$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/1/AS149924.roa File: AS149924.roa (raw, json) Hash identifier: CPyrOqhZIYdvBiQJSBJBuStrmwOesLI9I5aKrQGPVJk= Subject key identifier: 71:85:63:1B:CC:18:7C:B7:D3:02:38:61:BB:E4:A8:D0:0E:F9:F3:7B Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 6761F377F789E75CBCB2982A807000BA1E4494E3 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS149924.roa Signing time: Mon 02 Nov 2026 08:34:38 +0000 ROA not before: Mon 02 Nov 2026 08:29:38 +0000 ROA not after: Mon 01 Nov 2027 08:34:38 +0000 asID: 149924 IP address blocks: 203.83.24.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Nov 2026 10:07:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:61:f3:77:f7:89:e7:5c:bc:b2:98:2a:80:70:00:ba:1e:44:94:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Nov 2 08:29:38 2026 GMT Not After : Nov 1 08:34:38 2027 GMT Subject: CN=7185631BCC187CB7D3023861BBE4A8D00EF9F37B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:19:c0:ca:ba:d3:40:b4:7c:8f:f6:6a:69:ea: 21:bf:c8:8a:41:49:fb:f8:61:b5:6c:e6:d0:b9:21: 2e:96:90:38:91:b2:fd:22:75:0a:87:18:59:93:8c: 0b:2a:b6:04:01:67:57:3a:bd:68:4c:e9:68:6a:d4: 3c:bc:b5:22:b7:d1:18:34:62:57:a0:9c:50:d2:02: 81:b4:e3:7b:4b:49:28:b3:26:08:41:7b:44:54:ba: 67:a6:c3:32:ea:3f:3e:63:6d:69:27:c0:b3:ea:48: f9:34:d1:f0:94:24:f7:73:67:ef:f4:5a:e6:3e:1f: 5b:4e:82:43:93:43:2c:b8:31:01:bd:7e:4b:a2:17: a2:47:15:ee:09:3d:fd:66:3d:7a:c2:f0:fc:60:cd: 05:ec:70:78:1a:3c:d4:ff:8f:46:f4:64:fd:b2:a3: 06:86:79:56:4e:d5:c3:9b:63:a8:d5:a4:60:61:9b: d2:b5:90:4f:e4:97:b1:aa:a6:e5:94:94:48:c6:3c: a4:9a:f2:64:e4:05:97:54:d4:b7:99:aa:dc:bc:ca: 87:99:37:4d:0b:a7:56:10:33:1e:3b:67:2b:ea:9f: 03:f3:61:ea:71:ce:e8:38:d0:61:47:98:c4:18:a2: 8c:86:31:6d:6a:55:47:c3:a4:67:02:dc:55:1d:96: 2b:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:85:63:1B:CC:18:7C:B7:D3:02:38:61:BB:E4:A8:D0:0E:F9:F3:7B X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS149924.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.83.24.0/23 Signature Algorithm: sha256WithRSAEncryption 11:06:d0:af:6e:45:d1:56:4b:dc:3e:b4:ce:e4:4a:09:df:18: 2c:4c:63:95:e0:45:be:0f:8f:ef:a0:cc:ff:ae:52:8e:0b:ca: 02:a3:51:f9:ed:9e:36:b9:84:d0:17:75:1a:96:31:d4:8c:f7: c4:7e:b9:a9:24:61:58:55:f0:d8:b5:15:57:70:34:87:9e:11: d3:af:03:3f:54:f7:3f:46:64:0b:b0:c4:90:6a:21:76:78:05: 2a:7a:18:3c:08:20:49:cd:8e:43:7b:45:6a:0e:c0:ed:4e:01: fe:72:12:e3:d9:72:27:a5:02:88:c2:9c:f0:89:6d:fa:fd:78: f6:b9:32:60:12:36:e8:d0:56:7f:75:47:88:ad:cb:ce:22:ca: aa:f6:20:a0:15:19:f2:1f:ba:8f:35:6b:08:2b:a7:1e:bc:3b: 6d:ae:d0:3f:b3:56:e9:7b:1d:0d:59:6b:cf:6f:8e:23:ef:ae: 67:fe:41:88:02:7e:4a:da:a9:2d:f8:b1:21:fc:7d:6c:19:8b: 76:a8:81:bb:70:8c:8a:65:fa:11:4e:f7:28:f9:e3:67:c1:ad: 6f:09:e1:e6:4f:65:8f:b7:5c:30:a2:fe:37:86:84:db:75:2e: 5c:e2:79:47:00:df:d0:b4:c6:f3:6e:d5:a2:75:5f:4c:6a:21: fc:e9:e6:16 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUZ2Hzd/eJ51y8spgqgHAAuh5ElOMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MTEwMjA4MjkzOFoX DTI3MTEwMTA4MzQzOFowMzExMC8GA1UEAxMoNzE4NTYzMUJDQzE4N0NCN0QzMDIz ODYxQkJFNEE4RDAwRUY5RjM3QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALcZwMq600C0fI/2amnqIb/IikFJ+/hhtWzm0LkhLpaQOJGy/SJ1CocYWZOM Cyq2BAFnVzq9aEzpaGrUPLy1IrfRGDRiV6CcUNICgbTje0tJKLMmCEF7RFS6Z6bD Muo/PmNtaSfAs+pI+TTR8JQk93Nn7/Ra5j4fW06CQ5NDLLgxAb1+S6IXokcV7gk9 /WY9esLw/GDNBexweBo81P+PRvRk/bKjBoZ5Vk7Vw5tjqNWkYGGb0rWQT+SXsaqm 5ZSUSMY8pJryZOQFl1TUt5mq3LzKh5k3TQunVhAzHjtnK+qfA/Nh6nHO6DjQYUeY xBiijIYxbWpVR8OkZwLcVR2WK2UCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBRxhWMb zBh8t9MCOGG75KjQDvnzezAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTQ5OTI0LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQBy1MYMA0GCSqGSIb3DQEBCwUAA4IBAQARBtCvbkXRVkvcPrTO5EoJ3xgs TGOV4EW+D4/voMz/rlKOC8oCo1H57Z42uYTQF3UaljHUjPfEfrmpJGFYVfDYtRVX cDSHnhHTrwM/VPc/RmQLsMSQaiF2eAUqehg8CCBJzY5De0VqDsDtTgH+chLj2XIn pQKIwpzwiW36/Xj2uTJgEjbo0FZ/dUeIrcvOIsqq9iCgFRnyH7qPNWsIK6cevDtt rtA/s1bpex0NWWvPb44j765n/kGIAn5K2qkt+LEh/H1sGYt2qIG7cIyKZfoRTvco +eNnwa1vCeHmT2WPt1wwov43hoTbdS5c4nlHAN/QtMbzbtWidV9MaiH86eYW -----END CERTIFICATE-----Generated at Tue Nov 3 21:30:56 2026 by rpki-client