
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/1/AS18112.roa
File: AS18112.roa (raw, json)
Hash identifier: fYRxGEVns0o/gB9M4NTpJbOT0x6eQK+IG0fHeZeKrmM=
Subject key identifier: 63:D0:82:E1:1F:38:DE:B6:FB:E0:75:A9:B0:53:B3:F4:81:58:BB:31
Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial: 0C4203C2026B41732B6D16AC65FFB5125A6C840E
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS18112.roa
Signing time: Mon 14 Sep 2026 08:05:40 +0000
ROA not before: Mon 14 Sep 2026 08:00:40 +0000
ROA not after: Mon 13 Sep 2027 08:05:40 +0000
asID: 18112
IP address blocks: 117.103.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 18 Sep 2026 05:31:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:42:03:c2:02:6b:41:73:2b:6d:16:ac:65:ff:b5:12:5a:6c:84:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Validity
Not Before: Sep 14 08:00:40 2026 GMT
Not After : Sep 13 08:05:40 2027 GMT
Subject: CN=63D082E11F38DEB6FBE075A9B053B3F48158BB31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:8e:3c:d3:57:e0:5b:ea:99:ba:5e:00:a6:1c:
b9:a0:59:94:8b:3b:6d:56:05:6c:6a:d2:cb:95:7b:
9e:e7:17:68:ba:c1:db:83:24:14:e8:96:5a:71:ba:
cd:fd:ae:88:a6:5a:35:d5:55:22:9a:e7:46:ec:19:
52:18:3e:6d:72:8a:09:62:6d:cf:b5:f4:58:2b:24:
2b:40:26:11:03:d4:9a:02:24:61:37:b7:73:70:46:
b0:e9:4f:f5:26:3a:54:e2:54:cf:23:7c:4f:dd:49:
b1:f0:96:81:8c:d0:57:b1:9b:c7:99:45:b7:2d:05:
3d:52:80:7c:5a:53:3e:d6:79:f2:37:5b:3a:45:98:
3e:98:ff:c6:17:76:e5:f0:91:b4:cb:a9:6e:37:ac:
fc:04:d4:8f:41:80:36:de:08:99:b9:ba:ad:dd:8b:
c1:d8:d2:c9:0b:85:f0:d8:44:95:14:9b:68:1e:8d:
45:b9:50:9f:ec:5d:c0:00:d0:ec:16:74:87:ec:c5:
30:54:ad:9b:2f:52:b9:b4:0d:63:15:d0:31:54:5c:
5d:4e:06:92:3c:6c:ca:4a:5b:4a:90:8b:cc:2b:03:
71:46:27:99:89:01:4d:30:57:a0:97:5a:63:ec:01:
4a:32:9e:4c:ce:f4:59:4c:34:e6:41:c0:04:9b:bb:
0d:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:D0:82:E1:1F:38:DE:B6:FB:E0:75:A9:B0:53:B3:F4:81:58:BB:31
X509v3 Authority Key Identifier:
keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS18112.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
117.103.50.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:5f:af:06:98:d2:a8:80:6c:8d:c6:c5:28:32:27:bd:ff:d2:
a7:ae:6f:51:8c:8f:41:d5:96:bc:b3:69:56:e8:98:23:20:02:
f4:7e:c2:a3:07:65:25:8a:f2:2c:c3:9d:3d:c5:0a:c9:17:31:
37:1c:15:e2:62:92:d3:c4:9f:13:93:a8:54:b3:02:d4:cf:cb:
de:11:43:82:1e:a8:73:2e:8c:cd:58:64:db:fd:99:fe:3a:5c:
b3:d9:7f:1a:5a:6b:61:c2:7c:0f:08:53:99:59:1a:62:a4:3c:
d8:2b:dc:e6:7b:2f:81:39:95:26:39:29:86:ac:b4:08:0e:ed:
ab:06:f1:71:da:f5:4a:9a:22:0a:16:c6:d1:d9:7e:29:4d:bc:
03:ac:3f:af:c7:82:d8:b0:e2:9f:4f:0b:aa:5a:d9:29:ca:1c:
6b:ce:6c:97:8f:2b:33:49:f4:57:b3:ae:b4:4a:ae:8d:63:01:
96:37:1d:fa:9f:2c:d9:8d:b9:2f:49:09:47:d3:11:c7:1d:79:
1f:f3:c1:ee:de:2d:c3:b3:c4:d5:4e:31:07:7f:0e:5b:86:56:
4e:6c:54:b3:70:c2:27:bb:94:a3:07:3c:21:d2:7e:a8:d6:3c:
a8:eb:0d:5f:af:39:e8:ad:66:7b:86:8e:cd:9a:f6:84:5a:55:
b1:72:91:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 05:27:32 2026 by rpki-client