$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS149392.roa File: AS149392.roa (raw, json) Hash identifier: zZDjJ8gUN1AiCdHwW97/KRYfSBJy2mMbvytURcMZUK0= Subject key identifier: BB:D5:62:15:8B:7B:BB:07:39:36:04:B7:6C:E5:99:A5:9C:F6:97:11 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 4F31E7ABA75963F405D814B639F365DF6462F1E1 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS149392.roa Signing time: Sat 02 May 2026 09:20:49 +0000 ROA not before: Sat 02 May 2026 09:15:49 +0000 ROA not after: Sat 01 May 2027 09:20:49 +0000 asID: 149392 IP address blocks: 103.181.78.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 05 May 2026 16:31:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:31:e7:ab:a7:59:63:f4:05:d8:14:b6:39:f3:65:df:64:62:f1:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 09:15:49 2026 GMT Not After : May 1 09:20:49 2027 GMT Subject: CN=BBD562158B7BBB07393604B76CE599A59CF69711 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:6e:a9:6c:53:68:b0:30:0d:a1:4d:1f:b8:3d: 51:de:ca:28:be:6d:52:9d:59:ec:ce:1a:37:b9:d0: f4:39:7f:e0:f9:be:e6:89:b0:02:b3:a1:c4:30:e7: 52:a6:7b:ae:a7:11:8b:c4:af:c3:db:54:55:10:0a: 9b:26:c1:2a:5d:18:59:62:97:aa:77:46:7a:f1:d4: 9b:3a:98:84:52:80:15:41:57:bc:47:46:5b:e6:a2: 5e:ec:d2:cc:27:93:4a:f3:88:49:3f:ee:cb:c3:4f: ff:e8:5e:c2:8f:05:fa:6b:b7:61:14:28:24:bb:8c: 56:67:92:03:c0:fa:90:25:f6:cd:37:36:99:8e:76: ec:35:bd:8c:54:a0:88:c7:fc:cc:23:95:89:1f:22: 19:4a:cd:2c:09:54:ab:a0:e7:e4:26:72:96:1c:b7: 9a:c9:d3:71:d3:71:c8:45:a4:f9:c8:90:da:e2:06: 24:eb:ae:da:22:f6:dd:d3:e3:86:f1:82:57:d9:fc: 36:92:57:31:1f:b2:2e:76:e4:2c:3c:e4:a9:50:bc: d0:ea:d4:d6:ad:60:86:b7:18:7d:b1:e7:de:f3:b9: 4a:5c:9b:7b:2c:cc:58:6f:44:f0:8d:f3:8c:7e:95: 47:cb:27:53:b6:26:1f:67:f6:67:a0:32:c5:27:08: 62:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:D5:62:15:8B:7B:BB:07:39:36:04:B7:6C:E5:99:A5:9C:F6:97:11 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS149392.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.181.78.0/23 Signature Algorithm: sha256WithRSAEncryption 28:3b:51:70:08:fb:20:d5:a0:ba:bb:27:30:33:30:82:94:8d: c0:ea:71:3c:ab:9a:1a:8c:38:50:11:fa:1a:ea:9f:13:96:c1: 3f:65:e3:b3:de:44:0c:83:dc:1a:b2:22:59:66:a0:1c:79:f3: 5e:f1:8d:dd:ff:a0:d1:bf:58:bb:05:ea:58:54:a2:4d:e4:8b: 74:80:7f:e9:e2:43:11:df:b1:21:fa:a0:01:a2:88:a3:e5:9a: d7:ed:e2:06:2c:56:a9:54:b3:5b:00:f5:1a:17:b0:b4:93:49: c4:8c:6b:ea:60:b8:2a:34:ff:bf:b0:7c:d3:a7:3e:89:0d:73: e9:17:07:d3:e1:96:a2:7e:b5:e6:a3:d5:09:61:d0:15:48:6f: 7c:5c:eb:4c:fe:18:f1:5a:0a:a6:b1:52:25:d5:63:d2:77:50: 8f:81:7e:fa:a2:bb:c4:4a:c4:d8:37:de:e2:51:fe:f6:12:b7: 2e:b2:26:92:71:c5:d7:1f:c0:a0:99:c9:59:c2:05:22:44:65: f2:ae:05:76:4c:3d:b9:5d:2f:97:5f:81:e3:35:4f:93:d5:6a: cb:d3:32:61:79:26:b0:54:81:7f:e6:e9:43:92:4f:f6:fd:09: 5c:d9:c7:75:94:05:d3:86:9c:8c:e3:60:ee:43:d3:f6:97:3d: 27:52:37:6f -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUTzHnq6dZY/QF2BS2OfNl32Ri8eEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA5MTU0OVoX DTI3MDUwMTA5MjA0OVowMzExMC8GA1UEAxMoQkJENTYyMTU4QjdCQkIwNzM5MzYw NEI3NkNFNTk5QTU5Q0Y2OTcxMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMFuqWxTaLAwDaFNH7g9Ud7KKL5tUp1Z7M4aN7nQ9Dl/4Pm+5omwArOhxDDn UqZ7rqcRi8Svw9tUVRAKmybBKl0YWWKXqndGevHUmzqYhFKAFUFXvEdGW+aiXuzS zCeTSvOIST/uy8NP/+hewo8F+mu3YRQoJLuMVmeSA8D6kCX2zTc2mY527DW9jFSg iMf8zCOViR8iGUrNLAlUq6Dn5CZylhy3msnTcdNxyEWk+ciQ2uIGJOuu2iL23dPj hvGCV9n8NpJXMR+yLnbkLDzkqVC80OrU1q1ghrcYfbHn3vO5SlybeyzMWG9E8I3z jH6VR8snU7YmH2f2Z6AyxScIYtkCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBS71WIV i3u7Bzk2BLds5ZmlnPaXETAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTQ5MzkyLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQBZ7VOMA0GCSqGSIb3DQEBCwUAA4IBAQAoO1FwCPsg1aC6uycwMzCClI3A 6nE8q5oajDhQEfoa6p8TlsE/ZeOz3kQMg9wasiJZZqAcefNe8Y3d/6DRv1i7BepY VKJN5It0gH/p4kMR37Eh+qABooij5ZrX7eIGLFapVLNbAPUaF7C0k0nEjGvqYLgq NP+/sHzTpz6JDXPpFwfT4ZaifrXmo9UJYdAVSG98XOtM/hjxWgqmsVIl1WPSd1CP gX76orvESsTYN97iUf72ErcusiaSccXXH8CgmclZwgUiRGXyrgV2TD25XS+XX4Hj NU+T1WrL0zJheSawVIF/5ulDkk/2/Qlc2cd1lAXThpyM42DuQ9P2lz0nUjdv -----END CERTIFICATE-----Generated at Tue May 5 08:33:10 2026 by rpki-client