$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS149354.roa File: AS149354.roa (raw, json) Hash identifier: NcOOCnpoelGMK8BlBAjMHyOInsKQg3w/xVtuV5FjCeg= Subject key identifier: C2:7F:7C:AF:6D:7A:1F:0C:63:49:D0:A0:97:BC:77:3D:CE:38:5A:2C Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 589F9B6678AAA909A1166225A447A6D88B54AEEE Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS149354.roa Signing time: Sat 02 May 2026 09:20:51 +0000 ROA not before: Sat 02 May 2026 09:15:51 +0000 ROA not after: Sat 01 May 2027 09:20:51 +0000 asID: 149354 IP address blocks: 103.179.138.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:58:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:9f:9b:66:78:aa:a9:09:a1:16:62:25:a4:47:a6:d8:8b:54:ae:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 09:15:51 2026 GMT Not After : May 1 09:20:51 2027 GMT Subject: CN=C27F7CAF6D7A1F0C6349D0A097BC773DCE385A2C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:16:d8:76:af:04:40:7e:97:e9:e1:b4:d4:7d: cd:ba:e5:48:c3:9d:10:25:d4:bd:79:e1:30:9d:61: 29:9d:bd:c9:4f:ea:9e:24:43:19:52:f8:56:78:b3: 4e:a1:24:ac:e3:cd:33:1a:c5:21:fb:a8:56:e1:8b: 27:f1:2f:31:34:8d:46:f3:e9:26:bc:26:60:41:83: c4:43:42:cd:65:99:e2:ad:a9:b7:ce:1e:9e:ae:12: 0e:a6:f5:9d:75:51:5f:95:21:87:8f:a7:c7:0a:18: 0f:f0:6a:5a:4d:4a:a7:90:d5:ad:1b:1c:df:94:6c: e0:81:09:55:e7:1c:7d:61:56:01:93:a9:6c:94:d2: f0:0d:6b:d3:81:ba:d6:34:24:9d:20:2e:7a:54:f6: 0c:9c:aa:bf:08:be:e8:7b:4a:7f:9c:d1:99:89:6c: e6:2e:b6:ae:08:3b:50:63:50:d8:fb:4d:8c:da:04: 55:29:9b:d5:8c:91:7f:a6:9b:e3:66:c8:0a:77:ab: 85:e4:85:da:86:3a:08:81:b5:48:eb:6a:f7:30:27: 20:40:20:af:95:da:dc:95:73:1b:84:22:ca:df:5d: 61:73:83:6b:e9:99:c5:a7:a1:69:c4:06:68:fa:8c: c3:d1:99:0f:2b:01:fe:39:07:5e:8c:28:75:0e:d7: 71:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:7F:7C:AF:6D:7A:1F:0C:63:49:D0:A0:97:BC:77:3D:CE:38:5A:2C X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS149354.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.179.138.0/23 Signature Algorithm: sha256WithRSAEncryption 35:94:57:98:a7:ea:54:87:bb:e8:c9:79:84:72:22:5d:ed:d6: d8:44:77:2a:87:e4:b3:d8:62:2b:8f:c2:19:0b:ab:70:f1:65: 41:c8:91:f2:ab:da:59:1b:78:9b:f8:52:6b:8f:27:8a:9f:f9: 49:69:f6:ce:43:de:4c:26:9b:4f:ba:df:37:a6:8b:c3:9e:97: 1f:70:15:19:f3:e1:36:1a:22:22:ec:16:b8:74:e4:46:e9:15: 44:d7:37:c2:5e:1e:01:07:58:06:c1:a3:d2:62:5f:d9:d1:9f: d6:7b:3e:94:ee:aa:a0:c1:ca:23:30:9c:30:60:f6:d3:25:e4: 94:0b:58:1a:6a:75:a7:d1:24:7a:2b:4d:99:48:ca:5b:32:68: 48:2c:90:46:74:11:5b:34:d2:32:9e:ed:17:71:fc:f3:17:f6: 81:a4:1a:09:21:ba:38:93:75:91:a9:9a:49:fd:0f:ae:a1:6c: 34:27:86:ce:b5:1c:4e:67:d9:8c:d8:06:d3:d6:a3:1e:c8:33: d1:f7:65:10:cb:5b:c9:3d:e0:55:91:0c:e3:94:be:99:2c:8b: c9:bb:25:80:08:86:42:62:03:d6:fb:76:c2:c9:69:16:59:e1: e8:37:95:99:03:da:0c:f4:e4:e6:8d:41:eb:60:50:c5:fe:01: 87:74:c6:5b -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUWJ+bZniqqQmhFmIlpEem2ItUru4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA5MTU1MVoX DTI3MDUwMTA5MjA1MVowMzExMC8GA1UEAxMoQzI3RjdDQUY2RDdBMUYwQzYzNDlE MEEwOTdCQzc3M0RDRTM4NUEyQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKsW2HavBEB+l+nhtNR9zbrlSMOdECXUvXnhMJ1hKZ29yU/qniRDGVL4Vniz TqEkrOPNMxrFIfuoVuGLJ/EvMTSNRvPpJrwmYEGDxENCzWWZ4q2pt84enq4SDqb1 nXVRX5Uhh4+nxwoYD/BqWk1Kp5DVrRsc35Rs4IEJVeccfWFWAZOpbJTS8A1r04G6 1jQknSAuelT2DJyqvwi+6HtKf5zRmYls5i62rgg7UGNQ2PtNjNoEVSmb1YyRf6ab 42bICnerheSF2oY6CIG1SOtq9zAnIEAgr5Xa3JVzG4Qiyt9dYXODa+mZxaehacQG aPqMw9GZDysB/jkHXowodQ7XcbMCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBTCf3yv bXofDGNJ0KCXvHc9zjhaLDAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTQ5MzU0LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQBZ7OKMA0GCSqGSIb3DQEBCwUAA4IBAQA1lFeYp+pUh7voyXmEciJd7dbY RHcqh+Sz2GIrj8IZC6tw8WVByJHyq9pZG3ib+FJrjyeKn/lJafbOQ95MJptPut83 povDnpcfcBUZ8+E2GiIi7Ba4dORG6RVE1zfCXh4BB1gGwaPSYl/Z0Z/Wez6U7qqg wcojMJwwYPbTJeSUC1gaanWn0SR6K02ZSMpbMmhILJBGdBFbNNIynu0XcfzzF/aB pBoJIbo4k3WRqZpJ/Q+uoWw0J4bOtRxOZ9mM2AbT1qMeyDPR92UQy1vJPeBVkQzj lL6ZLIvJuyWACIZCYgPW+3bCyWkWWeHoN5WZA9oM9OTmjUHrYFDF/gGHdMZb -----END CERTIFICATE-----Generated at Sun May 3 00:42:22 2026 by rpki-client