
$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS135482.roa
File: AS135482.roa (raw, json)
Hash identifier: O8cEoFI+ZUHlzN5kAYdxn9OhBOPq3CKi5GuXN9imigg=
Subject key identifier: 71:B8:E7:3A:82:8F:95:E7:E3:14:B5:8A:56:98:79:E2:FE:38:F0:E3
Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial: 02C53E34705079A4A07248E119A247076CD729A4
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS135482.roa
Signing time: Sat 02 May 2026 09:19:16 +0000
ROA not before: Sat 02 May 2026 09:14:16 +0000
ROA not after: Sat 01 May 2027 09:19:16 +0000
asID: 135482
IP address blocks: 103.118.82.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 04 May 2026 01:58:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:c5:3e:34:70:50:79:a4:a0:72:48:e1:19:a2:47:07:6c:d7:29:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Validity
Not Before: May 2 09:14:16 2026 GMT
Not After : May 1 09:19:16 2027 GMT
Subject: CN=71B8E73A828F95E7E314B58A569879E2FE38F0E3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:41:df:30:b8:fa:ff:dc:e3:52:4b:61:67:9c:
cd:e8:f0:45:b5:4b:4c:53:e8:aa:eb:63:11:d7:7b:
ec:ad:ac:a6:00:33:16:f5:a7:67:17:ca:78:c1:4c:
47:4d:1c:ad:6e:f3:6a:a1:06:4e:20:17:74:c6:ce:
b6:a3:6d:af:9c:2e:5e:66:af:f7:a6:a8:a7:07:27:
08:d1:4b:c7:d7:11:36:ad:60:dc:02:54:09:df:c2:
ae:ec:51:b9:24:7f:2a:14:09:7d:c2:ea:8b:98:0e:
22:35:c7:20:c7:4e:1d:81:1a:33:af:5d:61:f8:a1:
48:26:9d:61:ec:9e:f7:87:63:0c:7e:cd:53:8b:ee:
45:60:09:7d:95:d3:08:f0:c4:ac:c5:31:2e:1d:9a:
bc:e0:d6:af:84:58:77:f4:e8:39:b4:e9:f4:91:1e:
67:fa:40:b9:b6:fe:32:1b:1b:fe:37:bf:03:64:1a:
a9:27:2a:8b:f8:62:c2:42:fc:bd:d0:39:62:2f:4b:
b0:30:a2:17:fe:d3:8c:25:5e:92:98:8a:cb:ce:fd:
fb:2e:94:68:cd:73:11:d2:f7:60:e8:e0:44:00:c9:
2d:ec:d9:d2:c7:1a:57:6f:22:60:f4:fb:a4:05:80:
8d:49:a0:43:45:b6:fc:6c:c9:a4:82:f9:54:90:45:
98:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:B8:E7:3A:82:8F:95:E7:E3:14:B5:8A:56:98:79:E2:FE:38:F0:E3
X509v3 Authority Key Identifier:
keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS135482.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.118.82.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:1d:0b:aa:ca:1a:ac:6b:f3:14:4f:8a:73:76:f9:0e:ff:2b:
2b:a4:da:ed:a4:60:00:e0:5a:2f:ae:87:1d:1f:bf:5a:85:e9:
43:d4:8e:be:52:17:9e:ac:ad:dd:85:6b:3f:c9:53:6c:3c:c2:
61:d4:19:e4:f6:ad:9f:f0:92:e9:f4:8d:99:85:49:9d:c7:64:
f2:e7:10:31:3e:44:d1:13:a9:22:53:12:57:ef:4f:5c:f9:0d:
47:b7:84:d4:23:a5:21:ed:97:b6:e7:2f:0a:19:c8:3d:cf:d7:
e6:a1:06:2b:d9:86:1b:85:99:a2:48:82:d2:2c:da:64:6c:af:
83:6b:43:d0:c9:eb:33:dd:a4:11:ab:62:01:e3:a2:df:cc:e3:
51:2d:c1:72:f6:46:01:0f:f7:7f:2e:6f:09:98:e4:db:31:0a:
61:3f:f4:b9:23:95:74:80:8a:78:5a:ce:ea:d8:27:7b:49:19:
ae:f9:56:2d:92:7a:25:d4:2b:fc:eb:0e:98:d8:3b:f8:33:f4:
ea:3e:28:0f:9d:33:aa:36:bd:70:1d:08:78:7b:f7:f0:cf:2c:
ea:a4:8b:1d:f8:38:af:b1:fc:48:88:d9:ce:d8:10:2b:03:c9:
3f:3d:9c:b8:74:bd:39:96:f8:5a:5d:72:cf:c5:db:c5:86:d1:
cb:57:5c:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 00:40:21 2026 by rpki-client