$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS149338.roa File: AS149338.roa (raw, json) Hash identifier: 8dN1AEtEKMHsuZpuhvPcWJnrDG7GwbbtaZcOrr/a3cg= Subject key identifier: F7:9D:0C:ED:65:7E:70:21:50:1E:1F:88:7D:A8:3B:60:DD:AB:CE:AD Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 5C5F0968603ADC1B600DDF4F9C79F4B8CEB580C9 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS149338.roa Signing time: Sat 02 May 2026 09:20:47 +0000 ROA not before: Sat 02 May 2026 09:15:47 +0000 ROA not after: Sat 01 May 2027 09:20:47 +0000 asID: 149338 IP address blocks: 103.179.92.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:58:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:5f:09:68:60:3a:dc:1b:60:0d:df:4f:9c:79:f4:b8:ce:b5:80:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 09:15:47 2026 GMT Not After : May 1 09:20:47 2027 GMT Subject: CN=F79D0CED657E7021501E1F887DA83B60DDABCEAD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:61:4d:57:7c:40:8f:bf:76:0a:92:f9:0c:f7: b0:8a:37:7d:13:c2:d6:2f:38:51:49:c5:e6:6a:ca: a6:91:e4:b2:ac:10:26:8c:4b:f2:26:24:a0:29:d7: 93:d0:74:f5:27:da:d3:3a:d8:c4:11:91:26:f5:d3: b3:31:1d:17:01:fb:9d:13:71:33:28:8a:13:aa:5e: 5e:2b:56:d5:d3:3c:b6:04:a1:3c:2b:9f:57:db:5a: e5:2d:11:dc:67:c9:ad:c0:4a:6d:84:f7:f3:81:43: 87:fb:39:24:fa:82:50:14:74:69:31:ef:24:1b:f2: 75:be:16:42:df:35:ad:0d:1c:0a:a4:dd:52:e9:d6: a7:5c:dc:e6:d5:69:2d:ce:f0:59:48:d5:e2:a0:3c: 60:42:6f:14:30:d8:9e:43:d6:33:d1:92:a0:b7:bc: 19:63:24:6e:58:07:9e:4b:39:c5:3d:52:38:33:47: 0d:a0:af:e5:fd:c8:72:59:33:3b:69:f2:b2:a3:09: 6d:b9:e1:0b:de:24:c2:f5:8b:23:ae:b5:85:68:db: 48:46:58:7d:75:0b:8a:be:02:aa:88:ed:67:15:9c: c0:2c:f4:27:d7:67:0a:ce:38:38:51:b1:cf:96:64: 89:07:ae:b2:a5:46:9e:17:6f:76:16:a9:90:48:db: 90:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:9D:0C:ED:65:7E:70:21:50:1E:1F:88:7D:A8:3B:60:DD:AB:CE:AD X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS149338.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.179.92.0/23 Signature Algorithm: sha256WithRSAEncryption 20:d6:76:c2:98:e6:b2:8f:b8:3d:c9:67:cf:9b:84:87:66:07: 11:19:c5:58:fc:11:92:f5:12:ba:ec:b6:d7:ea:d7:5d:23:f5: a9:19:0e:81:7f:35:ce:03:5e:07:88:bd:d3:ee:32:59:03:9c: f9:11:62:03:4e:a7:70:78:e1:51:5e:11:6f:81:5b:86:56:63: 55:90:b4:15:2c:1e:55:bb:23:ca:a2:80:0a:d5:0b:5b:e1:5f: ee:9b:76:d4:57:50:8a:42:49:37:41:6e:a7:a8:0d:66:a1:5e: 2a:6f:6b:9f:37:bd:7f:1a:99:41:76:75:ef:66:91:a3:19:11: ff:7d:05:f1:a1:b4:7e:c1:93:68:fa:32:0b:e1:0c:93:df:9b: 9c:a4:ad:c6:de:36:90:e6:82:a3:b8:89:93:36:cf:67:98:7e: 8c:93:cf:54:b9:43:25:8c:e2:4c:32:e5:44:53:d4:13:fe:e6: 13:de:45:4a:af:9c:c2:e4:e1:8b:c6:06:24:79:2a:87:0b:87: d2:d4:3c:50:34:8d:b2:19:bc:22:65:8e:c1:4f:7d:13:6f:b7: 2d:13:0c:fc:76:2b:a4:ff:4c:c9:9d:19:98:5e:d0:9e:b2:9a: c5:fc:b4:e1:e1:23:52:8e:07:22:df:bb:54:6e:ce:a2:a4:87: c5:6e:fc:bd -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUXF8JaGA63BtgDd9PnHn0uM61gMkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA5MTU0N1oX DTI3MDUwMTA5MjA0N1owMzExMC8GA1UEAxMoRjc5RDBDRUQ2NTdFNzAyMTUwMUUx Rjg4N0RBODNCNjBEREFCQ0VBRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALNhTVd8QI+/dgqS+Qz3sIo3fRPC1i84UUnF5mrKppHksqwQJoxL8iYkoCnX k9B09Sfa0zrYxBGRJvXTszEdFwH7nRNxMyiKE6peXitW1dM8tgShPCufV9ta5S0R 3GfJrcBKbYT384FDh/s5JPqCUBR0aTHvJBvydb4WQt81rQ0cCqTdUunWp1zc5tVp Lc7wWUjV4qA8YEJvFDDYnkPWM9GSoLe8GWMkblgHnks5xT1SODNHDaCv5f3Iclkz O2nysqMJbbnhC94kwvWLI661hWjbSEZYfXULir4CqojtZxWcwCz0J9dnCs44OFGx z5ZkiQeusqVGnhdvdhapkEjbkH0CAwEAAaOCAcwwggHIMB0GA1UdDgQWBBT3nQzt ZX5wIVAeH4h9qDtg3avOrTAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTQ5MzM4LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQBZ7NcMA0GCSqGSIb3DQEBCwUAA4IBAQAg1nbCmOayj7g9yWfPm4SHZgcR GcVY/BGS9RK67LbX6tddI/WpGQ6BfzXOA14HiL3T7jJZA5z5EWIDTqdweOFRXhFv gVuGVmNVkLQVLB5VuyPKooAK1Qtb4V/um3bUV1CKQkk3QW6nqA1moV4qb2ufN71/ GplBdnXvZpGjGRH/fQXxobR+wZNo+jIL4QyT35ucpK3G3jaQ5oKjuImTNs9nmH6M k89UuUMljOJMMuVEU9QT/uYT3kVKr5zC5OGLxgYkeSqHC4fS1DxQNI2yGbwiZY7B T30Tb7ctEwz8diuk/0zJnRmYXtCesprF/LTh4SNSjgci37tUbs6ipIfFbvy9 -----END CERTIFICATE-----Generated at Sun May 3 00:40:41 2026 by rpki-client