
$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS55680.roa
File: AS55680.roa (raw, json)
Hash identifier: cQmkYOoMdjv3UKmdUvLBA1+6obIoesOyt53fIQ59lsA=
Subject key identifier: 7B:DB:39:03:2D:69:1F:2C:31:00:1E:AA:D2:07:E5:6B:34:4B:C3:8F
Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial: 3B7167E5C56B858E90F0CA7B616AF5FC26A46586
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS55680.roa
Signing time: Sat 02 May 2026 21:31:44 +0000
ROA not before: Sat 02 May 2026 21:26:44 +0000
ROA not after: Sat 01 May 2027 21:31:44 +0000
asID: 55680
IP address blocks: 103.60.234.0/23 maxlen: 24
2400:dbe0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 04 May 2026 01:58:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:71:67:e5:c5:6b:85:8e:90:f0:ca:7b:61:6a:f5:fc:26:a4:65:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Validity
Not Before: May 2 21:26:44 2026 GMT
Not After : May 1 21:31:44 2027 GMT
Subject: CN=7BDB39032D691F2C31001EAAD207E56B344BC38F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:f1:86:fa:17:29:de:c5:6e:fc:06:3e:8f:f6:
cb:dd:0f:1a:bf:9d:73:5b:d3:8b:fd:c6:d4:c9:eb:
af:e4:1d:0f:65:e7:24:66:64:bf:81:30:05:2e:3e:
bb:78:43:6b:9c:da:d9:36:e3:34:24:b2:41:e7:f0:
8c:22:09:8a:02:01:88:39:6d:40:ae:c5:34:d0:d1:
ea:43:48:5d:71:b0:55:44:40:5e:15:1f:58:59:a9:
f7:03:39:12:a8:a6:e4:99:7c:7e:63:ba:9b:43:87:
25:b5:ce:32:ec:69:fb:aa:e0:aa:9d:dd:6c:58:f4:
ff:33:a2:9b:de:33:30:57:b9:3c:bb:6b:d1:ec:1f:
ec:b0:2f:56:d6:b2:03:88:0a:1c:c6:7e:6c:ae:d6:
76:2d:a7:86:13:11:da:e2:cb:36:19:6c:e3:f6:ad:
8c:41:2a:9f:91:7c:b5:1f:18:77:48:2a:55:0c:a9:
fe:3c:54:75:7e:20:00:8e:e8:eb:96:24:7d:07:50:
13:1d:28:eb:b0:59:00:28:ca:c6:07:8b:9a:0e:a3:
3c:78:3a:cd:c1:f9:11:7a:da:c0:86:52:9a:33:a1:
39:9e:05:fe:e6:fc:07:68:45:06:a4:01:0e:cb:d6:
b2:e5:f3:dc:e4:70:be:96:82:05:b6:07:ae:eb:8f:
93:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:DB:39:03:2D:69:1F:2C:31:00:1E:AA:D2:07:E5:6B:34:4B:C3:8F
X509v3 Authority Key Identifier:
keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS55680.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.60.234.0/23
IPv6:
2400:dbe0::/32
Signature Algorithm: sha256WithRSAEncryption
a8:d8:72:27:ef:a5:d6:9d:f0:df:55:aa:0b:1f:e0:87:53:80:
2a:7d:9f:42:dc:57:b6:ad:c0:89:f8:01:41:da:85:d2:ce:6a:
46:9c:60:d6:f9:a1:38:e1:fe:6e:93:33:3c:13:49:fb:17:38:
da:17:c8:c8:14:5d:eb:00:23:0b:45:eb:b7:da:23:86:38:6c:
c0:37:3c:cd:df:9c:bd:5f:ad:22:73:f1:85:c9:06:fd:3a:63:
36:9a:6f:12:eb:c9:99:17:e8:98:64:e0:e8:18:4b:9f:f4:80:
a4:1c:12:7d:53:6c:9b:b3:27:55:8c:4e:6e:d7:8d:39:c9:29:
6f:2f:b3:b3:2b:b6:02:df:9b:c5:7a:e7:aa:76:bb:37:83:15:
1a:0f:86:c3:7c:9d:88:a6:12:9f:bf:8d:3f:1b:3a:0f:77:c4:
45:0d:11:20:13:16:7b:80:a2:79:17:6f:da:73:94:f9:2d:b6:
29:63:24:b1:81:5f:00:8f:03:7d:dd:32:92:5e:f8:79:72:5a:
2a:3a:47:c8:fd:67:97:d0:af:5f:17:37:d7:b3:56:07:25:2f:
9d:2b:a4:80:1f:73:f2:9f:1c:e6:78:bc:e6:5c:e6:db:6a:11:
1a:e6:c4:36:78:62:d3:88:11:2c:b4:2d:78:2f:e2:b5:bb:07:
ba:b4:df:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 00:39:49 2026 by rpki-client