$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/1/AS149325.roa File: AS149325.roa (raw, json) Hash identifier: 97BZJ+klxy/oPZ3zFSwma6d6mmwMlH86o52T2fB5oHo= Subject key identifier: 92:5E:1E:61:8C:A0:F2:46:B1:B9:48:62:24:6F:4F:39:DD:94:E4:38 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 2713959C8A56428E951F9B67263F823FB6B13D6A Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS149325.roa Signing time: Fri 09 Oct 2026 02:20:08 +0000 ROA not before: Fri 09 Oct 2026 02:15:08 +0000 ROA not after: Fri 08 Oct 2027 02:20:08 +0000 asID: 149325 IP address blocks: 103.178.172.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Nov 2026 04:20:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:13:95:9c:8a:56:42:8e:95:1f:9b:67:26:3f:82:3f:b6:b1:3d:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Oct 9 02:15:08 2026 GMT Not After : Oct 8 02:20:08 2027 GMT Subject: CN=925E1E618CA0F246B1B94862246F4F39DD94E438 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:09:d3:a1:e9:48:32:16:ec:04:dc:3c:ad:7c: 0b:b1:ea:d2:25:fb:81:f0:07:f6:c2:27:cd:2e:32: ad:92:c1:cb:75:78:d1:6e:90:55:15:5f:9e:60:f9: 0d:d2:9c:30:4b:cc:ea:10:f5:a4:1f:eb:cc:fb:b8: 15:f3:92:64:61:80:43:c6:d0:08:80:8f:26:eb:d9: a2:98:72:57:2f:0a:72:6b:93:54:b4:16:e7:53:5c: 4a:86:f3:f2:90:f8:c9:33:59:5c:b2:ab:fe:4e:74: af:3b:41:f3:e7:67:6a:32:1f:73:c9:75:1a:6c:be: 5f:7c:6e:7f:54:7c:25:c3:dc:b7:0d:dc:56:c1:53: e7:d9:57:5f:ee:80:c4:5c:4b:1f:27:7c:66:b2:9d: 8a:25:94:f3:68:e7:a5:cf:1c:c9:8b:57:47:9b:a3: 89:44:31:08:37:9d:7d:ad:e6:3f:5d:b6:e3:75:fe: 80:36:59:8e:24:94:2c:82:de:af:a5:05:fe:e7:41: 39:66:28:0b:ea:67:36:02:ac:da:90:de:16:21:93: 1e:41:af:71:43:92:f6:a8:90:58:04:06:7e:ab:97: 1d:ae:1f:3c:d6:f0:1e:63:40:19:fc:45:4b:85:05: b3:41:0b:d6:c6:4f:90:c1:70:ac:34:52:84:a4:1d: 2f:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:5E:1E:61:8C:A0:F2:46:B1:B9:48:62:24:6F:4F:39:DD:94:E4:38 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS149325.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.178.172.0/23 Signature Algorithm: sha256WithRSAEncryption 57:03:57:65:b0:9f:49:68:f7:33:fc:fc:8e:cf:df:58:cb:09: 51:d7:e2:b1:c5:db:d3:6c:9f:c4:fe:f7:42:52:1f:37:ec:a2: 10:a8:18:2d:61:c8:ca:fe:7b:58:42:90:21:e0:f7:e3:ea:1f: 58:47:28:b4:0d:24:3f:8a:f2:81:03:32:36:23:43:77:88:7c: 9d:43:a4:fa:d5:11:ce:1c:98:95:02:5e:7e:d4:91:3e:32:0a: 3f:7a:8c:4c:63:cb:bb:ca:4f:8f:4b:af:25:9e:e9:49:98:54: 8c:87:18:68:d7:95:b0:20:03:8c:7f:82:a9:d1:7f:45:ef:e0: c5:76:49:59:89:96:79:87:d6:85:ad:f6:de:84:10:dd:11:dc: b4:0b:c1:ae:d8:b4:97:05:a6:50:67:28:b8:95:24:99:e1:90: ea:78:7b:10:81:34:de:f9:78:bc:b3:13:24:fa:08:84:af:9d: 3f:22:f8:74:ee:a3:a2:6a:a9:ee:ce:eb:88:1e:b3:d7:2a:80: 43:95:a1:4f:60:28:2b:c9:d9:c0:65:9d:a0:ba:b1:e5:03:1a: 99:9e:8b:5e:ee:a5:76:ce:ce:4f:b9:c6:57:66:4b:b0:1d:4c: a8:87:15:bc:23:94:9a:91:c0:9a:68:e4:00:75:19:26:f2:48: 14:bb:48:89 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUJxOVnIpWQo6VH5tnJj+CP7axPWowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MTAwOTAyMTUwOFoX DTI3MTAwODAyMjAwOFowMzExMC8GA1UEAxMoOTI1RTFFNjE4Q0EwRjI0NkIxQjk0 ODYyMjQ2RjRGMzlERDk0RTQzODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANwJ06HpSDIW7ATcPK18C7Hq0iX7gfAH9sInzS4yrZLBy3V40W6QVRVfnmD5 DdKcMEvM6hD1pB/rzPu4FfOSZGGAQ8bQCICPJuvZophyVy8KcmuTVLQW51NcSobz 8pD4yTNZXLKr/k50rztB8+dnajIfc8l1Gmy+X3xuf1R8JcPctw3cVsFT59lXX+6A xFxLHyd8ZrKdiiWU82jnpc8cyYtXR5ujiUQxCDedfa3mP12243X+gDZZjiSULILe r6UF/udBOWYoC+pnNgKs2pDeFiGTHkGvcUOS9qiQWAQGfquXHa4fPNbwHmNAGfxF S4UFs0EL1sZPkMFwrDRShKQdLx0CAwEAAaOCAcwwggHIMB0GA1UdDgQWBBSSXh5h jKDyRrG5SGIkb0853ZTkODAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTQ5MzI1LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQBZ7KsMA0GCSqGSIb3DQEBCwUAA4IBAQBXA1dlsJ9JaPcz/PyOz99YywlR 1+KxxdvTbJ/E/vdCUh837KIQqBgtYcjK/ntYQpAh4Pfj6h9YRyi0DSQ/ivKBAzI2 I0N3iHydQ6T61RHOHJiVAl5+1JE+Mgo/eoxMY8u7yk+PS68lnulJmFSMhxho15Ww IAOMf4Kp0X9F7+DFdklZiZZ5h9aFrfbehBDdEdy0C8Gu2LSXBaZQZyi4lSSZ4ZDq eHsQgTTe+Xi8sxMk+giEr50/Ivh07qOiaqnuzuuIHrPXKoBDlaFPYCgrydnAZZ2g urHlAxqZnote7qV2zs5PucZXZkuwHUyohxW8I5SakcCaaOQAdRkm8kgUu0iJ -----END CERTIFICATE-----Generated at Sat Oct 31 19:39:13 2026 by rpki-client