
$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS147161.roa
File: AS147161.roa (raw, json)
Hash identifier: fuZ1uDH6M9YIUpItSsShU/jkDlbkAyKmP7GXiN2QwN8=
Subject key identifier: 25:1B:35:72:96:91:77:9D:17:C3:C2:18:DB:02:1F:77:78:93:18:A1
Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial: 59F490182D6865680279CE521C27F4A8995AACBE
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS147161.roa
Signing time: Sat 02 May 2026 09:20:41 +0000
ROA not before: Sat 02 May 2026 09:15:41 +0000
ROA not after: Sat 01 May 2027 09:20:41 +0000
asID: 147161
IP address blocks: 103.177.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 04 May 2026 01:58:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:f4:90:18:2d:68:65:68:02:79:ce:52:1c:27:f4:a8:99:5a:ac:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Validity
Not Before: May 2 09:15:41 2026 GMT
Not After : May 1 09:20:41 2027 GMT
Subject: CN=251B35729691779D17C3C218DB021F77789318A1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:4f:28:6b:4c:1f:bf:14:2f:84:ce:a9:a1:cf:
77:a6:cc:e9:cd:b3:45:20:c1:67:7a:d8:cf:4d:26:
92:99:59:7d:3a:b6:53:23:50:36:15:f0:f6:a2:7c:
9c:9b:92:ca:7d:04:5b:2d:6c:0c:fb:78:46:cd:48:
04:66:77:79:84:8b:0e:d1:b1:0b:cf:91:d0:ce:f6:
e0:6d:2d:ea:a5:9a:b8:41:e5:79:15:22:15:de:e3:
48:c8:d9:df:0d:f3:83:bb:80:7f:98:73:4b:26:48:
a2:59:42:7b:a1:97:32:fc:98:9b:58:1d:ec:ed:c1:
60:ee:51:d2:e1:96:92:ba:2b:01:ec:54:3a:99:fd:
e8:2a:da:c8:39:35:3c:35:12:9b:a0:0d:d6:4d:00:
1d:87:b0:d7:c5:5c:dc:9d:47:22:39:f4:96:fc:3f:
f0:42:be:ce:e2:a5:a7:e0:10:46:05:c7:ab:d9:84:
4b:14:e2:71:bc:9b:a9:65:07:59:a8:4d:b7:3e:dd:
66:68:e7:83:8a:a3:6f:57:48:af:43:6b:f1:82:78:
0e:27:60:6f:54:9f:ed:5a:76:48:79:ac:17:57:ed:
a5:0f:a0:a1:bd:3f:3b:1b:60:8e:5b:c6:17:ee:ef:
85:c1:1d:61:57:53:d5:92:ab:3d:e4:e0:24:e3:3e:
0a:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:1B:35:72:96:91:77:9D:17:C3:C2:18:DB:02:1F:77:78:93:18:A1
X509v3 Authority Key Identifier:
keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS147161.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.177.212.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:b6:a8:2d:75:ea:26:f8:fe:70:92:1d:9e:29:8c:63:ee:7c:
97:a9:34:c1:62:b0:db:f7:14:79:06:ae:f5:a8:62:bd:64:9c:
e8:b5:ef:6b:7f:9c:8e:7b:1d:d6:c0:79:29:0e:0d:e4:0a:b0:
20:0c:1d:2f:85:05:22:b6:a9:69:99:4d:44:c8:29:ec:88:3d:
f4:60:ba:85:38:83:2a:a1:f5:9c:d9:14:e2:8d:67:05:1a:9e:
21:5f:64:e6:eb:59:64:20:37:06:d8:4e:f0:1d:6d:c4:fe:46:
a3:6e:d1:c3:c1:c9:4d:16:ae:32:43:03:e2:8f:dd:ba:cf:f9:
be:fc:49:89:ca:c8:3d:e3:2e:5f:90:cf:2a:2e:6d:c4:7c:06:
e4:6c:1e:44:63:69:54:c7:fe:ff:99:b6:2c:80:1e:ba:64:2f:
97:79:5c:28:eb:ff:b8:79:da:ef:4a:8e:d4:1f:26:62:4c:04:
43:b7:93:69:54:6d:23:95:5c:03:df:56:ab:5c:f1:61:67:46:
7b:a6:cc:ae:83:96:7b:da:53:19:d1:2c:8c:d6:6d:b6:6f:43:
e4:e6:1f:12:7c:18:9b:d1:44:4b:4c:9c:6a:f4:f6:2f:83:ce:
40:7e:24:b1:7a:1d:21:17:cf:a3:9a:30:58:10:d8:57:2f:b1:
0f:c9:4e:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 00:39:51 2026 by rpki-client