
$ rpki-client -vvf rpki-rsync.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/AS135457.roa
File: AS135457.roa (raw, json)
Hash identifier: X1w4nzNuA26rXRd5yVYdj4Puf4QzWuOiYkpDYswCdZY=
Subject key identifier: BD:B5:99:97:24:87:4F:3B:13:71:44:8D:76:FC:98:B0:5D:3C:B7:3C
Certificate issuer: /CN=1FD138814ED6ED10A74AEDE620ECC6CB414D8D49
Certificate serial: 164D6D930A0B4420D5BF1577E532780BAC0BBECF
Authority key identifier: 1F:D1:38:81:4E:D6:ED:10:A7:4A:ED:E6:20:EC:C6:CB:41:4D:8D:49
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1FD138814ED6ED10A74AEDE620ECC6CB414D8D49.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/AS135457.roa
Signing time: Sun 03 May 2026 03:14:39 +0000
ROA not before: Sun 03 May 2026 03:09:39 +0000
ROA not after: Sun 02 May 2027 03:14:39 +0000
asID: 135457
IP address blocks: 203.191.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/1FD138814ED6ED10A74AEDE620ECC6CB414D8D49.crl
rsync://rpki-rsync.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/1FD138814ED6ED10A74AEDE620ECC6CB414D8D49.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1FD138814ED6ED10A74AEDE620ECC6CB414D8D49.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:4d:6d:93:0a:0b:44:20:d5:bf:15:77:e5:32:78:0b:ac:0b:be:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1FD138814ED6ED10A74AEDE620ECC6CB414D8D49
Validity
Not Before: May 3 03:09:39 2026 GMT
Not After : May 2 03:14:39 2027 GMT
Subject: CN=BDB5999724874F3B1371448D76FC98B05D3CB73C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:3d:5b:cd:56:1c:b1:27:49:48:86:36:db:86:
8a:25:08:7f:00:dd:de:7d:f3:91:e2:20:91:5c:d2:
ae:98:f4:ea:ff:73:d7:4c:e5:00:8f:10:88:20:75:
dc:05:4e:95:a3:2f:64:d5:d2:d8:2a:96:a3:76:22:
dd:c1:14:12:51:24:d3:6d:cd:28:7a:4e:60:ae:c1:
00:ee:74:e4:67:95:d0:ec:77:e8:13:3c:a5:c7:1c:
f4:d4:60:aa:80:21:b1:26:9d:2c:94:9a:8c:63:ea:
c0:d9:2b:a4:08:2d:ac:11:43:76:d5:ae:f0:3a:a6:
8d:70:18:8e:f2:b6:b5:1c:f6:e6:12:e8:bc:f8:ef:
13:5b:78:07:07:28:23:ea:63:e7:7f:be:c4:b3:97:
80:4f:19:7a:3f:67:06:d5:60:4c:b0:22:6d:67:59:
56:34:cc:bc:2b:1b:2f:5c:8c:3f:46:d8:87:85:7d:
a4:78:76:6c:66:99:58:2f:16:20:b1:b7:b3:bb:c4:
84:bc:d9:65:5a:1f:0f:a5:88:2a:b9:80:c8:92:3a:
8f:fc:93:cc:54:8a:55:77:82:41:d6:14:5f:14:6c:
2d:a1:7a:81:1a:24:9b:94:ba:0d:c4:a7:ee:fc:67:
8b:8a:57:26:f7:e4:b3:db:37:a3:d9:d8:44:aa:1f:
f2:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:B5:99:97:24:87:4F:3B:13:71:44:8D:76:FC:98:B0:5D:3C:B7:3C
X509v3 Authority Key Identifier:
keyid:1F:D1:38:81:4E:D6:ED:10:A7:4A:ED:E6:20:EC:C6:CB:41:4D:8D:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/1FD138814ED6ED10A74AEDE620ECC6CB414D8D49.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1FD138814ED6ED10A74AEDE620ECC6CB414D8D49.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/AS135457.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.191.47.0/24
Signature Algorithm: sha256WithRSAEncryption
01:a0:13:12:c5:3e:15:52:a4:18:ac:ae:dc:53:c3:54:9b:59:
f9:5b:7f:73:c8:d3:86:72:a1:6f:e7:b6:c7:9a:58:65:41:0d:
a2:bd:01:cc:52:f3:50:9c:27:d5:58:9e:53:bb:91:43:05:ea:
41:7e:a1:3e:b1:2b:33:a3:57:78:0e:5e:ea:43:2a:27:e6:7e:
13:84:ab:e0:00:1b:a8:f3:6d:72:dc:25:af:25:eb:6a:32:58:
f1:05:6d:4e:5f:d9:09:7c:d3:02:a4:70:94:88:b2:12:cc:23:
08:81:b3:21:1f:d6:a5:3f:e3:a1:0c:2b:2e:bd:f4:ad:cc:bf:
8b:eb:2a:2d:ce:fb:48:7a:ca:a1:37:db:cb:47:b5:50:b2:78:
12:d9:4f:17:0f:45:fb:35:e0:0e:f5:17:58:2c:45:a4:ba:b5:
52:7d:ef:5d:89:93:a8:cc:f5:8c:a8:aa:bc:cf:7a:23:60:3c:
a0:09:a4:7c:b8:e7:97:e4:c9:15:ab:ef:21:f1:9e:7f:de:a1:
43:69:7e:83:9f:85:27:a9:c8:9f:f1:88:12:10:81:01:f0:67:
9a:b5:57:75:92:a4:8f:6a:d7:12:f4:d7:88:1e:2b:6f:58:1c:
4d:eb:f2:ca:96:98:80:84:d6:f9:61:9a:30:de:6e:cb:26:6e:
fd:e9:6b:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 23:00:47 2026 by rpki-client