:75:9e:51:fb:68:aa:ee:08:7b:
d9:73:ce:5a:b0:6e:6b:9a:4d:f9:37:ae:d9:75:99:c5:6b:23:
dd:36:dd:d7:9c:0c:67:fd:65:a9:cd:38:ff:f2:8d:e6:0f:b7:
5e:1c:f3:72:c3:f2:ad:7f:62:8c:7d:ae:62:aa:96:3a:d3:18:
b4:7c:2a:5a:07:3e:f8:37:ef:d1:6a:2b:ff:e7:4a:fb:1b:8c:
d9:3a:0b:5d:43:e5:4c:8e:14:fd:d2:60:3a:c0:5a:40:78:23:
fc:b4:6b:18:9d:18:83:74:62:1e:27:19:ce:21:ab:ad:97:ea:
f8:7d:f3:41:b7:5e:40:1a:e7:c9:85:81:b3:69:da:3b:4a:59:
a3:4e:b0:b9:62:68:db:c4:47:e5:31:6c:8b:e3:71:ba:11:98:
cf:dd:26:4d:1c:cb:9c:e4:82:df:cb:bf:c0:cb:8c:2f:ae:81:
20:85:9d:64:8f:66:c4:3e:af:f1:dd:dd:fe:99:ab:b7:cb:c0:
c9:34:b1:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:30:36 2026 by rpki-client