
$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS137316.roa
File: AS137316.roa (raw, json)
Hash identifier: GVLAlD6u9F7ni6MDNQw5sQMReOaSj6ntpIkdHy/J/P8=
Subject key identifier: D5:3C:A0:06:F9:D8:19:1D:00:BA:43:DA:77:2B:09:8F:6F:B3:DA:9D
Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial: 69337D307CD9CD04A74F0D43DECE2DA2B30D03C6
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS137316.roa
Signing time: Sat 02 May 2026 08:37:04 +0000
ROA not before: Sat 02 May 2026 08:32:04 +0000
ROA not after: Sat 01 May 2027 08:37:04 +0000
asID: 137316
IP address blocks: 203.26.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 04 May 2026 03:13:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:33:7d:30:7c:d9:cd:04:a7:4f:0d:43:de:ce:2d:a2:b3:0d:03:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Validity
Not Before: May 2 08:32:04 2026 GMT
Not After : May 1 08:37:04 2027 GMT
Subject: CN=D53CA006F9D8191D00BA43DA772B098F6FB3DA9D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:aa:3e:3f:dc:3e:a2:0f:1b:d4:18:b2:c6:61:
3a:0d:5a:62:13:ac:bf:4a:14:df:87:e1:71:e5:c1:
e4:0f:64:fb:d8:e8:75:ae:e9:fa:a9:1d:3d:46:f9:
57:ce:73:ef:74:33:73:be:32:a0:8c:13:c1:84:c5:
ca:cd:38:11:e0:46:ce:ba:7a:0e:a8:cc:e9:4e:c1:
47:3e:6a:53:a3:94:63:be:86:db:76:04:e4:35:be:
9a:17:2b:7c:06:b8:22:69:95:35:ac:57:f0:4d:57:
38:dc:a5:47:a1:31:22:8a:99:95:2e:03:c7:d4:6c:
a0:7e:84:e1:37:b3:91:d5:c0:52:7f:90:58:5c:f6:
fe:4c:1e:4e:73:49:1c:69:e8:98:aa:49:80:ce:56:
68:d8:24:9d:63:3b:7f:fd:89:eb:46:94:c2:d1:44:
d5:b6:dc:73:c4:7a:92:c8:c3:86:0e:1d:e2:fb:be:
71:af:1d:27:82:2a:a3:69:bc:03:d9:c9:6b:71:1a:
4b:d3:d3:6d:20:5b:e1:0e:39:bb:eb:52:96:2d:0f:
94:24:d9:59:cf:c7:6f:57:2c:da:ed:4b:72:fb:fe:
7a:15:53:c7:b4:a0:a4:37:93:a5:ce:ec:73:d5:1e:
f5:1a:f8:6e:51:12:bc:38:81:cc:b8:ec:77:7a:1f:
71:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:3C:A0:06:F9:D8:19:1D:00:BA:43:DA:77:2B:09:8F:6F:B3:DA:9D
X509v3 Authority Key Identifier:
keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS137316.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.26.47.0/24
Signature Algorithm: sha256WithRSAEncryption
55:a9:d9:c0:f7:e3:51:cc:d7:8c:b2:05:8b:9d:a0:be:2e:85:
a2:27:b5:5f:57:09:de:c7:cb:b2:0d:fd:4e:69:22:36:68:e4:
74:7a:b3:22:0c:5e:35:8f:16:80:8a:ac:29:50:ac:34:bd:f6:
03:19:2f:d6:45:aa:15:b6:23:a7:8f:d5:fc:11:fb:8a:a9:ed:
5f:1b:d6:0f:ea:d6:05:d2:16:a1:eb:ea:3f:b9:7b:7a:96:19:
17:35:f3:dd:fb:a5:1f:89:9c:97:70:07:9f:27:eb:66:d4:02:
6d:27:34:c2:3a:7b:c7:96:b9:d6:ed:46:59:56:6c:c7:b0:cd:
28:68:ad:d1:08:21:c8:95:44:84:92:2b:7c:c5:c2:59:cb:9e:
4d:90:f7:bb:92:fc:4b:c3:fe:9d:95:74:56:0f:d9:31:5a:c3:
27:1d:0c:ee:ad:c7:21:e1:1c:5e:53:2e:38:8e:72:63:8b:9e:
76:e3:6a:3c:38:45:5c:52:a2:10:cc:96:c9:97:c8:87:d8:01:
60:43:d3:6a:4d:a5:03:a2:70:78:dc:60:e2:6e:e3:f0:3c:21:
fc:83:fd:cd:28:33:96:f3:cc:e0:b0:2b:b5:60:06:00:6e:57:
2e:72:ec:91:8a:d4:d1:62:27:81:3f:fa:95:74:7a:42:76:43:
d7:96:92:93
-----BEGIN CERTIFICATE-----
MIIE2TCCA8GgAwIBAgIUaTN9MHzZzQSnTw1D3s4torMNA8YwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4
QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA4MzIwNFoX
DTI3MDUwMTA4MzcwNFowMzExMC8GA1UEAxMoRDUzQ0EwMDZGOUQ4MTkxRDAwQkE0
M0RBNzcyQjA5OEY2RkIzREE5RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMqqPj/cPqIPG9QYssZhOg1aYhOsv0oU34fhceXB5A9k+9joda7p+qkdPUb5
V85z73Qzc74yoIwTwYTFys04EeBGzrp6DqjM6U7BRz5qU6OUY76G23YE5DW+mhcr
fAa4ImmVNaxX8E1XONylR6ExIoqZlS4Dx9RsoH6E4TezkdXAUn+QWFz2/kweTnNJ
HGnomKpJgM5WaNgknWM7f/2J60aUwtFE1bbcc8R6ksjDhg4d4vu+ca8dJ4Iqo2m8
A9nJa3EaS9PTbSBb4Q45u+tSli0PlCTZWc/Hb1cs2u1Lcvv+ehVTx7SgpDeTpc7s
c9Ue9Rr4blESvDiBzLjsd3ofcUsCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBTVPKAG
+dgZHQC6Q9p3KwmPb7PanTAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu
njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp
LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5
NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG
AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG
NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO
OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v
cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTM3MzE2LnJvYTAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA
ATAGAwQAyxovMA0GCSqGSIb3DQEBCwUAA4IBAQBVqdnA9+NRzNeMsgWLnaC+LoWi
J7VfVwnex8uyDf1OaSI2aOR0erMiDF41jxaAiqwpUKw0vfYDGS/WRaoVtiOnj9X8
EfuKqe1fG9YP6tYF0hah6+o/uXt6lhkXNfPd+6UfiZyXcAefJ+tm1AJtJzTCOnvH
lrnW7UZZVmzHsM0oaK3RCCHIlUSEkit8xcJZy55NkPe7kvxLw/6dlXRWD9kxWsMn
HQzurcch4RxeUy44jnJji55242o8OEVcUqIQzJbJl8iH2AFgQ9NqTaUDonB43GDi
buPwPCH8g/3NKDOW88zgsCu1YAYAblcucuyRitTRYieBP/qVdHpCdkPXlpKT
-----END CERTIFICATE-----
Generated at Sun May 3 01:44:02 2026 by rpki-client