$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS149385.roa File: AS149385.roa (raw, json) Hash identifier: kcLvPMr02VHJS6BLY9zgtgNGyk1VYa7Y2CLgu6NjfkA= Subject key identifier: 67:EC:4E:D5:99:37:F9:4A:07:BC:89:F7:4B:4F:C3:3E:E8:93:4E:26 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 7DAA2370946AFED29EABBF1E6C9047DE81935007 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS149385.roa Signing time: Sat 02 May 2026 21:26:22 +0000 ROA not before: Sat 02 May 2026 21:21:22 +0000 ROA not after: Sat 01 May 2027 21:26:22 +0000 asID: 149385 IP address blocks: 103.178.223.0/24 maxlen: 24 103.205.185.0/24 maxlen: 24 2001:df2:1ac0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:aa:23:70:94:6a:fe:d2:9e:ab:bf:1e:6c:90:47:de:81:93:50:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 21:21:22 2026 GMT Not After : May 1 21:26:22 2027 GMT Subject: CN=67EC4ED59937F94A07BC89F74B4FC33EE8934E26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ad:9d:d8:d0:7b:b0:7e:fa:2a:fd:be:59:d6: b3:65:8e:08:b8:16:fb:d7:22:e9:a9:52:86:ac:3c: 10:2e:36:0c:9b:10:47:91:34:c3:c1:5d:fd:e7:dc: 1b:28:b9:06:6e:d7:a5:2c:09:4b:9e:60:34:e5:b6: 9d:80:31:1a:b6:56:5d:cf:89:61:04:8b:cd:f4:8a: cb:9a:46:bb:fb:ee:79:3c:3b:a7:91:14:99:d4:14: 4a:73:1c:8c:f0:3c:c7:96:97:e8:3a:6a:c9:a9:c9: 3d:82:46:fa:50:77:89:0e:26:90:4e:20:04:3b:ad: 1a:3e:7d:54:c6:88:eb:d7:a3:dd:56:40:7b:2d:30: 40:2d:c5:35:fa:8a:b3:3d:7e:54:a0:b5:0b:72:bb: 4d:ed:c3:57:aa:1f:bd:de:bb:e5:f2:af:9a:b5:74: 50:2b:20:f7:ce:9d:8a:f0:0f:91:65:63:14:9f:f1: 73:8b:c6:41:5c:69:7f:35:dc:f3:a8:69:24:30:63: 41:18:ad:52:18:82:55:bd:58:f5:22:be:ae:94:c8: 79:81:97:b0:87:a8:76:9b:3c:66:77:13:8f:8d:63: b9:52:aa:6f:9e:ed:fd:86:0c:5a:15:3d:a9:07:d8: ae:ee:b4:bf:5d:04:b8:f3:81:5d:2d:09:78:78:5d: 43:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:EC:4E:D5:99:37:F9:4A:07:BC:89:F7:4B:4F:C3:3E:E8:93:4E:26 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS149385.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.178.223.0/24 103.205.185.0/24 IPv6: 2001:df2:1ac0::/48 Signature Algorithm: sha256WithRSAEncryption 04:39:7b:0c:4c:83:4c:55:31:93:a5:8a:85:0c:d4:aa:21:38: 5e:20:b4:59:ac:82:69:b6:5b:f2:0b:de:0f:1e:b1:be:8c:56: 6e:b1:b1:93:fd:e0:04:3d:25:d5:87:4f:bf:a1:13:cc:74:8f: 8e:59:48:51:27:65:23:34:c1:47:5a:df:05:17:f1:dd:8a:05: 0d:a0:c0:8c:ac:90:eb:a2:4e:aa:c9:6f:3e:43:d9:17:f6:8b: 4e:ff:0f:b8:15:0c:d6:7c:8d:f8:8c:a2:d2:fb:23:3c:36:a5: f8:f0:95:09:00:63:18:65:7b:ff:08:3d:6a:e9:79:d5:f6:e5: b1:03:7a:21:9a:7c:33:c8:0a:84:e4:04:7a:15:f9:ec:2c:a9: 0d:c0:4d:5e:9a:9f:2e:7d:99:1e:ad:a6:84:e7:2f:63:3c:99: 78:4b:20:2a:7e:61:6a:c2:b5:75:ea:ff:b7:d0:2b:d2:20:b1: 94:b5:5b:d2:c4:51:44:f5:d8:20:2f:6d:da:53:00:2c:4a:ef: 82:ad:6a:38:80:8b:11:2f:9e:26:ed:e6:4c:77:89:d1:fd:6d: 1e:48:a3:b1:d1:5f:1f:24:9c:77:80:f3:08:da:61:81:5c:5c: 85:33:be:cc:c0:b8:15:fa:61:61:05:24:73:ba:bb:0c:25:d3: 7a:c3:60:b2 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgIUfaojcJRq/tKeq78ebJBH3oGTUAcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIxMjEyMloX DTI3MDUwMTIxMjYyMlowMzExMC8GA1UEAxMoNjdFQzRFRDU5OTM3Rjk0QTA3QkM4 OUY3NEI0RkMzM0VFODkzNEUyNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK6tndjQe7B++ir9vlnWs2WOCLgW+9ci6alShqw8EC42DJsQR5E0w8Fd/efc Gyi5Bm7XpSwJS55gNOW2nYAxGrZWXc+JYQSLzfSKy5pGu/vueTw7p5EUmdQUSnMc jPA8x5aX6DpqyanJPYJG+lB3iQ4mkE4gBDutGj59VMaI69ej3VZAey0wQC3FNfqK sz1+VKC1C3K7Te3DV6ofvd675fKvmrV0UCsg986divAPkWVjFJ/xc4vGQVxpfzXc 86hpJDBjQRitUhiCVb1Y9SK+rpTIeYGXsIeodps8ZncTj41juVKqb57t/YYMWhU9 qQfYru60v10EuPOBXS0JeHhdQ+ECAwEAAaOCAeMwggHfMB0GA1UdDgQWBBRn7E7V mTf5Sge8ifdLT8M+6JNOJjAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTQ5Mzg1LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIA ATAMAwQAZ7LfAwQAZ825MA8EAgACMAkDBwAgAQ3yGsAwDQYJKoZIhvcNAQELBQAD ggEBAAQ5ewxMg0xVMZOlioUM1KohOF4gtFmsgmm2W/IL3g8esb6MVm6xsZP94AQ9 JdWHT7+hE8x0j45ZSFEnZSM0wUda3wUX8d2KBQ2gwIyskOuiTqrJbz5D2Rf2i07/ D7gVDNZ8jfiMotL7Izw2pfjwlQkAYxhle/8IPWrpedX25bEDeiGafDPICoTkBHoV +ewsqQ3ATV6any59mR6tpoTnL2M8mXhLICp+YWrCtXXq/7fQK9IgsZS1W9LEUUT1 2CAvbdpTACxK74KtajiAixEvnibt5kx3idH9bR5Io7HRXx8knHeA8wjaYYFcXIUz vszAuBX6YWEFJHO6uwwl03rDYLI= -----END CERTIFICATE-----Generated at Sun May 3 00:40:34 2026 by rpki-client