
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/1/AS55701.roa
File: AS55701.roa (raw, json)
Hash identifier: vISpfxGIE5LAUbRb/fz+I9GUzFrY4m4s8aO+qnNq/fI=
Subject key identifier: D0:23:95:79:E0:6A:0F:85:E4:08:6B:79:8D:F4:B6:F6:83:2F:83:35
Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial: 345DF7CB131D44C3836728C081AAD320226FEC54
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS55701.roa
Signing time: Mon 27 Jul 2026 03:19:33 +0000
ROA not before: Mon 27 Jul 2026 03:14:33 +0000
ROA not after: Mon 26 Jul 2027 03:19:33 +0000
asID: 55701
IP address blocks: 103.163.160.0/24 maxlen: 24
103.213.131.0/24 maxlen: 24
110.50.82.0/24 maxlen: 24
2405:b900::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 13 Sep 2026 00:58:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:5d:f7:cb:13:1d:44:c3:83:67:28:c0:81:aa:d3:20:22:6f:ec:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Validity
Not Before: Jul 27 03:14:33 2026 GMT
Not After : Jul 26 03:19:33 2027 GMT
Subject: CN=D0239579E06A0F85E4086B798DF4B6F6832F8335
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:42:46:66:36:77:a9:07:1c:3a:02:b4:e9:b6:
f2:d5:91:6f:d3:05:d2:7b:b3:7a:dd:c4:1a:be:fa:
cb:36:7e:e8:bd:f4:81:bc:66:94:26:d5:68:0a:5e:
78:1a:63:b4:24:c0:79:df:35:dc:ef:31:77:7c:f8:
cd:92:f2:74:55:34:25:92:aa:9c:0d:4c:54:b1:68:
2f:69:31:8b:f1:8b:a4:35:1e:27:3a:57:c7:bd:79:
3f:8a:d5:3c:33:3d:be:b1:a8:92:6d:c1:d7:08:12:
35:f3:7b:e1:0c:4d:f2:b8:d6:1a:ca:7b:c0:14:a1:
e2:08:9b:00:1b:70:dd:6f:32:43:cf:5d:4d:a1:b1:
f3:cd:92:a8:57:69:c4:ef:51:63:93:2b:45:10:25:
92:a9:0e:44:24:8b:aa:74:bd:84:a3:b0:cc:c6:4e:
7c:6f:ab:f1:bd:0d:5e:3e:7e:aa:97:b3:a0:f0:d2:
2f:f3:ee:6c:90:e7:4a:91:e9:dd:75:57:7b:98:a9:
29:57:83:8b:9c:16:92:6a:09:07:f2:ac:32:74:54:
fc:77:65:7d:fa:29:f8:c9:95:4a:b5:6b:86:15:b4:
fd:dd:a0:4b:b1:19:77:cb:07:f2:9d:d1:27:7c:bf:
47:3a:6e:6e:5b:e3:8b:b1:33:9f:7f:b5:e9:5b:b9:
de:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:23:95:79:E0:6A:0F:85:E4:08:6B:79:8D:F4:B6:F6:83:2F:83:35
X509v3 Authority Key Identifier:
keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS55701.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.163.160.0/24
103.213.131.0/24
110.50.82.0/24
IPv6:
2405:b900::/32
Signature Algorithm: sha256WithRSAEncryption
52:2d:b5:63:20:fe:b8:bf:05:84:a9:45:58:50:e6:78:da:ec:
74:be:66:fc:7f:bc:10:a1:16:23:a3:32:00:11:15:ed:69:e0:
71:91:dc:a3:d9:81:58:70:82:bc:83:7b:61:89:c3:69:e1:e0:
7e:86:4e:28:39:a3:cd:fe:48:9d:65:44:a6:56:27:30:23:39:
bb:8a:fa:b0:75:88:9c:42:23:0e:a0:29:77:96:b0:c1:97:61:
ad:7e:2e:91:b8:46:53:62:2d:75:86:1f:12:12:48:be:4a:96:
cb:da:c1:79:fc:11:85:d1:69:21:07:7c:e2:9c:a6:f6:32:a3:
a5:64:90:59:e2:62:31:10:b6:42:78:44:db:4a:d4:f5:2f:67:
79:12:4a:bf:47:fa:14:31:8b:8d:ff:af:ef:ea:6a:fd:f3:43:
89:93:e7:c7:d1:48:dd:61:d0:2e:1f:ad:42:b3:e1:0b:c6:36:
11:b3:7d:95:3e:b0:95:63:65:c4:8e:6f:b2:4f:cb:c3:28:2f:
db:f3:4f:0e:b7:07:12:8a:b2:87:14:1b:61:68:09:80:d5:d7:
d9:c9:26:6b:60:59:fd:81:90:6b:1f:d9:70:a1:c1:79:39:6f:
06:e5:86:05:14:43:2f:6d:3e:6f:aa:42:2a:9e:49:d1:be:4b:
65:a6:65:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 12 03:59:29 2026 by rpki-client