$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS149358.roa File: AS149358.roa (raw, json) Hash identifier: LqClq848TSwm3t7j7I43pkDlRM3QFB2EKmWrHRJ2uyc= Subject key identifier: 21:8C:AE:64:71:D3:F4:62:13:CC:CA:B4:ED:E6:D1:FD:31:20:E2:BD Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 71988ED4D1D9ECE6A662F0563021AD9C53FA2A17 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS149358.roa Signing time: Sat 02 May 2026 09:20:54 +0000 ROA not before: Sat 02 May 2026 09:15:54 +0000 ROA not after: Sat 01 May 2027 09:20:54 +0000 asID: 149358 IP address blocks: 103.180.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:98:8e:d4:d1:d9:ec:e6:a6:62:f0:56:30:21:ad:9c:53:fa:2a:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 09:15:54 2026 GMT Not After : May 1 09:20:54 2027 GMT Subject: CN=218CAE6471D3F46213CCCAB4EDE6D1FD3120E2BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:f1:ab:92:86:50:ad:c2:6f:0b:6b:1f:96:58: bf:be:9d:31:58:24:09:fa:a0:4b:91:ba:c9:a3:8d: 0a:72:d1:8a:39:12:86:2f:b8:69:45:5a:df:7d:0f: 56:bc:7e:24:e7:37:e4:bd:1b:79:cd:6f:79:1b:b4: 9f:49:87:8e:21:5d:fb:68:79:60:2f:53:dd:11:7e: 2e:08:d4:f5:8f:dd:4c:38:75:de:16:c0:ee:3e:f6: 64:da:af:52:8e:af:0e:23:da:3a:5a:3f:fb:98:39: b5:8c:e3:f4:10:4a:e4:38:15:b4:2b:09:67:95:e5: d9:be:8e:71:f2:b1:7c:53:b7:6b:9a:16:fc:14:be: c3:b1:97:2f:d0:05:2e:59:96:41:99:18:99:bc:53: 2b:50:60:14:3e:9a:c3:d1:10:16:4e:da:dc:21:63: f3:2f:60:05:d1:f5:46:5c:90:86:08:fc:3b:da:1e: 80:8b:fe:3f:8f:23:58:56:b4:e8:2c:9a:69:9d:00: 81:b9:c0:93:06:9b:bb:d5:eb:e3:96:8a:c0:88:eb: 4e:0c:b2:6c:7e:e5:30:c6:68:d1:0d:45:25:57:ec: 0d:54:03:ed:b7:bb:53:93:f8:f9:d8:79:17:59:ca: 26:8a:84:a5:8b:61:2d:db:1b:e4:0e:d6:37:84:6e: ad:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:8C:AE:64:71:D3:F4:62:13:CC:CA:B4:ED:E6:D1:FD:31:20:E2:BD X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS149358.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.180.95.0/24 Signature Algorithm: sha256WithRSAEncryption 9e:73:88:dc:9f:ce:13:d8:57:03:2c:a9:ca:b8:61:60:74:98: 88:72:c7:bf:0d:9e:24:70:f9:c0:b1:56:51:bf:c2:3a:26:52: 46:d3:88:86:fa:c8:ba:47:d3:ba:dd:c8:ff:1c:71:7e:54:5c: 18:03:cd:5d:fd:9c:62:52:39:b7:78:1d:29:76:70:95:dd:4c: f3:65:eb:44:a0:0d:92:bc:e2:ae:b0:2f:df:c7:74:38:ec:b6: b9:33:7a:e8:80:64:d5:c3:bf:43:ba:3d:24:05:73:90:4b:78: 7c:c0:4f:77:79:7c:98:7c:c4:32:34:03:18:5b:f2:07:21:75: df:33:cb:d9:21:22:0a:2d:f7:ad:21:47:dd:59:19:2c:29:fa: 26:6b:10:b5:9b:cf:28:4a:cf:20:09:8f:48:56:fd:89:2f:39: 82:ef:f9:25:b6:60:38:ee:c0:24:1f:ff:e5:ef:71:dd:b5:8c: 20:35:d3:e0:5a:e6:85:1a:51:b5:71:21:9e:13:09:24:1b:52: 94:02:ed:2f:8c:b5:ae:a1:d5:4b:69:a1:c4:c4:22:ff:fa:77: b5:65:5f:a6:b4:0e:f4:d5:95:76:91:f7:d6:44:5d:5b:39:27: 56:25:a9:9d:99:4f:7f:ca:9d:d9:b2:5a:89:d3:bd:a6:0c:2f: d8:21:3f:bc -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUcZiO1NHZ7OamYvBWMCGtnFP6KhcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA5MTU1NFoX DTI3MDUwMTA5MjA1NFowMzExMC8GA1UEAxMoMjE4Q0FFNjQ3MUQzRjQ2MjEzQ0ND QUI0RURFNkQxRkQzMTIwRTJCRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMXxq5KGUK3CbwtrH5ZYv76dMVgkCfqgS5G6yaONCnLRijkShi+4aUVa330P Vrx+JOc35L0bec1veRu0n0mHjiFd+2h5YC9T3RF+LgjU9Y/dTDh13hbA7j72ZNqv Uo6vDiPaOlo/+5g5tYzj9BBK5DgVtCsJZ5Xl2b6OcfKxfFO3a5oW/BS+w7GXL9AF LlmWQZkYmbxTK1BgFD6aw9EQFk7a3CFj8y9gBdH1RlyQhgj8O9oegIv+P48jWFa0 6CyaaZ0AgbnAkwabu9Xr45aKwIjrTgyybH7lMMZo0Q1FJVfsDVQD7be7U5P4+dh5 F1nKJoqEpYthLdsb5A7WN4RurRsCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBQhjK5k cdP0YhPMyrTt5tH9MSDivTAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTQ5MzU4LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAZ7RfMA0GCSqGSIb3DQEBCwUAA4IBAQCec4jcn84T2FcDLKnKuGFgdJiI cse/DZ4kcPnAsVZRv8I6JlJG04iG+si6R9O63cj/HHF+VFwYA81d/ZxiUjm3eB0p dnCV3UzzZetEoA2SvOKusC/fx3Q47La5M3rogGTVw79Duj0kBXOQS3h8wE93eXyY fMQyNAMYW/IHIXXfM8vZISIKLfetIUfdWRksKfomaxC1m88oSs8gCY9IVv2JLzmC 7/kltmA47sAkH//l73HdtYwgNdPgWuaFGlG1cSGeEwkkG1KUAu0vjLWuodVLaaHE xCL/+ne1ZV+mtA701ZV2kffWRF1bOSdWJamdmU9/yp3ZslqJ072mDC/YIT+8 -----END CERTIFICATE-----Generated at Sun May 3 00:40:27 2026 by rpki-client