
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/1/AS155031.roa
File: AS155031.roa (raw, json)
Hash identifier: BgjvqvvEdbuja5SihJRvK6L7aFBN4tqQPGbBQ5+2nGE=
Subject key identifier: A6:18:6D:57:F5:0B:62:30:00:CD:0F:D0:DE:26:54:9A:20:35:14:3B
Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial: 4B73E349EAF3E4509D7623E2AD079CAFA423402E
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS155031.roa
Signing time: Thu 22 Oct 2026 01:52:50 +0000
ROA not before: Thu 22 Oct 2026 01:47:50 +0000
ROA not after: Thu 21 Oct 2027 01:52:50 +0000
asID: 155031
IP address blocks: 119.160.210.0/24 maxlen: 24
2001:df7:b9c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Nov 2026 08:27:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:73:e3:49:ea:f3:e4:50:9d:76:23:e2:ad:07:9c:af:a4:23:40:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Validity
Not Before: Oct 22 01:47:50 2026 GMT
Not After : Oct 21 01:52:50 2027 GMT
Subject: CN=A6186D57F50B623000CD0FD0DE26549A2035143B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ba:d4:23:06:41:dc:05:cd:8a:a7:60:dc:e8:
44:2b:aa:7b:5f:9c:f0:6c:05:5b:65:4d:ab:84:2b:
9f:9d:4c:b3:df:bd:9c:0c:78:3f:cd:51:0a:19:1f:
0c:68:0f:4f:cd:9e:1c:5a:b6:0f:45:73:d0:24:21:
62:e2:3e:81:4f:77:1d:64:fc:cd:8e:ce:ea:7f:3e:
ae:86:4e:9f:69:70:44:74:40:db:70:60:3d:a6:e6:
0f:06:ba:4a:0f:d5:0b:90:80:ce:13:9c:b3:7d:3d:
a8:5f:ba:bf:52:96:91:7e:5d:c8:c0:f4:f4:9c:f5:
8b:a2:c1:27:2a:e5:27:2f:80:8b:bf:8e:ae:35:b6:
a7:7b:62:7a:80:f1:5d:70:a6:01:1c:5b:89:a2:84:
09:a5:f6:fe:38:03:3a:bb:6d:34:9c:56:e3:24:2b:
ad:a6:0d:e9:d1:af:ad:3f:85:32:46:51:ff:45:a0:
85:b0:f1:f0:ab:38:b5:97:1e:ec:a4:3f:87:4c:b6:
4b:aa:e6:c5:89:85:a7:88:09:55:ee:ff:ce:f8:0e:
fd:f5:fa:dc:3b:71:21:e1:08:5e:a7:7c:44:08:09:
e2:09:d1:07:b5:04:33:f4:4d:fe:f3:da:27:c4:13:
53:f3:17:fe:fd:41:bf:1d:68:78:46:4f:0b:de:61:
d2:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:18:6D:57:F5:0B:62:30:00:CD:0F:D0:DE:26:54:9A:20:35:14:3B
X509v3 Authority Key Identifier:
keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS155031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
119.160.210.0/24
IPv6:
2001:df7:b9c0::/48
Signature Algorithm: sha256WithRSAEncryption
6c:cb:ba:23:9b:89:68:a2:76:fc:4b:74:19:88:bd:b3:28:ba:
5c:dd:68:bc:d4:dd:73:73:05:c7:7f:8a:bf:ed:d3:d4:0b:d2:
41:07:01:13:e6:53:81:f3:68:5c:b6:90:6c:23:c9:1c:38:35:
7b:cc:43:8b:1c:1b:f0:bf:2e:cf:c8:73:98:c9:4e:2f:0c:93:
11:03:4e:c3:51:16:04:c3:d6:21:fc:3d:40:bf:04:d0:a1:51:
88:08:a8:cf:45:1f:65:4a:cc:47:74:33:19:b1:0f:c2:0b:2e:
c4:c6:0a:eb:42:ba:87:8b:a0:25:57:15:1e:c5:db:9c:55:22:
6d:8b:f7:3b:c0:52:92:9e:27:da:04:42:74:54:29:d4:1c:12:
8f:a8:e3:8c:f8:89:1f:96:57:45:bf:0f:7e:e2:a5:ac:d0:90:
52:62:fd:f4:96:87:d3:54:44:dc:f9:4d:24:a0:fc:cb:05:ec:
f3:bd:61:62:9a:54:12:dd:2c:6c:51:a1:d6:79:43:38:8b:16:
ea:d7:62:c8:a2:fb:54:28:ca:38:38:2b:7a:86:f9:f4:6e:4a:
b2:61:68:13:31:60:c6:ed:76:09:91:fc:4d:28:3e:29:a2:08:
c0:b4:f9:ba:48:bf:f8:20:7a:fb:b7:d3:95:3c:35:5f:29:62:
98:2a:91:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 9 13:14:45 2026 by rpki-client