$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/1/AS149374.roa File: AS149374.roa (raw, json) Hash identifier: plvqpYbg7Wh4Kt9/Kb0XcD1WM5wZoQ1kxbGrTgj/MPg= Subject key identifier: 85:EC:88:C3:11:46:FE:E2:30:5A:C7:73:61:EA:7A:95:81:74:55:1C Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 4A39145626AE5B6CD861B9D608883BF0D8423D4E Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS149374.roa Signing time: Tue 28 Jul 2026 06:29:02 +0000 ROA not before: Tue 28 Jul 2026 06:24:02 +0000 ROA not after: Tue 27 Jul 2027 06:29:02 +0000 asID: 149374 IP address blocks: 103.180.126.0/23 maxlen: 24 2001:df3:8440::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Sep 2026 21:53:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:39:14:56:26:ae:5b:6c:d8:61:b9:d6:08:88:3b:f0:d8:42:3d:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Jul 28 06:24:02 2026 GMT Not After : Jul 27 06:29:02 2027 GMT Subject: CN=85EC88C31146FEE2305AC77361EA7A958174551C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:98:b4:bc:98:3b:5d:88:a4:51:8f:ad:a5:74: ae:50:d1:59:07:10:64:5a:40:fc:f6:a3:f0:75:14: d0:b8:c1:63:60:f2:6e:a5:fc:e1:c8:0c:47:a1:bd: 44:ce:08:68:41:a8:3a:3b:79:31:c8:d7:f6:56:59: 1e:7d:25:31:c4:bd:fb:dc:df:4c:0e:52:f7:dd:78: 68:60:d1:d0:c7:3e:19:02:da:b4:a3:df:52:27:8b: f8:cf:c5:99:2f:f1:d9:55:75:7a:ed:55:69:be:7c: cb:b8:23:6f:d8:1e:ff:4f:f3:1e:ab:95:be:53:5f: f1:02:ba:3c:e3:c4:5e:ef:d8:eb:7a:1b:db:38:00: 3b:b4:6e:c3:f5:49:a7:81:4c:a7:89:a0:d3:8a:c0: d7:ff:90:6d:d2:cc:ab:1a:e1:3d:f6:69:9d:1a:af: 02:bd:36:db:a0:f1:75:05:ae:a8:b5:3a:4e:b9:b2: 4b:97:32:b1:9a:2b:4b:57:50:3c:fb:ec:a6:c4:67: 32:4c:72:81:76:5a:ef:53:a3:5a:72:15:6d:3f:3c: 56:21:b9:b8:2a:a8:9d:19:0a:72:5b:27:8d:e5:16: 5f:d2:db:aa:62:35:ea:cc:69:3c:f5:29:68:68:bb: 4f:73:a6:3e:18:79:5b:7f:1c:b2:4f:4b:58:8c:11: 2d:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:EC:88:C3:11:46:FE:E2:30:5A:C7:73:61:EA:7A:95:81:74:55:1C X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS149374.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.180.126.0/23 IPv6: 2001:df3:8440::/48 Signature Algorithm: sha256WithRSAEncryption 09:c7:be:29:e7:ff:e3:42:6a:2c:44:5a:59:9b:56:2f:d8:3e: 42:61:9a:f5:bc:97:0c:bb:30:6c:e4:50:ee:15:b1:c7:86:b0: cc:83:01:3a:ea:a8:dd:0f:41:55:5d:07:e4:cb:02:d5:b8:bd: ea:5a:72:b0:d9:48:89:fb:68:b3:ce:9e:4e:df:67:af:19:60: 13:fd:98:c9:b0:fa:83:3f:a1:bc:bc:d2:c9:7e:ae:60:d6:0c: 5d:2d:0a:69:7e:ac:d3:3f:c9:b0:bd:c0:5a:fe:6b:83:44:e3: 9a:54:67:89:aa:5c:23:3b:5d:b2:97:0a:96:11:08:3e:1e:9b: d6:f7:0a:f4:f4:3b:ea:02:cb:26:c9:8d:59:11:82:13:d8:43: 4d:ac:68:e9:09:da:02:90:3d:9d:26:20:9f:f1:ca:57:45:9b: 9d:8c:82:dc:57:da:db:c7:5b:78:7a:80:bd:ae:7d:14:4e:78: 20:f1:29:7d:52:1b:46:37:ee:81:f9:29:7f:a6:cc:50:24:71: 74:65:eb:64:28:35:55:3e:ca:e7:58:3c:83:0f:4f:25:2d:6d: 09:4d:c3:ad:cc:f2:12:b4:81:1d:82:cc:b3:cd:cc:af:fd:36: 8f:2e:d6:03:7f:e2:a2:73:a6:d1:97:a7:d5:99:bc:e3:6c:14: 2a:a6:2e:16 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUSjkUViauW2zYYbnWCIg78NhCPU4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDcyODA2MjQwMloX DTI3MDcyNzA2MjkwMlowMzExMC8GA1UEAxMoODVFQzg4QzMxMTQ2RkVFMjMwNUFD NzczNjFFQTdBOTU4MTc0NTUxQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALuYtLyYO12IpFGPraV0rlDRWQcQZFpA/Paj8HUU0LjBY2DybqX84cgMR6G9 RM4IaEGoOjt5McjX9lZZHn0lMcS9+9zfTA5S9914aGDR0Mc+GQLatKPfUieL+M/F mS/x2VV1eu1Vab58y7gjb9ge/0/zHquVvlNf8QK6POPEXu/Y63ob2zgAO7Ruw/VJ p4FMp4mg04rA1/+QbdLMqxrhPfZpnRqvAr0226DxdQWuqLU6TrmyS5cysZorS1dQ PPvspsRnMkxygXZa71OjWnIVbT88ViG5uCqonRkKclsnjeUWX9LbqmI16sxpPPUp aGi7T3OmPhh5W38csk9LWIwRLYMCAwEAAaOCAd0wggHZMB0GA1UdDgQWBBSF7IjD EUb+4jBax3Nh6nqVgXRVHDAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTQ5Mzc0LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIA ATAGAwQBZ7R+MA8EAgACMAkDBwAgAQ3zhEAwDQYJKoZIhvcNAQELBQADggEBAAnH vinn/+NCaixEWlmbVi/YPkJhmvW8lwy7MGzkUO4VsceGsMyDATrqqN0PQVVdB+TL AtW4vepacrDZSIn7aLPOnk7fZ68ZYBP9mMmw+oM/oby80sl+rmDWDF0tCml+rNM/ ybC9wFr+a4NE45pUZ4mqXCM7XbKXCpYRCD4em9b3CvT0O+oCyybJjVkRghPYQ02s aOkJ2gKQPZ0mIJ/xyldFm52MgtxX2tvHW3h6gL2ufRROeCDxKX1SG0Y37oH5KX+m zFAkcXRl62QoNVU+yudYPIMPTyUtbQlNw63M8hK0gR2CzLPNzK/9No8u1gN/4qJz ptGXp9WZvONsFCqmLhY= -----END CERTIFICATE-----Generated at Thu Sep 3 06:18:31 2026 by rpki-client