$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS149350.roa File: AS149350.roa (raw, json) Hash identifier: Sf+Om1ILHQBBDCq4Z9yWK2+ynkHfoJt8t4F2jLgO4qw= Subject key identifier: 0C:C2:11:10:47:AF:B8:A4:8F:19:6E:D0:86:40:18:71:8E:39:84:8B Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 1B2728CD02DC30222688477D6C80A9F586E2FE23 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS149350.roa Signing time: Sat 02 May 2026 09:20:51 +0000 ROA not before: Sat 02 May 2026 09:15:51 +0000 ROA not after: Sat 01 May 2027 09:20:51 +0000 asID: 149350 IP address blocks: 103.179.252.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 03:13:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:27:28:cd:02:dc:30:22:26:88:47:7d:6c:80:a9:f5:86:e2:fe:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 09:15:51 2026 GMT Not After : May 1 09:20:51 2027 GMT Subject: CN=0CC2111047AFB8A48F196ED0864018718E39848B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:7b:98:6a:45:c7:47:c6:80:7f:6b:a3:17:c1: 27:25:f7:01:58:46:dd:f7:9d:a3:84:cf:5a:d1:34: df:cd:3f:87:64:b5:2d:6b:a6:ad:7e:a7:16:45:be: f9:94:7a:33:2f:1a:4a:e5:ba:db:25:3a:ba:d2:a1: aa:e7:90:27:35:3c:cc:c2:c6:33:ac:1e:39:79:d0: c3:20:2e:da:2d:34:62:45:5e:4e:d1:fd:da:9e:6f: 9a:30:db:2c:6d:6d:a5:12:e9:46:e8:fc:2e:a7:e5: a1:08:fc:b0:19:ea:c5:61:ae:59:9f:7a:9a:71:13: 51:19:a1:4b:ed:0e:3c:15:fc:1f:ed:2c:0c:38:4d: 27:5f:ff:35:96:b5:21:e7:f9:6e:af:0d:17:34:82: 79:10:86:e7:c5:71:1d:36:bd:fb:83:d0:82:96:00: d5:16:ed:b1:26:f0:5e:6c:e3:95:ff:5b:39:e2:d7: df:f4:a4:5e:e0:b3:ff:8e:87:06:16:1e:f1:54:06: 66:43:8a:6c:55:f1:8a:13:78:33:cb:22:35:47:d6: 87:1b:64:2b:14:69:4f:d3:57:15:f9:c0:b9:7a:54: 8c:bd:b1:5f:7d:3e:da:a1:81:f5:75:d8:4b:c9:63: df:ce:4d:23:08:9a:f9:e8:60:47:4d:9b:7d:6b:f1: 34:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:C2:11:10:47:AF:B8:A4:8F:19:6E:D0:86:40:18:71:8E:39:84:8B X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS149350.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.179.252.0/23 Signature Algorithm: sha256WithRSAEncryption a3:e3:24:47:76:39:15:60:8c:f3:8b:03:90:e5:3e:1a:b4:53: 06:79:62:73:e3:8f:07:b1:a0:1d:78:a6:ad:ab:c3:6a:c0:82: 18:a1:09:bb:82:0a:8c:67:08:2d:ee:ea:4e:69:6f:b4:ad:92: 14:95:95:52:06:52:c9:3a:b4:85:eb:72:25:7b:34:74:73:1d: 00:b8:a8:ab:1b:1c:ba:c4:55:f0:e8:23:97:31:fb:5c:6a:4f: e8:87:0a:de:2f:0a:b4:88:12:90:b2:f6:5b:e5:02:f4:ba:b0: 6c:9c:69:a1:b0:7d:44:93:b3:2e:d7:90:ef:c5:ce:3f:7a:78: 68:6c:7a:e3:a4:b1:49:46:29:1d:ac:d1:f6:f2:59:72:5c:b0: 01:cb:c3:05:d4:56:7c:a6:40:1c:6a:cc:27:b6:8d:41:7a:bd: de:8d:95:13:28:30:a6:92:2d:1c:1a:2d:93:b3:bd:9d:50:53: f1:18:ea:3e:7a:4c:ea:f0:23:77:67:7d:23:9d:15:f1:d0:f7: 99:f2:d6:be:be:02:df:dd:02:b0:d8:39:0b:b3:2a:30:83:9b: f4:d0:26:dc:3f:ee:7d:be:95:b8:2e:b0:a1:23:bb:f1:4b:c7: 5d:0a:e6:14:52:2b:2a:b7:38:5e:e6:50:a0:a6:2e:52:c1:05: 53:70:e6:c3 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUGycozQLcMCImiEd9bICp9Ybi/iMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA5MTU1MVoX DTI3MDUwMTA5MjA1MVowMzExMC8GA1UEAxMoMENDMjExMTA0N0FGQjhBNDhGMTk2 RUQwODY0MDE4NzE4RTM5ODQ4QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKB7mGpFx0fGgH9roxfBJyX3AVhG3fedo4TPWtE0380/h2S1LWumrX6nFkW+ +ZR6My8aSuW62yU6utKhqueQJzU8zMLGM6weOXnQwyAu2i00YkVeTtH92p5vmjDb LG1tpRLpRuj8LqfloQj8sBnqxWGuWZ96mnETURmhS+0OPBX8H+0sDDhNJ1//NZa1 Ief5bq8NFzSCeRCG58VxHTa9+4PQgpYA1RbtsSbwXmzjlf9bOeLX3/SkXuCz/46H BhYe8VQGZkOKbFXxihN4M8siNUfWhxtkKxRpT9NXFfnAuXpUjL2xX30+2qGB9XXY S8lj385NIwia+ehgR02bfWvxNBECAwEAAaOCAcwwggHIMB0GA1UdDgQWBBQMwhEQ R6+4pI8ZbtCGQBhxjjmEizAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTQ5MzUwLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQBZ7P8MA0GCSqGSIb3DQEBCwUAA4IBAQCj4yRHdjkVYIzziwOQ5T4atFMG eWJz448HsaAdeKatq8NqwIIYoQm7ggqMZwgt7upOaW+0rZIUlZVSBlLJOrSF63Il ezR0cx0AuKirGxy6xFXw6COXMftcak/ohwreLwq0iBKQsvZb5QL0urBsnGmhsH1E k7Mu15Dvxc4/enhobHrjpLFJRikdrNH28llyXLABy8MF1FZ8pkAcaswnto1Ber3e jZUTKDCmki0cGi2Ts72dUFPxGOo+ekzq8CN3Z30jnRXx0PeZ8ta+vgLf3QKw2DkL syowg5v00CbcP+59vpW4LrChI7vxS8ddCuYUUisqtzhe5lCgpi5SwQVTcObD -----END CERTIFICATE-----Generated at Sun May 3 01:44:55 2026 by rpki-client