$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149736.roa File: AS149736.roa (raw, json) Hash identifier: WjGzzZjgrpKGuNI1o0jN4ck/NtkrzZZ2xFvPycGHl9w= Subject key identifier: A7:14:01:48:5D:4D:74:82:4D:DB:B5:0C:D2:82:2E:FA:F1:70:DE:A9 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 523F85ADDDA97515CB9A6D7C634025D0044AA706 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149736.roa Signing time: Thu 17 Jul 2025 04:00:00 +0000 ROA not before: Thu 17 Jul 2025 03:55:00 +0000 ROA not after: Thu 16 Jul 2026 04:00:00 +0000 asID: 149736 IP address blocks: 103.188.172.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 00:11:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:3f:85:ad:dd:a9:75:15:cb:9a:6d:7c:63:40:25:d0:04:4a:a7:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 17 03:55:00 2025 GMT Not After : Jul 16 04:00:00 2026 GMT Subject: CN=A71401485D4D74824DDBB50CD2822EFAF170DEA9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:59:57:fd:8c:40:59:af:cc:f3:b1:bc:71:dd: 85:07:e0:ca:e7:67:7a:52:1b:93:8c:8b:02:bb:13: 6b:a9:ed:b2:42:a3:7d:b5:83:e4:ca:7e:11:5e:1d: b8:85:d7:36:d9:91:f6:bd:96:8a:14:e2:2f:02:74: 46:48:bc:63:f1:30:30:2c:ef:93:ce:8a:7c:22:ba: a8:2f:16:99:4f:43:18:bb:d5:3f:bf:2f:42:01:65: e2:62:2f:85:1a:f3:13:5f:24:48:4d:70:41:32:a8: 0a:b4:40:1c:36:b5:01:f3:41:94:cf:66:95:06:4e: 05:c0:ee:c6:3d:ab:d8:95:90:f7:26:0d:86:c5:dc: fc:b6:de:b1:9f:ff:ea:30:d1:da:c4:05:06:4f:1d: 41:07:e7:a5:a5:eb:0d:e3:e4:54:05:ae:b7:02:43: 20:24:b5:f9:4c:28:72:a1:52:19:82:aa:d3:de:6c: 80:7a:bf:42:c5:3e:83:b1:ff:d7:8b:54:bf:b1:d9: 6d:d7:83:ac:2e:94:c2:a3:37:87:c8:03:be:3f:b7: 1f:6f:27:88:1b:5b:2d:52:fb:7b:5a:d5:47:8e:e9: 8c:43:3f:16:72:ab:a2:72:dd:8d:35:01:9e:2c:d0: 2d:a4:f4:18:a0:55:da:27:ba:ad:55:93:53:b0:fd: 3a:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:14:01:48:5D:4D:74:82:4D:DB:B5:0C:D2:82:2E:FA:F1:70:DE:A9 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149736.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.188.172.0/23 Signature Algorithm: sha256WithRSAEncryption 95:27:84:71:69:bd:62:f1:9e:36:cd:30:c2:cf:d9:82:c0:fc: 86:e9:05:31:9e:9a:96:1d:61:e1:1b:e3:61:83:69:3e:6d:41: d4:96:73:ec:bc:ce:40:1a:f3:a0:9d:7b:96:fc:3f:2f:6e:0b: bf:4d:4a:c2:7c:5c:4a:48:ca:43:46:56:a1:11:6e:47:4e:9a: 20:96:d9:91:5c:14:85:f5:b1:f9:ca:33:e6:01:b5:30:96:56: 6a:e7:b7:83:fc:5b:95:5e:7d:e4:bb:aa:57:be:3d:f0:76:c1: 20:5d:e3:49:1b:cc:dd:14:b7:cd:a0:46:46:cf:02:a5:10:42: 33:54:e7:37:e0:a8:a4:15:7d:f9:a6:20:9a:3b:d9:64:24:04: 59:f7:26:dd:16:82:d4:52:df:58:ef:4b:e0:62:5e:53:14:0a: 72:da:7e:06:35:55:cc:5d:b2:7e:6b:ef:5b:6b:45:fb:f4:b9: ff:c5:24:d7:3b:62:21:27:27:b4:19:5a:1f:6d:d9:59:9b:26: 45:42:d6:fb:1c:53:0d:a3:a3:46:0e:51:7c:2d:4f:bc:25:65: 3a:45:64:c5:6d:8d:76:d3:ec:3c:ff:dd:c9:92:cf:29:ff:46: 90:50:82:cc:70:17:b5:bc:04:66:c2:6e:a4:f1:2f:4d:bd:e6: da:11:e4:25 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUUj+Frd2pdRXLmm18Y0Al0ARKpwYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDcxNzAzNTUwMFoX DTI2MDcxNjA0MDAwMFowMzExMC8GA1UEAxMoQTcxNDAxNDg1RDRENzQ4MjREREJC NTBDRDI4MjJFRkFGMTcwREVBOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMlZV/2MQFmvzPOxvHHdhQfgyudnelIbk4yLArsTa6ntskKjfbWD5Mp+EV4d uIXXNtmR9r2WihTiLwJ0Rki8Y/EwMCzvk86KfCK6qC8WmU9DGLvVP78vQgFl4mIv hRrzE18kSE1wQTKoCrRAHDa1AfNBlM9mlQZOBcDuxj2r2JWQ9yYNhsXc/LbesZ// 6jDR2sQFBk8dQQfnpaXrDePkVAWutwJDICS1+UwocqFSGYKq095sgHq/QsU+g7H/ 14tUv7HZbdeDrC6UwqM3h8gDvj+3H28niBtbLVL7e1rVR47pjEM/FnKronLdjTUB nizQLaT0GKBV2ie6rVWTU7D9OoECAwEAAaOCAdAwggHMMB0GA1UdDgQWBBSnFAFI XU10gk3btQzSgi768XDeqTAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0OTczNi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAWe8rDANBgkqhkiG9w0BAQsFAAOCAQEAlSeEcWm9YvGeNs0wws/Z gsD8hukFMZ6alh1h4RvjYYNpPm1B1JZz7LzOQBrzoJ17lvw/L24Lv01KwnxcSkjK Q0ZWoRFuR06aIJbZkVwUhfWx+coz5gG1MJZWaue3g/xblV595LuqV7498HbBIF3j SRvM3RS3zaBGRs8CpRBCM1TnN+CopBV9+aYgmjvZZCQEWfcm3RaC1FLfWO9L4GJe UxQKctp+BjVVzF2yfmvvW2tF+/S5/8Uk1ztiIScntBlaH23ZWZsmRULW+xxTDaOj Rg5RfC1PvCVlOkVkxW2NdtPsPP/dyZLPKf9GkFCCzHAXtbwEZsJupPEvTb3m2hHk JQ== -----END CERTIFICATE-----Generated at Sun Jul 20 23:59:21 2025 by rpki-client