$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/1/AS149947.roa File: AS149947.roa (raw, json) Hash identifier: 4RxODUgeSWBw4tm8pieNrDR+D5NqvjhlrEq62+t4/YY= Subject key identifier: F1:96:86:6E:FD:77:F9:E6:E4:6D:84:C3:93:6C:A7:41:2C:97:89:7A Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 39EA90B54D2B31E51D1A461BE49AF3EA09DF83A3 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS149947.roa Signing time: Fri 28 Aug 2026 03:03:20 +0000 ROA not before: Fri 28 Aug 2026 02:58:20 +0000 ROA not after: Fri 27 Aug 2027 03:03:20 +0000 asID: 149947 IP address blocks: 103.88.152.0/23 maxlen: 24 103.88.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Sep 2026 21:53:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:ea:90:b5:4d:2b:31:e5:1d:1a:46:1b:e4:9a:f3:ea:09:df:83:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Aug 28 02:58:20 2026 GMT Not After : Aug 27 03:03:20 2027 GMT Subject: CN=F196866EFD77F9E6E46D84C3936CA7412C97897A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:68:90:71:9f:11:c5:eb:12:ed:87:11:2c:40: 73:c0:80:a0:80:c9:23:e1:f4:7b:e4:2f:64:a2:b0: cc:fc:56:e2:fa:dd:71:b3:26:b4:6d:bc:68:1b:37: a7:a9:72:72:18:ae:3f:f4:19:ff:9d:66:2e:cb:88: 34:e0:6c:56:0a:02:56:1b:84:3b:7f:b0:1f:87:07: d3:91:7c:a3:6f:ee:4d:15:1a:70:3b:03:41:0c:56: 79:20:9b:90:f7:0e:4b:2c:90:12:b1:d4:f8:78:67: 79:a0:b9:77:07:cc:57:79:67:98:f1:ca:06:08:ac: 99:a3:1a:c0:66:24:e9:e0:2e:6a:4e:1e:30:fc:ae: bd:c5:d4:c4:27:da:61:4a:53:93:08:ac:d4:37:00: 1e:93:a9:ff:9e:cc:67:cb:8c:41:32:16:3d:50:6c: 21:91:13:eb:6a:f0:d9:ad:a1:a9:37:51:0a:71:5d: 45:26:c2:45:62:40:82:ea:1e:a1:7c:9d:97:e7:91: 44:ed:27:1c:57:2a:9f:5f:22:ca:b1:be:10:a1:a8: bf:2f:08:92:67:c8:b3:25:f1:87:5d:db:e6:84:02: 2e:8c:24:97:a3:1c:2a:70:4c:0e:87:23:ca:c9:a1: 5f:68:d1:07:d3:7d:8c:e6:d2:12:f7:b2:9c:b6:9d: 89:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:96:86:6E:FD:77:F9:E6:E4:6D:84:C3:93:6C:A7:41:2C:97:89:7A X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS149947.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.88.152.0/23 Signature Algorithm: sha256WithRSAEncryption 42:90:57:db:50:ee:8a:bd:1c:c4:f9:83:c2:5b:6e:43:03:66: 77:7a:22:79:4a:e8:0f:8f:73:de:33:5d:05:cf:a0:d8:76:50: c9:25:c0:1a:12:39:d3:09:41:3c:68:01:3d:ab:74:ae:3e:71: 8a:9d:43:00:56:fb:34:49:c0:3b:7b:0d:8e:70:ce:85:1c:b1: 03:a6:6f:aa:d6:37:7b:11:df:43:01:c1:51:1c:80:85:81:5d: c6:64:3a:bd:e5:64:e4:be:ca:31:c6:45:48:22:a3:ab:c5:64: 26:09:b9:4e:63:09:7c:e7:46:27:33:82:c9:c9:ef:1d:3d:20: a8:e4:d6:99:f4:09:72:0e:82:40:96:62:3d:cd:ee:50:ae:95: 02:c4:83:b6:b7:16:c9:a0:ef:6d:66:16:a5:2f:f6:78:e0:de: 91:a3:f6:b8:09:8d:4f:42:3c:20:3f:7a:1c:85:2c:5a:da:4f: 6e:18:4a:be:c9:5f:84:25:40:73:5c:1d:f8:0a:5f:3d:bd:10: e3:b9:29:e7:4c:4b:83:cd:dc:79:d0:df:4b:af:0d:f8:b5:09: b5:9c:9d:15:d7:f4:c5:6b:76:00:1a:fe:9d:c3:64:d7:66:7a: 24:54:b4:bb:08:7e:05:d9:af:0b:d6:4e:a7:0f:49:7b:4f:e5: ac:e1:c1:e1 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUOeqQtU0rMeUdGkYb5Jrz6gnfg6MwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDgyODAyNTgyMFoX DTI3MDgyNzAzMDMyMFowMzExMC8GA1UEAxMoRjE5Njg2NkVGRDc3RjlFNkU0NkQ4 NEMzOTM2Q0E3NDEyQzk3ODk3QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMNokHGfEcXrEu2HESxAc8CAoIDJI+H0e+QvZKKwzPxW4vrdcbMmtG28aBs3 p6lychiuP/QZ/51mLsuINOBsVgoCVhuEO3+wH4cH05F8o2/uTRUacDsDQQxWeSCb kPcOSyyQErHU+HhneaC5dwfMV3lnmPHKBgismaMawGYk6eAuak4eMPyuvcXUxCfa YUpTkwis1DcAHpOp/57MZ8uMQTIWPVBsIZET62rw2a2hqTdRCnFdRSbCRWJAguoe oXydl+eRRO0nHFcqn18iyrG+EKGovy8IkmfIsyXxh13b5oQCLowkl6McKnBMDocj ysmhX2jRB9N9jObSEveynLadiSkCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBTxloZu /Xf55uRthMOTbKdBLJeJejAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTQ5OTQ3LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQBZ1iYMA0GCSqGSIb3DQEBCwUAA4IBAQBCkFfbUO6KvRzE+YPCW25DA2Z3 eiJ5SugPj3PeM10Fz6DYdlDJJcAaEjnTCUE8aAE9q3SuPnGKnUMAVvs0ScA7ew2O cM6FHLEDpm+q1jd7Ed9DAcFRHICFgV3GZDq95WTkvsoxxkVIIqOrxWQmCblOYwl8 50YnM4LJye8dPSCo5NaZ9AlyDoJAlmI9ze5QrpUCxIO2txbJoO9tZhalL/Z44N6R o/a4CY1PQjwgP3ochSxa2k9uGEq+yV+EJUBzXB34Cl89vRDjuSnnTEuDzdx50N9L rw34tQm1nJ0V1/TFa3YAGv6dw2TXZnokVLS7CH4F2a8L1k6nD0l7T+Ws4cHh -----END CERTIFICATE-----Generated at Thu Sep 3 03:11:46 2026 by rpki-client